Saturday, December 21, 2024

Biden’s CISA Was Largely a Failure: 2024 Cyber Review and 2025 Preview

If 2024 were a movie, it would be a dystopian thriller where hackers play both good and bad roles. Change Healthcare experienced a major data breach, raising concerns about the safety of medical records. CrowdStrike, a cybersecurity company, also faced cyber attacks, highlighting the failures in protecting sensitive information. The year saw numerous cyber conflicts, including attacks from Iranian hackers and constant ransomware threats, making cybersecurity feel more like a game than a strategic defense.

As Donald Trump prepares to return to office, there are doubts about whether he can create a "cyber-safe" America, especially given the chaotic global landscape, including ongoing wars and issues at the U. S. southern border. Cyber warfare serves as an equalizer, allowing hackers to disrupt critical services without needing vast military resources. This makes ignoring cybersecurity a dangerous mistake.

The outgoing Biden administration’s Cybersecurity and Infrastructure Security Agency (CISA) released a draft plan for responding to cyber incidents. However, with little time left before new leadership takes over, the plan may not be effective. There’s hope that Trump can take this draft and improve it, although he may likely make significant changes instead of following the old blueprint.

If Trump wants to enhance America's cybersecurity, he needs to focus on several key areas. First, there must be more investment in cybersecurity for both public and private sectors. The recent incidents highlight how vulnerable the private sector is, and stronger partnerships between the government and businesses are essential. Second, there should be regulations for IoT devices and artificial intelligence, as these technologies are being exploited in cyberattacks.

Additionally, the U. S. should advocate for international cyber norms to control attacks from countries like China and Russia. CISA needs major restructuring and better funding to improve its effectiveness, similar to how the TSA operates. Lastly, increasing cybersecurity education for the general public is crucial. Many Americans lack basic cybersecurity knowledge, making it vital to run awareness campaigns. Cyber hygiene is necessary for everyone, not just IT professionals.

As we move into 2025, protecting data is not just about information; it involves safety, infrastructure, and democracy. Trump has a chance to shift from past reactive responses to a proactive strategy, but it remains to be seen if this opportunity will be taken. Failure to do so could result in recurring cybersecurity crises in the coming years.

Julio Rivera is a business and political strategist who focuses on cybersecurity and politics. His work is published by major news organizations. 

https://amgreatness.com/2024/12/21/bidens-cisa-was-largely-a-failure-2024-cyber-review-and-2025-preview/

No comments: