Hi All,
Cisa just published Personal Security Considerations Action Guide: Critical Infrastructure Workers.
In today's current threat environment, remaining vigilant and taking responsibility for your personal security is crucial for
all critical infrastructure workers-both on and off the job. Critical infrastructure workers perform a vast array of services
that operate, run and maintain key systems and assets necessary for modern American life. Being mindful of any risks or
threats associated with your line of work and following all safety procedures will help protect you, those close to you and the
infrastructure you serve. Personal safety can be broken into three main parts-Physical Security, Situational Awareness and
Online Security. This non-exhaustive action guide can help you assess your security posture and provides options to consider to
mitigate threats.
ASSESSING AN APPROPRIATE LEVEL OF PROTECTION FOR CRITICAL INFRASTRUCTURE WORKERS
This guide provides a broad overview of how to stay safe at home, at work, in public and online. It is up to you to decide what
measures are most appropriate for your lifestyle, security vulnerabilities and the situations you might encounter.
When assessing your security needs, consider the following:
• Your occupation and professional role. Does your job or career make you an attractive target?
• Specific threats. Is there credible evidence that suggests a risk to you?
• Your personal history. Have you been targeted or threatened in the past?
• Your personal visual identifiers. Do you display any group affiliations that make you an attractive target?
Today, critical infrastructure workers potentially face a wide range of threats-from common criminal activity to violent
extremists plots. If you answered yes to any or all of the above questions, this could indicate that you and potentially other
critical infrastructure employees you work with are at risk and you should evaluate your security needs. As you assess your
personal security, it is important to take a balanced approach and remember to account for both your home and work life-be
vigilant in your personal security practices, habits and continually assess your surroundings. Measures you take should be
appropriate for perceived threats. Excessive security actions may cause unnecessary stress and inconvenience; however,
insufficient efforts can put you at risk.
The ability to recognize vulnerable situations is vital in order to avoid them or be prepared when they occur. Vulnerability is a
physical feature or operational attribute that renders an entity, asset, system, network or geographic area open to exploitation
or susceptible to a given hazard.2 Attackers can be creative when they target individuals. An attacker's goal may be to cause
embarrassment, inconvenience, distress or they may intend to cause physical injury, disrupt wellbeing or threaten human lives.
------------------------------
Michael Roza CPA, CISA, CIA, CC, MBA, Exec MBA, CSA Research Fe
------------------------------