May 2021: FB-ISAO Threat Level Update

This message is TLP:WHITE. Subject to standard copyright rules, TLP:WHITE information may be distributed without restriction.

The ongoing COVID-19 global pandemic is a complex and blended threat that impacts members and the broader faith-based and charity community in numerous ways. In May 2021, we have determined to uncouple the pandemic threat from the broader physical threat assessment. FB-ISAO’s Threat and Incident Response Group (TIG) continues to assess the ongoing threats and risks to our community and has made the following updates to our Threat Level Assessments:

SUMMARY

The TIG has determined to place the Pandemic Threat Level at “ELEVATED.” ELEVATED means that FB-ISAO is unaware of any specific threats, but there is concern that an event is more likely than normal. While we are well aware of the specific threat of the pandemic, we do not believe that a serious nationwide U.S. outbreak at this time is likely, though the possibility of localized outbreaks remains. While the pace of vaccinations was encouraging, the significant decrease in demand coupled with uncertainty regarding virus variants, state, local, and sector re-openings, relaxed masking and distancing mandates, and warmer weather could see surges in some areas that could become problematic. The TIG will continue to assess the Pandemic Threat Level regularly and provide updates accordingly. 

The TIG has determined to maintain the Physical Threat Level at “SEVERE.” SEVERE means an event is highly likely. We believe that coming out of the worst of the pandemic, with re-openings, warmer weather and with a number of potential flashpoints, the likelihood of a significant physical event is likely. While we don’t assess such an event is likely to be of nationwide impact, we feel the current threat environment creates a general threat concern for all FBOs at this time. The TIG will continue to assess the Physical Threat Level regularly and provide updates accordingly. This determination will be periodically re-evaluated, especially with respect to non-COVID-19-related threats.

The TIG has determined to maintain the Cyber Threat Level at “GUARDED.” GUARDED means FB-ISAO is unaware of any specific or targeted cyber attacks, but a general and pervasive risk of cyber attacks exists, particularly with respect to scams using COVID-19 vaccinations, ransomware, and revenge motivated targeting across social media. The TIG will continue to assess the Cyber Threat Level and provide updates accordingly. Likewise, the cyber threat landscape will be continuously monitored, but this Cyber Threat Level determination is valid until further notice.

• Please refer to this post for an explainer on the FB-ISAO Threat Levels.
• Please see this 15 May 2020 post regarding the distribution of the FB-ISAO Pandemic Reopening Reentry Checklist. 
• Please refer to this CDC guidance for FBOs: Considerations for Communities of Faith, which is periodically updated (this update, 19 Feb 2021).
• A more detailed threat level update will be provided to members directly.