Page 127 - Cyber Defense eMagazine RSAC Special Edition 2025

How Critical Infrastructure Can Prepare for

an Uptick in Cyberattacks in 2025

By Dr. Bill Anderson, Principal Product Manager, Mattermost

The discovery of Salt Typhoon and its deep penetration of privately run telecommunications networks
last fall was alarming — but not unexpected. Since at least 2019, hackers allegedly backed by the
People’s Republic of China have infiltrated water utilities, ports, and oil and gas facilities, periodically
testing their foothold in these systems.

The attackers are persistent, patient, and increasingly sophisticated — and their activities will surge,
according to the Department of Homeland Security's recently released 2025 Homeland Threat
Assessment. Organizations that safeguard critical infrastructure and national security must focus on
cyber resilience and adopt modern incident response strategies. In preparation, they need a centralized,
secure platform that enables teams to respond efficiently, collaborate securely, and maintain compliance
without relying on compromised systems.

The Core Elements of Effective Incident Response

Incident response involves a combination of predefined procedures, experienced and well-trained
people, and integrations with a wide range of security tools and services. While team collaboration plays
an essential role in mitigating potential security incidents, organizations must recognize that their security
response teams can’t rely on using the same systems that are under attack. Compromised infrastructure
is not a place to manage a crisis. This is especially true for large organizations that juggle multiple
incidents simultaneously.

127