Advanced search Help
Clear all search criteria
Only 2/3! You are seeing results from the Public Collection, not the complete Full Collection. Sign in to search everything (see eligibility).
-
Insider Threat Programs for the Critical Manufacturing Sector Implementation Guide
From the Document: "The 'Insider Threat Programs for the Critical Manufacturing Sector Implementation Guide' was developed to provide guidance and information for critical manufacturing organizations to establish insider threat programs. These programs serve to gather, monitor, and assess information for insider threat detection and mitigation strategies. Insider threat programs are designed to detect, deter, and mitigate the risks associated with trusted insiders and protect the privacy of the workforce while reducing potential harm to the organization. Effective insider threat programs deploy risk management strategies that identify the assets or resources to be protected, identify potential threats, determine vulnerabilities, assess risk, and deploy countermeasures."
United States. Cybersecurity & Infrastructure Security Agency
2019-08
-
Overview of Risks Introduced by 5G Adoption in the United States
From the Key Findings: "The Department of Homeland Security (DHS)/Cybersecurity and Infrastructure Security Agency (CISA) assesses that Fifth Generation Mobile Network (5G) will present opportunities and challenges, and its implementation will introduce vulnerabilities related to supply chains, deployment, network security, and the loss of competition and trusted options."
United States. Cybersecurity & Infrastructure Security Agency
2019-07-31
-
Cybersecurity and Infrastructure Security Agency Strategic Intent: 'Defend Today, Secure Tomorrow'
From the Introduction: "This document lays out the strategic vision and operational priorities of the CISA [Cybersecurity and Infrastructure Security Agency] Director. It provides a general approach for how we execute our responsibilities and serves as a reference point for our employees and partners to guide our work and create unity of effort. It aims to position us to successfully meet our mission in the coming years and decades. It serves as the interim strategy as we develop a longer-term strategic plan. The common framework of goals and outcomes helps organize our mission execution and inform management decisions--including operations planning, requirements generation, budget formulation, and performance management. These are high-level outcomes that we will constantly seek to achieve; specific actions and milestones will appear in operational and organizational plans. These goals and outcomes give us a constant foundation for capability and direction as threats and the mission space dramatically evolve."
United States. Cybersecurity & Infrastructure Security Agency
2019-08
-
Enhancing Post-Disaster Access for Restoration of Community Lifelines and Essential Services
From the Introduction: "Similar to other essential service industries, communications and utility providers require coordinated access into disaster areas as early as possible after an emergency in order to conduct damage assessments, repair communications-related critical infrastructure, and effectively and safely restore essential services to enable community recovery. Currently, there is no uniform or standardized process--established at the federal, state, or local levels--for managing access across jurisdictional lines. In many instances, this lack of a common access management process has significantly hindered restoration efforts, increased restoration times and recovery costs, and placed additional stress on affected communities."
United States. Cybersecurity & Infrastructure Security Agency
2019-04-01
-
CFATS Outreach Implementation Plan, Fiscal Year 2019
From the Introduction: "Established in 2007, the Chemical Facility Anti-Terrorism Standards (CFATS) program has helped make the Nation more secure by identifying and regulating high-risk chemical facilities.1 On December 18, 2014, President Obama signed into law the 'Protecting and Securing Chemical Facilities from Terrorist Attacks Act of 2014' (the CFATS Act of 2014), Public Law 113-254 (6 U.S.C. 621 et seq.). The CFATS Act of 2014 reauthorizes the CFATS program and adds new provisions while preserving most of the existing CFATS regulations. The CFATS Act of 2014 directs the Department of Homeland Security (DHS or the Department) Secretary, among other provisions, to establish an outreach implementation plan (Plan) in coordination with the heads of appropriate Federal and State agencies, relevant business associations, and public and private stakeholders' labor organizations in order to identify chemical facilities of interest (CFOI) that may be subject to regulations under CFATS and to make available compliance assistance materials and information on CFATS-related education and training."
United States. Cybersecurity & Infrastructure Security Agency
-
Public Venue Bag Search Procedures Guide: Commercial Facilities Sector
From the Introduction: "This guide provides suggestions for developing and implementing bag search procedures at public assembly venues hosting a variety of events, which may include sporting events, concerts, family festivals, or other public gatherings. Venue owners, operators, and event organizers may also choose to use additional resources (e.g., consult law enforcement) to supplement the procedures outlined in this guide."
