Advanced search Help
Clear all search criteria
Only 2/3! You are seeing results from the Public Collection, not the complete Full Collection. Sign in to search everything (see eligibility).
-
Cybersecurity Directives [website]
"The Cybersecurity and Infrastructure Security Agency (CISA) at the Department of Homeland Security (DHS) develops and oversees the implementation of 'binding operational directives' and 'emergency directives,' which require action on the part of certain federal agencies in the civilian executive branch."
United States. Cybersecurity & Infrastructure Security Agency
-
Security and Resiliency Guide: Counter-Improvised Explosive Device (C-IED) Annex for Healthcare and Public Health Facility Stakeholders
From the Purpose: "Bombings using improvised explosive devices (IEDs) are a common security concern related to terrorism and violence in the United States (U.S.). Multiple high-profile, domestic incidents have occurred over the last several decades, and international attacks are frequently in the news. Healthcare facilities are not immune from IED incidents, including bomb threats, suspicious items or behavior, and attacks using IEDs. Between May 2016 and May 2019, media reports indicated that there were 243 healthcare-related IED incidents in the U.S. According to the World Health Organization (WHO), from 2016 to 2018, there was an annual average of 337 attacks on healthcare targets across 19 overseas countries that reported data. During that time span, those attacks resulted in an average of 325 deaths and 415 injuries per year. On average, 60% of attacks were bombings. This guide defines actions that management and staff at healthcare facilities can take to understand and improve their ability to perform counter-IED (C-IED) activities and make security decisions."
United States. Cybersecurity & Infrastructure Security Agency
-
Assessment of the Cyber Insurance Market
From the Objective: "The U.S. Department of Homeland Security's (DHS) National Risk Management Center (NRMC) within the Cybersecurity and Infrastructure Security Agency (CISA) requested that CISA's Office of the Chief Economist (OCE) assess the current state of the cyber insurance market. The aim of the assessment is to (1) analyze the cyber insurance market to understand the most current trends and challenges and (2) identify relevant efforts related to cyber insurance that could inform NRMC research and collaboration agenda and aid prioritization of requirements."
United States. Cybersecurity & Infrastructure Security Agency
2018-12-21
-
Houses of Worship: Hometown Security Report Series (May 2017)
From the Background: "Numerous studies estimate there are between 300,000 and 400,000 religious congregations in the United States. Many people think of a house of worship as a safe area where violence and emergencies cannot affect them. However, violence in a house of worship is not a new phenomenon and many facilities are developing and updating security and emergency plans and procedures to ensure the safety and security of their congregations, visitors, staff, and facilities."
United States. Cybersecurity & Infrastructure Security Agency
2017-05
-
Atirador Ativo: Como Reagir
"Atirador ativo é alguém que toma a iniciativa de matar ou tentar matar pessoas em ambiente delimitado e populoso; na maioria dos casos, os atiradores ativos usam armas de fogo sem nenhum padrão ou método definido para seleção das suas vítimas. As situações de atirador ativo são imprevisíveis e evoluem rapidamente. Em geral, é necessária a mobilização imediata da polícia para parar os tiros e reduzir os danos às vítimas. Como frequentemente as situações de atirador ativo terminam dentro de 10 a 15 minutos, antes da chegada da polícia ao local, as pessoas precisam estar preparadas mental e fisicamente para lidar com uma situação de atirador ativo."
United States. Cybersecurity & Infrastructure Security Agency
-
Chemical Facility Anti-Terrorism Standards: The Role of First Responders
From the Document: "Chemicals are vital to our Nation's economy, and reducing the risk of hazardous chemicals from being weaponized is a shared commitment between the Federal government, the private sector, and members of the community, including law enforcement, hazmat, and first responders."
