CINXE.COM
Small and Medium Businesses | Cybersecurity and Infrastructure Security Agency CISA
<!DOCTYPE html> <html lang="en" dir="ltr" prefix="og: https://ogp.me/ns#" class="no-js"> <head> <meta charset="utf-8" /> <link rel="canonical" href="https://www.cisa.gov/audiences/small-and-medium-businesses" /> <meta name="Generator" content="Drupal 10 (https://www.drupal.org)" /> <meta name="MobileOptimized" content="width" /> <meta name="HandheldFriendly" content="true" /> <meta name="viewport" content="width=device-width, initial-scale=1.0" /> <link rel="icon" href="/profiles/cisad8_gov/themes/custom/gesso/favicon.png" type="image/png" /> <title>Small and Medium Businesses | Cybersecurity and Infrastructure Security Agency CISA</title> <link rel="stylesheet" media="all" href="/core/misc/components/progress.module.css?ss1oyc" /> <link rel="stylesheet" media="all" href="/core/misc/components/ajax-progress.module.css?ss1oyc" /> <link rel="stylesheet" media="all" href="/core/modules/system/css/components/align.module.css?ss1oyc" /> <link rel="stylesheet" media="all" href="/core/modules/system/css/components/fieldgroup.module.css?ss1oyc" /> <link rel="stylesheet" media="all" href="/core/modules/system/css/components/container-inline.module.css?ss1oyc" /> <link rel="stylesheet" media="all" href="/core/modules/system/css/components/clearfix.module.css?ss1oyc" /> <link rel="stylesheet" media="all" href="/core/modules/system/css/components/details.module.css?ss1oyc" /> <link rel="stylesheet" media="all" href="/core/modules/system/css/components/hidden.module.css?ss1oyc" /> <link rel="stylesheet" media="all" href="/core/modules/system/css/components/item-list.module.css?ss1oyc" /> <link rel="stylesheet" media="all" href="/core/modules/system/css/components/js.module.css?ss1oyc" /> <link rel="stylesheet" media="all" href="/core/modules/system/css/components/nowrap.module.css?ss1oyc" /> <link rel="stylesheet" media="all" href="/core/modules/system/css/components/position-container.module.css?ss1oyc" /> <link rel="stylesheet" media="all" href="/core/modules/system/css/components/reset-appearance.module.css?ss1oyc" /> <link rel="stylesheet" media="all" href="/core/modules/system/css/components/resize.module.css?ss1oyc" /> <link rel="stylesheet" media="all" href="/core/modules/system/css/components/system-status-counter.css?ss1oyc" /> <link rel="stylesheet" media="all" href="/core/modules/system/css/components/system-status-report-counters.css?ss1oyc" /> <link rel="stylesheet" media="all" href="/core/modules/system/css/components/system-status-report-general-info.css?ss1oyc" /> <link rel="stylesheet" media="all" href="/core/modules/system/css/components/tablesort.module.css?ss1oyc" /> <link rel="stylesheet" media="all" href="/core/modules/views/css/views.module.css?ss1oyc" /> <link rel="stylesheet" media="all" href="/modules/contrib/better_social_sharing_buttons/css/better_social_sharing_buttons.css?ss1oyc" /> <link rel="stylesheet" media="all" href="/modules/contrib/ckeditor_accordion/css/accordion.frontend.css?ss1oyc" /> <link rel="stylesheet" media="all" href="/modules/contrib/extlink/css/extlink.css?ss1oyc" /> <link rel="stylesheet" media="all" href="/modules/contrib/paragraphs/css/paragraphs.unpublished.css?ss1oyc" /> <link rel="stylesheet" media="all" href="/profiles/cisad8_gov/modules/custom/toolbar_tasks/css/toolbar.css?ss1oyc" /> <link rel="stylesheet" media="all" href="//fonts.googleapis.com/css2?family=Montserrat:wght@400;500;600;700&family=Public+Sans:wght@400;500;600;700&display=swap" /> <link rel="stylesheet" media="all" href="/profiles/cisad8_gov/themes/custom/gesso/dist/css/styles.css?ss1oyc" /> <script type="application/json" data-drupal-selector="drupal-settings-json">{"path":{"baseUrl":"\/","pathPrefix":"","currentPath":"taxonomy\/term\/130","currentPathIsAdmin":false,"isFront":false,"currentLanguage":"en"},"pluralDelimiter":"\u0003","suppressDeprecationErrors":true,"gtag":{"tagId":"","consentMode":false,"otherIds":[],"events":[],"additionalConfigInfo":[]},"ajaxPageState":{"libraries":"eJxdjuFuwzAIhF_IjR_JwoY6XoiJALfN28_q2k7bnxPfCbjL5E6aTEoDTraCtl5THu7SLZqfPDmUjbC5aIJSRLFJj59puap0p46BHj63t4g6DuDlhaGKVKbkUGOd8p8X-ILHX3MPddgdLWYlwKJjz2-nsmTgNzmBkYYDFKrCsdo7-9dZRj9G5mYrYbDTnPaY51VwEc6gM9K2-emHwrArYZVbehWCDnx6KxZZAC8fvBTs4dbobvGpyy44mL4Bx7mDyA","theme":"guswds","theme_token":null},"ajaxTrustedUrl":[],"gtm":{"tagId":null,"settings":{"data_layer":"dataLayer","include_classes":false,"allowlist_classes":"","blocklist_classes":"","include_environment":false,"environment_id":"","environment_token":""},"tagIds":["GTM-53QLXSL9"]},"data":{"extlink":{"extTarget":false,"extTargetAppendNewWindowLabel":"(opens in a new window)","extTargetNoOverride":false,"extNofollow":false,"extTitleNoOverride":false,"extNoreferrer":false,"extFollowNoOverride":false,"extClass":"ext","extLabel":"(link is external)","extImgClass":false,"extSubdomains":true,"extExclude":"(.\\.gov$)|(.\\.mil$)|(.\\.mil\/)|(.\\.gov\/)","extInclude":"","extCssExclude":".c-menu--social,.c-menu--footer,.c-social-links,.c-text-cta--button,.usa-footer__contact-info","extCssInclude":"","extCssExplicit":"","extAlert":true,"extAlertText":"You are now leaving an official website of the United State Government (USG), the Department of Homeland Security (DHS) and the Cybersecurity and Infrastructure Security Agency (CISA). Links to non-USG, non-DHS and non-CISA sites are provided for the visitor\u0027s convenience and do not represent an endorsement by USG, DHS or CISA of any commercial or private issues, products or services. Note that the privacy policy of the linked site may differ from that of USG, DHS and CISA.","extHideIcons":false,"mailtoClass":"mailto","telClass":"","mailtoLabel":"(link sends email)","telLabel":"(link is a phone number)","extUseFontAwesome":false,"extIconPlacement":"append","extPreventOrphan":false,"extFaLinkClasses":"fa fa-external-link","extFaMailtoClasses":"fa fa-envelope-o","extAdditionalLinkClasses":"","extAdditionalMailtoClasses":"","extAdditionalTelClasses":"","extFaTelClasses":"fa fa-phone","whitelistedDomains":[],"extExcludeNoreferrer":""}},"ckeditorAccordion":{"accordionStyle":{"collapseAll":1,"keepRowsOpen":0,"animateAccordionOpenAndClose":1,"openTabsWithHash":1}},"user":{"uid":0,"permissionsHash":"0f75d40308887aebba0d5b0d2671305b73c9431902f86e672380a6dc6ab97d07"}}</script> <script src="/core/misc/drupalSettingsLoader.js?v=10.4.1"></script> <script src="/modules/contrib/google_tag/js/gtag.js?ss1oyc"></script> <script src="/modules/contrib/google_tag/js/gtm.js?ss1oyc"></script> <script