IMA April 2015.Indd
Total Page:16
File Type:pdf, Size:1020Kb
VOLUME 1 · ISSUE 3 THE CYBERSECURITY EMERGENCY 20 SPOTTING INCIDENTS OF HUMAN TRAFFICKING — AND RESPONDING 16 THE FIRST RESPONDER SUICIDE & PTSD CRISIS 26 PROTECTING THE GRID AGAINST EMPS 32 VOLUME 1 | ISSUE 3 1 TABLE OF CONTENTS COVER STORY 20 | The Cybersecurity Emergency VOLUME 1 · ISSUE 3 Official Magazine of Working to Safeguard Chicago̕s Critical Infrastructure Editorial Office: 4701 Midlothian Turnpike, Ste. 4 Crestwood, IL 60445 Group Information Security Leader Andrew Munger advises on Phone: 708-293-1430 | Fax: 708-293-1432 the current state of cybersecurity, how it’s evolving, and what you E-mail: [email protected] need to know to keep up. www.imamagazine.org IMA 16 | Spotting Incidents of Human The(ISSN Chicago 1553-5797) InfraGard Members Alliance Traffi cking — and Responding is published four times per year for Fanning Communications by Special contributor Ingri Hartwig presents a report on 4701 Midlothian Turnpike, Ste. 4 the tragedy of human trafficking, exploring how to spot it Crestwood, IL 60445 and how to respond appropriately when you do. Publisherwww.fanningcommunications.comEditor/ Graphic Designer 26 | The First Responder Suicide & ̕ J��� J. F������ PTSD Crisis [email protected] D� A��� C���� [email protected] Writer K��� J. P������� Susan DeGrane interviews Academic Sector Chief Dr. Editor/[email protected] M��� S����� Nancy Zarse on the subject of first-responder PTSD Graphic Designer [email protected] and suicide, and takes on on-the-ground look at dealing Programmer with the crisis with Fr. Dan Brandt of the Chicago Police Chaplains Ministry. M����� M. B������ [email protected] J����� N������� 32 | Protecting the Grid Against Accounting/[email protected] EMPs Subscription rate is $49.99 per year inJ�� the UnitedK��� States and Canada; $110.00 per year in all [email protected] foreign countries. POSTMASTER: Send address changes to 4701 Midlothian Tpk., Ste. 4, Crestwood, IL 60445. All statements, including product claims, are those of the person or With the emerging threat of electromagnetic pulse (EMP) organization making the statement or claim. The publisher does not technology, it’s time for those who manufacture and adopt any such statements as its own, and any such statement or claim does not necessarily reflect the opinion of the publisher. protect America’s critical infrastructure to re-assess and © 2014 Fanning Communications, Inc. re-evaluate the priority of its defense. 2 INFRAGARD CHICAGO MEMBERS ALLIANCE VOLUME 1 | ISSUE 3 3 TABLE OF CONTENTS 7 | President’s Message 9 | SAC’s Message BOARD OF DIRECTORS 10 | Intelligence Briefing 12 | Obama Signs Order Creating President New Cyber Sanctions Program Paul Sand 14 | Internet Outages Reveals Gaps AVP, Independent Security Officer, Federal Home Loan Bank of Chicago In U.S. Broadband Infrastructure Vice President Erik Hart 15 | Member Notes Director, Information Security Solutions, Leo Burnett and Arc Worldwide 25 | Most Wanted Programming Director 29 |Inmate Escapes From Eastern Jo Ann Ugolini Security and Investigations, Hillard Heintze Illinois Jail Treasurer/Membership Director Thomas Elward 30 | Shaping the Next Generation Infrastructure Protection, Exelon 35 | New Technology Secretary/ Communications Director John Fanning 36 | InfraGard Member Focus: President & CEO, Fanning Communications, Inc. Lizabeth Lehrkamp At-Large Director Bruce M. Bina Vice President of Product Development & She was honored with the 2014 Design, Adaptive Rescue Concepts, ARC LLC InfraGard Coordinator of the Year At-Large Director award, but there’s much more to Amy Bogac the Lizabeth Lehrkamp story. Director, IT Security Operations, Walgreens At-Large Director Erick Nickerson 39 | Industry Event Calendar Partner and Marketing Specialist, CCG Solutions, LLC. At-Large Director Jill Czerwinski Senior Manager, Crowe Horwath At-Large Director Edward Marchewka Information Security Manager, Chicago Public Schools IMA/FBI Liaison Kathy Hug Special Agent, Federal Bureau of Investigation 4 INFRAGARD CHICAGO MEMBERS ALLIANCE VOLUME 1 | ISSUE 3 5 PRESIDENT’S MESSAGE Greetings, Members: Cybersecurity is the dominating topic for many enterprises today and thus is a timely and important topic for this magazine to consider. The number of threat actors that desire to do us harm grows each and every day, and those actors are becoming increasingly better funded and more skilled. Nation-state-driven actors seek to gain economic and military advantage through intellectual property theft, competitive intelligence gathering, and preparedness to successfully attack critical infrastructure. Criminal actors seek to divert funds, defraud enterprises and consumers, and steal personal financial information. Such