CENTER FOR INTERNET SECURITY INC

SECURITY BEST PRACTICES COMBINES BOTH THE SECURITY BENCHMARKS AND CRITICAL SECURITY CONTROLS PROGRAMS. THE SECURITY BENCHMARKS PROGRAM HELPS ORGANIZATIONS IMPROVE THEIR IT SECURITY POSTURE BY REDUCING RISKS RESULTING FROM INADEQUATE TECHNICAL SECURITY CONTROLS. TO ACCOMPLISH THIS, THE SECURITY BENCHMARKS PROGRAM FACILITATES THE CONSENSUS-BASED DEVELOPMENT OF: (1) BEST PRACTICE STANDARDS FOR SECURITY CONFIGURATION, (2) TOOLS FOR MEASURING INFORMATION SECURITY STATUS, AND (3) RESOURCES FOR MAKING INFORMED SECURITY INVESTMENT DECISIONS. THE CRITICAL SECURITY CONTROLS PROGRAM IS A RECOMMENDED SET OF ACTIONS FOR CYBER DEFENSE THAT PROVIDE SPECIFIC AND ACTIONABLE WAYS TO THWART THE MOST PERVASIVE ATTACKS. THEY ARE A RELATIVELY SHORT LIST OF HIGH-PRIORITY, HIGHLY EFFECTIVE DEFENSIVE ACTIONS THAT PROVIDE A "MUST DO, DO FIRST" STARTING POINT FOR EVERY ENTERPRISE SEEKING TO IMPROVE THEIR CYBER DEFENSE.

THE MS-ISAC PROGRAM PROVIDES A COMMON MECHANISM FOR RAISING THE LEVEL OF CYBERSECURITY READINESS AND RESPONSE IN EACH STATE AND WITH LOCAL GOVERNMENTS AND U.S. TRIBES AND TERRITORIES WITH THE GOAL OF IMPROVING THE OVERALL CYBERSECURITY POSTURE OF U.S. STATE, LOCAL, TRIBAL, AND TERRITORIAL (SLTT) GOVERNMENT ENTITIES. THE MS-ISAC PROGRAM COLLABORATES AND SHARES INFORMATION WITH ITS SLTT GOVERNMENT MEMBERS, PRIVATE SECTOR AND FEDERAL GOVERNMENT PARTNERS. THE MS-ISAC PROGRAM LEVERAGES TRUSTED RELATIONSHIPS WITH GOVERNMENT AND PRIVATE SECTOR ENTITIES TO GENERATE COORDINATED AND ACTIONABLE INTELLIGENCE PRODUCTS TO IMPROVE THE SECURITY POSTURE OF ALL PARTNERS. THE MS-ISAC ALSO PRODUCES EDUCATIONAL MATERIALS, MANAGES WORKGROUPS MADE UP OF SLTT MEMBERS, AND OPERATES IMPORTANT NATIONAL CYBER SECURITY PROGRAMS. THE DEPARTMENT OF HOMELAND SECURITY (DHS) DISCONTINUED FUNDING FOR THIS PROGRAM ON SEPTEMBER 29, 2025, AT WHICH TIME A FEE-BASED MEMBERSHIP MODEL WAS IMPLEMENTED, WHERE SLTT MEMBER ORGANIZATIONS PAY A YEARLY MEMBERSHIP FEE TO RECEIVE MS-ISAC BENEFITS AND SERVICES.