src="https://dap.digitalgov.gov/Universal-Federated-Analytics-Min.js?agency=DHS&subagency=CISA&yt=true" id="_fed_an_ua_tag" async></script> </head> <body class="path-taxonomy not-front" id="top"> <div class="c-skiplinks"> <a href="#main" class="c-skiplinks__link u-visually-hidden u-focusable">Skip to main content</a> </div> <noscript><iframe src="https://www.googletagmanager.com/ns.html?id=GTM-53QLXSL9" height="0" width="0" style="display:none;visibility:hidden"></iframe></noscript> <div class="dialog-off-canvas-main-canvas" data-off-canvas-main-canvas> <div class="l-site-container"> <section class="usa-banner" aria-label="Official government website"> <div class="usa-accordion"> <header class="usa-banner__header"> <div class="usa-banner__inner"> <div class="grid-col-auto"> <img class="usa-banner__header-flag" src="/profiles/cisad8_gov/themes/custom/gesso/dist/images/us_flag_small.png" alt="U.S. flag" /> </div> <div class="grid-col-fill tablet:grid-col-auto"> <p class="usa-banner__header-text">An official website of the United States government</p> <p class="usa-banner__header-action" aria-hidden="true">Here鈥檚 how you know</p></div> <button class="usa-accordion__button usa-banner__button" aria-expanded="false" aria-controls="gov-banner"> <span class="usa-banner__button-text">Here鈥檚 how you know</span> </button> </div> </header> <div class="usa-banner__content usa-accordion__content" id="gov-banner"> <div class="grid-row grid-gap-lg"> <div class="usa-banner__guidance tablet:grid-col-6"> <img class="usa-banner__icon usa-media-block__img" src="/profiles/cisad8_gov/themes/custom/gesso/dist/images/icon-dot-gov.svg" alt="Dot gov"> <div class="usa-media-block__body"> <p> <strong>Official websites use .gov</strong> <br> A <strong>.gov</strong> website belongs to an official government organization in the United States. </p> </div> </div> <div class="usa-banner__guidance tablet:grid-col-6"> <img class="usa-banner__icon usa-media-block__img" src="/profiles/cisad8_gov/themes/custom/gesso/dist/images/icon-https.svg" alt="HTTPS"> <div class="usa-media-block__body"> <p> <strong>Secure .gov websites use HTTPS</strong> <br> A <strong>lock</strong> (<span class="icon-lock"><svg xmlns="http://www.w3.org/2000/svg" width="52" height="64" viewBox="0 0 52 64" class="usa-banner__lock-image" role="img" aria-labelledby="banner-lock-title banner-lock-description"><title id="banner-lock-title">Lock</title><desc id="banner-lock-description">A locked padlock</desc><path fill="#000000" fill-rule="evenodd" d="M26 0c10.493 0 19 8.507 19 19v9h3a4 4 0 0 1 4 4v28a4 4 0 0 1-4 4H4a4 4 0 0 1-4-4V32a4 4 0 0 1 4-4h3v-9C7 8.507 15.507 0 26 0zm0 8c-5.979 0-10.843 4.77-10.996 10.712L15 19v9h22v-9c0-6.075-4.925-11-11-11z"/></svg></span>) or <strong>https://</strong> means you鈥檝e safely connected to the .gov website. Share sensitive information only on official, secure websites. </p> </div> </div> </div> </div> </div> </section> <div class="c-block c-global-header-btns c-global-btns"> <div class="l-constrain l-constrain"> <div class="c-block__content"> <div id="block-globalbuttons" class="c-block c-block--provider-block-content c-block--id-block-content83069f9f-34fc-4d54-86ec-936a204f8088"> <div class="c-block__content"> <div class="c-field c-field--name-body c-field--type-text-with-summary c-field--label-hidden"> <div class="c-field__content"><p><a class="c-button c-button--basic c-button--blue" href="/resources-tools/resources/free-cybersecurity-services-and-tools" title="Free Cyber Services">Free Cyber Services</a><a class="c-button c-button--basic c-button--green60" href="/securebydesign">Secure by design </a><a class="c-button c-button--basic c-button--teal" href="/node/18883">Secure Our World</a><a class="c-button c-button--campaign" href="/node/8056">Shields Up</a><a class="c-button c-button--report" href="/report">Report A Cyber Issue</a></p></div></div> </div> </div> </div> </div> </div> <div class="usa-overlay"></div> <header class="usa-header usa-header--extended" role="banner"> <div class="usa-navbar"> <div class="l-constrain"> <div class="usa-navbar__row"> <div class="c-block c-site-header"> <div class="l-constrain"> <div class="c-block__content"> <div id="block-guswds-cisaheaderblock" class="c-block c-block--provider-block-content c-block--id-block-contentbc4e6844-86b4-4e20-b163-a73bda3d1d76"> <div class="c-block__content"> <div class="c-field c-field--name-body c-field--type-text-with-summary c-field--label-hidden"> <div class="c-field__content"><a href="/"><img src = "/sites/default/files/images/SVG/header_logo_tagline_update.svg" alt="Cybersecurity & Infrastructure Security Agency logo America鈥檚 Cyber Security Defense Agency National Coordinator For Critical Infrastructure Security and Resilience"/><img class="print-only" src = "/sites/default/files/images/SVG/header_logo_tagline_update.png" alt="Cybersecurity & Infrastructure Security Agency logo America鈥檚 Cyber Security Defense Agency National Coordinator For Critical Infrastructure Security and Resilience"/></a></div></div> </div> </div> </div> </div> </div> <div class="c-block c-site-header-mobile"> <div class="l-constrain"> <div class="c-block__content"> <div id="block-guswds-cisaheaderblockmobile" class="c-block c-block--provider-block-content c-block--id-block-content283396c9-cd36-4ce3-b1e2-9b5576ab4f50"> <div class="c-block__content"> <div class="c-field c-field--name-body c-field--type-text-with-summary c-field--label-hidden"> <div class="c-field__content"><a href="/"><img src = "/sites/default/files/images/SVG/mobile_logo_wordmark.svg" alt="CISA Logo"/></a></div></div> </div> </div> </div> </div> </div> <div class="usa-navbar__search"> <div class="usa-navbar__search-header"> <p>Search</p> </div> <div class="usa-search"> <script async src=https://cse.google.com/cse.js?cx=ffc4c79e29d5b3a8c></script> <div class="gcse-searchbox-only" data-resultsurl="/search"> </div> </div> </div> <button class="mobile-menu-button usa-menu-btn">Menu</button> </div> </div> </div> <div class="c-block c-tagline-mobile"> <div class="l-constrain"> <div class="c-block__content"> <div id="block-guswds-mobiletaglinecontainer" class="c-block c-block--provider-block-content c-block--id-block-contentc8d12e9d-7e48-4708-90c1-563609c4b566"> <div class="c-block__content"> <div class="c-field c-field--name-body c-field--type-text-with-summary c-field--label-hidden"> <div class="c-field__content"><p><center><img src = "/sites/default/files/images/SVG/header_tagline_mobile_update.svg" alt = "America's Cyber Defense