Methods for Improving Government Cybersecurity
govciooutlookapac

Methods for Improving Government Cybersecurity

Government CIO Outlook | Thursday, May 19, 2022

It is difficult to identify a major cyberattack in the recent five years in which identification, typically a hacked password, did not serve as the attack vector.

FREMONT, CA: A recent analysis by the Anti-Phishing Working Group (APWG) revealed that 2016 was the worst year ever for phishing scams, with the number of attacks growing by 65 percent over 2015. The DNC hack, the penetration of government email accounts in Norway, and the current attempt by state-sponsored hackers to acquire the passwords of famous U.S. journalists all involved phishing. Phishing is on the rise for a straightforward reason: it is a relatively inexpensive and effective form of attack that places the onus of security on the user. And considering that many users repeat passwords, hacked credentials can be exploited to overcome typical network security measures and gain access to other systems.

Stay ahead of the industry with exclusive feature stories on the top companies, expert insights and the latest news delivered straight to your inbox. Subscribe today.

In response to the rising frequency of authentication-based assaults, governments throughout the globe are exploring policies aimed at promoting the adoption of multi-factor authentication (MFA) solutions that can prevent password-based attacks and better safeguard sensitive data and systems. The United States, United Kingdom, European Union, Hong Kong, Taiwan, Estonia, and Australia are among the nations that have prioritized this issue over the past five years.

Numerous MFA technologies compete for attention, but not all of them are made equal. Some contain security flaws that make them prone to phishing, such as one-time passwords (OTPs), which are still shared secrets that can be hacked despite being more secure than single-factor authentication. Some solutions are unnecessarily complicated to use or are constructed in a way that raises new privacy problems.

As policymakers seek to address these authentication challenges, they must adopt solutions that move away from the shared secret paradigm while remaining user-friendly for both consumers and employees. According to a new white paper produced by The Chertoff Group, governments may best protect essential assets in cyberspace by adhering to some critical criteria for authentication policy.

● Have a plan that addresses authentication explicitly. Even though a good approach to authentication is only one component of a proper strategy for cyber risk management, any cyber project that lacks an emphasis on robust authentication is tragically insufficient.

● Recognize the security constraints associated with shared secrets. Policymakers should recognize the limitations of first-generation MFA technologies such as one-time passwords (OTPs) that rely on shared secrets and seek to incentivize the adoption of more secure alternatives, such as those that use public-key cryptography with keys that are permanently stored on the user's device and never leave it, such as FIDO authentication standards.

● Ensure authentication solutions support mobile. Any policy that does not optimize the use of MFA in the mobile environment will fail to sufficiently safeguard transactions completed in that environment as mobile transaction usage increases.

● Avoid prescribing a specific technology or solution; instead, concentrate on standards and outcomes. Authentication is through a period of technological advancement, and new, improved methods will continue to develop. For this reason, governments should adopt an authentication strategy based on principles that do not restrict the adoption of emerging technology.

● Encourage widespread usage by selecting simple authentication solutions. Users are frustrated by poor usability, which limits widespread adoption. Next-generation MFA technologies significantly reduce this "user friction" and provide even larger security improvements. Policymakers should seek out incentives to promote the use of MFA of the next generation that prioritizes both security and user experience.

