Critical Information Infrastructure (CII) Protection: Challenges & Opportunities
summary
National CII body reports about 100 notified entities across seven sectors and says threat feeds it shares generate a 25–30% IOC hit rate versus 1–2% from private feeds, flags APT persistence, ransomware and supply chain attacks, and cites breaches that exposed large citizen datasets and firms like Sun Pharma and port operators. Gaps include only ~150 empaneled auditors, massive supplier webs (example 40,000+ suppliers), and point in time audits. Planned fixes: crowd-sourced hacker registry with paid rewards and API-driven continuous compliance tied to standardized telemetry.
AI-written summary · about
chapters (11)
- 0:00Introduction and session overview
- 3:41Role of NCIIPC in CII protection
- 8:20Current threat landscape for CII
- 11:05Expectations from NCIIPC by CII entities
- 24:43Gaps in CII security and audit challenges
- 35:44Emerging threats and AI impact
- 40:38Collaboration with hacker community
- 47:51Rewards and bug bounty programs
- 53:34Responsible disclosure and trust issues
- 58:13Future roadmap and collaboration framework
- 1:02:31Q&A and closing remarks
related talks
52mData-Driven Cyber Policy: From Dream to Reality
01h 12mSecuring cyber critical infrastructure.
50mBuilding Cyber Resilience - Considerations for CISOs
32mIntelligence Sharing for Critical Infrastructure Resiliency
40mHow CISA Is Charting a Path Toward Defensible Infrastructure
02h 11mCISO Track Panel
43mCyber Threat Intelligence (Experts recommendations to enhance your security posture)
37mMore Than a CSIRT: Lessons Learned from Supporting a National Response to COVID-19