GAO: Federal agencies lack insight on ransomware protections for critical infrastructure

A GAO audit finds that key sector risk management agencies (CISA, DOE, HHS, U.S. Coast Guard, TSA, and DOT) have not fully assessed the effectiveness of their support or the adoption of NIST ransomware practices across the manufacturing, energy, healthcare, and transportation sectors, limiting communication and timely threat sharing; amid rising ransomware incidents, CISA is developing standardized reporting rules, and GAO issued 11 recommendations that received mixed responses from the agencies.