Agency" /></center></div></div> </div> </div> </div> </div> </div> <nav class="usa-nav" role="navigation" aria-label="Primary navigation"> <div class="usa-nav__inner l-constrain"> <div class="usa-nav__row"> <button class="usa-nav__close">Close</button> <div class="usa-search"> <script async src=https://cse.google.com/cse.js?cx=ffc4c79e29d5b3a8c></script> <div class="gcse-searchbox-only" data-resultsurl="/search"> </div> </div> <ul class="usa-nav__primary usa-accordion"> <li class="usa-nav__primary-item topics"> <button class="usa-accordion__button usa-nav__link " aria-expanded="false" aria-controls="basic-mega-nav-section-1"> <span>Topics</span> </button> <div id="basic-mega-nav-section-1" class="usa-nav__submenu usa-megamenu" hidden=""> <div class="usa-megamenu__parent-link"> <a href="/topics">Topics</a> </div> <div class="usa-megamenu__menu-items"> <div class="usa-col"> <div class="usa-nav__submenu-item"> <a href="/topics/cybersecurity-best-practices"> <span>Cybersecurity Best Practices</span> </a> </div> </div> <div class="usa-col"> <div class="usa-nav__submenu-item"> <a href="/topics/cyber-threats-and-advisories"> <span>Cyber Threats and Advisories</span> </a> </div> </div> <div class="usa-col"> <div class="usa-nav__submenu-item"> <a href="/topics/critical-infrastructure-security-and-resilience"> <span>Critical Infrastructure Security and Resilience</span> </a> </div> </div> <div class="usa-col"> <div class="usa-nav__submenu-item"> <a href="/topics/election-security"> <span>Election Security</span> </a> </div> </div> <div class="usa-col"> <div class="usa-nav__submenu-item"> <a href="/topics/emergency-communications"> <span>Emergency Communications</span> </a> </div> </div> <div class="usa-col"> <div class="usa-nav__submenu-item"> <a href="/topics/industrial-control-systems"> <span>Industrial Control Systems</span> </a> </div> </div> <div class="usa-col"> <div class="usa-nav__submenu-item"> <a href="/topics/information-communications-technology-supply-chain-security"> <span>Information and Communications Technology Supply Chain Security</span> </a> </div> </div> <div class="usa-col"> <div class="usa-nav__submenu-item"> <a href="/topics/partnerships-and-collaboration"> <span>Partnerships and Collaboration</span> </a> </div> </div> <div class="usa-col"> <div class="usa-nav__submenu-item"> <a href="/topics/physical-security"> <span>Physical Security</span> </a> </div> </div> <div class="usa-col"> <div class="usa-nav__submenu-item"> <a href="/topics/risk-management"> <span>Risk Management</span> </a> </div> </div> </div> <div class="c-menu-feature-links"> <div class="c-menu-feature-links__title"> <a href="/audiences"> How can we help? </a> </div> <div class="c-menu-feature-links__content"><a href="/topics/government">Government</a><a href="/topics/educational-institutions">Educational Institutions</a><a href="/topics/industry">Industry</a><a href="/topics/state-local-tribal-and-territorial">State, Local, Tribal, and Territorial</a><a href="/topics/individuals-and-families">Individuals and Families</a><a href="/topics/small-and-medium-businesses">Small and Medium Businesses</a><a href="/audiences/find-help-locally">Find Help Locally</a><a href="/audiences/faith-based-community">Faith-Based Community</a><a href="/audiences/executives">Executives</a><a href="/audiences/high-risk-communities">High-Risk Communities</a></div> </div> </div> </li> <li class="usa-nav__primary-item spotlight"> <a href="/spotlight" class="usa-nav__link" > <span>Spotlight</span> </a> </li> <li class="usa-nav__primary-item resources--tools"> <button class="usa-accordion__button usa-nav__link " aria-expanded="false" aria-controls="basic-mega-nav-section-3"> <span>Resources & Tools</span> </button> <div id="basic-mega-nav-section-3" class="usa-nav__submenu usa-megamenu" hidden=""> <div class="usa-megamenu__parent-link"> <a href="/resources-tools">Resources & Tools</a> </div> <div class="usa-megamenu__menu-items"> <div class="usa-col"> <div class="usa-nav__submenu-item"> <a href="/resources-tools/all-resources-tools"> <span>All Resources & Tools</span> </a> </div> </div> <div class="usa-col"> <div class="usa-nav__submenu-item"> <a href="/resources-tools/services"> <span>Services</span> </a> </div> </div> <div class="usa-col"> <div class="usa-nav__submenu-item"> <a href="/resources-tools/programs"> <span>Programs</span> </a> </div> </div> <div class="usa-col"> <div class="usa-nav__submenu-item"> <a href="/resources-tools/resources"> <span>Resources</span> </a> </div> </div> <div class="usa-col"> <div class="usa-nav__submenu-item"> <a href="/resources-tools/training"> <span>Training</span> </a> </div> </div> <div class="usa-col"> <div class="usa-nav__submenu-item"> <a href="/resources-tools/groups"> <span>Groups</span> </a> </div> </div> </div> </div> </li> <li class="usa-nav__primary-item news--events"> <button class="usa-accordion__button usa-nav__link " aria-expanded="false" aria-controls="basic-mega-nav-section-4"> <span>News & Events</span> </button> <div id="basic-mega-nav-section-4" class="usa-nav__submenu usa-megamenu" hidden=""> <div class="usa-megamenu__parent-link"> <a href="/news-events">News & Events</a> </div> <div class="usa-megamenu__menu-items"> <div class="usa-col"> <div class="usa-nav__submenu-item"> <a href="/news-events/news"> <span>News</span> </a> </div> </div> <div class="usa-col"> <div class="usa-nav__submenu-item"> <a href="/news-events/events"> <span>Events</span> </a> </div> </div> <div class="usa-col"> <div class="usa-nav__submenu-item"> <a href="/news-events/cybersecurity-advisories"> <span>Cybersecurity Alerts & Advisories</span> </a> </div> </div> <div class="usa-col"> <div class="usa-nav__submenu-item"> <a href="/news-events/directives"> <span>Directives</span> </a> </div> </div> <div class="usa-col"> <div class="usa-nav__submenu-item"> <a href="/news-events/request-speaker"> <span>Request a CISA Speaker</span> </a> </div> </div> <div class="usa-col"> <div class="usa-nav__submenu-item"> <a href="/news-events/congressional-testimony"> <span>Congressional Testimony</span> </a> </div> </div> <div class="usa-col"> <div class="usa-nav__submenu-item"> <a href="/cisa-conferences"> <span>CISA Conferences</span> </a> </div> </div> <div class="usa-col"> <div class="usa-nav__submenu-item"> <a href="/cisa-live"> <span>CISA Live!