Cyber Alert: President Biden Issues Cyber Warning; CISA Launches Shields-Up Website

President Biden is emphasizing the need for America’s critical infrastructure to take immediate measures to protect against a high risk of cyber-attacks from the Russian government. The President warned that Russia could conduct malicious cyber activity against the United States as a response to the economic sanctions imposed on Russia for its invasion of Ukraine. The President elaborated that the private sector has a responsibility to strengthen the cybersecurity and resilience of the nation’s critical services and technologies.

The White House also issued a “FACT SHEET: Act Now to Protect Against Potential Cyberattacks.” The FACT SHEET provides a list of steps that companies should take to guard against cyber-attacks:

  • Employ multi-factor authentication for all systems
  • Deploy modern security tools on computers and devices to continuously look for and mitigate threats
  • Ensure systems are patched and protected against all known vulnerabilities, and update passwords across networks
  • Back up data and ensure offline backups are beyond the reach of malicious actors
  • Run breach response exercises and drill emergency plans
  • Encrypt data so it cannot be used if it is stolen
  • Educate employees on common tactics that attackers will use over email or through websites, and encourage them to report unusual behavior, such as unusual crashes or extended device lag time
  • Engage proactively with a local FBI field office or CISA Regional Office to establish relationships in advance of potential cyber incidents. Encourage IT and Security leadership to visit the websites of the Cybersecurity and Infrastructure Security Agency (CISA) and the Federal Bureau of Investigation (FBI) to access technical information and other useful resources.

In response to the Administration’s increased concerns over the protection of the nation’s critical infrastructure, CISA has launched its “Shields-Up” website. The website has an extensive list of free resources and guidance for addressing cyber-attacks.

Cybersecurity is an ongoing concern for businesses, especially those that make up the backbone of the United States’ critical infrastructure. We encourage clients to review the FACT SHEET and Shields-Up website and to take immediate measures to protect company networks, infrastructure, and assets from the imminent danger of threats.

If you have questions about cybersecurity protection measures or need assistance with implementing an incident response plan, please contact an attorney in our Privacy, Data Protection, and Cybersecurity practice group.