United States. Cybersecurity & Infrastructure Security Agency
2019-11-05
-
Chemical Facility Anti-Terrorism Standards: Expedited Approval Program
From the Document: "The Cybersecurity and Infrastructure Security Agency's (CISA) Chemical Facility Anti-Terrorism Standards (CFATS) program works with high-risk facilities to ensure they have security measures in place to reduce the risk of certain hazardous chemicals from being weaponized. High-risk facilities must develop a security plan tailored to their tier level and unique circumstances. High-risk facilities designated as a Tier 3 or 4 have the option to use the Expedited Approval Program (EAP) for approval of their security plan."
United States. Cybersecurity & Infrastructure Security Agency
2019-11-05
-
Synchronization of Situational Awareness Between Critical Infrastructures and the Public Sector Using Unmanned Aerial Systems (UAS)
From the Document: "Rapid damage assessment of critical infrastructure elements following a disruptive event, and the sharing of that information allows both public and private sectors to more quickly establish situational awareness and optimally deploy response resources. This project focused on the development of plans, procedures, processes, and mechanisms for using Unmanned Aerial Systems (UAS) to provide rapid situational awareness and for sharing that information between public and private partners. This information was transmitted to State Emergency Operations Centers (EOC) and was used to create a common operational map that can be shared with the federal government, other jurisdictional organizations, and the private sector during emergency response situations. As the use of private sector UAS increases, first responders have the ability to leverage these resources to rapidly gain situational awareness across a larger geographic region."
United States. Cybersecurity & Infrastructure Security Agency
-
Biopolymer-Stabilized Earth Materials for Resilient and Adaptable Infrastructure
From the Document: "Earthen infrastructure in the U.S. comprises around 85,000 earthen dams, also known as embankment dams or earth filled dams, and most of the 100,000 miles of levees. Many earthen dams and levees face considerable risk from both natural and man-made hazards. Rehabilitation of these aging infrastructures relies mainly on the same materials used decades ago to build and reinforce the structures. Failure of any of these structures could result in major negative impacts on the U.S. economy and threaten the health and safety of surrounding communities."
United States. Cybersecurity & Infrastructure Security Agency
-
Safeguarding Patients by Enabling Accelerated Government and Utility Response Through Real Time Data Sharing of Hospital Generator Status During Disasters
From the Document: "In large scale disasters that cause widespread power outages, emergency power systems at hospitals and other medical facilities are the primary lifeline for maintaining critical operations. Failures of these systems can have deadly consequences and can trigger emergency evacuations, as seen during Hurricanes Katrina (2005), Sandy (2012), and Matthew (2016). [...] An estimated 2,000 plus hospitals have connected remote monitoring and automated reporting technology to their emergency power systems. They provide real time, automated alerts to facility staff and generator service providers any time a mechanical threat to emergency power is detected or if fuel levels run dangerously low. This technology affords an opportunity to provide government and private utilities with real time, early warning of a threat to emergency power at a hospital. Yet, U.S. hospitals do not regularly share this highly valuable data with government or utility officials because protocols often do not exist to govern how this information sharing should take place."
United States. Cybersecurity & Infrastructure Security Agency
-
Federal Preparedness Circular FPC-6
"This circular designates for planning purposes major resource and claimant assignments for the allocation and use of national resources in an emergency. It identifies emergency resource planning, management responsibilities, and claimancy assignments for certain Federal agencies within a national priorities and allocations system which may be exercised in the event of a national emergency."
United States. Government Printing Office
1977-04-11
-
#Protect2020 Strategic Plan
From the Background: "Through #Protect2020, CISA [Cybersecurity and Infrastructure Security Agency] leverages a wide range of offerings and services to build outreach programs and engage local election officials in the over 8,000 election jurisdictions across the country. CISA builds these crucial relationships within the election community by supporting election officials in their efforts to identify and plan for potential vulnerabilities to elections infrastructure ahead of and during the 2020 election cycle. CISA engages political campaigns by supporting the development of non-partisan informational products and conducting voluntary assessments, partners with the private sector to collaborate on best practices and vendor security, and works towards raising public awareness about foreign interference efforts."
