Ohio enhances cyber reserve to assess and protect critical infrastructure from attacks

Ohio is ramping up its defenses against cyber threats to critical infrastructure, including electrical and water systems, through the efforts of its volunteer cyber reserve. During a recent meeting of the Ohio House Public Safety Committee, officials highlighted the proactive measures being taken to safeguard the state's utilities from potential cyberattacks, particularly those originating from foreign adversaries like China.

Jerome Abrams, a representative involved in the initiative, emphasized the impressive work being done by the cyber reserve, which is composed entirely of volunteers. This group is not only enhancing the state's existing cyber capabilities but also expanding them by converting the Mansfield unit into a cyber wing, which will train hundreds of new cyber professionals.

The cyber reserve conducts thorough assessments of critical infrastructure to identify vulnerabilities before any attacks occur. Their approach varies based on the sophistication of the organization they are assisting. For less advanced entities, they perform audit surveys and provide detailed reports. More sophisticated organizations receive hands-on support to identify and rectify vulnerabilities, while the most advanced entities undergo simulated attacks to uncover hidden weaknesses.

In collaboration with Governor's cyber adviser Kirk Herath and the Environmental Protection Agency, Ohio plans to prioritize assessments of its water infrastructure over the next two years. These efforts aim to help organizations meet the National Institute of Standards and Technology (NIST) standards for cybersecurity.

In addition to preventive measures, the cyber reserve is also prepared for incident response in the event of an attack. With members hailing from diverse sectors, including banking and technology, the reserve can assemble specialized teams tailored to address specific threats effectively.

As Ohio continues to bolster its cyber defenses, the commitment to protecting critical infrastructure remains a top priority, ensuring the safety and security of its residents against evolving cyber threats.