United States. Cybersecurity & Infrastructure Security Agency
2019-06
-
CFATS Deep Dive [presentation]
From the Presentation: "The SVA [Security Vulnerability Assessment] provides an analysis of the facility's security posture and potential vulnerabilities, which may include incomplete documentation, lack of training, or insufficient resources."
United States. Cybersecurity & Infrastructure Security Agency
Murray, Kelly Rae
2019?
-
Chemical Facility Anti-Terrorism Standards (CFATS): Compliance Lessons Learned and Guideposts [presentation]
From the Document: "[1] DHS designed and released an enhanced risk tiering methodology and the new CSAT 2.0 in fall 2016, retiering is now near completion; [2] These new tools allowed DHS to refine our Site Security Plan (SSP) tool using one of our previous best practices to align the risk-based performance standards into overarching security objectives or 'Guideposts'."
United States. Cybersecurity & Infrastructure Security Agency
2018-06
-
5G Wireless Networks: Market Penetration and Risk Factors [Infographic]
From the Document: "5G [5th generation] is the next generation of wireless networks, building upon existing 4G [4th generation] Long-Term Evolution (LTE) infrastructure and improving the bandwidth, capacity, and reliability of wireless broadband services. It is intended to meet increasing data and communication requirements, including capacity for tens of billions of connected devices that will make up the Internet of Things (IoT), ultra-low latency required for critical near-real time communications, and faster speeds to support emerging technologies. 5G is expected to bring security improvements and a better user experience, but supply chain, deployment, network security, and competition and choice vulnerabilities may affect the security and resilience of 5G networks."
United States. Cybersecurity & Infrastructure Security Agency
2019-07
-
CFATS Risk-Based Performance Standards (RBPS) 12iv--Screening for Terrorist Ties
From the Document: "The Cybersecurity and Infrastructure Security Agency's (CISA) Chemical Facility Anti-Terrorism Standards (CFATS) program identifies and works with high-risk facilities to ensure they have security measures in place to reduce the risk of more than 300 chemicals of interest (COI) being weaponized. High-risk facilities are assigned to one of four risk-based tiers and must develop a security plan meeting the 18 risk-based performance standards (RBPS) criteria. Facilities flexibility to select measures tailored to their tier level and unique circumstances."
United States. Cybersecurity & Infrastructure Security Agency
2019-11-01
-
Chemical Facility Anti-Terrorism Standards and Infrastructure Protection (IP) Gateway
From the Document: "The Infrastructure Protection (IP) Gateway serves as the single interface through which federal, state, local, tribal, territorial, and private sector partners can identify, analyze, and manage risk. Some Chemical Facility Anti-Terrorism Standards (CFATS) program information--such as facilities with hazardous chemicals that could be weaponized--can be accessed via the IP Gateway for entities with a need to know."
United States. Cybersecurity & Infrastructure Security Agency
2019-11-05
-
Counter Unmanned Aircraft Systems Legal Authorities
From the Document: "The Preventing Emerging Threats Act of 2018 grants the Department of Homeland Security statutory authority to counter credible threats from unmanned aircraft systems (UAS) to the safety or security of a covered facility or asset. This authority is paramount to the Department's mission to protect and secure the Homeland from evolving threats. The Department is in the process of coordinating with Components and stakeholders regarding the need for additional counter-UAS (CUAS) authorities."
United States. Cybersecurity & Infrastructure Security Agency
-
Building an International Network of Chemical Security Practitioners: The Global Congress on Emerging Threats [presentation]
From the G7 Global Partnership Action Plan: "Action Plan Items include: [1] Sharing best practices, lessons learned, etc. related to chemical facility security and the security of chemicals in transit; [2] Identifying conferences, meetings, and other opportunities for experts in the area of chemical security; [3] Developing model legislative and regulatory frameworks that may serve as tools for nations considering the implementation of regulations in the area of chemical security[.]"
United States. Cybersecurity & Infrastructure Security Agency
2019?