United States. Cybersecurity & Infrastructure Security Agency
2020-02
-
CISA Insights: Remediate Vulnerabilities for Internet-Accessible Systems
From the Document: "Adversaries operating in cyberspace can make quick work of unpatched Internet-accessible systems. Moreover, the time between an adversary's discovery of a vulnerability and their exploitation of it (i.e., the 'time to exploit') is rapidly decreasing. Industry reports estimate that adversaries are now able to exploit a vulnerability within 15 days (on average) of discovery. After gaining entry into information systems and networks, these adversaries can cause significant harm. Internet-accessible information systems include any system that is globally accessible over the public internet (i.e., has a publicly routed internet protocol (IP) address or a hostname that resolves publicly in DNS to such an address) and encompass those systems directly managed by an organization, as well as those operated by a third-party on an organization's behalf. As organizations continue to expand their Internet presence through increased use and operation of interconnected and complex Internet accessible systems, it is more critical than ever to rapidly remediate vulnerabilities inherent to these systems. Failure to do so could allow malicious actors to compromise networks through exploitable, externally-facing systems. The Cybersecurity and Infrastructure Security Agency (CISA) encourages its State, Local, Tribal and Territorial (SLTT) government partners, as well as private sector owners of critical infrastructure, to use this guide to learn more about this threat and associated mitigation activities."
United States. Cybersecurity & Infrastructure Security Agency
2019?
-
CISA Insights: Enhance Email & Web Security
From the Document: "Phishing emails and the use of unencrypted Hypertext Transfer Protocol (HTTP) remain persistent channels through which malicious actors can exploit vulnerabilities in an organization's cybersecurity posture. Attackers may spoof a domain to send a phishing email that looks like a legitimate email. At the same time, users transmitting data via unencrypted HTTP protocol, which does not protect data from interception or alteration, are vulnerable to eavesdropping, tracking, and the modification of the data itself. The Cybersecurity and Infrastructure Security Agency (CISA) encourages its State, Local, Tribal and Territorial (SLTT) government partners, as well as private entities, to use this guide to learn more about this threat and associated mitigation activities."
United States. Cybersecurity & Infrastructure Security Agency
2019?
-
CISA Insights: Mitigate DNS Infrastructure Tampering
From the Document: "In late 2018, cybersecurity organizations across the globe started to detect an increase in malicious activity targeting the Domain Name System (DNS) infrastructure on which we all rely. Using common tactics, outlined below, the attackers were able to redirect and intercept web and email traffic, and could have achieved the same for other networked services. The Cybersecurity and Infrastructure Security Agency (CISA) encourages its State, Local, Tribal and Territorial (SLTT) government partners, as well as private sector owners of critical infrastructure, to use this guide to learn more about this threat and associated mitigation activities. This guidance is derived from Emergency Directive 19-01 - Mitigate DNS Infrastructure Tampering and includes lessons learned and additional considerations for non-federal entities seeking to implement actions in line with federal civilian departments and agencies, as directed by CISA."
United States. Cybersecurity & Infrastructure Security Agency
2019?
-
CISA Insights: Increased Geopolitical Tensions and Threats
From the Document: "Increased geopolitical tensions and threats of aggression may result in cyber and physical attacks against the Homeland and also destructive hybrid attacks by proxies against U.S. targets and interests abroad. Knowing how you, your organization, and your personnel may be exposed or targeted during increased tensions can help you better prepare. In many cases, implementing the Cybersecurity and Infrastructure Security Agency (CISA) Cyber Essentials can dramatically improve your defenses. Should an incident occur, engage with partners, like CISA, and work with cyber or physical first responders to gain technical assistance. Review your organization from an outside perspective and ask the tough questions--are you attractive to Iran and its proxies because of your business model, who your customers and competitors are, or what you stand for?"
