In a report issued last week, the Cybersecurity and Infrastructure Security Agency shared findings from a CISA red team exercise that revealed significant gaps in the cyber posture of an unnamed federal civilian agency. As a result, CISA concluded that U.S. government organizations are likely falling short on their cybersecurity practices and recommended several improvements, including: 💡 Apply defense-in-depth principles 💡 Use robust network segmentation 💡 Establish baselines of network traffic, application execution, and account authentication Since the target agency failed to detect or remediate any of the CISA red team activity for the first five months of the assessment, another key recommendation was to streamline the process of incident response and investigation. Learn more about a major part of incident management, creating an incident response plan, in our blog: https://lnkd.in/gQ74kNeb
The Cybersecurity and Infrastructure Security Agency said U.S. government organizations are falling short on their #cybersecurity practices. #infosec #ITsecurity