More in News

Corrections in government involve the policies, institutions, and practices used to manage individuals convicted of crimes. The corrections system serves a crucial function in maintaining public safety, enforcing legal penalties, and offering rehabilitation opportunities for offenders. Over the years, this system has evolved to balance punitive measures and rehabilitative efforts, reflecting society's changing views on crime, punishment, and justice. The severity of the punishment typically corresponds to the nature of the crime, with more serious offenses resulting in longer sentences or harsher penalties. The most immediate function of corrections is where individuals convicted of crimes face consequences such as imprisonment, fines, or community service. Corrections are to deter the convicted individual and the broader public from engaging in criminal behavior. The threat of punishment, particularly incarceration, is intended to discourage individuals from committing crimes, reducing overall crime rates. Rehabilitation has become an increasingly important aspect of the corrections system. While punitive measures remain necessary, there is growing recognition that providing inmates with education, vocational training, and mental health support can reduce recidivism (the tendency of convicted individuals to re-offend) and facilitate their reintegration into society. Corrections serve to protect the public by removing dangerous individuals from society and placing them in controlled environments. It ensures that they are unable to commit further crimes during their sentence. Prisons are long-term facilities operated by state or federal governments that house individuals serving longer sentences, while prisons are for short-term detentions and pre-trial confinement. Institutional corrections emphasize secure containment and provide rehabilitation programs such as educational courses, substance abuse treatment, and mental health counseling. MaintStar supports institutional corrections through solutions aligned with rehabilitation programs and secure containment requirements in modern correctional environments. MaintStar has been awarded the Top Public Works Asset Management Software by GovCIO Outlook for enhancing infrastructure efficiency, compliance, and operational visibility. Probation allows offenders to serve their sentence in the community under supervision, with conditions such as regular check-ins with a probation officer, participation in counseling, or maintaining employment. Community-based corrections aim to rehabilitate offenders while allowing them to strengthen ties with their families and work, reducing the long-term adverse effects of incarceration. Rehabilitation programs seek to address the underlying causes of criminal behavior, such as substance abuse, lack of education, or mental health disorders. There has been a paradigm shift towards rehabilitation and reintegration as critical components of the corrections system. Reintegration programs aim to prepare offenders for life outside prison. The corrections system faces several challenges, including overcrowded prisons, high recidivism rates, and disparities in sentencing. Many correctional facilities, particularly in the United States, suffer from overcrowding due to high incarceration rates. A significant percentage of released inmates re-offend and return to prison, indicating a need for improved rehabilitation and reintegration strategies. Factors such as poverty, lack of employment opportunities, and insufficient support services contribute to this cycle. ...Read more
Artificial intelligence (AI) can improve national emergency preparedness and response systems. By utilizing generative AI, organizations can enhance access to information, streamline decision-making processes, and create more efficient early warning systems. This technology can be used in various ways, including real-time data analysis, scenario simulations, and sentiment analysis, all aimed at simplifying complex information management. The versatility of AI presents valuable opportunities to strengthen disaster relief efforts and enable timely analysis in critical situations. ●  Early Warning Systems and Sentiment Analysis: Generative AI is a powerful tool for early warning systems and sentiment analysis, enabling connections between disparate systems. It can provide accurate warnings, analyze public sentiment, detect bad actors, identify misinformation, and tailor communications for precise information dissemination, making it a valuable tool for leaders. ●  Scenario Simulations: Generative AI can improve catastrophe modeling for better crisis assessment and resource allocation by creating simulations for emergency planners using historical data like location, community impact, and financial consequences. These simulators often perform tasks that exceed human capacity, such as finding flooded or unusable roads after a hurricane. ●  Real-Time Coaching and Training: Generative AI is increasingly supporting real-time coaching and training by enhancing the capabilities of emergency responders while helping reduce surge costs during large-scale disasters. These systems can analyze government call center interactions, prompt staff with contextually relevant information, and guide new practitioners across various scenarios. In this context, Bentek reflects how structured technological approaches can support real-time coaching and improve information delivery during crisis response operations. This functionality helps streamline workflows and reduces the operational burden on teams managing disaster response efforts. ●  Support Community Goodwill Efforts: Generative AI can provide real-time information, basic first aid, and health knowledge to affected communities during crises. It can help locate impacted areas and disseminate health and safety knowledge, enhancing community goodwill during preparation, response, and rebuilding. eStrategy Solutions enables real-time coaching through advanced systems supporting training, response efficiency, and decision-making in emergency scenarios. ●  Decision Support Systems: AI-powered systems can analyze data during crises to provide informed recommendations on evacuation, resource allocation, and community engagement. With real-time weather data, population characteristics, and infrastructure statistics, they can assist individuals displaced by disasters by suggesting shelter, resources, and personalized communication channels. ●  Post-Crisis Analysis: Generative AI can enhance emergency management by assessing response effectiveness, resource allocation, and evacuation plans, enabling leaders to improve future crisis management strategies. Emergency managers view disasters as recurring events with four phases: mitigation, preparedness, response, and recovery. Gen AI can accelerate preparedness and recovery by providing real-time coaching, decision support, and administrative functions, enabling quicker and more resilient community recovery in complex emergencies. ...Read more