United States. Cybersecurity & Infrastructure Security Agency
2020-01-06
-
CISA Insights: Secure High Value Assets (HVAs)
From the Document: "A High Value Asset (HVA) is information or an information system that is so critical to an organization that the loss or corruption of this information or loss of access to the system would have serious impact to the organization's ability to perform its mission or conduct business. These assets, systems, and datasets may contain sensitive controls, instructions or data used in critical operations, or they may house unique collections of data. These sensitivities make HVAs of particular interest to criminal, politically-motivated, or state-sponsored actors for either direct exploitation of the data or to cause a loss of confidence by the public. To counter dynamic threats to the security and resilience of HVAs, it is essential that organizations take a more comprehensive view of the risk they pose and the information and information systems they target. The Cybersecurity and Infrastructure Security Agency (CISA) encourages its State, Local, Tribal and Territorial (SLTT) government partners, as well as private sector owners of critical infrastructure, to use this guide to learn more about the threat to HVAs and associated mitigation activities."
United States. Cybersecurity & Infrastructure Security Agency
2019?
-
CISA Insights: Ransomware Outbreak
From the Document: "Ransomware has rapidly emerged as the most visible cybersecurity risk playing out across our nation's networks, locking up private sector organizations and government agencies alike. And that's only what we're seeing - many more infections are going unreported, ransoms are being paid, and the vicious ransomware cycle continues on. We strongly urge you to consider ransomware infections as destructive attacks, not an event where you can simply pay off the bad guys and regain control of your network (do you really trust a cybercriminal?)."
United States. Cybersecurity & Infrastructure Security Agency
2019-08-21
-
Information and Communications Technology Supply Chain Risk Management Task Force: Threat Evaluation Working Group: Threat Scenarios
From the Executive Summary: "Cyber Supply Chain Risk Management (C-SCRM) is the process of identifying, assessing, preventing, and mitigating the risks associated with the distributed and interconnected nature of Information and Communications Technology (ICT) (including the Internet of Things) product and service supply chains. C-SCRM covers the entire life cycle of ICT, and encompasses hardware, software, and information assurance, along with traditional supply chain management and supply chain security considerations. [...] Working Group 2 (WG2), Threat Evaluation, was established for the purpose of the identification of processes and criteria for threat-based evaluation of ICT suppliers, products, and services. WG2 focused on threat evaluation as opposed to the more comprehensive task of risk assessment which considers threats as well as an organization's tolerance for risk, the criticality of the specific asset or business/mission purpose, and the impact of exploitation of specific vulnerabilities that might be exploited by an external threat."
United States. Cybersecurity & Infrastructure Security Agency
2020-02
-
Information and Communications Technology Supply Chain Risk Management Task Force: Interim Report
From the Executive Summary: "U.S. critical infrastructure and governments at all levels rely heavily on Information and Communications Technology (ICT). Ensuring resilience and trust in our ICT supply chain is more than just a cybersecurity issue - it touches national security, economic security, and public health and safety. Effective supply chain risk management is a national imperative. This effort will require a whole of government and whole of society approach. Continued technological advancement in the ICT supply chain - with welcomed developments in 5th Generation (5G) mobile communications - only increases the necessity to take this issue seriously. This Interim Report (Report) describes the work of the U.S. Department of Homeland Security (DHS) Cybersecurity and Infrastructure Security Agency (CISA)'s Information and Communications Technology (ICT) Supply Chain Risk Management (SCRM) Task Force (Task Force) over the past year. As described in this Report, the Task Force is a collaborative endeavor between representatives of industry and government designed to investigate and recommend methods to manage ICT supply chain risks. Its agile, mission-focused approach addresses these issues head-on and provides actionable outputs that create tangible results."
