Cybersecurity Awareness Month: Protecting the Networks We Depend On

As October marks Cybersecurity Awareness Month, the FCC's Public Safety and Homeland Security Bureau encourages communications providers to take steps to protect their systems against cyberattacks.

During my recent trip to Japan, I saw firsthand how disruptive a cyberattack can be. A regional ransomware attack disrupted cloud services used by hundreds of companies and local governments, cascading across 495 corporate and municipal clients, including major railway entities. Days later, Japan's top cybersecurity official stated that the country was in a "state of emergency" amid a broader wave of cyber threats. And last week, in discussions with our Five Eyes partners, it was no surprise that cybersecurity was a top concern. These events underscore why protecting communications networks and preparing for cyber incidents must remain a priority.

A cyberattack on a communications network can have consequences far beyond the network itself. It can disrupt essential services, compromise sensitive information, and interfere with emergency communications when people need them most. Protecting these networks is essential to our public safety and national security.

The Bureau is highlighting practical steps communications service providers can take to better protect their networks. Our recent Public Notice and accompanying Cybersecurity Best Practice Guide draw on the Commission's May cybersecurity workshops, where government and industry experts shared lessons learned, discussed emerging threats, and identified ways to strengthen defenses.

Some of the most important steps are straightforward: use multifactor authentication, keep systems updated, back up critical data, and train employees to recognize phishing attempts. Recent PHP2Shell vulnerabilities that could allow attackers to take control of affected systems are a reminder that cyber threats can move quickly. Providers should promptly identify vulnerable systems, isolate them if necessary, and apply security updates. They should also prioritize protection of critical systems, develop plans for responding to cyber incidents, and establish relationships with partners who can help contain an attack and restore service.

No organization can eliminate every cyber threat. But preparation and sound security practices can help limit disruptions and speed recovery. I encourage communications providers to read the Bureau's Cybersecurity Best Practice Guide and share it throughout their organizations.

Read the Bureau's resources: