For all the years that security experts have been warning that the "sky is falling" around our national infrastructure, it appears that all the talk is about to become reality. Reuters reported today that cyber-spies HAVE penetrated the U.S. electrical grid and left behind software programs that could be used to disrupt the system. The culprits seem to be from China, Russia, and other Eastern European countries, and based on what has been mapped, have the capability of inflicting damage on the U.S. infrastructure at any time, probably during a crisis or war. U.S. Homeland Security Secretary Janet Napolitano has confirmed that the network is vulnerable, but failed to comment on reports that an intrusion(s) has taken place. White House spokesman, Nick Shapiro, said that President Obama is aware about the concerns relating to the vulnerability of our infrastructure, and that the federal governement is working to ensure that security is built in as it develops the next generation of "smart grids."
This from the same government who brought you the Hurricane Katrina response and other disasters. The fact is very simple, the response by the federal government, no matter how many safeguards are in place, will be ad hoc, at best, and problem unable to effectively handle the disaster. The toolkits are constantly changing in the cyber-security world, and our federal government is unable to respond accordingly. Even U.S. military generals (see yesterdays blog) agree that being proactive in cyber-security is critically important. However, the economic reality, in addition to cyber-security being an intangible problem, suggests that adequate response measures will not be in place. Businesses need to heed the warnings that are being placed in the news, and ensure that adequate safeguards are in place in their business, because when the attack comes, it will likely effect businesses as well.
The answer to this problem: Make "data governance" a part of your business plan, and hold your lawyer accountable for ensuring that this gets done.
To read the articles, please click here: Cyberspies penetrate electrical grid: report, Has power grid been hacked? U.S. won’t say