USFA Critical Infrastructure Protection Center
Official Press Release
Homeland Defense E-Alerts
|
|
|
|
|
|
|
|
|
|
|
|
|
|
"Change" is always present in those organizations seeking to excel.
When implemented after an outstanding needs assessment followed by open-minded deliberation and effective decision-making, "organizational change" is normally desirable and advantageous. However, this "change" can also inadvertently create weaknesses that leave departments vulnerable to physical or cyber attacks by their adversaries.
A vulnerability is a weakness in a critical infrastructure that renders the infrastructure susceptible to degradation or destruction from deliberate attacks by human adversaries, natural disasters, or HazMat accidents.
"One of the most formidable weapons in the terrorist arsenal is our own vulnerabilities," said Senator Bill Frist (R-TN).
It is inevitable that most federal, state, and local agencies will execute "organizational change" in the future. (For example, a large number of activities will eventually experience major changes with the development of the Department of Homeland Security.)
While busy applying and adjusting to the required changes, it is too easy to be distracted from CIP and information security best practices. Hence, the plans and operations of the changing organizations become especially vulnerable to exploitation, disruption, or destruction.
In view of this reality, the CIPIC encourages senior leaders to consider their vulnerabilities during any "organizational changes."
If necessary, eliminate the "terrorist’s tool" by dedicating time and personnel to ensure the protection of critical infrastructures and information. Do not permit an "organizational change" to become a vulnerability in and of itself.
