Everything you need to know about the ransomware attack on Colonial Pipeline May 2021

 

View this email in your browser.

Everything you need to know about  the ransomware attack on Colonial Pipeline    GET UP TO SPEED: Ransomware is rampant. The biggest fuel pipeline in the United States was shut down in recent days after hackers stole some one hundred gigabytes of data from Colonial Pipeline and threatened to release it unless the company paid up. The hack has been tied to an Eastern European (and possibly Russia-based) collective known as DarkSide, and US President Joe Biden has said that Russia bears some responsibility for the hack, even though the attack does not appear to have been state-sponsored. How can companies fight back against this rising trend of ransomware attacks? What can the Biden administration do? And what will this mean for the prices you pay at the pump? Our experts are here to fill you in, free of charge. A RISING THREAT   ·        Colonial Pipeline is aiming to restore most of its operations by the end of this week, as lines of panic buyers form at gas stations across the Southeastern United States. Cynthia says any increase in gas prices “is likely to be mildly escalatory and short-lived.” But she adds that the hack “exposes the soft underbelly of the nation’s critical energy infrastructure.”    ·        If a company like Colonial, which should have the resources for robust cyber defenses, could be “paralyzed,” Cynthia adds, that means smaller companies are even more vulnerable to attack. “In that circumstance, an environmental, explosive, or economic catastrophe might not be averted.”    ·        The threat goes well beyond energy. The Colonial Pipeline hack is one of the most high-profile ransomware incidents in recent years, but it’s part of a surging trend, David points out. According to data compiled by the GeoTech Center, the global cost of ransomware attacks soared from $11.5 billion in 2019 to $20 billion in 2020, with the average downtime for an organization rising from 6.2 days to 16.2 days.   ·        “The good news is technology is getting democratized, and the bad news is technology is getting democratized,” David says. Ordinary “people can do things that only sophisticated nation-states could do 40 years ago.”   HOW TO FIGHT BACK   ·        If everyone is at risk, how can companies prepare? Andy suggests developing a “Plan B” in case your operations are shut down and making sure all your IT “crown jewels” are “fully backed up off-line and restorable.” He adds that “conducting recurring and very realistic exercises will let you know whether your plans work or need revision. Do all of that, then rinse and repeat, and don't stop.”   ·        David floats another idea: space. Commercial satellites can be used to store company data as a backup. “If you have something that compromises ground-based assets, then you move to the space cloud,” he says.   ·        But couldn’t someone just hack your satellite? David says communication to space assets would be limited, via only laser modems that would catch the satellite as it passes overhead. “You have a little more control than over the regular internet,” he says.   THE ROLE OF GOVERNMENT   ·        Biden on Monday promised a “global effort” led by the US Department of Justice against “transnational criminals,” along with new public-private collaboration to improve cybersecurity. But Cynthia notes that the government’s role of coordinating cybersecurity and advising private companies “is daunting and grossly underfunded.” When there’s a massive breach, the typical solution would be for the government to take over, but “there is no clear solution, no clearly articulated vision of what the government would do if it took over.”   ·        David urges more transparency from governments and particularly private companies when they do get hacked. Right now, many of them withhold information because they fear reactions from customers or shareholders. But if we could map ransomware attacks with the same precision that we have for COVID-19 cases, for instance, it could be a real wake-up call.   ·        “We’ve got cyber fatigue,” David says. “No one event is going to motivate people to do anything. It’s when you quantify" security breaches that more people will get involved in fixing it. “The solutions will come not from policymakers, but from entrepreneurs.”   Dive deep on cybersecurity →

CERTCON 2021 Virtual Conference. May 18-23, 2021 Be proactive.

 CERTCON 2021

 

Is anything similar taking place in your community?  Why not start one!   CERT Teams are not just a resource for special event traffic control. CERT Teams must be controlled by the community leaders. The ‘C’ on CERT is community.  Interfacing and coordinating with Fire\EMS, Law Enforcement builds back trust lost.   A separate funding entity for your community before, during, and after a disaster strikes.   BEMA International CERTCON 2021 - The Virtual Conference CERTCON 2021 is Here, May 18th - May 23rd DON'T MISS OUT!! CLICK HERE TO REGISTER OR TO GET MORE INFORMATION The Fairfax County Community Emergency Response Team (CERT) is sponsoring the 2021 CERT conference in the National Capital Region. The conference will provide education and training to CERTs in the Mid-Atlantic region. The CERTCON 2021 theme is “Celebrating You, the Everyday CERT” and is the foundational concept for this year’s classes, lectures, workshops and training exercises. CERTCON is open to CERT-trained individuals, Campus CERT, Teen CERT, Emergency Management Professionals and Citizens interested in CERT and emergency preparedness.   Don't delay, register today. Summary of what is scheduled for the event. More information coming soon.   Launching and Maintaining a CERT Program Tabletop Exercises Introduction to the Emergency Response Guidebook 2020 Virtual Classroom Success Social Media in Disasters Confident Responders, a Panel Discussion Teen Talk: A Discussion about Youth Preparedness Programs Emergency Meal Prep Until Help Arrives Miscommunication or Missed Communication? The Challenges of Hearing Loss for Emergency Responders Advanced Disaster Prep Psychological First Aid/COVID Edition Managing SUVs SWARM Leadership Growing your Bilingual CERT Program, a Panel Discussion CERT Teams and the Communications Chain So, You Completed Basic CERT.  What Happens Next? Disaster Prepping on a Dime: Cost Effective Ways to Prepare for Disasters Talk Saves Lives Teen CERT Panel Discussion Scene Safety and the Killers Don't delay, register today at http://certcon.org/ Jeffrey Katz Volunteer Liaison Fairfax County Fire and Rescue