</span> </a> </div> </div> </div> </div> </li> <li class="usa-nav__primary-item careers"> <button class="usa-accordion__button usa-nav__link " aria-expanded="false" aria-controls="basic-mega-nav-section-5"> <span>Careers</span> </button> <div id="basic-mega-nav-section-5" class="usa-nav__submenu usa-megamenu" hidden=""> <div class="usa-megamenu__parent-link"> <a href="/careers">Careers</a> </div> <div class="usa-megamenu__menu-items"> <div class="usa-col"> <div class="usa-nav__submenu-item"> <a href="/careers/benefits-perks"> <span>Benefits & Perks</span> </a> </div> </div> <div class="usa-col"> <div class="usa-nav__submenu-item"> <a href="/careers/hirevue-applicant-reasonable-accommodations-process"> <span>HireVue Applicant Reasonable Accommodations Process</span> </a> </div> </div> <div class="usa-col"> <div class="usa-nav__submenu-item"> <a href="/general-recruitment-and-hiring-faqs"> <span>Hiring</span> </a> </div> </div> <div class="usa-col"> <div class="usa-nav__submenu-item"> <a href="/careers/resume-application-tips"> <span>Resume & Application Tips</span> </a> </div> </div> <div class="usa-col"> <div class="usa-nav__submenu-item"> <a href="/students-recent-graduates-employment-opportunities"> <span>Students & Recent Graduates</span> </a> </div> </div> <div class="usa-col"> <div class="usa-nav__submenu-item"> <a href="/careers/veteran-and-military-spouse-employment-opportunities"> <span>Veteran and Military Spouses</span> </a> </div> </div> </div> </div> </li> <li class="usa-nav__primary-item about"> <button class="usa-accordion__button usa-nav__link " aria-expanded="false" aria-controls="basic-mega-nav-section-6"> <span>About</span> </button> <div id="basic-mega-nav-section-6" class="usa-nav__submenu usa-megamenu" hidden=""> <div class="usa-megamenu__parent-link"> <a href="/about">About</a> </div> <div class="usa-megamenu__menu-items"> <div class="usa-col"> <div class="usa-nav__submenu-item"> <a href="/about/divisions-offices"> <span>Divisions & Offices</span> </a> </div> </div> <div class="usa-col"> <div class="usa-nav__submenu-item"> <a href="/about/regions"> <span>Regions</span> </a> </div> </div> <div class="usa-col"> <div class="usa-nav__submenu-item"> <a href="/about/leadership"> <span>Leadership</span> </a> </div> </div> <div class="usa-col"> <div class="usa-nav__submenu-item"> <a href="/doing-business-cisa"> <span>Doing Business with CISA</span> </a> </div> </div> <div class="usa-col"> <div class="usa-nav__submenu-item"> <a href="/site-links"> <span>Site Links</span> </a> </div> </div> <div class="usa-col"> <div class="usa-nav__submenu-item"> <a href="/cisa-github"> <span>CISA GitHub</span> </a> </div> </div> <div class="usa-col"> <div class="usa-nav__submenu-item"> <a href="/cisa-central"> <span>CISA Central</span> </a> </div> </div> <div class="usa-col"> <div class="usa-nav__submenu-item"> <a href="/about/contact-us"> <span>Contact Us </span> </a> </div> </div> <div class="usa-col"> <div class="usa-nav__submenu-item"> <a href="/about/contact-us/subscribe-updates-cisa"> <span>Subscribe</span> </a> </div> </div> <div class="usa-col"> <div class="usa-nav__submenu-item"> <a href="/eeo-policies"> <span>Policies & Plans</span> </a> </div> </div> </div> </div> </li> </ul> <div class="c-block c-global-menu-btns c-global-btns"> <div class="c-block__content"> <div id="block-globalbuttons" class="c-block c-block--provider-block-content c-block--id-block-content83069f9f-34fc-4d54-86ec-936a204f8088"> <div class="c-block__content"> <div class="c-field c-field--name-body c-field--type-text-with-summary c-field--label-hidden"> <div class="c-field__content"><p><a class="c-button c-button--basic c-button--blue" href="/resources-tools/resources/free-cybersecurity-services-and-tools" title="Free Cyber Services">Free Cyber Services</a><a class="c-button c-button--basic c-button--green60" href="/securebydesign">Secure by design </a><a class="c-button c-button--basic c-button--teal" href="/node/18883">Secure Our World</a><a class="c-button c-button--campaign" href="/node/8056">Shields Up</a><a class="c-button c-button--report" href="/report">Report A Cyber Issue</a></p></div></div> </div> </div> </div> </div> </div> </div> </nav> </header> <div class="l-breadcrumb"> <div class="l-constrain"> <div class="l-breadcrumb__row"> <nav aria-labelledby="breadcrumb-label" class="c-breadcrumb" role="navigation"> <div class="l-constrain"> <div id="breadcrumb-label" class="c-breadcrumb__title u-visually-hidden">Breadcrumb</div> <ol class="c-breadcrumb__list"> <li class="c-breadcrumb__item"> <a class="c-breadcrumb__link" href="/">Home</a> </li> <li class="c-breadcrumb__item"> <a class="c-breadcrumb__link" href="/audiences">How Can We Help?</a> </li> <li class="c-breadcrumb__item"> <span aria-current="page"> Small and Medium Businesses </span> </li> </ol> </div> </nav> <div id="block-bettersocialsharingbuttons" class="c-block c-block--social-share c-block--provider-better-social-sharing-buttons c-block--id-social-sharing-buttons-block"> <div class="c-block__content"> <div class="c-block__row"> <span>Share:</span> <div style="display: none"><link rel="preload" href="/modules/contrib/better_social_sharing_buttons/assets/dist/sprites/social-icons--no-color.svg" as="image" type="image/svg+xml" crossorigin="anonymous" /></div> <div class="social-sharing-buttons"> <a href="https://www.facebook.com/sharer/sharer.php?u=https://www.cisa.gov/audiences/small-and-medium-businesses&title=Small%20and%20Medium%20Businesses" target="_blank" title="Share to Facebook" aria-label="Share to Facebook" class="social-sharing-buttons-button share-facebook" rel="noopener"> <svg aria-hidden="true" width="18px" height="18px" style="border-radius:3px;"> <use href="/modules/contrib/better_social_sharing_buttons/assets/dist/sprites/social-icons--no-color.svg#facebook" /> </svg> </a> <a href="https://twitter.com/intent/tweet?text=Small%20and%20Medium%20Businesses+https://www.cisa.gov/audiences/small-and-medium-businesses" target="_blank" title="Share to X" aria-label="Share to X" class="social-sharing-buttons-button share-x" rel="noopener"> <svg aria-hidden="true" width="18px" height="18px" style="border-radius:3px;"> <use href="/modules/contrib/better_social_sharing_buttons/assets/dist/sprites/social-icons--no-color.svg#x" /> </svg> </a> <a href="https://www.linkedin.com/sharing/share-offsite/?url=https://www.cisa.gov/audiences/small-and-medium-businesses" target="_blank" title="Share to Linkedin" aria-label="Share to Linkedin" class="social-sharing-buttons-button share-linkedin" rel="noopener"> <svg aria-hidden="true" width="18px" height="18px" style="border-radius:3px;"> <use href="/modules/contrib/better_social_sharing_buttons/assets/dist/sprites/social-icons--no-color.svg#linkedin" /> </svg> </a> <a