Week10_capstoneC

Print Progress Report: Large-Scale Cyber Vulnerabilities and the Implications for Emergency Disaster Management

Created by Michelle ferguson on Apr 14, 2024 1:25 PM

Progress Report: Large-Scale Cyber Vulnerabilities and the Implications for Emergency Disaster Management

EMHS699 K001 Winter 2024 RO

EMHS699 K001 Winter 2024 Graded Discussions Week 10: Progress Report

Good Day Classmates,

My topic, Large-Scale Cyber Vulnerabilities and the Implications for Emergency Disaster Management, is

progressing along nicely. I am just about finished with the literature review and working on the analysis

portions now. I am moving in early May, trying to purchase a house, and all the things that come with

closing out one new job and starting another. So I find myself distracted at times but still motivated to

finish strong.

There have been a lot of successes associated with my research. In previous years, when I researched

cyber related topics, it was challenging to find substantial evidence and data. While everyone

acknowledged the issue of a potential cyber-attack, the field was still developing. In my opinion, the

cyber field was missing required legislation that would adequately minimize the potential threats.

Especially as it relates to critical infrastructure since it is mostly controlled by the private sector.

Fortunately, over the past 2-3 years, more policies have been developed to bridge government concerns

with private sector responsibilities.

An additional challenge this has posed in my research is that it appears states are only just beginning to

prioritize the establishment of a suitable cyber response posture. I selected three states for my data

comparison: New York, Illinois, and California. Data is indicating that just over the past 2-3 years, these

states have begun prioritizing allocation of resources and funding to mitigate threats. This has been

great as a way to show emergency managers are checking the right boxes, however I think this will cause

a false sense of security or progression. I selected these states because according to census data they

have the largest U.S. populations. However, it might have been more prudent to select one smaller state

to highlight potential disparities. In other words, larger states will more likely obtain resources because

they are experiencing increased cyber-attacks and can better articulate requirements with larger staffs.

However, if a better comparison was sought, possible gaps might reveal that smaller states should be just

as invested. So, more to follow on that.

Another challenge is that I am getting so much data on the new legislation and policies, that I have not

adequately made the connections to how this shapes emergency manager’s roles and responsibilities or

their internal cyber execution. I am going to have to bound my research to ensure I relate everything

back to the main topic and objectives within my original outline.

Good luck everyone as we move into the final stretch!

Sincerely,

Michelle

Jeffrey Williams Posted Apr 15, 2024 10:35 PM

Ms. Ferguson,

This sounds like an interesting topic. Although I must admit I am so poorly versed in cyber vulnerabilities that I do not think I would be able to offer you any substantive information re your paper.

I did have a question, I saw that you focused your research on CA, IL, and NY. Is the legislation you are researching specify the governmental level of applicable cyber response? I ask because I work in municipal public safety and am wondering if the applicable legislation that is being discussed at state levels will also be mandated for lower levels of government within the state. I understand just how expensive this type of infrastructure can be especially for a municipality with other financial issues. However, cities and communities must find a method to balance the need for improve cyber resiliency with the reality of monetary issues. I could easily see how the large states listed here, should they implement a state mandate for cyber infrastructure upon lower levels of government, could literally price cities out existence.

Again, I am way out of my depth of knowledge. So if none of what I said made any sense I understand haha.

Good luck!

Jeff

Print Post: Week 10: Progress Report

EMHS699 K001 Winter 2024 RO

Jeffrey Williams Posted Apr 15, 2024 9:56 PM

Mr. Awono,

Great topic. I did a major undergrad report on the use of UAS/UAV application for domestic municipal public safety. Through that I was fortunate enough to be selected as a SME for CA POST to help them craft a state-wide training video for UAS/UAV use and enforcement. It is an extremely interesting topic since it is still a “new” technology and application for public safety.

As their use in your paper seems to apply more specifically to disaster response I would recommend reaching out to your local public safety agencies as the tech is becoming prolific enough to be used by most large cities and larger rural agencies. Additionally, county EMS and disaster coordinators would probably have a wealth of applicability information for them.

