Hackers are getting more sophisticated, and the ongoing coronavirus pandemic has given them the space they need to launch new and more impactful attacks. Recently, it was reported that last year broke the record for the number of sophisticated cyber assaults called zero-day attacks — and that number is climbing. Now, the Cybersecurity and Infrastructure Security Agency (CISA) along with the National Security Agency (NSA) have warned businesses to expect an increase in cybercrime stemming from Russian hacking groups exploiting wartime disruption to perpetrate increased malicious activity. 

In the midst of this environment of escalating cyber threats, the United States government has passed HR 2471, a bill that sets forth hack reporting requirements for businesses in any of sixteen critical industrial sectors, such as the:

• Chemical sector
• Commercial facilities sector
• Communications sector
• Dams sector
• Critical manufacturing sector
• Emergency services sector
• Defense base industrial sector
• Financial services sector
• Energy sector
• Food and agriculture sector
• Government facilities sector
• Healthcare and public health sector
• Information technology sector 
• Transportation systems sector
• Water and wastewater systems sector

At first glance, it may seem that businesses such as entertainment venues, casinos and shopping malls may have escaped the enforcement of the bill, but a closer look tells a different story. These businesses — and others — fall squarely under the Commercial Facilities Sector, which is defined as: “… the Commercial Facilities Sector, which includes a diverse range of sites that draw large crowds of people for shopping, business, entertainment, or lodging.”

What HR 2471 Means for Entertainment Businesses

Any business that falls under the broad category presented by the Commercial Facilities Sector must be in compliance with the requirements of the bill which are:

• You have only 72 hours in which to report a hacking event; and
• You have 24 hours in which to report a ransomware payment

Even in large organizations that already have extensive cyber security protocols in place, these reporting requirements can be challenging to meet. Many other businesses that lack resources will find it very onerous to meet these critical aspects of the bill. Operations such as casinos, amusement parks, malls, casinos, and movie theaters often lack in-house IT resources, and many do not have cybersecurity protections in place at all. 

Keeping Your Entertainment Business Compliant

In today’s world of cybercrime and increasing threat landscapes, every bit of data you handle can make your business a target for cyberattack. In fact, small businesses are often considered low-hanging fruit for wily hackers, who often take advantage of a lack of preparedness and resources to make inroads to sensitive data. With less security in place, it takes less time and effort for hackers to get what they want.

Even online entertainment businesses such as gambling and betting websites are being targeted by cybercriminals, so whether you work in a virtual environment or a brick-and-mortar one, you must be prepared to defend it.

For commercial businesses with few resources, your best bet is to partner with a third-party provider of Managed IT services that has deep knowledge of cyber security best practices. 

Blue Technologies Can Help Secure Your Business Data

If you are running a business in the commercial sector, you must comply with the requirements of HR 2471. However, you do not have to start hiring a full-time IT department to get the job done. Even if you have few — or no — in-house IT resources, you can get powerful cyber security protection by partnering with our Managed IT team.

Our team of professionals has the kind of leading-edge knowledge of evolving threats and technologies that can keep your business — and your business data — protected from scams, data breaches, and other cyber threats. We will assess your current infrastructure for weaknesses and vulnerabilities and then build an affordable, cost-effective, efficient cybersecurity strategy matched to your specific business needs and challenges. With strong protection in place, there is less chance of cybercriminals gaining access to your data, saving you the trouble of having to deal with — or report — a breach or hack. 

Don’t leave your data up for grabs. Contact a Blue Technologies consultant and learn how our Managed IT program can keep your data secure — and your business protected.