Call us now:
The challenge for CNI cybersecurity is relatively simple to frame. For most Western countries CNI is provided by the private sector. It is also a huge problem to fix, one only has to consider the scope of the EU NIS 2 directive to understand the depth and breadth of companies considered CNI providers. Then one has to consider the interconnected nature of CNI products and services, and the maturity of cybersecurity risk management. To understand why cybersecurity of CNI is complex.
For countries such as the U.S, the 99% cyber problem is more acute. The 99% cyber problem is demonstrated when one considers the cybersecurity of state level public and private water companies. 99% of companies in most economies are Small to Medium Sized (SME/ SMB) organizations, that invariably have either ignored or not afforded cybersecurity, in whatever form it takes. As demonstrated by the hack on companies such as the Municipal Water Authority of Aliquippa.
Besides, utilities say, it’s difficult to invest in cybersecurity when upkeep of pipes and other water infrastructure is already underfunded, and some cybersecurity measures have been pushed by private water companies, sparking pushback from public authorities that it is being used as a back door to privatization.
The challenges ahead for SME CNI providers and for Governments is likely bigger than just cyber risk regulation. It’s an economic problem that is going to require a whole of government approach to fix.
Ted Dziekanowski Brian D. McCarthy
#cybersecurity #cyberriskmanagement #cni
View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A7148248946056859649