Mario Stylianou :heart_cyber:<p>For an agency whose sole reason for existence is to protect and defend, it's disheartening to see so much distrust and vitriol from the very community it's dedicated to serving. <a href="https://infosec.exchange/tags/CISA" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>CISA</span></a> doesn't have any law enforcement (<a href="https://infosec.exchange/tags/FBI" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>FBI</span></a>) or prosecutorial (<a href="https://infosec.exchange/tags/DOJ" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>DOJ</span></a>) powers, it doesn't regulate or impose fines (<a href="https://infosec.exchange/tags/SEC" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>SEC</span></a>), and it doesn't conduct surveillance (<a href="https://infosec.exchange/tags/CIA" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>CIA</span></a>, <a href="https://infosec.exchange/tags/NSA" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>NSA</span></a>), but when <a href="https://infosec.exchange/tags/CriticalInfrastructure" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>CriticalInfrastructure</span></a> needs help with cyber or physical security, it does answer the call.</p><p>Not every agency gets it right all the time (<a href="https://infosec.exchange/tags/FEMA" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>FEMA</span></a>) or delivers results without a lengthy investigational analysis (<a href="https://infosec.exchange/tags/NTSB" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>NTSB</span></a>), but all the folks that I've met from CISA always have the <a href="https://infosec.exchange/tags/PublicGood" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>PublicGood</span></a> in mind. </p><p>An organization is made up of people, and at CISA many are contributors to <a href="https://infosec.exchange/tags/FOSS" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>FOSS</span></a> (including the <a href="https://infosec.exchange/tags/Linux" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Linux</span></a> kernel), security researchers, and folks you've likely interacted with on <a href="https://infosec.exchange/tags/Twitter" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Twitter</span></a>. Giving back to the <a href="https://infosec.exchange/tags/infosec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>infosec</span></a> community is pretty high up on their list of what they do, both on and off the clock. </p><p>Unless you're an <a href="https://infosec.exchange/tags/APT" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>APT</span></a> that's made it onto <a href="https://infosec.exchange/tags/CrowdStrike" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>CrowdStrike</span></a>'s <a href="https://adversary.crowdstrike.com/en-US/" rel="nofollow noopener noreferrer" target="_blank">rolodex</a>, you aren't the <a href="https://infosec.exchange/tags/adversary" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>adversary</span></a> <span class="h-card"><a href="https://infosec.exchange/@cisacyber" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@<span>cisacyber</span></a></span> is trying to frustrate in cyberspace. While I respect an individual's decision on who to subscribe to, denying an entire population the choice hurts the community.</p><p>You can do what is easy or what is right. I'm happy to be part of <span class="h-card"><a href="https://infosec.exchange/@jerry" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@<span>jerry</span></a></span>'s infosec.exchange community where we do the latter.</p>