Report a Cyber Incident
Contact Us

Resources & Tools

Providing individuals and businesses with resources and tools to reduce their overall cyber and physical security risks.

Grants
Strategic Assessments
Technical Assessments
Frameworks, Controls, Best Practices, & Guides
Cyber Tools
Situational Awareness

Grants

State and Local Cybersecurity Grant Program (SLCGP)
Nonprofit Security Grant Program (NSGP)
State Homeland Security Grant
USA Grants

Strategic Assessments

Reporting & Support Services

Cyber Security Evaluation Tool
CISA Cyber Resilience Review (CRR)
CISA External Dependencies Management Assessment (EDM)
CIS Cyber Infrastructure Survey

Plan of Action & Milestone Template

Plan of Action & MilestonesDownload

Technical Assessments

No-Cost CISA External Vulnerability Scans

Email CISA: vulnerability@cisa.dhs.gov

Subject Line: “Requesting Cyber Hygiene Services”

Cyber Security Evaluation Tool (CSET)
  1. Cybersecurity Framework Assessment
  2. Ransomware Readiness Assessment
  3. Cyber Resilience Review (CRR)
  4. External Dependencies Management Assessment (EDM)
  5. Cyber Infrastructure Survey

Frameworks, Controls, Best Practices, & Guides

CIS Critical Security Controls
NIST Cybersecurity Framework
MITRE ATT&CK
NIST Privacy Framework
NIST Contingency Planning Guide for Federal Information Systems
Cross-Sector Cybersecurity Performance Goals
.GOV Domain Registration
Continuity Planning
Business Continuity in a Box
Post-Quantum Cryptography Initiative

Cyber Tools

Secure Cloud Business Applications (SCuBA) Project
Eviction Strategies Tool
Physical Security Planning Workbook
Software Acquisition Guide: Supplier Response Web Tool (09-2025)
Insider Threat Mitigation
Federal DO NOT Procure List
Malware Next-Generation Analysis
Protective Domain Name System (DNS) Resolver
Thorium File Analysis and Result Aggregation Platform

CISA Logging Made Easy

LME Log Management and Threat Detection
LME YouTube Videos
How to Install
GitHub

Additional CISA Tools

CISA Automated Indicator Sharing (AIS)
CISA Cyber Resource Hub
CISA Tabletop Exercise Package (CTEP) Documents

Malcom

Network Traffic Analysis Tool Suite
Documentation
YouTube
Zeek Intelligence Framework
Live Monthly Office Hours (3rd Thursday at 10am MDT)

OpenEoX

End-of-Life (EOL) and End-of-Support (EOS) Information

GitHub Site
CISA Blog on OpenEoX

Situational Awareness

Bi-Monthly CISA State, Local and Tribal SOC Call

Open to all Critical Infrastructure Sectors

1st and 3rd Wednesday Each Month

Email to Join: cyber@hg.dhs.gov

DHS I&A Bi-Weekly Threat Intelligence Call

Open to all Critical Infrastructure Sectors

Email to Join: cyber@hg.dhs.gov

CISA Cyber Threats and Advisories
FBI Internet Crime Complaint Center (IC3)
K12 Security Information eXchange
National Council of ISACs