Insights from Helios Security

CISA FY23 Risk and Vulnerability Assessments

Every year, the federal Cybersecurity and Infrastructure Agency (CISA) conducts Risk and Vulnerability Assessments (RVAs) for the executive branch, high priority critical infrastructure operators and select state/local stakeholders.In September, CISA released a publication of the aggregate findings from their FY23 engagements. Within the findings, CISA mapped the most successful tactic in 11 of the 14 MITRE categories to help inform public and private companies of how to prioritize security controls in their environment.In this blog, we will walk through findings from each tactic and provide real-world recommendations for how to mitigate risk in your organization.