CISA and Partners Release Guidance for Civil Society Organizations on Mitigating Cyber Threats with Limited Resources

[Gbééré Achille Eye]

Thank you Johan for sharing this! And thank Kathy and Ken for your inputs.

The intriguing part is that the above listed entities and individuals
sometimes tend to minimize how exposed they are to cyber threats, because
they tell themselves they are not-for-profit organizations or individuals.
I will read the document - I have just downloaded it and it is 19 pages
long.

Regards,

Gbeere Achille Eye




On Wed, May 15, 2024 at 2:25 PM Ken Herman <ken at kherman.com> wrote:

> I also thank Julf for sharing this. I had not seen it before, but as a I
> work in the cybersecurity field the message resonates with me.
>
>
>
> Kathy, as you point out, mitigating risk begins with establishing policies
> that protect, rather than expose.
>
>
>
> Maybe we can also think about going beyond, to advocate for monitoring
> adherence to policy, followed by supporting our community to become aware
> of the policies and ways to query vendor (registrars?) regarding these
> policies, so covering all phases (establishment, adherence and awareness)
> of the policy lifecycle.
>
>
>
> Ken
>
>
>
> *From:* NCSG-Discuss <NCSG-DISCUSS at LISTSERV.SYR.EDU> *On Behalf Of *Kathy
> Kleiman
> *Sent:* Wednesday, May 15, 2024 8:40 AM
> *To:* NCSG-DISCUSS at LISTSERV.SYR.EDU
> *Subject:* Re: CISA and Partners Release Guidance for Civil Society
> Organizations on Mitigating Cyber Threats with Limited Resources
>
>
>
> Tx Julf.  Powerful what is being pointed out:
>
> *"Civil society, comprised of organizations and individuals—such as
> nonprofit, advocacy, cultural, faith-based, academic, think tanks,
> journalist, dissident, and diaspora organizations, communities involved in
> defending human rights and advancing democracy—are considered high-risk
> communities. Often these organizations and their employees are targeted by
> state-sponsored threat actors who seek to undermine democratic values and
> interests." *
>
> In RDDS/WHOIS, Proxy/Privacy, and intellectual property/UDRP/URS
> discussions, we have shared the same idea over many years of policy work.
> Our communities and groups need to be protected, not exposed, by ICANN
> policies.
>
> Best, Kathy
>
> On 5/15/2024 8:26 AM, Johan Helsingius wrote:
>
> This might be of interest to some of our members.
>
>     Julf
>
>
> https://www.cisa.gov/news-events/alerts/2024/05/14/cisa-and-partners-release-guidance-civil-society-organizations-mitigating-cyber-threats-limited
>
> --
>
> Kathy Kleiman
>
> Past President, Domain Name Rights Coalition
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.ncsg.is/pipermail/ncsg-discuss/attachments/20240519/c16cede1/attachment.htm>