There’s a lame-duck session before Dems take over, but the leaders of the homeland security panels are already teeing up their agendas.

Persistent credentials and forgotten software approvals leave essential operational networks vulnerable under CISA’s latest cybersecurity roadmap.

Like the water sector initiative, the six-month pilot program will connect rural hospitals with industry for free services.

It includes a review of whether its existing capabilities will meet its three pillars: “defend, harden, prevail.”

The critical infrastructure defense program will seek to pair Claude models, Anthropic engineers and threat research with the expertise of cybersecurity companies.

The seizures of the tools, allegedly operated by the Chinese firm Integrity Tech, accompanied a warning from the FBI, CISA and NSA.

The regulations on “controlled unclassified information” include security rules and requirements for reporting when they’re breached, including by cyberattacks.

Sean Cairncross talked about regulations, China, pilot projects and more Thursday.

Internet-exposed tech, PLCs, outside integrators and inside protections are all factors the water sector’s information sharing and analysis center is watching.

Sean Cairncross said CEOs need to be cognizant of how it’s being used, however.