href="mailto:?subject=Small%20and%20Medium%20Businesses&body=https://www.cisa.gov/audiences/small-and-medium-businesses" title="Share to Email" aria-label="Share to Email" class="social-sharing-buttons-button share-email" target="_blank" rel="noopener"> <svg aria-hidden="true" width="18px" height="18px" style="border-radius:3px;"> <use href="/modules/contrib/better_social_sharing_buttons/assets/dist/sprites/social-icons--no-color.svg#email" /> </svg> </a> </div> </div> </div> </div> </div> </div> </div> <main id="main" class="c-main" role="main" tabindex="-1"> <div class="l-content"> <div class="l-sidebar"> <div class="l-sidebar__header"> <div class="c-hero c-hero--overlap"> <div class="c-hero__image"> <picture> <source srcset="/sites/default/files/styles/hero_large/public/2023-08/small_and_medium_businesses_photo.jpeg?h=3a3df0c5&itok=B9RqGJWL 1x" media="all and (min-width: 1024px)" type="image/jpeg" width="1800" height="600"/> <source srcset="/sites/default/files/styles/hero_medium/public/2023-08/small_and_medium_businesses_photo.jpeg?h=3a3df0c5&itok=8s6n8LKZ 1x" media="all and (min-width: 0px)" type="image/jpeg" width="1200" height="500"/> <img loading="lazy" width="1800" height="600" src="/sites/default/files/styles/hero_large/public/2023-08/small_and_medium_businesses_photo.jpeg?h=3a3df0c5&itok=B9RqGJWL" alt="SOW Small and Medium Businesses" /> </picture> </div> <div class="c-hero__inner"> <div class="l-constrain c-hero__constrain"> <div class="c-hero__content"> <h1 class="c-hero__title">Small and Medium Businesses</h1> <div class="c-hero__subtitle">Small businesses have valuable information that cyber criminals seek and often have fewer resources dedicated to cybersecurity.</div> <div class="c-hero__decoration"></div> </div> </div> </div> </div> </div> <div class="l-sidebar__row"> <div class="l-sidebar__main"> <div class="c-wysiwyg"> <div class="l-constrain"> <div class="c-wysiwyg__inner"> <div class="c-field c-field--name-field-full-html c-field--type-text-long c-field--label-hidden"> <div class="c-field__content"><p>Small- and medium-sized businesses are key to vibrant communities, a strong economy, and often play critical roles in the supply chain. CISA offers free information and tools to help small businesses protect their people, customers, intellectual property, and other sensitive data cyber and physical threats. </p></div></div> </div> </div> </div> <div class="c-collection c-collection--four-column c-collection--gray"> <div class="l-constrain"> <div class="c-collection__row"> <div class="c-collection__content"> <h2 class="c-collection__title"><span class="c-collection__title-wrap">Featured Content</span></h2> </div> <div class="c-collection__cards"> <div class="c-card c-card--stacked"> <div class="c-card__row"> <div class="c-card__image"> <img loading="lazy" src="/sites/default/files/styles/16x9_small/public/2023-01/adobestock_191549558.jpg?h=2e5cdddf&itok=fQafftgt" width="800" height="450" alt="A "DO NOT CROSS" Police banner located at a crime scene" /> </div> <div class="c-card__inner"> <h3 class="c-card__title"> <a href="/topics/physical-security/active-shooter-preparedness"> Active Shooter Preparedness </a> </h3> <div class="c-card__body"><p>Active shooter incidents are often unpredictable and evolve quickly. Amid the chaos, anyone can play an integral role in mitigating the impacts of an active shooter incident.</p></div> </div> </div> </div> <div class="c-card c-card--stacked"> <div class="c-card__row"> <div class="c-card__image"> <img loading="lazy" src="/sites/default/files/styles/16x9_small/public/2023-01/adobestock_145062302.jpg?h=aa17ecc9&itok=Dc6U9yuh" width="800" height="450" alt="A person walking away from a suspicious bag" /> </div> <div class="c-card__inner"> <h3 class="c-card__title"> <a href="/topics/physical-security/bombing-prevention"> Bombing Prevention </a> </h3> <div class="c-card__body"><p>Explore resources that protect life and critical infrastructure and build capabilities to prevent, protect against, respond to, and mitigate bombing incidents.</p></div> </div> </div> </div> <div class="c-card c-card--stacked"> <div class="c-card__row"> <div class="c-card__image"> <img loading="lazy" src="/sites/default/files/styles/16x9_small/public/2023-08/CPG%20Teaser.png?h=c3e947a1&itok=2Pb4D0jE" width="800" height="450" alt="A graphic that says "Cybersecurity Performance Goals"" /> </div> <div class="c-card__inner"> <h3 class="c-card__title"> <a href="/cross-sector-cybersecurity-performance-goals"> Cross-Sector Cybersecurity Performance Goals </a> </h3> <div class="c-card__body"><p>The CPGs are voluntary practices that outline the highest-priority baseline measures businesses and critical infrastructure owners of all sizes can take to protect themselves against cyber threats.</p></div> </div> </div> </div> <div class="c-card c-card--stacked"> <div class="c-card__row"> <div class="c-card__image"> <img loading="lazy" src="/sites/default/files/styles/16x9_small/public/2024-04/AdobeStock_101894102.jpeg?h=c6980913&itok=qYN7vVRd" width="800" height="450" alt="An image of a coffee shop owner and patrons sitting at a table. " /> </div> <div class="c-card__inner"> <h3 class="c-card__title"> <a href="/cyber-guidance-small-businesses"> Cyber Guidance for Small Businesses </a> </h3> <div class="c-card__body"><p>Cyber incidents have surged among small businesses that often do not have the resources to defend against devastating attacks like ransomware. The security landscape has changed, and our advice needs to evolve with it.</p></div> </div> </div> </div> <div class="c-card c-card--stacked"> <div class="c-card__row"> <div class="c-card__image"> <img loading="lazy" src="/sites/default/files/styles/16x9_small/public/2023-08/TEASER%20-%20SecurebyDesign%20-%20376x226px.png?h=b5d63aee&itok=avN2RM0i" width="800" height="450" alt="Text of Secure by Design on grid background in a colorful isometric design" /> </div> <div class="c-card__inner"> <h3 class="c-card__title"> <a href="/securebydesign"> Secure by Design </a> </h3> <div class="c-card__body"><p>Every technology provider must take ownership at the executive level to ensure their products are both secure by design and secure by default.</p></div> </div> </div> </div> <div class="c-card c-card--stacked"> <div class="c-card__row"> <div class="c-card__image"> <img loading="lazy" src="/sites/default/files/styles/16x9_small/public/2022-11/stopransomware.png?h=ae1281eb&itok=1ezNsTHr" width="800" height="450" alt="Stop Ransomware" /> </div> <div class="c-card__inner"> <h3 class="c-card__title"> <a href="https://www.cisa.gov/stopransomware"> Stop Ransomware </a> </h3> <div class="c-card__body"><p>StopRansomware.gov is the U.S. Government's official one-stop location for resources to tackle ransomware more effectively.