US cyber agency CISA had to build its incident playbook during the incident, agency reveals

The Cybersecurity and Infrastructure Security Agency said it lacked a pre-established incident response plan when responding to a recent security incident, according to agency statements. CISA stated it developed its response procedures during the incident rather than before it occurred. The agency did not specify which incident prompted the disclosure or provide a timeline for when the gap in planning will be addressed.

Next story