Call us now:
The senior VP of Counter Adversary operations of Crowdstrike met members of the Committee of Homeland Security, subcommittee on Cyber and Infrastructure Protection.
The Committee highlighted our dependence of our interconnected digital ecosystem. That in part caused ‘The largest outage in history was due to a mistake.’
Crowdstrike has changed it processes to evaluate the effects of the release of product updates to ensure that the effects of updates are tested ahead of full release. Working more closely with partners to improve resilience. Content updates were not treated as code, pushing content updates through their testing lifecycle. Updates are now tested internally before they are delivered to Crowdstrike clients.
Senator Luttrell asked if the content file that was pushed was tested before it was rolled out. It tested ‘clean’ and was allowed to roll-out. That created a ‘perfect storm of issues’ that caused the falcon strike sensor to fail. Senator Gimenez asked my the update on the 19th of July was different from previous updates given the 1,000s of updates. With little clarity over why the event was not picked up in testing at the time, with improvements put in place to improve testing.
The cyber workforce and lack of qualified cybersecurity professionals was a tenet of the conversation. With Senator Green highlighting the “Cyber PIVOTT Act†being introduced to build a skills based cyber workforce. Senator Ezell pushed a conversation on cyber recruitment and the necessary skills to succeed in managing cybersecurity.
No clarity of how Crowdstrike will support clients financially following the incident.
Senator Gonzales made it clear Bob Dix, very few people in congress understand the issue at hand.
One wonders why the CEO of Crowdstrike did not attend the Committee meeting?
@Thaddeus Dziekanowski Brian D. McCarthy
Veritas GRC CrowdStrike
#cybersecurity #cyberriskmanagement
View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A7244609743481188352