Untitled Document

ITD, state agencies prepare for 'hacktivist' attacks

A dozen ITD employees discovered the challenges of restoring computer systems after a major “hacktivist” attack last week. They participated in Idaho’s first Cyber Storm mock disaster exercise, Wednesday and Thursday that was based on a cyber terrorist attack on the state’s computer system.

Organized by the Department of Homeland Security, the Idaho event was the fourth series offered nationally since the scenario and training was first developed. It examined the plans, processes and procedures outlined in current cyber incident response plans. Participants also discussed and evaluated the escalation process that began with reports of sluggish network response to the eventual loss of key computer systems.

After a Wednesday morning briefing, workers dispersed into one of four response units – transportation, the State Controller’s Office, the Idaho Tax Commission and the Idaho Department of Administration. The mock exercise grew progressively worse based on new information or “injects.”

The second step in the process included calls from citizens accessing the Division of Motor Vehicle services to find their online activity redirected to an unauthorized environmental activist website. Hackers then hijacked the department’s social media connections (Facebook and Twitter), and released personal identifiable information (PII), and a list of ITD employees with phone and Social Security numbers.

Training and response required interaction with members of the SCO and Department of Administration staffs and decisions about which systems to shut down, reactivate and when. The exercise concluded Thursday afternoon with a plenary discussion of challenges, mitigation steps and what could be done to improve inter/intra agency coordination during a cyber incident.

The exercise was the first of its kind in Idaho. Participants expressed the need to stage more exercises and include more state agencies.

Branden Carter coordinated ITD’s participation in the event.

Joining the ITD team were: Shannon Barnes, Chuck Carroll, Mel Coulter, Bill Finke, Alan Frew, Mike Golden, Richard Holloran, Chris Kaetzel, Betty Oakes, Kenny O’Neill, Barton Phelps, Elise Rising, Craig Schumacher, Bryan Smith and Cathy Spencer.