-
H. Rept. 113-481: Department of Homeland Security Appropriations Bill, 2015, Report Together with Additional Reviews to Accompany H.R. 4903, June 19, 2014
From the Summary of Major Recommendations in This Bill: "The Committee recommends $39,220,000,000 in discretionary funding for DHS for fiscal year 2015, [plus] $887,756,000, or [plus] 2.32 percent, above the amount requested and -$50,000,000, or -0.13 percent, below fiscal year 2014 enacted levels (when excluding requested, but unauthorized increases to fee collections). Funding for the Coast Guard's support of the Global War on Terrorism/Overseas Contingency Operations is not included in the bill nor is it addressed in any way by the Committee in this report since the President has yet to submit a request for such funds. The Committee does not include requested funding for increases to civilian pay; should the President provide a civilian pay increase for 2015, it is assumed that the cost of such a pay increase will be absorbed within other amounts appropriated for fiscal year 2015." From the Priorities in This Bill section: "This fiscal year 2015 appropriations bill for DHS reallocates scarce funding towards our Nation's security priorities and rectifies the President's ill-considered and imbalanced budget proposal for the Department. The funding recommendations and oversight requirements contained in this bill and report are intended to prioritize operations and frontline staffing to rectify the Administration's repeated, proposed reductions to border security, border enforcement, immigration enforcement, maritime security, state and local preparedness, and counternarcotics capabilities."
United States. Government Printing Office
2014-06-19
-
Cybersecurity and Infrastructure Security Agency: Fiscal Year 2019, SAFECOM Guidance on Emergency Communications Grants
From the Introduction: "The Department of Homeland Security (DHS) is mandated to administer responsibilities and authorities relating to the SAFECOM [safety communication] Program. Within DHS, the Cybersecurity and Infrastructure Security Agency (CISA) Emergency Communications Division--formerly the Office of Emergency Communications--is responsible for developing coordinated guidance for federal grant programs for public safety communications. As a result, CISA develops the annual SAFECOM Guidance on Emergency Communications Grants (SAFECOM Guidance) as a reference guide for entities applying for federal financial assistance for emergency communications projects. [...] The 'SAFECOM Guidance' provides general information on eligible activities, technical standards, and other terms and conditions that are common to most federal emergency communications grants. It aims to ensure that policies and standards across federal grant programs provide a consistent approach to improving emergency communications nationwide. The 'SAFECOM Guidance' achieves this consistency by aligning recommendations with the Nation's strategic plan for emergency communications, entitled the 'National Emergency Communications Plan' (NECP)."
United States. Cybersecurity & Infrastructure Security Agency
2019
-
Security of Soft Targets and Crowded Places--Resource Guide
From the Resource Matrix: "Segments of our society are inherently open to the general public, and by nature of their purpose do not incorporate strict security measures. Given the increased emphasis by terrorists and other extremist actors to leverage less sophisticated methods to inflict harm in public areas, it is vital that the public and private sectors collaborate to enhance security of locations such as transportation centers, parks, restaurants, shopping centers, special event venues, and similar facilities. Securing these locations is essential to preserving our way of life and sustaining the engine of our economy. The Infrastructure Security Division (ISD), part of the U.S. Department of Homeland Security (DHS) Cybersecurity and Infrastructure Security Agency (CISA), is committed to improving the security and resilience of soft targets by providing relevant tools, training, and programs to both the public and private sectors, and the general public. This guide is a catalog of ISD soft target resources, many of which were created in collaboration with our partners to ensure they are useful and reflective of the dynamic environment we live in."
United States. Cybersecurity & Infrastructure Security Agency
2019-04
-
Public Safety Communications Evolution [January 2019]
From the Document: "The Cybersecurity and Infrastructure Security Agency (CISA) developed this brochure in collaboration with SAFECOM and the National Council of Statewide Interoperability Coordinators (NCSWIC), with the support and input of public safety officials at multiple levels of government across the country. The Public Safety Communications Evolution brochure: 1. Helps educate the public safety community and elected and appointed officials about the technologies and services to support the future of public safety communications; 2. Describes the evolution of public safety communications and how legacy land mobile radio (LMR) communications used today continues to be the primary voice communications pathway for public safety personnel while the First Responder Network Authority's (FirstNet) Nationwide Public Safety Broadband Network (NPSBN) concurrently brings enhanced wireless broadband data communication capabilities through the deployment of a nationwide data network; 3. Discusses some ofthe most important requirements necessary to achieve the desired future long-term evolution of LMR technology networks and whether a transition is beneficial and operationally effective for the public safety community[.]"
United States. Cybersecurity & Infrastructure Security Agency
2019-01
-
Cybersecurity Directives [website]
"The Cybersecurity and Infrastructure Security Agency (CISA) at the Department of Homeland Security (DHS) develops and oversees the implementation of 'binding operational directives' and 'emergency directives,' which require action on the part of certain federal agencies in the civilian executive branch."
