5 Practical Strategies to Bridge the Cybersecurity Gap for Small Businesses and Local Governments

The Need for Cybersecurity Support for Small and Midsize Organizations

In recent years, the cybersecurity industry has primarily focused on protecting large organizations from sophisticated cyberattacks. While these efforts are crucial, they have come at the expense of smaller or midsize organizations that lack the same resources but face the same threats. This imbalance has left smaller organizations vulnerable to cybercriminals and has put the backbone of our economy, such as regional banks, credit unions, hospitals, law firms, and manufacturers, at risk.

Recognizing the Cybersecurity Imbalance

Fortunately, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) is starting to acknowledge this cybersecurity imbalance and is taking steps to assist these “cyber poor” organizations. Recognizing the urgency of the situation, CISA must prioritize the needs of small to midsize agencies and organizations in their strategies and initiatives.

Recommendations for CISA

Streamline Membership and Access to ISACs

One of the steps CISA should take is to streamline membership and access to Information Sharing and Analysis Centers (ISACs). Currently, ISAC membership is expensive and often excludes cost-effective partnerships for smaller organizations. CISA could implement grants to enable broader access to critical information security resources, making ISACs more accessible for small and midsize businesses and SLTT government agencies.

Expand Use of Albert Sensors

CISA should also expand the use of Albert sensors, intrusion-detection systems designed for state and local government organizations. While there are currently 800 Albert sensors generating alerts, there should be more effort and funding to place these critical assets at the SLTT level. Additionally, CISA should explore public-private partnerships to expand the deployment of Albert sensors beyond the SLTT level. Reviewing existing authorities or petitioning for legislation would enable CISA to fund and deploy Albert sensors to willing service provider networks and all ISACs. Integration of Albert sensor data into external security products should also be facilitated, enabling a more comprehensive defense-in-depth approach.

Improve Information and Intelligence Sharing with MSPs and MSSPs

CISA must also improve information and intelligence sharing with managed service providers (MSPs) and managed security service providers (MSSPs). With cybersecurity talent in high demand and limited availability, empowering MSPs and MSSPs is crucial for scaling the nation’s cyber capabilities. CISA should work on streamlining data and threat distribution to these organizations to maximize resources.

Create a Better Portal and Standard Interface for Two-Way Intelligence Sharing

Enhancing intelligence sharing is another critical step for CISA. The current distribution of intelligence through the Automated Indicator Sharing (AIS) system is limited in both frequency and accessibility. CISA needs to develop a better portal and standard interface that allows small and midsize businesses to easily integrate AIS intelligence into their cyber defenses. Clear and low-cost pathways should be provided to ensure that SMBs can access and apply this critical defense resource.

Lobby for Stricter Incident-Reporting Requirements

Furthermore, CISA and the executive branch should lobby Congress for legislation mandating the reporting of cyber incidents across industries and business sizes. While some industries already have reporting requirements, it is essential to establish universal regulations to ensure that all organizations, including small and midsize ones, report cyber incidents. Even without a mandate, CISA needs to create a better pathway for organizations to share the details of attacks and exposures, enhancing their ability to protect and defend potential victims.

The Path Forward for CISA

By implementing these recommendations, CISA can become a guiding light for small and midsize organizations and local governments in navigating network security and protecting their valuable data. Addressing the cybersecurity needs of these organizations is vital for the overall security and resilience of our nation’s critical infrastructure and the economy.

Editorial Opinion: A Collective Responsibility

The issue of cybersecurity for small and midsize organizations should not fall solely on the shoulders of CISA. It is a collective responsibility that requires collaboration between government agencies, private sector organizations, industry associations, and cybersecurity experts. All stakeholders must recognize the urgency and importance of addressing this cybersecurity imbalance to protect organizations of all sizes.

Furthermore, there is a philosophical question at play here – should organizations, regardless of their size, have equal access to cybersecurity resources and protections? In an increasingly interconnected world, the ripple effects of a cyberattack on a small organization can disrupt larger networks and have far-reaching consequences. By leveling the playing field and ensuring that all organizations have access to effective cybersecurity measures, we can collectively strengthen our nation’s cyber resilience.

Advice for Small and Midsize Organizations

While efforts are being made to address the cybersecurity needs of small and midsize organizations, it is essential for these organizations to take proactive steps to protect themselves. Here are some key pieces of advice:

• Invest in cybersecurity solutions: Allocate resources to implement robust cybersecurity measures, such as firewalls, antivirus software, and employee training programs.
• Establish incident response plans: Develop detailed plans outlining steps to be taken in the event of a cyber incident. This will help minimize damage and facilitate a swift recovery.
• Stay informed and updated: Keep abreast of the latest cybersecurity threats, industry best practices, and government guidelines. Regularly patch and update software and systems to address vulnerabilities.
• Partner with trusted MSPs and MSSPs: Leverage the expertise of managed service providers and managed security service providers to bolster your organization’s cybersecurity capabilities.
• Cultivate a culture of cybersecurity: Educate employees about the importance of cybersecurity and promote responsible digital practices within your organization.

By taking these steps, small and midsize organizations can enhance their cybersecurity posture and contribute to a more secure digital landscape.