Cybersecurity is paramount for personal, organizational, and national security. Recent cyber incidents, such as the breach in San Diego Unified School District’s computer systems, have shown the growing imminence of cyber threats. Malicious attempts to disrupt networks and systems continue to grow in frequency, scale, and sophistication while those implementing protective measures are perpetually challenged to keep pace. Consider the statistics included in the graphic below.
<figure id="attachment_5280" aria-describedby="caption-attachment-5280" style="width: 974px" class="wp-caption aligncenter"><img loading="lazy" decoding="async" class="wp-image-5280 size-full" src="http://hagertystg.wpengine.com/wp-content/uploads/2019/01/Picture1.png" alt="" width="974" height="670" srcset="https://hagertystg.wpengine.com/wp-content/uploads/2019/01/Picture1.png 974w, https://hagertystg.wpengine.com/wp-content/uploads/2019/01/Picture1-300x206.png 300w, https://hagertystg.wpengine.com/wp-content/uploads/2019/01/Picture1-768x528.png 768w" sizes="(max-width: 974px) 100vw, 974px" /><figcaption id="caption-attachment-5280" class="wp-caption-text">Statistics from the past year demonstrate how cyber-attacks are becoming more frequent and causing more damage than ever before.</figcaption></figure>
To help our clients address this vulnerability, Hagerty Consulting, Inc. (Hagerty) developed a programmatic approach to cyber incident management that leverages best practices from the <a href="https://www.nist.gov/sites/default/files/documents/cyberframework/cybersecurity-framework-021214.pdf">National Institute of Standards and Technology (NIST)</a>, the <a href="https://www.us-cert.gov/ccubedvp">Department of Homeland Security (DHS) </a>and its <a href="https://www.us-cert.gov/sites/default/files/ncirp/National_Cyber_Incident_Response_Plan.pdf">National Cyber Incident Response Plan (NCIRP)</a>, the <a href="https://www.nascio.org/Portals/0/Publications/Documents/2016/NASCIO_CyberDisruption_072016.pdf">National Association of State Chief Information Officers (NASCIO),</a>  and the <a href="https://ci.nga.org/files/live/sites/ci/files/1617/docs/MemoOnStateCybersecurityResponsePlans.pdf">National Governor’s Association (NGA)</a>. Key elements of our approach, Cyber Nexus Approach (CNA), are presented below to underscore the ways in which Hagerty is prepared to support a programmatic approach to cybersecurity.
<figure id="attachment_5281" aria-describedby="caption-attachment-5281" style="width: 974px" class="wp-caption alignnone"><img loading="lazy" decoding="async" class="size-full wp-image-5281" src="http://hagertystg.wpengine.com/wp-content/uploads/2019/01/Picture2.png" alt="" width="974" height="325" srcset="https://hagertystg.wpengine.com/wp-content/uploads/2019/01/Picture2.png 974w, https://hagertystg.wpengine.com/wp-content/uploads/2019/01/Picture2-300x100.png 300w, https://hagertystg.wpengine.com/wp-content/uploads/2019/01/Picture2-768x256.png 768w" sizes="(max-width: 974px) 100vw, 974px" /><figcaption id="caption-attachment-5281" class="wp-caption-text">Hagerty&#8217;s CNA: The double helix structure represents stakeholder collaboration across phases of an incident and leverages their combined technical expertise.</figcaption></figure>
<h3>Integrate Emergency Management and Information Technology Expertise</h3>
CNA is a framework for public and private sector organizations and companies responsible for building a cybersecurity program that empowers its users by:
<ul>
<li>Bringing key cybersecurity stakeholders together to bridge knowledge gaps; and</li>
<li>Facilitating information-sharing and collaboration across areas of expertise while enabling each stakeholder to perform the tasks he or she does best.</li>
</ul>
By incorporating new stakeholders into what are conventionally considered information technology (IT) activities and exposing emergency managers to a novel approach to cybersecurity program management, CNA dissolves boundaries of individual roles to expand the responsibility of cyber preparedness across disciplines within an organization or jurisdiction. CNA provides a collaborative and task-oriented framework to unify efforts across unique areas of expertise (such as management and technical support or emergency management and IT).
<h3>Create a Cyber Disruption Team</h3>