United States. Cybersecurity & Infrastructure Security Agency
-
Security and Resiliency Guide: Counter-Improvised Explosive Device (C-IED) Annex for Healthcare and Public Health Facility Stakeholders
From the Purpose: "Bombings using improvised explosive devices (IEDs) are a common security concern related to terrorism and violence in the United States (U.S.). Multiple high-profile, domestic incidents have occurred over the last several decades, and international attacks are frequently in the news. Healthcare facilities are not immune from IED incidents, including bomb threats, suspicious items or behavior, and attacks using IEDs. Between May 2016 and May 2019, media reports indicated that there were 243 healthcare-related IED incidents in the U.S. According to the World Health Organization (WHO), from 2016 to 2018, there was an annual average of 337 attacks on healthcare targets across 19 overseas countries that reported data. During that time span, those attacks resulted in an average of 325 deaths and 415 injuries per year. On average, 60% of attacks were bombings. This guide defines actions that management and staff at healthcare facilities can take to understand and improve their ability to perform counter-IED (C-IED) activities and make security decisions."
United States. Cybersecurity & Infrastructure Security Agency
-
Assessment of the Cyber Insurance Market
From the Objective: "The U.S. Department of Homeland Security's (DHS) National Risk Management Center (NRMC) within the Cybersecurity and Infrastructure Security Agency (CISA) requested that CISA's Office of the Chief Economist (OCE) assess the current state of the cyber insurance market. The aim of the assessment is to (1) analyze the cyber insurance market to understand the most current trends and challenges and (2) identify relevant efforts related to cyber insurance that could inform NRMC research and collaboration agenda and aid prioritization of requirements."
United States. Cybersecurity & Infrastructure Security Agency
2018-12-21
-
Houses of Worship: Hometown Security Report Series (May 2017)
From the Background: "Numerous studies estimate there are between 300,000 and 400,000 religious congregations in the United States. Many people think of a house of worship as a safe area where violence and emergencies cannot affect them. However, violence in a house of worship is not a new phenomenon and many facilities are developing and updating security and emergency plans and procedures to ensure the safety and security of their congregations, visitors, staff, and facilities."
United States. Cybersecurity & Infrastructure Security Agency
2017-05
-
Atirador Ativo: Como Reagir
"Atirador ativo é alguém que toma a iniciativa de matar ou tentar matar pessoas em ambiente delimitado e populoso; na maioria dos casos, os atiradores ativos usam armas de fogo sem nenhum padrão ou método definido para seleção das suas vítimas. As situações de atirador ativo são imprevisíveis e evoluem rapidamente. Em geral, é necessária a mobilização imediata da polícia para parar os tiros e reduzir os danos às vítimas. Como frequentemente as situações de atirador ativo terminam dentro de 10 a 15 minutos, antes da chegada da polícia ao local, as pessoas precisam estar preparadas mental e fisicamente para lidar com uma situação de atirador ativo."
United States. Cybersecurity & Infrastructure Security Agency
-
Chemical Facility Anti-Terrorism Standards: The Role of First Responders
From the Document: "Chemicals are vital to our Nation's economy, and reducing the risk of hazardous chemicals from being weaponized is a shared commitment between the Federal government, the private sector, and members of the community, including law enforcement, hazmat, and first responders."
United States. Cybersecurity & Infrastructure Security Agency
2019-11-05
-
Chemical Facility Anti-Terrorism Standards: Expedited Approval Program
From the Document: "The Cybersecurity and Infrastructure Security Agency's (CISA) Chemical Facility Anti-Terrorism Standards (CFATS) program works with high-risk facilities to ensure they have security measures in place to reduce the risk of certain hazardous chemicals from being weaponized. High-risk facilities must develop a security plan tailored to their tier level and unique circumstances. High-risk facilities designated as a Tier 3 or 4 have the option to use the Expedited Approval Program (EAP) for approval of their security plan."
United States. Cybersecurity & Infrastructure Security Agency
2019-11-05
-
Synchronization of Situational Awareness Between Critical Infrastructures and the Public Sector Using Unmanned Aerial Systems (UAS)
From the Document: "Rapid damage assessment of critical infrastructure elements following a disruptive event, and the sharing of that information allows both public and private sectors to more quickly establish situational awareness and optimally deploy response resources. This project focused on the development of plans, procedures, processes, and mechanisms for using Unmanned Aerial Systems (UAS) to provide rapid situational awareness and for sharing that information between public and private partners. This information was transmitted to State Emergency Operations Centers (EOC) and was used to create a common operational map that can be shared with the federal government, other jurisdictional organizations, and the private sector during emergency response situations. As the use of private sector UAS increases, first responders have the ability to leverage these resources to rapidly gain situational awareness across a larger geographic region."
