August 2024 Issue
The CISA Community Bulletin is a monthly publication that shares cybersecurity webinars and workshops, new publications and best practices. In this month's edition:
-
Announcements
- CISA Call for Fiscal Year 2025 Exercise Nominations
- CISA Releases FY2024 Rural Emergency Medical Communications Demonstration Project Notice of Funding Opportunity
- Operational Security for Election Officials
-
Partnerships
- Active Shooter and Family Reunification Exercise
- Joint Cybersecurity Advisory: People's Republic of China's Ministry of State Security Tradecraft in Action
-
Information Exchange
- Region 8 Critical Infrastructure Resilience Conference
- CISA Releases New Physical Security Resource for School-Based Law Enforcement and School Resource Officers
-
Education and Training and Workshops
- Register Today: 2024 National Summit on K-12 School Safety and Security
- Upcoming Interagency Security Committee Risk Management Process & Facility Security Committee Trainings
To see the latest CISA Cybersecurity Alerts and Advisories visit Cybersecurity Alerts & Advisories | CISA
Report a Cyber Incident
CISA provides secure means for constituents and partners to report incidents, phishing attempts, malware, and vulnerabilities.
Report a Cybersecurity Incident: Report anomalous cyber activity and/or cyber incidents 24/7 to report@cisa.gov or (888) 282-0870.
Report incidents as defined by NIST Special Publication 800-61 Rev 2, to include
- Attempts to gain unauthorized access to a system or its data,
- Unwanted disruption or denial of service, or
- Abuse or misuse of a system or data in violation of policy.
Federal incident notification guidelines, including definitions and reporting timeframes can be found here.
Organizations can also report anomalous cyber activity and/or cyber incidents 24/7 to: Central@CISA.dhs.gov
To report an incident, you can call the Know2Protect Tipline at 1-833-591-KNOW (5669) or visit the NCMEC CyberTipline at https://report.cybertip.org.
CISA Call for Fiscal Year 2025 Exercise Nominations
Exercises provide stakeholders with effective and practical mechanisms to examine plans and procedures, identify areas for improvement, and share best practices. To this end, the Cybersecurity and Infrastructure Security Agency (CISA) works with government and industry partners to plan and conduct cyber and physical security exercises to enhance the security and resilience of critical infrastructure. Each year, CISA conducts an annual call for exercise nominations from across the critical infrastructure community. The call for fiscal year 2025 exercises will be open from July 1, 2024 through August 23, 2024. For more information, please contact CISA Exercises at CISA.Exercises@cisa.dhs.gov.
CISA Releases FY2024 Rural Emergency Medical Communications Demonstration Project Notice of Funding Opportunity
Last month, CISA released the FY 2024 Rural Emergency Medical Communications Demonstration Project (REMCDP) Notice of Funding Opportunity to find innovative solutions to improve the delivery of rural medical communications and address the gaps in the National Emergency Communications Plan.
REMCDP is now accepting applications via grants.gov through Friday, August 9, 2024, at 11:59 PM ET. Eligible applicants may apply for $1,000,000 for a two-year period of performance, anticipated to begin on September 30, 2024. Funding will be awarded to one recipient following a competitive review.
|
Operational Security for Election Officials
We are proud to announce the release of our Guide to Operational Security for Election Officials.
The new guide aims to enhance the security of our election infrastructure by providing a comprehensive overview of operational security (OPSEC) within the election context, identifying potential risks, and offering practical mitigation measures.
Learn more about this guide and protecting our elections at cisa.gov/protect2024
|
Active Shooter and Family Reunification Exercise
CISA recently teamed up with Fauquier County, VA, for a comprehensive active shooter and family reunification full-scale exercise. This vital training session focused on enhancing our community's emergency response capabilities and preparedness. A huge thank you to all the participants and organizers for their dedication and hard work.
Learn more about the exercise to keep communities safe here.
|
Joint Cybersecurity Advisory: People's Republic of China's Ministry of State Security Tradecraft in Action
CISA published a joint advisory with Australian Signals Directorate’s Australian Cyber Security Centre (ASD’s ACSC), and other partners that outlines activity and tradecraft of a state-sponsored cyber group associated with the People's Republic of China's Ministry of State Security (MSS). It is based on current, shared understanding of advanced persistent threat group, APT 40, and recent ASD’s ACSC incident response investigations.
To help cybersecurity practitioners identify, prevent and remediate APT 40 intrusions against their own networks, the advisory provides a couple of significant case studies of this adversary’s malicious activity against victim networks.