To oversee the revisions and improvements to your jurisdiction or organization’s cybersecurity program, Hagerty recommends creating a Cyber Disruption Team (CDT). A CDT can be formed by identifying a core response team to assess and respond to incidents and partnering them with additional stakeholders to provide comprehensive support and expertise. Composed of experts from relevant technical and strategic entities within your institution, the CDT may be assigned responsibility for:
<ul>
<li>Facilitating operational coordination before, during, and after a cyber incident;</li>
<li>Conducting cyber risk management, cyber incident, and disruption response planning; and</li>
<li>Facilitating cyber-related training and exercise.</li>
</ul>
Building effective cyber plans requires insight from diverse stakeholders. Hagerty recommends including management, strategic, and technical experts in CDT membership. Some examples may include Chief Executive Officers (CEOs), elected officials, emergency managers, IT personnel, and fusion centers. Hagerty has engaged fusion centers as partners during cyber planning to better understand the flow of information to help define their responsibilities within plans. By expanding the network of players, CNA can empower the whole community to play a role in supporting cybersecurity.
<h3>Plan for Cyber Incidents</h3>
Plan development allows organizations to establish activation procedures, an organizational structure, and roles and responsibilities that can be immediately employed in the case of a cyber incident. Hagerty can help build capabilities that facilitate well-executed cyber response strategies through coordinated consequence management. Cyber disruption planning can help establish a vision of successful resolutions and facilitate bench-marking to support the future growth and development of cyber capabilities, in addition to providing a framework for key partners to assess severity, assign tasks, communicate, and perform after-action reporting (AAR).
One of the ways CNA effectively translates planning into action is by assigning the CDT responsibility to a common operating picture. To accomplish this, the CDT will convene before, during, and after an incident to:
<ul>
<li>Facilitate cross-functional communication and coordination;</li>
<li>Provide direction and assignments to relevant personnel; and</li>
<li>Create a venue for reporting progress on assigned tasks.</li>
</ul>
Establishing a common operating picture puts the core concepts developed in planning into practice. By building strong preparedness measures for a cyber incident, CNA contributes to the establishment of effective, robust cybersecurity programs.
<hr />
Kayla Slater is a Managing Associate and Hagerty&#8217;s Cyber Portfolio Lead who primarily supports pre-disaster recovery planning and cybersecurity preparedness working in Washington, D.C. A graduate of Georgetown University’s Emergency and Disaster Management Program, Kayla enjoys helping clients develop innovative and practical plans and tools to support response and recovery. In her spare time, she bakes, reads, and bikes to donut shops. To learn more about how Hagerty can help your organization visit <a href="https://www.cyberthreatready.com/">cyberthreatready.com</a> or contact <a href="mailto:kayla.slater@hagertyconsulting.com">Kayla </a>to learn about Hagerty’s approach to cybersecurity program management.

Hagerty’s Cyber Nexus Approach — Building Better Cybersecurity

Steve Hagerty Selected for FEMA’s Vanguard Executive Crisis Leaders Fellowship

Bird Flu and Beyond: Preparing Our Nation’s Healthcare System

Preparing for Increasing Climate-Driven Hazards

The Hagerty Advantage – Our People: Jessi Widhalm, Tori Abbott, Meagan Flanagan, and Joely Bertram

Blizzard Conditions Impact The West Coast While Record Breaking Wildfires Affect The Texas Panhandle

Migrant Arrivals: Local and State Response and the Role of Emergency Management

Atmospheric River Brings Extreme Flooding, Winds, and Mudslides to California

The Hagerty Advantage – Our People: Andrew Bohnert, Marina Conner, Harrison Newton

Extreme Winter Weather Continues To Impact Nearly 80 Percent Of The US With More Winter Storms To Come

Extreme Winter Storms Impacting Large Portions the US with More Severe Weather on the Way this Weekend