United States. Cybersecurity & Infrastructure Security Agency
-
Biopolymer-Stabilized Earth Materials for Resilient and Adaptable Infrastructure
From the Document: "Earthen infrastructure in the U.S. comprises around 85,000 earthen dams, also known as embankment dams or earth filled dams, and most of the 100,000 miles of levees. Many earthen dams and levees face considerable risk from both natural and man-made hazards. Rehabilitation of these aging infrastructures relies mainly on the same materials used decades ago to build and reinforce the structures. Failure of any of these structures could result in major negative impacts on the U.S. economy and threaten the health and safety of surrounding communities."
United States. Cybersecurity & Infrastructure Security Agency
-
Safeguarding Patients by Enabling Accelerated Government and Utility Response Through Real Time Data Sharing of Hospital Generator Status During Disasters
From the Document: "In large scale disasters that cause widespread power outages, emergency power systems at hospitals and other medical facilities are the primary lifeline for maintaining critical operations. Failures of these systems can have deadly consequences and can trigger emergency evacuations, as seen during Hurricanes Katrina (2005), Sandy (2012), and Matthew (2016). [...] An estimated 2,000 plus hospitals have connected remote monitoring and automated reporting technology to their emergency power systems. They provide real time, automated alerts to facility staff and generator service providers any time a mechanical threat to emergency power is detected or if fuel levels run dangerously low. This technology affords an opportunity to provide government and private utilities with real time, early warning of a threat to emergency power at a hospital. Yet, U.S. hospitals do not regularly share this highly valuable data with government or utility officials because protocols often do not exist to govern how this information sharing should take place."
United States. Cybersecurity & Infrastructure Security Agency
-
Federal Preparedness Circular FPC-6
"This circular designates for planning purposes major resource and claimant assignments for the allocation and use of national resources in an emergency. It identifies emergency resource planning, management responsibilities, and claimancy assignments for certain Federal agencies within a national priorities and allocations system which may be exercised in the event of a national emergency."
United States. Government Printing Office
1977-04-11
-
#Protect2020 Strategic Plan
From the Background: "Through #Protect2020, CISA [Cybersecurity and Infrastructure Security Agency] leverages a wide range of offerings and services to build outreach programs and engage local election officials in the over 8,000 election jurisdictions across the country. CISA builds these crucial relationships within the election community by supporting election officials in their efforts to identify and plan for potential vulnerabilities to elections infrastructure ahead of and during the 2020 election cycle. CISA engages political campaigns by supporting the development of non-partisan informational products and conducting voluntary assessments, partners with the private sector to collaborate on best practices and vendor security, and works towards raising public awareness about foreign interference efforts."
United States. Cybersecurity & Infrastructure Security Agency
2020-02
-
CISA Insights: Remediate Vulnerabilities for Internet-Accessible Systems
From the Document: "Adversaries operating in cyberspace can make quick work of unpatched Internet-accessible systems. Moreover, the time between an adversary's discovery of a vulnerability and their exploitation of it (i.e., the 'time to exploit') is rapidly decreasing. Industry reports estimate that adversaries are now able to exploit a vulnerability within 15 days (on average) of discovery. After gaining entry into information systems and networks, these adversaries can cause significant harm. Internet-accessible information systems include any system that is globally accessible over the public internet (i.e., has a publicly routed internet protocol (IP) address or a hostname that resolves publicly in DNS to such an address) and encompass those systems directly managed by an organization, as well as those operated by a third-party on an organization's behalf. As organizations continue to expand their Internet presence through increased use and operation of interconnected and complex Internet accessible systems, it is more critical than ever to rapidly remediate vulnerabilities inherent to these systems. Failure to do so could allow malicious actors to compromise networks through exploitable, externally-facing systems. The Cybersecurity and Infrastructure Security Agency (CISA) encourages its State, Local, Tribal and Territorial (SLTT) government partners, as well as private sector owners of critical infrastructure, to use this guide to learn more about this threat and associated mitigation activities."
United States. Cybersecurity & Infrastructure Security Agency
2019?
