Cybersecurity Measures Emerge as Top Priority for Biden Administration and Congress
The Biden administration and lawmakers are focusing on beefing up cybersecurity measures in various sectors, including rail, transit, and social media. The Transportation Security Administration (TSA) will soon impose stricter cybersecurity requirements on rail and major transit systems, while the White House is working to prevent ransomware attacks and eliminate safe harbors for cybercriminals. Facebook whistleblower Frances Haugen has urged Congress to take action against social media giants, citing the harm caused by their algorithms and lack of accountability.
Key Takeaways:
- The TSA will issue a new security directive this year, requiring higher-risk railroad and rail transit entities to identify a cybersecurity point person, report incidents to CISA, and develop a contingency and recovery plan.
- The administration is working on similar mandates for airport operators, passenger aircraft, and air cargo, with the goal of strengthening defensive posture and actively monitoring intrusions.
- National Cyber Director Chris Inglis emphasized the need for a strong defensive posture, including isolating unwanted presences, fending off attacks, and making it difficult for attackers to penetrate infrastructure and government networks.
- The administration is focusing on imposing cost on adversaries through diplomatic and financial actions, rather than relying solely on offensive cyber tools.
- Denise Dechiaro reported that the White House is working with allies to draw up international norms for the use of cryptocurrencies, aiming to halt their use in ransom payments.
- The administration is also cracking down on cryptocurrency use in extortion attempts, with Anne Neuberger, the deputy national security adviser on cyber and emerging technology, stating that the administration is seeking to "separate illicit use from all the innovative uses of cryptocurrencies".
- Facebook whistleblower Frances Haugen testified before Congress, urging lawmakers to take action against social media giants, citing the harm caused by their algorithms and lack of accountability.
- Senators Marsha Blackburn (R-Tenn.) and Richard Blumenthal (D-Conn.) agreed that Congress must intervene in regulating social media and online content.
Statistics:
- 2,300 maritime entities will submit a dedicated cyber plan to the Coast Guard starting this month (Mayorkas).
- The administration is planning to convene a virtual gathering of 30 countries later this month to discuss combating ransomware attacks and drawing up plans for law enforcement collaboration (Neuberger).
- The TSA will require higher-risk railroad and rail transit entities to identify a cybersecurity point person, which must be done by the end of 2021 (Mayorkas).
- A reported 30 countries will participate in the virtual gathering to discuss combating ransomware attacks (Neuberger).
Sources:
- Congressional Quarterly, Inc. (October 8, 2021)
- CQ News (October 8, 2021)
- The Washington Post (cited in CQ News)
- Billington Cybersecurity Summit (cited in CQ News)
- FireEye (cited in CQ News)
- "60 Minutes" (cited in CQ News)
- The Wall Street Journal (cited in CQ News)
- Congressional Hearing Transcripts (cited in CQ News)