</p></div> </div> </div> </div> <div class="c-card c-card--stacked"> <div class="c-card__row"> <div class="c-card__image"> <img loading="lazy" src="/sites/default/files/styles/16x9_small/public/2023-02/23_0224_webpages_safecom_cta-banners_cta_apps.png?h=999314bb&itok=YPxfV_2N" width="800" height="450" alt="Mobile apps concept on a mobile device" /> </div> <div class="c-card__inner"> <h3 class="c-card__title"> <a href="/topics/physical-security/non-confrontational-techniques/power-hello"> The Power of Hello </a> </h3> <div class="c-card__body"><p>Industries face a variety of threats, both internal and external, from hostile governments, terrorist groups, disgruntled employees and malicious introducers. Alert employees can spot suspicious activity and report it. </p></div> </div> </div> </div> <div class="c-card c-card--stacked"> <div class="c-card__row"> <div class="c-card__image"> <img loading="lazy" src="/sites/default/files/styles/16x9_small/public/2023-11/23-1114%20Shields%20Ready%20Social%20Web%20Graphics_IMAGE%20CTA%20%2B%20HOMEPAGE%20CAROUSEL%20-%20700x394_0.png?h=999314bb&itok=BXuFVV_b" width="800" height="450" alt="Shields Ready" /> </div> <div class="c-card__inner"> <h3 class="c-card__title"> <a href="https://www.cisa.gov/shields-ready"> Shields Ready </a> </h3> <div class="c-card__body"><p>CISA鈥檚 Shields Ready campaign is about making resilience during incidents a reality by taking action before incidents occur.</p></div> </div> </div> </div> <div class="c-card c-card--stacked"> <div class="c-card__row"> <div class="c-card__image"> <img loading="lazy" src="/sites/default/files/styles/16x9_small/public/2023-05/cisa.gov_small_business_image_cta-carousel.jpg?h=999314bb&itok=VnaREZgA" width="800" height="450" alt="Small Business Week" /> </div> <div class="c-card__inner"> <h3 class="c-card__title"> <a href="https://www.cisa.gov/small-business-week"> Small Business Week </a> </h3> <div class="c-card__body"><p>CISA proudly celebrates the nation鈥檚 entrepreneurs and small businesses and their contributions to the economy during National Small Business Week! </p></div> </div> </div> </div> <div class="c-card c-card--stacked"> <div class="c-card__row"> <div class="c-card__image"> <img loading="lazy" src="/sites/default/files/styles/16x9_small/public/2023-01/chemlockteaser.png?h=8f59ad19&itok=f9TuhsNN" width="800" height="450" alt="ChemLock wordmark" /> </div> <div class="c-card__inner"> <h3 class="c-card__title"> <a href="/resources-tools/programs/chemlock"> ChemLock </a> </h3> <div class="c-card__body"><p>CISA's ChemLock program is a voluntary program that provides facilities that possess dangerous chemicals with no-cost services and tools to help them better understand the risks they face and improve their chemical security posture in a way that work</p></div> </div> </div> </div> </div> </div> </div> </div> <div class="c-collection c-collection--three-or-less c-collection--blue-lighter"> <div class="l-constrain"> <div class="c-collection__row"> <div class="c-collection__content"> <h2 class="c-collection__title"><span class="c-collection__title-wrap">Alerts, Advisories and Directives </span></h2> </div> <div class="c-collection__cards"> <div class="c-card c-card--shadow"> <div class="c-card__row"> <div class="c-card__inner"> <div class="c-card__eyebrow"> JANUARY 22, 2025 | CYBERSECURITY ADVISORY | AA25-022A </div> <h3 class="c-card__title"> <a href="/news-events/cybersecurity-advisories/aa25-022a"> <span>Threat Actors Chained Vulnerabilities in Ivanti Cloud Service Applications</span> </a> </h3> <div class="c-card__body"> The Cybersecurity and Infrastructure Security Agency (CISA) and Federal Bureau of Investigation (FBI) are releasing this joint Cybersecurity Advisory in response to exploitation in September 2024 of vulnerabilities in Ivanti Cloud Service Appliances (CSA). </div> <div class="c-card__multilingual"></div> </div> </div> </div> <div class="c-card c-card--shadow"> <div class="c-card__row"> <div class="c-card__inner"> <div class="c-card__eyebrow"> JANUARY 16, 2025 | ALERT </div> <h3 class="c-card__title"> <a href="/news-events/alerts/2025/01/16/cisa-and-partners-release-call-action-close-national-software-understanding-gap"> <span>CISA and Partners Release Call to Action to Close the National Software Understanding Gap</span> </a> </h3> <div class="c-card__body"> This report further explores the opportunity for enhanced coordination to strengthen technical foundations and progress towards a more vigorous understanding of software on a national scale. </div> <div class="c-card__multilingual"></div> </div> </div> </div> <div class="c-card c-card--shadow"> <div class="c-card__row"> <div class="c-card__inner"> <div class="c-card__eyebrow"> JANUARY 15, 2025 | ALERT </div> <h3 class="c-card__title"> <a href="/news-events/alerts/2025/01/15/cisa-releases-microsoft-expanded-cloud-logs-implementation-playbook"> <span>CISA Releases Microsoft Expanded Cloud Logs Implementation Playbook</span> </a> </h3> <div class="c-card__multilingual"></div> </div> </div> </div> </div> </div> </div> </div> <div class="c-paragraph c-paragraph--type-listing-blocks c-paragraph--view-mode-default l-page-section"> <div class="l-constrain"> <h2 class="l-page-section__title"> Contact Your Regional Office </h2> <div class="l-page-section__content"> <div class="c-collection c-collection--four-column"> <div class="l-constrain"> <div class="c-collection__row"> <div class="c-collection__cards"> <div class="c-view__row"> <article class="is-unpublished c-teaser" role="article"> <div class="c-teaser__row"> <div class="c-teaser__media"> <a href="/about/regions/region-1" tabindex="-1" target="_self" title="Region 1"> <img loading="lazy" src="/sites/default/files/styles/16x9_medium/public/2023-01/cisa_region_number_teasers_region_1_0.png?h=c653ff14&itok=AZOVZ5Zd" width="1280" height="720" alt="CISA Region 1" /> </a> </div> <div class="c-teaser__content"> <h3 class="c-teaser__title"> <a href="/about/regions/region-1" target="_self"> Region 1 </a> </h3> </div> </div> </article> </div> <div class="c-view__row"> <article class="is-unpublished c-teaser" role="article"> <div class="c-teaser__row"> <div class="c-teaser__media"> <a href="/about/regions/region-2" tabindex="-1" target="_self" title="Region 2"> <img loading="lazy" src="/sites/default/files/styles/16x9_medium/public/2023-01/cisa_region_number_teasers_region_2_0.png?h=c653ff14&itok=EIkImawx" width="1280" height="720" alt="CISA