I remember two really interesting topics of UAS/UAV uses that we discussed while building a training program. One was the use of UAS/UAV as a wildland firefighting tool to remove field personnel from hazardous areas. CalFire was experimenting with the use of UAS/UAV deploying incendiary devices to start controlled backfires. Additionally, many county fire agencies were starting to deploy UAS/UAV as initial search tools both in buildings and in wildland areas in order to improve firefighter safety.

The other interesting UAS/UAV topic that was covered focused on a report from the West Point Combatting Terrorism Center that discussed how, at the time (around 2017), combat units were starting to see over the counter cheap drones used as recon tools and simple explosive delivery devices. This was around the time when Geo-Fencing tech was starting to publicly take off in the aerospace industry so they were starting to create counter-terrorism geo-fencing programs around large-scale sporting events and other venues. Along that same line DHS was experimenting with drone deployment as part of CBRNE investigation and counter-terrorism efforts by flying UAS/UAV at event venues that could detect trace elements of CBRNE.

Anyways, I could go on for days about UAS/UAVs and their use in public safety. So ill stop. Haha.

Good luck!

Jeff

Print Progress Report: Large-Scale Cyber Vulnerabilities and the Implications for Emergency Disaster Management

Created by Michelle ferguson on Apr 14, 2024 1:25 PM

Progress Report: Large-Scale Cyber Vulnerabilities and the Implications for Emergency Disaster Management

EMHS699 K001 Winter 2024 RO

EMHS699 K001 Winter 2024 Graded Discussions Week 10: Progress Report

Good Day Classmates,

My topic, Large-Scale Cyber Vulnerabilities and the Implications for Emergency Disaster Management, is

progressing along nicely. I am just about finished with the literature review and working on the analysis

portions now. I am moving in early May, trying to purchase a house, and all the things that come with

closing out one new job and starting another. So I find myself distracted at times but still motivated to

finish strong.

There have been a lot of successes associated with my research. In previous years, when I researched

cyber related topics, it was challenging to find substantial evidence and data. While everyone

acknowledged the issue of a potential cyber-attack, the field was still developing. In my opinion, the

cyber field was missing required legislation that would adequately minimize the potential threats.

Especially as it relates to critical infrastructure since it is mostly controlled by the private sector.

Fortunately, over the past 2-3 years, more policies have been developed to bridge government concerns

with private sector responsibilities.

An additional challenge this has posed in my research is that it appears states are only just beginning to

prioritize the establishment of a suitable cyber response posture. I selected three states for my data

comparison: New York, Illinois, and California. Data is indicating that just over the past 2-3 years, these

states have begun prioritizing allocation of resources and funding to mitigate threats. This has been

great as a way to show emergency managers are checking the right boxes, however I think this will cause

a false sense of security or progression. I selected these states because according to census data they

have the largest U.S. populations. However, it might have been more prudent to select one smaller state

to highlight potential disparities. In other words, larger states will more likely obtain resources because

they are experiencing increased cyber-attacks and can better articulate requirements with larger staffs.

However, if a better comparison was sought, possible gaps might reveal that smaller states should be just

as invested. So, more to follow on that.

Another challenge is that I am getting so much data on the new legislation and policies, that I have not

adequately made the connections to how this shapes emergency manager’s roles and responsibilities or

their internal cyber execution. I am going to have to bound my research to ensure I relate everything

back to the main topic and objectives within my original outline.

Good luck everyone as we move into the final stretch!

Sincerely,

Michelle

Jeffrey Williams Posted Apr 15, 2024 10:35 PM

Ms. Ferguson,

This sounds like an interesting topic. Although I must admit I am so poorly versed in cyber vulnerabilities that I do not think I would be able to offer you any substantive information re your paper.

I did have a question, I saw that you focused your research on CA, IL, and NY. Is the legislation you are researching specify the governmental level of applicable cyber response? I ask because I work in municipal public safety and am wondering if the applicable legislation that is being discussed at state levels will also be mandated for lower levels of government within the state. I understand just how expensive this type of infrastructure can be especially for a municipality with other financial issues. However, cities and communities must find a method to balance the need for improve cyber resiliency with the reality of monetary issues. I could easily see how the large states listed here, should they implement a state mandate for cyber infrastructure upon lower levels of government, could literally price cities out existence.

Again, I am way out of my depth of knowledge. So if none of what I said made any sense I understand haha.

Good luck!

Jeff