 
 
 
 
 
 
 

Hurricane Preparedness Week. Infrastructure Security. Webinar: Thursday, May 20, 2021. 10:30am - 12pm ET.

 

---

WEBINAR: Cybersecurity and Infrastructure Security 2021 Hurricane Season Preparedness  Thursday, May 20, 2021 10:30 a.m. - 12:00 p.m. ET  The Cybersecurity and Infrastructure Security Agency (CISA) invites you to participate in a webinar discussion on its role and resources in annual hurricane preparedness. CISA staff and partners will discuss plans on how we plan to execute improved preparedness and response activities during the approaching hurricane season. This webinar will address how the COVID-19 pandemic can affect disaster preparedness and recovery, and what you can do to keep yourself, others and our critical infrastructure safe and secure. Representatives from CISA’s National Risk Management Center, National Coordinating Center for Communications (ESF#2), Cross Sector Business and Infrastructure (ESF#14), and together with FEMA's National Business Emergency Operations Center (NBEOC), and the National Oceanic and Atmospheric Administration (NOAA) will highlight capabilities and plans for this coming Hurricane Season. Register: CISA 2021 Hurricane Webinar Tickets, Thu, May 20, 2021 at 10:30 AM | Eventbrite

Hurricane Preparedness Week. Health and Human Services. Public Health during Federally Declared Emergency. Webinars: 5/12, 5/14, 2021

 

---

WEBINAR: The U.S. Department of Health and Human Services: “Public Health and Primary Care During a Federally Declared Emergency" Wednesday, May 12, 2021 10 a.m. - 11:00 a.m. ET English Friday, May 14, 2021 11 a.m.- 12:00 p.m. ET Spanish The Puerto Rico Caribbean Area Office for FEMA Region 2 is partnering with the U.S. Department of Health and Human Services (HHS) to host a webinar on public health and primary care during a federally declared emergency. Speakers will be featured from the Office of the Assistant Secretary for Health, the Health Resources and Services Administration, and the Centers for Disease Control and Prevention. They will discuss the role of their agencies during disasters, and the unique context of response during COVID-19 in preparing for 2021’s Hurricane Season. They will also share lessons learned from the Hurricanes Irma and Maria. Who should attend? The whole community, individuals and families, local, state, federal government officials, volunteer and community-based organizations, and private sector. Register English: https://fema.connectsolutions.com/week4femahhs/event/registration.html  Register Spanish: https://fema.connectsolutions.com/week4hhsspa/event/registration.html

---

---

Hurricane Preparedness Week. Be prepared. Webinar Get Ready for Hurricane Season. Tuesday, May 11, 2021. 11am - 12pm ET.

 

DHS Center for Faith-Based and Neighborhood Partnerships

May 9-15, 2021 is Hurricane Preparedness Week Plan Ahead for Disasters!  WEBINAR: Get Ready for Hurricane Season Tuesday, May 11, 2021,  11 a.m. - 12:00 p.m. ET Please join FEMA Region 2 for Hurricane Preparedness Week, which  encourages everyone to evaluate their personal hurricane risk before hurricane season begins on June 1. This webinar will cover hurricane basics, information resources, and how to find out if you live in a hurricane evacuation zone. We will also discuss preparedness measures for people living in hurricane-prone areas, such as emergency supplies, insurance, preparing your home, and making an individual or family hurricane plan. Who should attend? The whole community – individuals and families, volunteer and faith-based organizations, local, state, federal government and private sector. Register: Get Ready for Hurricane Season (connectsolutions.com)

FEMA is seeking public input on agency efforts related to equity and climate change. May 2021

 

FEMA Advisory
FEMA Update  

---

Key Messages

• FEMA is seeking public input on agency efforts related to equity and climate change. Public input is critical to ensure programs and policies serve all people and create a robust response to climate change.

