Resources & Tools
CISA offers an array of free resources and tools, such as technical assistance, exercises, cybersecurity assessments, free training, and more.
Services
CISA provides a variety of risk management and response services to build stakeholder resiliency and form partnerships.
CISA Gateway
The CISA Gateway provides various data collection, analysis, and response tools in one integrated system through a single user registration, management, and authentication process.
CISA Tabletop Exercise Packages
CISA Tabletop Exercise Packages are a comprehensive set of resources designed to assist stakeholders in conducting their own exercises and initiating discussions within their organizations about their ability to address a variety of threat scenarios.
CISA Vulnerability Scanning
This service evaluates external network presence by executing continuous scans of public, static IPs for accessible services and vulnerabilities. It provides weekly vulnerability reports and ad-hoc alerts.
Publications
The publication library contains guidance and policy papers, reports, strategies, program regulations, guidelines, brochures and more.
Report: Partnering to Safeguard K-12 Organizations from Cybersecurity Threats
Malicious cyber actors target K–12 education organizations with potentially catastrophic impacts on students, their families, teachers, and administrators. This CISA report helps schools reduce the risks of a cyber catastrophe.
2023-2025 Strategic Plan
CISA’s 2023-2025 Strategic Plan is the agency’s first, comprehensive strategic plan that will focus and guide the agency’s efforts over the next three years.
Training
As part of our continuing mission to reduce cybersecurity and physical security risk, CISA provides a robust offering of cybersecurity and critical infrastructure training opportunities.
External Dependencies Management (EDM)
EDM course gives students the capability to facilitate an assessment which is intended for system owners and operators of critical infrastructure organizations in the US, which measures and reports on the ability of the subject organization to manage external dependencies.
Active Shooter Preparedness Webinar Training
This training webinar was created by CISA to enhance awareness of, and response to, an active shooter incident. These are the materials that comprise the Active Shooter Preparedness Webinar Training.
Chemical Sector Security Awareness Training
The Chemical Sector Security Awareness Training is a foundational voluntary training course that provides an overview of security awareness at chemical facilities for private sector stakeholders.
All Resources and Tools
CISA provides free tools and resources to communities because we recognize that communities are the first line of defense in keeping the public safe and secure.
K-12 School Security Guide (3rd Edition) and School Security Assessment Tool
This Guide provides a doctrine to support schools in conducting vulnerability assessments and planning to implement layered physical security elements. The guide is designed for schools to employ in conjunction with the SSAT, a web-based tool that provides further guidance.
Infrastructure Survey Tool (IST)
The Infrastructure Survey Tool (IST) is a voluntary, web-based assessment to identify and document the overall security and resilience of a facility.