CISA turns to security experts with street cred to protect health sector

[InfoSec News <alerts () infosecnews org>]

https://www.cyberscoop.com/dhs-coronavirus-vaccine-hackers-josh-corman-rob-arnold-beau-woods/

By Sean Lyngaas
CYBERSCOOP
July 22, 2020

The Department of Homeland Security’s cybersecurity agency is ramping up 
its efforts to protect medical organizations from hacking during the 
coronavirus pandemic by hiring multiple security specialists with strong 
ties to the health care sector, CyberScoop has learned.

As the race for a vaccine intensifies, DHS’s Cybersecurity and 
Infrastructure Security Agency is turning to Josh Corman, who has long 
evangelized for medical-device security, to help expand the agency’s 
attempts to secure private-sector networks during the pandemic. Rob 
Arnold, a former private executive focused on small business’ 
cybersecurity, is also joining CISA to advise on how COVID-19 has changed 
cyber risk for critical infrastructure companies.

Corman, a former security specialist at IBM, has joined CISA as a visiting 
researcher and will play a key role in the agency’s COVID-19 response with 
security advice on health care infrastructure, the agency is expected to 
announce later Wednesday. Beau Woods, who previously worked on 
cybersecurity at the U.S. Food and Drug Administration, is also expected 
to begin working with CISA in the coming weeks, pending administrative 
paperwork.

Corman and Woods’ volunteer organization, I am the Cavalry, has connected 
white-hat hackers interested in fixing software vulnerabilities with 
agencies like the FDA. Now, the pair faces one of their biggest career 
challenges yet: helping the broader push to use federal resources to make 
hospitals, clinics and drug companies more secure from hacking. The 
lessons learned from their work could apply to boosting security in other 
sectors.

[...]

--
Subscribe to InfoSec News
https://www.infosecnews.org/subscribe-to-infosec-news/
Follow InfoSec News on Twitter
https://twitter.com/infosecnews_
Follow InfoSec News on LinkedIn
https://www.linkedin.com/company/infosecnews/