Recommended mitigations to reduce the risk of being compromised by similar activity include comprehensive and historical login information, prioritize patching for all internet exposed devices and services, and segment networks to limit or block lateral movement.
|
Region 8 Critical Infrastructure Resilience Conference
Protecting critical infrastructure is of vital importance to the security and stability of the nation. Our infrastructure is vulnerable to a variety of threats and hazards, including physical attacks, cyber attacks, aging infrastructure, and natural disasters.
CISA Region 8 and the Wyoming Office of Homeland Security (WOHS) invite you to join the 2024 Region 8 Critical Infrastructure Resilience Conference to address the security and resilience of our critical infrastructure. The 2024 theme is “Preparing our communities for the future through secure and resilient infrastructure”.
Agenda topics include a threat overview, foreign influence considerations, weather impacts to infrastructure, and presentations focused on energy, nuclear, mining and critical minerals, water, and emergency communications.
Dates: August 28-29, 2024; 8 am – 5 pm MDT
Location: Wyoming Workforce Services Center - 5221 Yellowstone Rd, Cheyenne, WY 82009
For more information about Critical Infrastructure Security and Resilience resources, visit https://www.cisa.gov/topics/critical-infrastructure-security-and-resilience or email CISA Region 8 at CISARegion8Outreach@cisa.dhs.gov.
|
CISA Releases New Physical Security Resource for School-Based Law Enforcement and School Resource Officers
CISA released a new K-12 school physical security resource specifically designed for school-based law enforcement and school resource officers. This new product provides an overview of how these stakeholders can support school physical security planning and implementation efforts through the key concepts and principles outlined in CISA’s K-12 School Security Guide. The publication also includes examples of how school-based law enforcement and school resource officers can play a role in the five core elements that comprise a school’s physical security system, assess vulnerabilities across K-12 campuses, and better protect against targeted violence threats.
The new resource was developed as a companion product for the broader K-12 School Security Guide Product Suite, which provides K-12 districts and campuses with resources, tools and strategies to improve school physical security. The product suite includes a guide, web-based tool and training videos. Learn more about this new resource and access the full K-12 School Security Guide Product Suite at cisa.gov/k-12-school-security-guide-product-suite.
|
CISA Education and Training
CISA offers a variety of free courses and scheduled training events. For a complete list, visit the links below:
Register Today: 2024 National Summit on K-12 School Safety and Security
Registration is now open for CISA's 2024 National Summit on K-12 School Safety and Security, taking place September 25-26. This virtual event brings together K-12 school leaders and practitioners to discuss and share actionable recommendations that enhance safe and supportive learning environments. The Summit will feature panel discussions, sessions and keynote speakers covering topics such as understanding and preventing youth violence, protecting K-12 networks, youth online safety, supporting student mental health, emergency planning and physical security, and intervention and restorative practices.
This free event is open to anyone with a passion for improving school safety but will be of particular interest to K-12 school and district administrators; principals and superintendents; school-based law enforcement; teachers and school staff; mental health practitioners; first responders; federal, state, local, tribal and territorial government partners; and other school safety and security professionals. Learn more about the Summit and register today: 2024CISASchoolSummit.eventbrite.com.
|
Upcoming Interagency Security Committee Risk Management Process & Facility Security Committee Trainings
Process & Facility Security Committee Trainings
The Interagency Security Committee (ISC) invites you to participate in its award winning Risk Management Process (RMP) and Facility Security Committee (FSC) Training. This training provides an understanding of the ISC, the ISC Risk Management Process Standard (RMP Standard), and the roles and responsibilities of Facility Security Committees (FSC). The course fulfills the necessary training requirements for FSC membership and is valuable for executives; managers; and personnel involved in making facility funding, leasing, security, or other risk management decisions. Participants will receive continuing education units through the International Association for Continuing Education and Training upon completion of the course. The ISC offers the training at no cost to participants.
The schedule for upcoming in-person and virtual trainings is below.
In-Person Trainings:
- August 7, 2024 – Laredo, TX at 8:30 a.m. CT
- August 15, 2024 – Atlanta, GA at 8 a.m. ET
- September 10, 2024 – Tucson, AZ at 8:30 a.m. MT
- September 12, 2024 – San Diego, CA at 8:30 a.m. PT
Virtual, Instructor-Led Trainings:
- September 10-11, 2024 – 9 a.m. CT
For the full list of future trainings visit the ISC website.
To register for any of these courses, please email the ISC Training Team at rmp_fsctrng@cisa.dhs.gov or visit our website.
The CISA Community Bulletin is a monthly publication that shares cybersecurity webinars and workshops, new publications, and best practices.
To access past editions of this CISA Community Bulletin newsletter, please visit the CISA Community Bulletin archive.
|