Region 2" /> </a> </div> <div class="c-teaser__content"> <h3 class="c-teaser__title"> <a href="/about/regions/region-2" target="_self"> Region 2 </a> </h3> </div> </div> </article> </div> <div class="c-view__row"> <article class="is-unpublished c-teaser" role="article"> <div class="c-teaser__row"> <div class="c-teaser__media"> <a href="/about/regions/region-3" tabindex="-1" target="_self" title="Region 3"> <img loading="lazy" src="/sites/default/files/styles/16x9_medium/public/2023-01/cisa_region_number_teasers_region_3_0.png?h=c653ff14&itok=CIChTNlj" width="1280" height="720" alt="CISA Region 3" /> </a> </div> <div class="c-teaser__content"> <h3 class="c-teaser__title"> <a href="/about/regions/region-3" target="_self"> Region 3 </a> </h3> </div> </div> </article> </div> <div class="c-view__row"> <article class="is-unpublished c-teaser" role="article"> <div class="c-teaser__row"> <div class="c-teaser__media"> <a href="/about/regions/region-4" tabindex="-1" target="_self" title="Region 4"> <img loading="lazy" src="/sites/default/files/styles/16x9_medium/public/2023-01/cisa_region_number_teasers_region_4_0.png?h=c653ff14&itok=0kTgMgLj" width="1280" height="720" alt="CISA Region 4" /> </a> </div> <div class="c-teaser__content"> <h3 class="c-teaser__title"> <a href="/about/regions/region-4" target="_self"> Region 4 </a> </h3> </div> </div> </article> </div> <div class="c-view__row"> <article class="is-unpublished c-teaser" role="article"> <div class="c-teaser__row"> <div class="c-teaser__media"> <a href="/about/regions/region-5" tabindex="-1" target="_self" title="Region 5"> <img loading="lazy" src="/sites/default/files/styles/16x9_medium/public/2023-01/cisa_region_number_teasers_region_5_0.png?h=c653ff14&itok=wKieZNBx" width="1280" height="720" alt="CISA Region 5" /> </a> </div> <div class="c-teaser__content"> <h3 class="c-teaser__title"> <a href="/about/regions/region-5" target="_self"> Region 5 </a> </h3> </div> </div> </article> </div> <div class="c-view__row"> <article class="is-unpublished c-teaser" role="article"> <div class="c-teaser__row"> <div class="c-teaser__media"> <a href="/about/regions/region-6" tabindex="-1" target="_self" title="Region 6"> <img loading="lazy" src="/sites/default/files/styles/16x9_medium/public/2023-01/cisa_region_number_teasers_region_6_0.png?h=c653ff14&itok=3pV-9SGJ" width="1280" height="720" alt="CISA Region 6" /> </a> </div> <div class="c-teaser__content"> <h3 class="c-teaser__title"> <a href="/about/regions/region-6" target="_self"> Region 6 </a> </h3> </div> </div> </article> </div> <div class="c-view__row"> <article class="is-unpublished c-teaser" role="article"> <div class="c-teaser__row"> <div class="c-teaser__media"> <a href="/about/regions/region-7" tabindex="-1" target="_self" title="Region 7"> <img loading="lazy" src="/sites/default/files/styles/16x9_medium/public/2023-01/cisa_region_number_teasers_region_7_0.png?h=c653ff14&itok=QZowfqHl" width="1280" height="720" alt="CISA Region 7" /> </a> </div> <div class="c-teaser__content"> <h3 class="c-teaser__title"> <a href="/about/regions/region-7" target="_self"> Region 7 </a> </h3> </div> </div> </article> </div> <div class="c-view__row"> <article class="is-unpublished c-teaser" role="article"> <div class="c-teaser__row"> <div class="c-teaser__media"> <a href="/about/regions/region-8" tabindex="-1" target="_self" title="Region 8"> <img loading="lazy" src="/sites/default/files/styles/16x9_medium/public/2023-01/cisa_region_number_teasers_region_8_0.png?h=c653ff14&itok=eKPYd4lt" width="1280" height="720" alt="CISA Region 8" /> </a> </div> <div class="c-teaser__content"> <h3 class="c-teaser__title"> <a href="/about/regions/region-8" target="_self"> Region 8 </a> </h3> </div> </div> </article> </div> <div class="c-view__row"> <article class="is-unpublished c-teaser" role="article"> <div class="c-teaser__row"> <div class="c-teaser__media"> <a href="/about/regions/region-9" tabindex="-1" target="_self" title="Region 9"> <img loading="lazy" src="/sites/default/files/styles/16x9_medium/public/2023-01/cisa_region_number_teasers_region_9_0.png?h=c653ff14&itok=eExOGphY" width="1280" height="720" alt="CISA Region 9" /> </a> </div> <div class="c-teaser__content"> <h3 class="c-teaser__title"> <a href="/about/regions/region-9" target="_self"> Region 9 </a> </h3> </div> </div> </article> </div> <div class="c-view__row"> <article class="is-unpublished c-teaser" role="article"> <div class="c-teaser__row"> <div class="c-teaser__media"> <a href="/about/regions/region-10" tabindex="-1" target="_self" title="Region 10"> <img loading="lazy" src="/sites/default/files/styles/16x9_medium/public/2023-01/cisa_region_number_teasers_region_10_0.png?h=c653ff14&itok=66l_OraZ" width="1280" height="720" alt="CISA Region 10" /> </a> </div> <div class="c-teaser__content"> <h3 class="c-teaser__title"> <a href="/about/regions/region-10" target="_self"> Region 10 </a> </h3> </div> </div> </article> </div> </div> </div> </div> </div> </div> </div> </div> <div class="c-wysiwyg"> <div class="l-constrain"> <div class="c-wysiwyg__inner"> <div class="c-field c-field--name-field-full-html c-field--type-text-long c-field--label-hidden"> <div class="c-field__content"><p>Within each CISA Region are local and regional Protective Security Advisors (PSAs), Cyber Security Advisors (CSAs), Emergency Communications Coordinators (ECCs), and Chemical Security Inspectors (CSIs). These field personnel assess, advise, and assist and provide a variety of risk management and response services to help business, government and other organizations become more resilient to cyber and physical threats and to form partnerships. </p></div></div> </div> </div> </div> <div class="c-collection c-collection--three-or-less c-collection--blue"> <div class="l-constrain"> <div class="c-collection__row"> <div class="c-collection__content"> <h2 class="c-collection__title"><span class="c-collection__title-wrap">Services</span></h2> <div class="c-collection__text"><p>CISA has compiled a list of free tools and services to help small and medium businesses further advance their security capabilities. This living repository includes services provided by CISA, widely used open-source tools, and other free tools and services offered by private and public sector organizations. </p></div> <a href="/resources-tools/services?f%5B0%5D=service_audience%3A130" class="c-button c-collection__button"> View Services </a> </div> <div class="c-collection__cards"> <div class="c-card"> <div class="c-card__row"> <div class="c-card__inner"> <h3 class="c-card__title"> <a href="/resources-tools/services/infrastructure-survey-tool-ist"> <span>Infrastructure Survey Tool (IST)</span> </a> </h3> <div class="c-card__metadata"> <span>INCREASE YOUR RESILIENCE, ASSESS YOUR RISK LEVEL</span> </div> <div class="c-card__body">The Infrastructure Survey Tool (IST) is a voluntary, web-based assessment to identify and document the overall security and resilience of a facility.