CISA Admits It Lacked Incident Response Plan During May Cybersecurity Event
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) revealed it had no prepared response plan for a cybersecurity incident in May, forcing staff to build one during the event after sensitive credentials were exposed by a contractor on GitHub. The agency acknowledged shortcomings in its communication channels with security researchers but stated that no customer or mission data was compromised.