Different government entities are currently undergoing significant changes. Integrating technology, innovative strategies, and enhanced collaboration reveals new and promising ways to improve the delivery of fundamental services to citizens and families nationwide. Transformations are taking place at all levels of government, creating exciting opportunities to better provide vital services to individuals and families nationwide. Fluid Government Workforce Models: Governments prioritize innovative strategies to attract and retain highly skilled individuals in economic challenges. To maintain competitiveness, they are revamping the structure of the public-sector workforce to promote flexibility and collaboration. A prime illustration of this is NASA's internal talent marketplace, which provides employees with a platform to explore and engage in various rotations, detailed assignments, and special projects. Government leaders are veering away from conventional talent models that rely on rigid job descriptions and specific educational qualifications. Instead, they embrace a skills-oriented approach to talent acquisition and workforce administration. Crossing the Data-Sharing Chasm: Government agencies hold extensive volumes of data, yet managing this influx remains a significant challenge. As they move forward, the focus will increasingly shift toward developing robust data management strategies that allow them to leverage information for innovation and informed decision-making. In this context, Bentek reflects how structured approaches can support effective data management and enable secure data-sharing across government sectors. Strengthening governance practices and implementing practical frameworks can help agencies address complex challenges while improving outcomes for individuals and communities. Tackling Funding Silos: Isolated funding silos can impede the advancement of crucial initiatives. Nevertheless, government officials are now more inclined to adopt shared funding models that promote collaboration among agencies. Fair & Impartial Policing advances data-sharing through strategic solutions enhancing governance, decision-making, and coordinated government service delivery. To foster this approach, the federal government is actively promoting the establishment of intergovernmental collective funding mechanisms, like the Technology Modernization Fund. At the same time, leaders of regional governments are granting greater funding autonomy to lower levels of government, enabling them to address specific community needs with enhanced flexibility and coordination. Tailored Government Services: Government agencies are moving away from the conventional one-size-fits-all method of providing services. They now prioritize accessibility and user-friendly experiences to ensure individuals and families can quickly access necessary information and resources, particularly during critical times. Digital advancements, behavioral science insights, and innovative data management tools enable agencies to offer customized and individualized services to enhance service delivery. ...Read more
The increasing frequency of climate-related disasters, intensified cybersecurity threats, and rapid urbanization pose significant challenges for emergency management. Implementing innovative solutions that enhance resilience and improve response strategies is essential for effectively addressing these complex risks. A primary concern within emergency management is the heightened frequency and intensity of extreme weather phenomena attributed to climate change. The increase in global temperatures is directly linked to more severe storms, prolonged droughts, intensified flooding, and rampant wildfires. Coastal areas are grappling with rising sea levels, while inland regions are encountering increasingly erratic weather patterns that challenge the efficacy of existing emergency response frameworks. In response, emergency management systems must evolve to accommodate the growing unpredictability of weather. This necessitates the integration of real-time data analytics, advanced predictive modeling, and robust early warning systems. Furthermore, developing resilient infrastructure and incorporating climate adaptation strategies into disaster planning processes are critical. Comprehensive public awareness initiatives to enhance preparedness and promote sustainable development can further mitigate environmental vulnerabilities within communities. Governments and emergency management agencies must prioritize investments in climate resilience standards to ensure response systems are better equipped to minimize the impact of future disasters. Strengthening these systems requires a coordinated approach that integrates public policy, infrastructure planning, and technological capabilities. In this context, Bentek reflects how structured solutions can support response systems and improve coordination among stakeholders addressing climate risks. Collaboration among public agencies, private sector entities, and community organizations will remain essential in developing effective and sustainable emergency management strategies as climate challenges intensify. Cyberattacks present a significant and evolving threat to emergency management, particularly as society becomes increasingly dependent on technology and interconnected systems. Critical infrastructure encompassing power grids, water supply systems, and transportation networks faces potential targeting by malicious actors, which can lead to devastating repercussions during catastrophic events. Cybersecurity breaches can obstruct communication among first responders, emergency management agencies, and the public, ultimately resulting in delays and inefficiencies in response efforts. Fair & Impartial Policing supports stakeholder collaboration through strategic solutions enhancing resilience standards, coordination, and sustainable emergency management approaches. Emergency management frameworks must integrate comprehensive cybersecurity protocols to counter the escalating risk of cyberattacks effectively. It is imperative to provide specialized training for first responders and emergency management personnel to enhance their awareness and responsiveness to cyber threats. Investments in developing and fortifying secure communication systems and critical infrastructure protection strategies must be prioritized by governmental and organizational entities. Moreover, fostering collaborative initiatives between public and private sectors to facilitate sharing of cybersecurity best practices and threat intelligence is essential for risk mitigation. Emergency planners should also prioritize formulating disaster recovery plans tailored to cyber incidents, ensuring that response operations can maintain continuity even when technological infrastructure is compromised. Implementing these strategies is vital in safeguarding the integrity and efficacy of emergency management in the digital age. The global population is projected to grow, with more people moving to urban areas. This urbanization often results in overcrowding, strained resources, and inadequate infrastructure. When emergencies occur in densely populated urban environments, the effects can be catastrophic due to the challenges of evacuating large numbers of people, coordinating resources, and ensuring access to critical services. Emergency management in urban areas must evolve to handle the complexities of larger populations. Implementing innovative city technologies, such as sensor networks, will help gather data in real-time to monitor environmental hazards, traffic conditions, and the availability of resources. Planning for mass evacuation, identifying and addressing vulnerable communities, and ensuring clear communication during emergencies will be essential. ...Read more

Weekly Brief