strong motivations coupled with available funding have developed a strong market for hacking tools that have Paul Sand, President lowered the bar for the skill level required to conduct attacks against us. More InfraGard Chicago attackers with better tools, rich resources and strong motivations make this a Members Alliance critical concern. Enterprises are faced with increased spending to control the risk that the threat actors present to the livelihood of their businesses. This spending is growing without an end in sight. It challenges the economic viability of the enterprise and slows the cycle of innovation by making fewer resources available to build better and more efficient new products and services. New approaches to the management of cyberrisk must emerge. The number of skilled, well-qualified cybersecurity professionals still lags behind the demand for the services they provide to U.S. companies. As a result, many information security departments are forced to operate with inadequate resources making them more vulnerable to attack today, and reducing the time available to innovate and prepare for the future. I don't raise these topics to paint a bleak picture, but because I am optimistic that by focusing our attention on the right issues we can devise strong, economic cyberdefense capabilities. So, please read this issue, understand the significant challenges we face, and put your creativity to work to develop the solutions we need. Thank you for your attention. Sincerely, Paul Sand Paul Sand, President InfraGard Chicago Members Alliance 6 INFRAGARD CHICAGO MEMBERS ALLIANCE VOLUME 1 | ISSUE 3 7 SAC’S MESSAGE Greetings, With this second edition of IMA magazine, InfraGard continues its mission of bringing insight and experience-tested knowledge to professionals engaged in the security of our nation’s critical infrastructure. This quarter’s issue focuses on several topics, but none more so than the ever-more-complex task of cybersecurity. As our society grows increasingly dependent on the technologies that surround us every day, the methods of threat actors working to exploit vulnerabilities for profit or strategic advantage grow increasingly sophisticated. It isn’t enough to keep up with the mentality of the hackers here and abroad who would harm our infrastructure and economy — we Robert J. Holley, have to stay ahead of them. We do this by being proactive in our approach Special Agent in Charge to cybercrime and cyberterrorism; by rooting out our own vulnerabilities FBI Chicago Division before the enemy has the opportunity to exploit them. As Andrew Munger’s cover story points out, stopping crippling online breaches isn’t merely a matter of knowledge, but of a deliberate mindset bent on their prevention. Of course, cybersecurity is far from the only concern facing security professionals today. Accordingly, you will find a number of other useful and informative features in this issue, from the alarming scenarios arising from possible electromagnetic pulse (EMP) events and attacks to managing the toll that first responders’ jobs can have on their mental and emotional wellbeing. I encourage you, as a security professional, regardless of your sector of concern, to take a serious look at the content of this month’s IMA, and to share it with others in your profession. This is what IMA magazine is for: to share the information and best practices that help first responders and other security professionals to protect our critical infrastructure. RobertSincerely, J. Holley Robert J. Holley Special Agent in Charge FBI Chicago Division 8 INFRAGARD CHICAGO MEMBERS ALLIANCE VOLUME 1 | ISSUE 3 9 INTELLIGENCE BRIEFING Uber data breach impacts 50,000 current and former drivers. violated the False Claims Act from September 2008 to second reactor and the power grid remain stable while the after carbon monoxide levels were reduced to a safe level March 2012 by originating and underwriting mortgage reactor idles until it is place back into service. Feb. 14. Uber determined in September 2014 that their internal loans insured by the Federal Housing Administration Man arrested after setting five cars ablaze (FHA) that did not meet underwriting requirements. Former EMT arrested for HEMSI station fire. database was breached in May without authorization by outside Ventura County Government Center. an unidentified third-party who accessed the information MetLife was allegedly aware of the accused violations of 50,000 former and current drivers, which included through its internal quality control measures and A former Huntsville Emergency Medical Services, Inc., names and driver’s license numbers. Uber changed access reportedly downgraded its sub-standard FHA loans to Police took a man into custody after he allegedly set