{"id":9632,"date":"2022-02-04T02:42:05","date_gmt":"2022-02-04T02:42:05","guid":{"rendered":"https:\/\/mailinvest.blog\/index.php\/2022\/02\/04\/dhs-establishes-cyber-safety-review-board-to-elevate-cybersecurity\/"},"modified":"2022-02-04T02:42:05","modified_gmt":"2022-02-04T02:42:05","slug":"dhs-establishes-cyber-safety-review-board-to-elevate-cybersecurity","status":"publish","type":"post","link":"https:\/\/mailinvest.blog\/index.php\/2022\/02\/04\/dhs-establishes-cyber-safety-review-board-to-elevate-cybersecurity\/","title":{"rendered":"DHS establishes Cyber Safety Review Board to elevate cybersecurity"},"content":{"rendered":"

<\/a>\n
<\/p>\n

\n

The U.S. Department of Homeland Security has announced the establishment of the Cyber Safety Review Board that will bring together government and industry leaders to elevate cybersecurity.<\/p>\n

The establishment of the CSRB is the result of a Biden Administration executive order in May<\/a> that ordered that the board be created. Robert Silvers, DHS Under Secretary for Policy, will serve as chair of the board, with Heather Adkins, Google LLCs senior director for security engineering serving as deputy chair.<\/p>\n

DHS\u2019s Cybersecurity and Infrastructure Security Agency will manage, support and fund the board with CISA Director Jen Easterly responsible for appointing CSRB members.<\/p>\n

The CSRB will review and assess significant cybersecurity events so that government, industry and the broader security community can better protect networks and infrastructure. The board will deliver strategic recommendations to the President and the Secretary of Homeland Security based on cybersecurity incidents that the board studies.<\/p>\n

First out of the gate for the CSRB will be a review of the Apache Log4j vulnerabilities discovered in December<\/a>. Hackers subsequently targeted the vulnerabilities, presenting what DHS describes as an urgent challenge to network defenders. The board examination will generate lessons learned from the cybersecurity community, with the White House and DHS determined that focusing on this vulnerability and its associated remediation process was the most important first use of CSRB\u2019s expertise.<\/p>\n

The report into Log4j will include a review and assessment of vulnerabilities associated with the Log4j software library,\u00a0recommendations for addressing any ongoing vulnerabilities and threat activity and recommendations for improving cybersecurity and incident response practices and policy based on lessons learned from the Log4j vulnerabilities.<\/p>\n

\u201cThe focus of the newly formed Cyber Safety Review Board on analyzing past incidents to help prevent future ones is a welcome change from focusing on who to blame when something goes wrong,\u201d\u00a0Mike Parkin, engineer at cyber risk remediation company Vulcan Cyber Ltd.<\/a> told SiliconANGLE. \u201cIts work will, hopefully, augment the work being done by other public\/private partnerships, such as InfraGard.<\/a>\u201d<\/p>\n

Ray Kelly, fellow at application security firm NTT AppSec Solutions Inc.,<\/a> noted that \u201cthe new Cyber Safety Review Board could be quite valuable.\u201d<\/p>\n

\u201cIn depth review of major security incidents with recommendations for remediation and incident response practices can certainly be useful for organizations,\u201d Kelly said. \u201cWe will have to wait and see how the first report looks when they address the critical and ever-expanding Log4j vulnerability to determine if the level of detail and guidance is going to be helpful.\u201d<\/p>\n

Image: DHS<\/h5>\n
\n
\n

Show your support for our mission by joining our Cube Club and Cube Event Community of experts. Join the community that includes Amazon Web Services and Amazon.com CEO Andy Jassy, Dell Technologies founder and CEO Michael Dell, Intel CEO Pat Gelsinger and many more luminaries and experts.<\/span><\/h3>\n<\/div><\/div>\n