Professional Documents
Culture Documents
Security
Cybersecurity is about Risk
(Not Just Technology)
Brig. Gen. (ret) Greg Touhill
Deputy Assistant Secretary
Office of Cybersecurity and Communications
U.S. Department of Homeland Security
80%
Best
Practices
15%
Info
Sharing
5%
Planning
& Incident
Response
*Rule of thumb
Homeland
Security
Best Practices
Top 5 Defensive Strategies:
1. Multifactor Identification
2. Network Segmentation
3. Control Privileged Access
4. Whitelist Apps
5. Guard your Back Door:
Contract with Security in
Mind
Homeland
Security
80%
Best
Practices
15%
Info
Sharing
Incident Response
National Cybersecurity & Communications
Integration Center (NCCIC)
U.S. Computer Emergency Readiness Team (US-CERT)
Industrial Control Systems Cyber Emergency Response
Team (ICS-CERT)
National Coordinating Center for Communications (NCC)
Cyber Watch
5%
Planning
& Incident
Response
Homeland
Security
Homeland
Security
Homeland
Security
Homeland
Security
Nuclear Reactors,
Materials & Waste
Transportation
Systems
Water &
Wastewater
Systems
Chemical
Emergency
Services
Commercial
Facilities
Energy
Communications
Financial Services
Critical
Manufacturing
Food &
Agriculture
Homeland
Security
Healthcare &
Public Health
Information
Technology
Government
Facilities
Dams
Protecting:
Citizens
Economy
Values
Homeland
Security
National Cyber
Investigative
Task Force
Defense
Cyber Crime
Center
National
Security
Agencys
Central
Security
Service
Threat
Operation
Center
Homeland
Security
A Call to Action
A threat to one is a threat to all
Share information
Cyber Neighborhood Watch
Homeland
Security