News for hackers. Stuff that matters.

A comment on U.S. to give ransomware hacks similar priority as terrorism, official says. Parent comment

Re:U.S. to give ransomware hacks similar priority as terrori... by chongli on Thursday June 03, 2021 @06:24PM (#27388202)
I’d prefer the NSA put in the hard effort to shed their reputation as spies and start by offering plain security advice in the open that can be verified by independent experts. The best way forward is for the NSA to focus on providing high quality security advice, best practices, and guidance to critical infrastructure. This doesn’t involve handing over the “keys to the kingdom”.
[ Parent | on HN ]
Re:U.S. to give ransomware hacks similar priority as terrori... by Kalium on Thursday June 03, 2021 @06:40PM (#27388364)
https://www.nsa.gov/What-We-Do/Cybersecurity/Advisories-Tech...

The NSA seems to agree with you. So do the Departments of Energy, Commerce, and Defense, all of which have various efforts to provide independently verifiable high quality security advice, best practices, and guidance. In some cases, they've been doing so for years.

But let's skip the NSA bit. Let's say you, CEO of Big Pipeline Co, have been called up by someone at The Office of Cybersecurity, Energy Security, and Emergency Response within the Department of Energy. They offer you all the advice and guidance you could wish for. Now it's up to you to budget resources. What do you do?

Realistically, you probably hand that advice off to your IT or software staff and hope for the best. Though I realize that reasonable people may differ on this point.

[ Parent | on HN ]