Feds at the Edge

When we look back on 2020, federal information technology professionals will note the drastic increase in remote users, the move to the cloud to allow collaboration, and the serious threats that arose because of these unfortunate series of events. 

Data security is becoming important because we have seen a drastic increase in ransomware attacks. In fact, in March 2020 alone there was a reported 148% increase in ransomware attacks.  With all this transition, one can get distracted from some of the core principles of data management: specifically, data backups as a first line of defense against ransomware.

Today’s interview has two subject matter experts who put the concept of data protection into the new order of federal information technology.  The transition to remote work was relatively painless, the concern now is how to make people more productive.

When a federal information professional hears the phrase “ransomware” they think of some small attack on a consumer.

They may have a mitigation plan, but nothing serious.  Well, it is time to get serious.

During this discussion, you will hear of two separate, but similar, attacks on hospitals.  One attack was so severe they had to burn the servers down to the ground. They had to use paper forms for twenty-three days.  The other hospital was attacked similarly but managed to mediate the problem.  Neither one paid the ransom. 

One of the directors of information from Sky Lakes Medical center gives a provocative blow-by-blow review on the mitigation efforts. He suggests developing relationships with vendors who can provide service 24 hours a day 7 days a week. 

In this discussion are subject matter experts from the Department of Homeland Security and Infoblox, a leading cybersecurity vendor.

Ransomware was the #1 crime of 2020 and is getting more sophisticated.  During the interview, you will hear about what the recommendations are from DHS’s Homeland Security Investigation.  Jason Canboy, Special Agent Program Manager, Dept of Homeland Security, will send a shudder down your spine when talks about malicious actors moving from custom attacks to something called “Ransomware as a Service.)  Ransomware attacks are getting so well known, that attackers do not need to understand the meticulous detail of a cyber-attack, they can merely pay a fee and have the attack code at their disposal.

Chris Usserman, Principal Security Architect at Infoblox Federal suggests that handling a ransomware attack is similar to contract tracing for COVID – you must have a detailed record of the attack and inform the cybercommunity to help prevent others from this attack.