JOINT BASE LEWIS-McCHORD \u2014 As the number of cyber attacks on US government and industry has increased in recent years, the government has slowly come to realize that while its highest-end systems may be hardened, critical infrastructure does not always have the same protection.
But last year the unit turned it focus more local, running a vulnerability assessment study for the Snohomish County Public Utility District in Washington state.\u00a0The study helped the utility identify potential vulnerabilities and act to harden its digital defenses.<\/p>\n\n\n\n
The unit has 101 people, of which 30 are set up to work on industrial control systems. That kind of local infrastructure support from a Guard unit is unique to the 262nd, according to Lt. Col. Kenneth Borchers, deputy commander of the 252nd.<\/p>\n\n\n\n
“It\u2019s a very precious asset, it\u2019s a very small asset,” Borchers told reporters about his industrial control team during a March 4 visit to the base. He pointed to the December\u00a02015 shutdown of the power grid in large chunks of Ukraine as proof that attacks on infrastructure are being coordinated and weaponized in a way they\u00a0hadn\u2019t been before.<\/p>\n\n\n\n
The Snohomish County program provides a potential blueprint for how the Guard can help local industry and government increase their cyber protections, said Maj. Gen. Bret Daugherty, the adjutant general for Washington.<\/p>\n\n\n\n
He said the team was able to get into the controls for Snohomish County and identify weak points that would have affected the power for the county, and in the process found ways to ensure that if a cyber event did occur, the utility would be able to restore power more quickly.<\/p>\n\n\n\n
“We\u2019re very interested in doing some more of that kind of work. \u2026 We anticipate doing more of these missions in the future,” Daugherty said, noting that lessons learned from the Snohomish County assessment will drive how they do industrial control programs in the future.<\/p>\n\n\n\n\n\n
The problem for now is that the 262nd is a bit of an island of knowledge, with limited bandwidth. And while it would hypothetically be possible for a governor from another state to tap them in a crisis under the emergency compact between state Guard bureaus, the ideal solution is to spread this expertise to other units, Borchers said.<\/p>\n\n\n\n
“The right answer is, we need to be able to export this capability and we need to be able to train other people to do this in other Guard units and other cyber units across the nation,” he added. “That\u2019s what we\u2019re trying to move toward, is training others to do the same thing.”<\/p>\n\n\n\n
The unit features a number of employees from major tech firms, including Google, Cisco and Microsoft. Getting tech professionals to take part in military service, in whatever capacity is possible, has become a signature issue for Secretary of Defense Ash Carter, and he praised the unit during his visit to the base.<\/p>\n\n\n\n
“They’ll go somewhere, solve that problem, make a critical infrastructure in a particular place or a particular sector of the economy secure, and they can, they can go work elsewhere,” Carter told reporters during the trip. “I want to do more, establish more units like this.\u00a0This is a pathfinding way of doing things.\u00a0Brings in the high-tech sector in a very direct way to the mission of protecting the country.”<\/p>\n\n\n\n
And that highlights another benefit of having a Guard unit do this kind of threat assessment instead of private industry. One of the guardsmen involved in the Snohomish event owns a cyber security firm and, according to Borchers, said he would have charged the county $150,000 for the assessment that occurred. Instead, the 262nd assessment cost the county only $20,000.<\/p>\n","protected":false},"excerpt":{"rendered":"
The national guard could expand its industrial protection expertise to other states.<\/p>\n","protected":false},"author":7,"featured_media":80720,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"_yoast_wpseo_meta-robots-noindex":"","_yoast_wpseo_meta-robots-nofollow":"","_yoast_wpseo_canonical":"","_acf":"","_yoast_wpseo_primary_category":10,"_jetpack_feature_clip_id":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","_smg_distribution_targets":{"10":{"categories":["home","pentagon"],"primary_category":"home"}}},"categories":[10],"tags":[],"coauthors":[3222],"class_list":["post-28016","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cyber"],"acf":{"subheadline":"","legacy_arc_id":"A2JVDKGDJFC3BPURUTK54RLK3A","arc_canonical_url":"\/2016\/04\/01\/guard-could-expand-industrial-protection-units\/","remove_feature_photo":false,"is_sponsored":false,"subtype":"","redirect_url":"","disable_inline_ads":false,"native_logo_pretext":"Presented By:"},"yoast_head":"\n