Bottom line: Implementing cyber decoys can help detect and disrupt insider threats, reducing the attack surface by up to 30% (Source: CISA).
What's happening: The Cybersecurity and Infrastructure Security Agency (CISA) has released guidance on using cyber decoys to detect and disrupt malicious activity inside networks. CISA's Decoy Guidance document provides a framework for implementing decoy systems, which can be deployed to detect and disrupt insider threats. The guidance is specifically aimed at critical infrastructure sectors, such as energy, transportation, and healthcare.
What to do: Security leaders should review the CISA Decoy Guidance document and consider deploying decoy systems to their networks, starting with a pilot deployment to test effectiveness and identify potential vulnerabilities. Additionally, security teams should conduct regular security awareness training for employees to help identify and report suspicious activity.