<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:"Franklin Gothic Book";
panose-1:2 11 5 3 2 1 2 2 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
p.xmsonormal, li.xmsonormal, div.xmsonormal
{mso-style-name:x_msonormal;
margin:0in;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
p.xmsobodytext, li.xmsobodytext, div.xmsobodytext
{mso-style-name:x_msobodytext;
margin:0in;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
span.xcontentpasted0
{mso-style-name:x_contentpasted0;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="blue" vlink="purple" style="word-wrap:break-word">
<div class="WordSection1">
<p class="MsoNormal">FYSA<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="xmsobodytext" style="margin-right:31.7pt;background:white"><span style="font-family:"Franklin Gothic Book",sans-serif;color:black">As the Nation’s cyber defense agency, the Cybersecurity and Infrastructure Security Agency (CISA) and U.S. Coast Guard
Cyber Command (CGCYBER) published an </span><span style="font-family:"Franklin Gothic Book",sans-serif;color:#4472C4"><a href="https://www.cisa.gov/sites/default/files/2023-07/FY22-RVA-Analysis%20-%20Final_508c.pdf">analysis report</a></span><span style="font-family:"Franklin Gothic Book",sans-serif;color:black"> on
their findings during 121 Risk and Vulnerability Assessments (RVAs) collectively conducted across multiple critical infrastructure sectors in 2022. This report analyzes a sample attack path cyber threat actors could leverage to compromise an organization using
weaknesses identified in the FY22 RVAs. <o:p></o:p></span></p>
<p class="xmsobodytext" style="margin-right:31.7pt;background:white"><span style="font-family:"Franklin Gothic Book",sans-serif;color:black">In the <a href="https://www.cisa.gov/sites/default/files/2023-07/FY22-RVA-Analysis%20-%20Final_508c.pdf" title="https://www.cisa.gov/sites/default/files/2023-07/FY22-RVA-Analysis%20-%20Final_508c.pdf">FY22
RVA Analysis Report</a>, valid accounts are identified as the most prominent, successful technique used across multiple adversarial tactics during the assessments, to include initial access and lateral movement. To guard against an actual attempt by a malicious
actor to successfully use valid accounts technique, critical infrastructure entities must implement strong password policies, such as phishing-resistant multifactor authentication (MFA), and monitor access logs and network communication logs to detect abnormal
access. <o:p></o:p></span></p>
<p class="xmsobodytext" style="mso-margin-top-alt:12.55pt;margin-right:31.7pt;margin-bottom:12.0pt;margin-left:0in;background:white">
<span style="font-family:"Franklin Gothic Book",sans-serif;color:black">The other adversarial techniques identified during RVAs in 2022 and previous years continue to persist, such as susceptibility to successful spearphishing, PowerShell and remote desktop
protocol (RDP) exploitation, and process injection (i.e., injecting malicious code into a legitimate process), keylogging. We are seeing that more organizations are reducing their risk and mitigate vulnerabilities identified in our annual analysis reports,
however, we recognize there is more we can do to help even more organizations protect their networks and systems, to include target-rich, resource-poor entities. <o:p></o:p></span></p>
<p class="xmsonormal" style="background:white"><span class="xcontentpasted0"><span style="font-family:"Franklin Gothic Book",sans-serif;color:black">The goal of RVA analysis report and associated </span></span><span class="xcontentpasted0"><span style="font-family:"Franklin Gothic Book",sans-serif;color:#4472C4"><a href="https://www.cisa.gov/sites/default/files/2023-07/FY22%20RVA%20Infographic_508c.pdf">infographic</a></span></span><span class="xcontentpasted0"><span style="font-family:"Franklin Gothic Book",sans-serif;color:black"> is
to help all organizations develop effective strategies that positively impact and improve their security posture. </span><o:p></o:p></span></p>
<p class="xmsonormal" style="background:white"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><b><span style="color:#1F497D">Theresa A. Masse<o:p></o:p></span></b></p>
<p class="MsoNormal"><span style="font-size:10.0pt;color:#1F497D">Cybersecurity State Coordinator/Advisor, Region 10 (Oregon)
<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;color:#1F497D">Cybersecurity and Infrastructure Security Agency<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;color:#1F497D">Department of Homeland Security<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;color:#1F497D">Phone: (503) 930-5671
<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;color:#1F497D">Email:</span><span style="font-size:10.0pt;color:#777777">
</span><a href="mailto:theresa.masse@cisa.dhs.gov"><span style="font-size:10.0pt;color:#0563C1">theresa.masse@cisa.dhs.gov</span></a><u><span style="font-size:10.0pt;color:#0760C1"><o:p></o:p></span></u></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><img border="0" width="97" height="97" style="width:1.0138in;height:1.0138in" id="Picture_x0020_2" src="cid:image001.png@01D9BF8F.6972CCA0"><span style="color:#1F497D"><o:p></o:p></span></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="xmsonormal" style="background:white"><o:p> </o:p></p>
</div>
</body>
</html>