• Specifically, FEMA is seeking public comments on President Joseph R. Biden, Jr.’s executive orders 13985, 13990 and 14008. These executive orders assess existing programs and policies to determine:

• If agency programs and policies perpetuate systemic barriers to opportunities and benefits for people of color and other underserved groups.

• If additional agency actions are required to bolster resilience to climate change.

• If agency programs, policies and activities address the disproportionately high and adverse climate-related impacts on disadvantaged communities.

• Comments can be submitted through June 21 via the Federal eRulemaking Portal, Docket ID: FEMA-2021-0011.

• Working with state partners, FEMA continues to provide federal support to community vaccination centers. There are currently 1,485 sites throughout the country. In addition, support continues to 21 federal community vaccination center pilot program sites, including supplemental COVID-19 vaccine allocation. Seventeen pilot sites continue to receive federal personnel support. These sites have administered more than 4.9 million vaccinations.

• Additionally, 14 mobile vaccination units are deployed to support states and the Indian Health Service. The mobile units have delivered more than 31,100 vaccinations.

• Mobile vaccination units are deployed to Arizona, Connecticut, Idaho, Maine, Maryland, Nevada, New Mexico, Oregon, and South Dakota. One unit is supporting the Indian Health Services mission to vaccinate tribal communities across the Great Plains. 

• Individuals looking to get COVID-19 vaccine can visit vaccines.gov to find a location close to them and make an appointment. Individuals can also text their zip code to 438829 and get a text with the closest COVID-19 vaccine location.

• FEMA is processing applications for funeral assistance to provide financial assistance for COVID-19 related expenses.

• As of May 10, FEMA received more than 172,500 funeral assistance applications and approved more than $15.5 million.

Please note: further information and data on Vaccine Distribution is available in the attachment.
Contact Us
If you have any questions, please contact Office of External Affairs:

• Congressional Affairs at (202) 646-4500 or at FEMA-Congressional-Affairs@fema.dhs.gov

• Intergovernmental Affairs at (202) 646-3444 or at FEMA-IGA@fema.dhs.gov

• Tribal Affairs at (202) 646-3444 or at FEMA-Tribal@fema.dhs.gov

• Private Sector Engagement at (202) 646-3444 or at nbeoc@max.gov

What Would Real Environmental Health & Justice Look Like? Tuesday, May 11, 2021 - 1:00-2:00 p.m. ET

What Would Real Environmental Health & Justice Look Like? Tomorrow, Tuesday, May 11, 2021 - 1:00-2:00 p.m. ET All journalists welcome!   Join this all-star panel for a snapshot of the state of environmental health and justice right now, ahead of the new White House Environmental Justice Advisory Council meeting later this week. Panelists will discuss what's happening in local communities and at the national level, and will offer story ideas for the coming year on both the problems and solutions to the challenges of protecting environmental health and equity. Following Q&A with the speakers, SEJ will take your questions about the Fund for Environmental Journalism story grants on this topic.    Moderator: ·    Perla Trevizo, Reporter, ProPublica/Texas Tribune Investigative Unit.   Speakers: ·    Bidtah Becker, Attorney, Navajo Tribal Utility Authority, and Vice-Chair, New Mexico Interstate Stream Commission. ·    Heather McTeer Toney, Climate Justice Liaison, Environmental Defense Fund; Senior Advisor, Moms Clean Air Force; and former Regional Administrator, U.S. Environmental Protection Agency Southeast Region. ·    Matthew Tejada, Director, Office of Environmental Justice, U.S. Environmental Protection Agency.   Register here

How to Do Business With FEMA. Wednesday, May 26th, 2021 10:00 a.m. - 12:00 p.m. Eastern Standard Time (EST)

  “How to Do Business With FEMA”

The event’s overview will cover the following topics:   

• How to do business with FEMA
• FEMA’s Small Business Program
• Category Management
• FEMA Contracting
• FEMA Private Sector Liaisons
• Questions will be allowed within chat room

Again, interested parties can attend the webinar being offered on the following date and time: 
 
Wednesday, May 26th, 2021
10:00 a.m. - 12:00 p.m. Eastern Standard Time (EST)

Nonviolent Action and Minority Inclusion Tuesday, May 11 | 10:00am - 11:00am EDT

 

To view this email as a web page, click here.

Nonviolent Action and Minority Inclusion Tuesday, May 11 | 10:00am - 11:00am EDT To better understand the intersection of nonviolent action and peace processes, join USIP for the final event in our series on people power, peace and democracy. The event series highlights multiple groundbreaking research projects and features insights from activists, international practitioners and policymakers that provide viewers with actionable takeaways. RSVP Now View on Facebook