Asset Management, Risk Assessments/Management, Incident Response, Security Strategy, Plan, Budget, Network Security, Security Architecture

CISA’s Shields Up: What it is, how to use it

Security professionals accustomed to convoluted cyber threat bulletins from the federal government may have noticed something refreshingly peculiar in recent months: government guidance that’s clear, detailed, and useful.

Such guidance has been more frequent since the launch of the Cybersecurity & Infrastructure Security Agency (CISA). The agency has been increasingly successful at bringing in cybersecurity talent and communicating threats with clarity and detail.

An example of this is the launch of CISA’s Shields Up campaign, complete with a page full of actionable information, from the latest news updates to recommendations for corporate leaders and CEOs and ransomware response tips.

Shields Up has been particularly helpful amid the Russian invasion of Ukraine, providing clear guidance to help organizations prepare for potential cyberattacks tied to the conflict on the ground.

Josh Snow, principal sales engineer at ExtraHop, recently joined Enterprise Security Weekly host Adrian Sanabria to discuss what Shields Up is about and how organizations can make the best use of it. Specifically, Snow and Sanabria discussed specific practices and protocols that defenders should shore up, as well as behavioral indicators that signal active exploitation attempts.

Of Shields Up, Snow said the guidance “is common-sense hygiene for ports and protocols. It’s about looking at your ports and doing what you can to mitigate risks across the network. It’s about having a baseline of your infrastructure and knowing what you have – the basics.”

That includes making sure devices are properly configured for Microsoft’s Remote Desktop Protocol (RDP) and turning it off when necessary, and disabling the outdated SMB 1 protocol, which has become a notoriously easy ransomware attack vector.

To accompany this episode, ExtraHop provided several resources for listeners, including “A Practical Guide for Shields Up” and a free Shields Up assessment.

This segment is sponsored by ExtraHop Networks. Visit https://securityweekly.com/extrahop to learn more about them! Visit https://www.securityweekly.com/esw for all the latest episodes!

Bill Brenner

InfoSec content strategist, researcher, director, tech writer, blogger and community builder. Senior Vice President of Audience Content Strategy at CyberRisk Alliance.

Related Events

Get daily email updates

SC Media's daily must-read of the most current and pressing daily news

By clicking the Subscribe button below, you agree to SC Media Terms and Conditions and Privacy Policy.