联邦网络安全宣传月进入收官周：CISA定主题「守护下一个250年」，2026年新增事件响应演练两项要求
华盛顿消息：每年10月是美国的网络安全宣传月（Cybersecurity Awareness Month），今年的宣传月已进入最后一周。联邦层面的牵头机构网络安全与基础设施安全局（CISA）为2026年宣传月定下的主题是「守护下一个250年」（Securing the Next 250），呼应美国建国250周年，重点面向支撑关键基础设施的政府与私营机构。
网络安全宣传月已举办20多年。CISA 表示，今年的宣传在延续往年面向所有人的基本防护动作之外，特别要求拥有、运营或支撑关键基础设施的组织行动起来。面向机构的四项基本动作是：教会员工识别钓鱼诈骗、要求使用强密码、要求启用多因素认证、及时更新软件；在此之上的进阶做法包括启用系统日志、备份数据、加密数据、向 CISA 报告网络事件等。
2026年新增两项要求已列入 CISA 的《网络绩效目标》：一是制定事件响应计划并定期演练，演练须涵盖勒索软件等常见威胁场景，并让机构领导层与法律顾问参与，至少每年复盘演练一次；二是在系统中断时有能力恢复运行，为关键资产或系统受影响预备恢复方案，包括在必要时转入纸质办公、无线电通信等无网作业方式。
CISA 已在其官网发布2026年宣传月工具包，提供海报、演示模板与社交媒体素材，供各级政府、企业与社区组织自行开展本机构的宣传活动。宣传月将于10月31日结束。
来源：GSM·美国
Cybersecurity Awareness Month Enters Final Week: CISA Theme 'Securing the Next 250' Adds Two Incident-Response Actions for 2026
WASHINGTON — October is Cybersecurity Awareness Month in the United States, and this year's campaign has entered its final week. The Cybersecurity and Infrastructure Security Agency (CISA), the federal lead for the campaign, set the 2026 theme as 'Securing the Next 250,' recognizing the nation's 250th anniversary and focusing on the government and private-sector organizations that support critical infrastructure.
The awareness month has been observed for more than 20 years. CISA's four essentials for organizations are to teach employees to avoid phishing scams, require strong passwords, require multifactor authentication, and update software promptly, with further steps including system logging, data backups, encryption and reporting cyber incidents to CISA.
Two new actions were added for 2026 under CISA's Cyber Performance Goals: organizations should have an incident response plan and exercise it regularly — with realistic drills covering scenarios such as ransomware and including leadership and legal counsel, reviewed at least annually — and be prepared for system disruptions, with plans to recover and restore critical assets, including the ability to shift to paper-based operations or radio communications if needed.
CISA has published a 2026 toolkit with posters, presentation templates and social media materials for organizations running their own campaigns. The awareness month ends on October 31.
Source: GSM · USA
来源：GSM·美国（原文链接）
图片来源：图：网络安全与基础设施安全局（CISA）标志。图源：CISA，美国联邦政府公共领域。 / Logo of the Cybersecurity and Infrastructure Security Agency (CISA), U.S. federal government, public domain.
