November is Critical Infrastructure Security and Resilience Month, and CISA is showing ways to strengthen systems across the U.S.
What happened
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has designated November as Critical Infrastructure Security and Resilience Month. The initiative raises awareness about securing critical infrastructure and bolstering its resilience. The effort targets government entities, infrastructure operators, and the public, showing how critical infrastructure underpins daily societal functions and national security. CISA’s campaign encourages infrastructure owners to improve their defenses against physical and cyber threats that could disrupt main services.
Going deeper
Critical infrastructure has become a target for cyber threats, including ransomware, state-sponsored attacks, and hacktivist campaigns. Such attacks are designed to cause disruption, often compelling organizations to pay ransoms or handle operational breakdowns.
In the know
Recent incidents prove this threat, such as the 2023 ransomware attack on Change Healthcare, which disrupted healthcare services nationwide. Other notable attacks include the 2021 Colonial Pipeline incident, which impacted fuel supplies on the U.S. East Coast, and a ransomware attack on the Irish Health Service Executive, which severely hindered healthcare operations. These cases illustrate the potential for widespread impact when critical infrastructure is compromised.
What was said
In response to these mounting threats, President Joe Biden issued a proclamation urging Americans to prioritize infrastructure protection this month. "I call upon the people of the United States to recognize the importance of protecting our Nation’s infrastructure and to observe this month with appropriate measures to enhance our national security and resilience," he said. The theme for this year’s observance is “Resolve to be Resilient,” indicating the need for organizations to adopt resilience-focused practices.
President Biden also discussed recent government investments through legislative initiatives like the American Rescue Plan and the Bipartisan Infrastructure Law, which allocate billions toward securing and strengthening infrastructure. These funds support projects like grid improvements, flood-preventive bridge elevation, and community resilience programs to enhance public safety and economic stability.
The big picture
CISA’s focus this month is straightforward: get organizations to strengthen their defenses. With threats changing, the emphasis is on real action—identifying weak points, knowing how systems connect, and practicing for disruptions. It’s about making sure the systems we rely on every day are prepared and resilient.
FAQs
What is critical infrastructure security?
Critical infrastructure security involves protecting the main systems and assets that are necessary for public safety, health, and national security. This includes sectors like energy, water, transportation, and healthcare. The goal is to defend these infrastructures from cyberattacks, natural disasters, and other threats to prevent large-scale disruptions.
What are state-sponsored attacks?
State-sponsored attacks are cyberattacks carried out by hackers who are backed or funded by a government. These attacks typically target other nations or organizations to gather intelligence, disrupt services, or advance political or military goals.
What are hacktivist campaigns?
Hacktivist campaigns are cyber activities carried out by individuals or groups (called hacktivists) who use hacking to promote a political, social, or environmental cause. They might deface websites, leak sensitive information, or disrupt online services to raise awareness or protest against certain actions or policies.
Farah Amod
