
ALT Image is split with the left side half showing a gradient of blue and red with digital effects and the right half being white. The "Securing the Next 250" logo is in the bottom right corner. There is a blue and red gradient shield with a clipboard with a hazard symbol inside. The text reads "Next step: level up your defenses. Two New Actions for 2026. Have an Incident Response Plan and Use It! CPG 2.0 1.C. Organizations should develop, maintain, update, and regularly exercise IR plans for common threat scenarios such as ransomware attacks. Ensure drills are realistic and include all relevant stakeholders, such as organizational leadership and legal counsel, in addition to technical personnel. IR plans should be reviewed and drilled on an annual basis at minimum". The CISA logo is in the bottom left corner with text that reads "Cybersecurity Awareness Month October 2026".

ALT The image displays a list titled "SMI Mitigation Actions" with a background of a gear and network motif. The list includes: 1) Disable Smart Install auto-loading feature on all network devices. 2) Review Cisco switch configuration files for deviations from documented pre-existing configurations. 3) Implement deny by default strategy at edge firewall devices and ensure TFTP (UDP port 69) and SMI (TCP port 4786) are denied.
























