It’s Time to Take a Stand on CISA

Many NSITSP members subscribe to and rely on CISA alerts to stay informed and keep our clients safe. The Cybersecurity & Infrastructure Security Agency alert signup is here: https://nsitsp.org/legislation/nsitsp-supports-cisa/ .

Recent changes in Washington have brought some attention to CISA that could have a negative effect on this useful resource.

We – as an industry – should take a stand on this. No matter where you are in the political spectrum, this does not have to be a political discussion. CISA was created to increase security, and many of us rely on it to do just that. The NSITSP Board has taken a position on this matter – See https://nsitsp.org/legislation/nsitsp-supports-cisa/.

View the statement by Board President Steve Kazan here: https://www.youtube.com/watch?v=4NE5TZqqS4E.

The NSITSP has worked hard for three years to “have a seat at the table” with regard to important issues. We had great success with participation in the CISA Small Business advisory council – a non-partisan and non-political body of unpaid representatives from many industries. That is now in danger of disappearing.

Please contact your Congressional representative (House and Senate), no matter which party they are in. Let them know that you would like them to take action to protect businesses across American with a few specific requests:

1. 1. Re-instate the CISA advisory committees
   2. Limit reductions in force at CISA to maintain the critical cybersecurity functions
   3. Maintain the scope of CISA to protect public and private sectors and critical infrastructure
   4. Keep CISA within DHS

When you contact any elected officials, it is important to maximize your effectiveness by following a few simple rules. First, stay very focused on exactly what you want them to do. State specific actions. Second, do not get political. Do not add information or arguments that are not on the very specific topic you want them to focus on. This is not the place to get into that.

Third, stay calm and factual. Only mention something if it is directly related to “the ask.” If you can make it relevant to the state or district, that is even better. For example, you might mention that we (independent IT consultants) secure millions of businesses across the state, and we rely on the resources provided by CISA.

Believe it or not, you are not likely to change someone’s mind. But you might be able to change their vote.

In politics, a strong stand is often taken simply to create a strong position from which to bargain. In many cases, some or all of the original stand is up for debate – but only if it finds resistance. If there’s no resistance, then the “bargaining” position simply wins.

One of the reasons for creating the NSITSP was to give our industry influence when it matters. This is a case where we think it matters.

Here are a few tips to get you started.

How to find your Senator or Representative

Browse to https://www.congress.gov/members/find-your-member and enter your address. It will instantly pop up with your two state Senators and your one House Representative. Each will include a contact link that you can follow to send a brief message.

If you click the link on the member’s name, you’ll go to another contact page with specific information about their committees, sponsored legislation, and so forth. You may also contact them with this information, including their phone number.

How to tell them what you want.

You should put together a short, factual request. If you want to send this by US mail (letter or postcard), you can. Or use email, if one is listed. Or use the form(s) provided.

Here’s a sample of how you might phrase your request:

I am an independent technology consultant and one of your constituents. I am also a member of the National Society of IT Service Providers (NSITSP). We have the job of securing millions of businesses against cyber attacks.

I am concerned about the recent changes with regard to CISA – the federal Cybersecurity and Infrastructure Security Agency. We relay on CISA resources to help us protect businesses across our state.

Please do what you can to protect these resources. Specifically, work to:

1) Re-instate the CISA advisory committees
2) Limit reductions in force at CISA to maintain the critical cybersecurity functions
3) Maintain the scope of CISA to protect public and private sectors and critical infrastructure
4) Keep CISA within DHS

If you have questions or would like to discuss this, please contact me at ___________.

Please do not delay in taking this action. A large, sudden focus on this topic might just get some attention. I know it can seem like we have no influence, but that’s exactly what professional associations are designed to address.

Take action today. And if you would like to discuss this further, please jump on our CISA Security Forum at https://nsitsp.org/forums/forum/cisa-security-forum/.

Thank you for your support on this issue that is so important to our community.

🙂