United States. Cybersecurity & Infrastructure Security Agency
2019-09
-
Cyber Risk Management Toolkit for Small Government Entities
From the Document: "According to the National League of Cities, there are approximately 39,000 municipal, county, and township government entities in the U.S., 90 percent of which serve small populations. Another 50,000 special purpose government entities and small school districts exist. These jurisdictions face considerable threats of theft of personally identifiable information (PII) and hacking that would disrupt critical infrastructure services. Unfortunately, the basic cyber risk management tools built for the commercial and nonprofit sectors do not address the subtle but important differences that define small government cyber risks. The cyber risk management solutions that currently exist for commercial and nonprofit entities need to be updated with research, analysis, and models that are unique to small government entities. Applying cyber risk management tools with the correct underlying research,analysis,and models for small government entities will fill an important gap in cybersecurity resources and tools for small government entities."
United States. Cybersecurity & Infrastructure Security Agency
-
Building Disaster Resiliency in the Public Sector by Leveraging Critical Healthcare Supply Chain Information
From the Document: "The nation's healthcare supply chain undergoes significant strain when there are disruptions to U.S. critical infrastructure. The supply chain depends upon private medical-surgical distributors who deliver supplies to 300,000 points-of-care, including hospitals, nursing homes, and other medical facilities. Due to limited suitable storage space in healthcare facilities, the needed health care products are usually sourced from local distribution centers,which typically make daily deliveries. As a result, any interruption of deliveries could cause significant shortages at these healthcare facilities. Currently, there is no mapping framework or formal method of communication that public agencies can use to identify where the nation's distribution centers are located and what supplies are available. This lack of information limits the ability of public and private partners to respond quickly to disasters by re-routing or prioritizing delivery of healthcare products."
United States. Cybersecurity & Infrastructure Security Agency
-
Condition Assessment Procedures for Concrete Dams with Post-Tensioned Anchors
From the Document: "Researchers at the US Army Engineer Research and Development Center (ERDC) sought to develop engineering procedures to estimate the current load-carrying capacity of ground anchorage, and other factors related to the deterioration and lifespan of dam anchors. Based on previous work developed during the FY2017 NIPP [National Infrastructure Protection Plan] Challenge by the team of researchers from Harvey Mudd College and Engineering Innovations, the ERDC needed to fully understand the benefits and limitations associated with the techniques developed by the 2017 project team. Early research into the use of Performance Based Testing (PBT) for evaluating the condition of anchors in concrete dams was conducted in 2017. The research procedures established during the 2017 project relied upon the dam's ability to pull the anchors into resonance. This process deviated from current testing procedures because typical post-tensioned anchor tests are designed using basic equilibrium (static) equations."
United States. Cybersecurity & Infrastructure Security Agency
-
Convenience Store and Fuel Retailer Emergency Preparedness: Resilience for the Last 50 Feet
From the Document: "Convenience stores and fuel retailers represent a critical component of the Nation's supply chain, providing necessary resources to communities across the Nation. Often referred to as the last 50 feet of the supply chain for fuel, food, water and financial services, convenience stores house 80 percent of the Nation's gasoline, 50 percent of its water, and operate 33 percent of its ATMs [automated teller machines]. Additionally, convenience stores and fuel retailers may have the only source of electricity (through on-site generators) during disaster incidents. They are a familiar presence in the community, and it is estimated that 165 million people shop at convenience stores or fuel retailers every day, generating approximately $601 billion in annual revenue. From an operations perspective, the situation is unique; 24/7 operations, diffused ownership, geographically at-risk locations, diversity of managers and employees, and low-margin businesses that, nonetheless, are the endpoint of the supply chain for food, fuel, water, and finance. Unfortunately, more often than not, they do not have procedures in place for when disasters take place."
United States. Cybersecurity & Infrastructure Security Agency
-
Expand and Enhance a Regional Common Operating Picture for Disaster Resilience (Phase 2)
From the Document: "During the 2017 NIPP [National Infrastructure Protection Plan] Challenge, the All Hazards Consortium (AHC) developed a private sector operated Sensitive Information Sharing Environment (SISE) and an associated SISE Working Group. The 2018 project focused on developing an operational plan and closer coordination between the National Infrastructure Coordinating Center (NICC) and the SISE. The coordination focused on developing strategies and plans, enhancing agreements, standards, data sets, technical processes and connections to organize and share information faster. The sharing attempted to increase decision maker confidence in data sets, create common federated agreements to use information, and address specific use case in both disaster management and active shooter scenarios."
