How could the focus on digital threats and risk management affect CISA?
CISA may see increased pressure to integrate risk management into critical infrastructure guidance The FBI's focus on cybercrime, which recorded approximately $3 billion in reported losses from business email compromise in 2025, emphasizes the financial impact of these threats. Given the established collaboration between the FBI and CISA on cyber threats to critical infrastructure, this regulatory push suggests CISA may need to incorporate risk management and insurance considerations into its operational advisories.
- Effect
- Mixed
- How direct
- Brind's reasoning
- When
- Within weeks
- The story
- No new developments lately
How it reaches Cybersecurity and Infrastructure Security Agency
-
The FBI Internet Crime Complaint Center recorded approximately $3 billion in reported losses from business email compromise in 2025. Regulatory bodies, including the National Institute of Standards and Technology and the Washington State Office of the Insurance Commissioner, are linking digital threats to broader business objectives and insurance coverage. The Washington State Office of the Insurance Commissioner explained that business interruption coverage applies when a covered loss forces a business to close.
The full event1independent outlet -
The FBI and the Cybersecurity and Infrastructure Security Agency actively collaborate, issuing joint warnings and coordinating investigations regarding cyber threats to critical infrastructure. The current focus on linking digital threats to risk management will likely intensify this collaborative effort.
No report states this step directly. Brind drew it from the reporting on each side of it, so treat it as an informed guess.
-
agency of the United States Department of Homeland Security
Everything about Cybersecurity and Infrastructure Security Agency
Tap any step to see the evidence behind it.
The facts so far
As reported. Each one links to where it comes from.
- The FBI's Internet Crime Complaint Center recorded approximately $3 billion in reported losses from business email compromise in 2025.ibtimes.com
- The National Institute of Standards and Technology's report on cybersecurity and enterprise risk management places digital threats within broader business objectives.ibtimes.com
Why it matters
For CISA, which is responsible for protecting the nation's critical infrastructure, this shift in focus means that cybersecurity is moving beyond purely technical fixes. The emphasis on risk management and insurance coverage forces CISA to consider the financial and operational consequences of cyberattacks, not just the technical breach itself. This could lead to new requirements or recommendations for how critical infrastructure operators must manage and report their cyber risks.
This discussion is part of a broader regulatory trend where federal bodies are linking digital threats to business continuity. The involvement of the Washington State Office of the Insurance Commissioner further grounds this in the insurance market, where business interruption coverage applies when a covered loss forces a business to close. This suggests a move toward a more holistic view of enterprise risk across government and private sectors.
What we don't know yet
- Will CISA issue specific, mandatory guidance on integrating insurance risk into critical infrastructure protection?
- How will the FBI's focus on financial losses from cybercrime influence CISA's threat prioritization?
What would change this answer
Who else could feel it
Other possible ripples from the same event.
Reporting
- ibtimes.comFriday
Keep going
Brind's analysis is written by AI from the reporting linked above and can be wrong. This explainer is a possibility worth considering, not a forecast: steps marked as Brind's reasoning are not stated in the reporting. It is not investment advice; do your own research.