Cyber attacks are one of the top threats facing not only metropolitan Washington, but the entire nation. This December, for example, the Maryland Department of Health (MDH) was one of the most recent government agencies to experience a service disruption resulting from a network security incident. MDH reported that it was caused by ransomware, one of several types of cyber threats, and that immediate countermeasures were implemented to contain the incident and protect the network.

According to the U.S. Department of Homeland Security's Cybersecurity and Infrastructure Security Agency (CISA), ransomware is an ever-evolving form of malware designed to encrypt files on a device, rendering any files and the systems that rely on them unusable. Malicious actors then demand ransom in exchange for making the data usable again.

These and other similar incidents are why the National Capital Region (NCR) Homeland Security Executive Committee (HSEC) has maintained cybersecurity as a high priority in recent years, emphasizing the need for a coordinated approach to regional preparedness.

On January 20, COG’s Department of Homeland Security and Public Safety, in collaboration with the COG Chief Information Security Officers (CISO) Subcommittee and CISA, hosted a virtual National Capital Region (NCR) Cyber Tabletop Exercise for the chief administrative officers, chief information officers and CISOs, and public information officers of the NCR.

The exercise was attended by over 100 participants from 30 different federal, state, and local government agencies across the region, including 20 of COG’s member jurisdictions.

Split into three modules, the exercise was designed to improve the ability of our member governments to prevent, detect, and respond to a series of significant cyber incidents impacting multiple local governments across the region.

Participants evaluated COG’s efforts to coordinate information sharing during cyber incidents and the viability of current incident response plans. They also explored processes for requesting additional response resources when necessary.

COG’s Chief Information Officers Committee and Information Security Officers Committee, subgroups of the Chief Administrative Officers Committee, are tasked with focusing on regional issues regarding technology. COG staff will continue to help these officials communicate about and coordinate on cybersecurity and other regional security and safety challenges.

MORE: To learn about preventing ransomware, visit: https://www.cisa.gov/stopransomware