From the U.S. Government Accountability Office, www.gao.gov

Transcript for: Critical Infrastructure and the Risk of Ransomware
 
Description: The nation's 16 critical infrastructure sectors provide
essential services such as electricity, healthcare, and gas and oil
distribution. However, cyber threats to critical infrastructure, such as
ransomware, represent a significant national security challenge.  

GAO is making 11 recommendations to the Departments of Energy, Health
and Human Services, Homeland Security, and Transportation to determine
the extent selected sectors are adopting cybersecurity practices, assess
ransomware risks, and measure the effectiveness of support addressing
ransomware.  

Related GAO Works: GAO-24-106221, Critical Infrastructure Protection:
Agencies Need to Enhance Oversight of Ransomware Practices and Assess
Federal Support

Released: January 2024

[Text On-Screen]

Ransomware: Software that makes data and systems unusable unless ransom
is paid-- can interrupt critical systems without notice.  

Such Attacks on government operations and critical infrastructure can
lead to significant financial losses, healthcare disruptions, and more. 

Most federal agencies that lead and manage risk in critical sectors have
assessed or plan to assess the risks of ransomware. 

But agencies haven't fully assessed the use of leading cybersecurity
practices or whether federal support has addressed risks effectively in
each of the sectors. 

Our recommendations address these issues. 
 
[ End ]


For more info, check out our report GAO-24-106221 at: GAO.gov