Recent cyber incidents such as the global outbreak of Ransomware called <a href="https://www.nytimes.com/2017/05/12/world/europe/uk-national-health-service-cyberattack.html" target="_blank" rel="noopener">WannaCry</a>, another strain called <a href="https://www.cnbc.com/2017/06/30/petya-ransomware-attack-nato-says-state-actor-to-blame.html" target="_blank" rel="noopener">Petya</a>, breaches of voter data with the potential to impact <a href="http://www.businessinsider.com/deep-root-analytics-sued-after-data-breach-2017-6" target="_blank" rel="noopener">millions</a>,  and attacks on political communications systems in <a href="https://www.theguardian.com/politics/2017/aug/15/scottish-parliament-hit-by-cyber-attack-westminster-assault-holyrood-hackers-email" target="_blank" rel="noopener">Scotland</a> and <a href="https://www.nytimes.com/2017/06/24/world/europe/british-parliament-cyberattack-hacking-london.html" target="_blank" rel="noopener">Westminster</a> are frightening reminders of our collective need for cybersecurity. Malicious attempts to disrupt networks and systems continue to grow in frequency, scale, and sophistication while protective measures and preparedness perpetually remain one step behind. Now more than ever, cybersecurity is paramount for personal, organizational, and national security.
To address this vulnerability, Hagerty developed a programmatic approach to cyber incident management that conforms with best practices from the <a href="https://www.nist.gov/sites/default/files/documents/cyberframework/cybersecurity-framework-021214.pdf" target="_blank" rel="noopener">National Institute of Standards and Technology</a>, the <a href="https://www.us-cert.gov/ccubedvp" target="_blank" rel="noopener">Department of Homeland Security</a>, and the <a href="https://ci.nga.org/files/live/sites/ci/files/1617/docs/MemoOnStateCybersecurityResponsePlans.pdf" target="_blank" rel="noopener">National Governor’s Association</a>. The approach will be presented using the <a href="http://hagertyconsulting.com/about-us/blog/welcome-national-preparedness-month-prepared/">last month’s theme</a> to underscore the ways in which Hagerty Consulting is prepared to support your organization’s programmatic approach to cybersecurity. 
Hagerty is proud to present the Cyber Nexus Approach (CNA).<a href="http://hagertystg.wpengine.com/wp-content/uploads/2017/10/59d3fffe97fdc100010a1ad5_DNA-03.png"> 
<img loading="lazy" decoding="async" class="aligncenter wp-image-4540 size-large" src="http://hagertystg.wpengine.com/wp-content/uploads/2017/10/59d3fffe97fdc100010a1ad5_DNA-03-1024x342.png" alt="" width="640" height="214" srcset="https://hagertystg.wpengine.com/wp-content/uploads/2017/10/59d3fffe97fdc100010a1ad5_DNA-03-1024x342.png 1024w, https://hagertystg.wpengine.com/wp-content/uploads/2017/10/59d3fffe97fdc100010a1ad5_DNA-03-300x100.png 300w, https://hagertystg.wpengine.com/wp-content/uploads/2017/10/59d3fffe97fdc100010a1ad5_DNA-03-768x257.png 768w" sizes="(max-width: 640px) 100vw, 640px" /></a>
Hagerty Consulting&#8217;s Cyber Nexus Approach (CNA):  The double helix structure represents stakeholder collaboration across phases of an incident and leverages their combined technical expertise
<h2>Empowering</h2>
CNA is a framework for public and private sector organizations and companies responsible for building a cybersecurity program that empowers its users by:
<ul>
<li style="font-weight: 400;">Linking and leveraging skillsets within and between cybersecurity partners to bridge knowledge gaps;</li>
<li style="font-weight: 400;">Building confidence in cybersecurity awareness by providing a framework for planning, training, exercising, and responding to cyber incidents; </li>
<li style="font-weight: 400;">Facilitating information-sharing and collaboration across areas of expertise while enabling each person or group to perform the tasks he or she does best. </li>
</ul>
CNA creates a structure for acknowledging different specialties, such as management and technical support, or emergency managers information technology, and unifying their efforts through a collaborative and task-oriented framework. 
<h2>Building</h2>
CNA enables an organization or jurisdiction to incrementally build toward national best practice by applying a revisionist approach to cybersecurity. To oversee the revisions and improvements to your jurisdiction or organization’s cybersecurity program, Hagerty recommends creating a Cyber Disruption Team (CDT). Composed of experts from relevant technical and strategic entities within your institution, CDT may be assigned responsibility for: 
<ul>
<li style="font-weight: 400;">Facilitating operational coordination before, during, and after a cyber incident. </li>
<li style="font-weight: 400;">Conducting cyber risk management, cyber incident, and disruption response planning. </li>
<li style="font-weight: 400;">Facilitating cyber-related training and exercise.</li>
</ul>
Together, these actions will contribute to an effective and robust cybersecurity program.
<h2>Applying</h2>
CNA effectively translates preparedness initiatives to response by assigning responsibility for implementing plans, policies, and procedures when a cyber disruption occurs. One of the main functions of the CDT within the CNA framework is to support the establishment of a common operating picture. To accomplish this, CDT will convene before, during, and after an incident to:
<ul>
<li style="font-weight: 400;">Facilitate cross-functional communication and coordination.</li>
<li style="font-weight: 400;">Provide direction and assignments to relevant personnel.</li>
<li style="font-weight: 400;">Create a venue for reporting progress on assigned tasks. </li>
</ul>
After each meeting with the CDT, personnel will perform function-specific tasks in support of functional and strategic missions. By convening at critical junctures before, during, and after an incident to determine function-specific tasks, CDT essentially becomes the driver of cybersecurity program management. 
<h2>Expanding</h2>
By incorporating new stakeholders into what are conventionally considered information technology activities and exposing emergency managers to a novel approach to cybersecurity program management, CNA dissolves boundaries of individual roles to expand the responsibility of cyber preparedness across disciplines within an organization or jurisdiction. To accomplish this blurring of boundaries, Hagerty recommends including management, strategic, and technical experts in CDT membership. Some examples may include CEOs, elected officials, emergency managers, information technology personnel, or other key decision-makers from the public and private sectors. By expanding the roles involved in cybersecurity, CNA empowers the whole community to play a role in supporting cybersecurity.  
<hr />
Learn more about how CNA can help your organization or jurisdiction by downloading a free assessment tool. To determine your organization’s cybersecurity needs, visit <a href="https://www.cyberthreatready.com">https://www.cyberthreatready.com</a>.

Hagerty Consulting’s Cyber Nexus Approach to Cybersecurity

Steve Hagerty Selected for FEMA’s Vanguard Executive Crisis Leaders Fellowship

Bird Flu and Beyond: Preparing Our Nation’s Healthcare System

Preparing for Increasing Climate-Driven Hazards

The Hagerty Advantage – Our People: Jessi Widhalm, Tori Abbott, Meagan Flanagan, and Joely Bertram

Blizzard Conditions Impact The West Coast While Record Breaking Wildfires Affect The Texas Panhandle

Migrant Arrivals: Local and State Response and the Role of Emergency Management

Atmospheric River Brings Extreme Flooding, Winds, and Mudslides to California

The Hagerty Advantage – Our People: Andrew Bohnert, Marina Conner, Harrison Newton

Extreme Winter Weather Continues To Impact Nearly 80 Percent Of The US With More Winter Storms To Come

Extreme Winter Storms Impacting Large Portions the US with More Severe Weather on the Way this Weekend