Enhancing Cyber Resilience: Insights from the CISA Healthcare and Public Health Sector Risk and Vulnerability Assessment

Summary:
In January 2023, the CISA team conducted a Risk and Vulnerability Assessment (RVA) on a Healthcare and Public Health organization, identifying vulnerabilities and areas for improvement. The assessment discovered poor credential hygiene, misconfigured ADCS certificate templates, unnecessary network services, and elevated service account privileges, which allowed the team to compromise the domain through four unique attack paths, gaining domain admin privileges.