United States. Cybersecurity & Infrastructure Security Agency
-
Location Detection of Rogue Base Stations/IMSI Catchers
From the Document: "Rogue base stations, also known as international mobile subscriber identity (IMSI) catchers, are devices that masquerade as cell phone towers, tricking cell phones within a certain radius into connecting to the device rather than a tower. During recent pilot tests conducted over the public airwaves, DHS detected anomalous activity that appeared to be consistent with rogue technology being used in proximity to sensitive facilities such as the White House. Some rogue base stations may have advanced features allowing interception and alteration of communication content. As a result of unknown capabilities, there is a need to detect rogue base stations in order to better protect the communication sector's critical infrastructure."
United States. Cybersecurity & Infrastructure Security Agency
-
Small Telecommunications Operator Information Sharing Study and Pilot Project
From the Document: "Cyber threat intelligence is a critical component to the development of a cyber security risk-management strategy. This intelligence assists with identifying and assessing threats and offers mitigation techniques toward managing cyber risks. The Federal government has long recognized the importance of public-private information sharing to improve an individual company's cyber program and collectively the nation's cyber posture. [...] Small telecommunications operators have limited financial, technical, and operational resources. As a result, many small operators do not actively participate in cyber threat information sharing programs and may not be receiving the necessary critical intelligence to inform and bolster their security efforts."
United States. Cybersecurity & Infrastructure Security Agency
-
Compliance Requirements for Release Chemicals [presentation]
This presentation covers the following topics: "[1] Release chemicals vs. Theft/Diversion chemicals; [2] Detection and Delay requirements; [3] Response requirements; [4] Cyber requirements; [5] Additional Considerations; and [6] Cyber Resources[.]"
United States. Cybersecurity & Infrastructure Security Agency
2019?
-
Supply Chain Risk Management [presentation]
From the Presentation: "[1] A renewed focus on supply chain risk management (SCRM) in the context of national security, its importance to the prosperity of the larger U.S. economy, and its entwined cyber threats, make SCRM a new and critical aspect of CISA [Cybersecurity and Infrastructure Security Agency] concern; [2] Increasing CISA is talking about SCRM as 'National Industrial Base Security' to allow for a precise conversation both on the nature of the evolving threat and how CISA means to adapt to protect the U.S.; [3] SCRM has historically been seen as the purview of the Department of Defense under The Defense Production Act and derived from that laws Title 3 authority; [4] This historic lens has focused much of the discussion about supply chain security around those industries and applications that held intrinsic defense applications and largely ignored the greater uses to society."
United States. Cybersecurity & Infrastructure Security Agency
2019?
-
Chemical Facility Antiterrorism Standards (CFATS): What to Expect During a CFATS Inspection [presentation]
From the Presentation: "Chemical Security Inspectors conduct several types of inspections and visits to facilities, including: [1] Compliance Assistance Visits: Conducted at any stage of CFATS [Chemical Facility Antiterrorism Standards] implementation to provide technical assistance and educate covered facilities on the CFATS regulation; [2] Authorization Inspections: Conducted at a covered facility after a Letter of Authorization in order to verify that the contents listed in the facility's authorized Site Security Plan (SSP) or Alternative Security Program (ASP) are accurate and complete, and that the equipment, processes, and procedures described are appropriate and sufficient to meet applicable performance standards; [3] Compliance Inspections: Conducted after a Letter of Approval to ensure both existing and planned security measures that are identified within the approved SSP or ASP continue to be implemented fully and on schedule[.]"
United States. Cybersecurity & Infrastructure Security Agency
McNeely, Christopher; Frey, Doug
2019-07