</div> <div class="c-card__buttons"> </div> <div class="c-card__footer"> Foundational </div> </div> </div> </div> <div class="c-card"> <div class="c-card__row"> <div class="c-card__image"> <img loading="lazy" src="/sites/default/files/styles/16x9_small/public/2022-12/hero_cyber1.jpg?h=e0d9a4bb&itok=z5HU9OJA" width="800" height="450" alt="cyber city" /> </div> <div class="c-card__inner"> <h3 class="c-card__title"> <a href="/resources-tools/services/cyber-resilience-review-crr"> <span>Cyber Resilience Review (CRR)</span> </a> </h3> <div class="c-card__metadata">Contact: iodregionaloperations@cisa.dhs.gov</div> <div class="c-card__body">An assessment that evaluates an organization's operational resilience and cybersecurity practices.</div> <div class="c-card__buttons"> </div> </div> </div> </div> </div> </div> <a href="/resources-tools/services?f%5B0%5D=service_audience%3A130" class="c-button c-collection__footer-button"> View Services </a> </div> </div> <div class="c-collection c-collection--two-column c-collection--blue-lighter"> <div class="l-constrain"> <div class="c-collection__row"> <div class="c-collection__content"> <h2 class="c-collection__title"><span class="c-collection__title-wrap">Publications</span></h2> </div> <div class="c-collection__cards"> <div class="c-card"> <div class="c-card__row"> <div class="c-card__inner"> <h3 class="c-card__title"> <a href="/resources-tools/resources/guidance-and-strategies-protect-network-edge-devices"> <span>Guidance and Strategies to Protect Network Edge Devices</span> </a> </h3> <div class="c-card__metadata"> <span> FEB 04, 2025 | EXTERNAL, PUBLICATION</span> </div> <div class="c-card__buttons"> <a href="/resources-tools/resources/guidance-and-strategies-protect-network-edge-devices" class="c-button c-button--small">View Files</a> </div> </div> </div> </div> <div class="c-card"> <div class="c-card__row"> <div class="c-card__inner"> <h3 class="c-card__title"> <a href="/news-events/alerts/2025/01/15/cisa-releases-microsoft-expanded-cloud-logs-implementation-playbook"> <span>CISA Releases Microsoft Expanded Cloud Logs Implementation Playbook</span> </a> </h3> <div class="c-card__metadata"> <span> JAN 15, 2025 | ALERT</span> </div> <div class="c-card__buttons"> </div> </div> </div> </div> <div class="c-card"> <div class="c-card__row"> <div class="c-card__inner"> <h3 class="c-card__title"> <a href="/resources-tools/resources/national-cyber-incident-response-plan-update-public-comment-draft"> <span>National Cyber Incident Response Plan Update Public Comment Draft</span> </a> </h3> <div class="c-card__metadata"> <span> DEC 16, 2024 | PUBLICATION</span> </div> <div class="c-card__body">The National Cyber Incident Response Plan (NCIRP) Update Public Comment Draft offers the public an opportunity to provide their knowledge and experiences on the NCIRP. The public comment period begins today and concludes on January 15, 2025. </div> <div class="c-card__buttons"> <a href="/sites/default/files/2025-01/NCIRP%20Update%20Public%20Comment%20Draft%20508c__0.pdf" class="c-button c-button--small c-button--download">Download File (PDF, 1.31 MB)</a> </div> </div> </div> </div> <div class="c-card"> <div class="c-card__row"> <div class="c-card__inner"> <h3 class="c-card__title"> <a href="/resources-tools/resources/enhanced-visibility-and-hardening-guidance-communications-infrastructure"> <span>Enhanced Visibility and Hardening Guidance for Communications Infrastructure</span> </a> </h3> <div class="c-card__metadata"> <span> DEC 04, 2024 | PUBLICATION</span> </div> <div class="c-card__body">This guide provides network engineers and defenders of communications infrastructure with best practices to strengthen their visibility and harden their network devices against successful exploitation carried out by PRC-affiliated and other malicious cyber actors.</div> <div class="c-card__buttons"> <a href="/sites/default/files/2025-01/joint-guidance-enhanced-visibility-hardening-guide-for-comms-infrastructure-508c_0.pdf" class="c-button c-button--small c-button--download">Download File (PDF, 777.17 KB)</a> </div> </div> </div> </div> </div> </div> </div> </div> </div> </div> </div> </div> </main> <footer class="usa-footer usa-footer--slim" role="contentinfo"> <div class="usa-footer__return-to-top"> <div class="l-constrain"> <a href="#top">Return to top</a> </div> </div> <div class="usa-footer__upper"> <div class="l-constrain"> <ul class="c-menu c-menu--footer-main"> <li class="c-menu__item"> <a href="/topics" class="c-menu__link js-top-level" aria-current="false" data-drupal-link-system-path="node/7329">Topics</a> </li> <li class="c-menu__item"> <a href="/spotlight" class="c-menu__link js-top-level" aria-current="false" data-drupal-link-system-path="node/7330">Spotlight</a> </li> <li class="c-menu__item"> <a href="/resources-tools" class="c-menu__link js-top-level" aria-current="false" data-drupal-link-system-path="node/7331">Resources & Tools</a> </li> <li class="c-menu__item"> <a href="/news-events" class="c-menu__link js-top-level" aria-current="false" data-drupal-link-system-path="node/7332">News & Events</a> </li> <li class="c-menu__item"> <a href="/careers" class="c-menu__link js-top-level" aria-current="false" data-drupal-link-system-path="node/7323">Careers</a> </li> <li class="c-menu__item"> <a href="/about" class="c-menu__link js-top-level" aria-current="false" data-drupal-link-system-path="node/6944">About</a> </li> </ul> </div> </div> <div class="usa-footer__main"> <div class="l-constrain"> <div class="usa-footer__main-row"> <div class="usa-footer__brand"> <a class="c-site-name c-site-name--footer" href="/" rel="home" title="Go to the Cybersecurity & Infrastructure Security Agency homepage"> <span class="c-site-name__text">Cybersecurity & Infrastructure Security Agency</span> </a> </div> <div class="usa-footer__contact"> <ul class="c-menu c-menu--social"> <li class="c-menu__item"> <a href="https://www.facebook.com/CISA" class="c-menu__link--facebook c-menu__link js-top-level" aria-current="false">Facebook</a> </li> <li class="c-menu__item"> <a href="https://twitter.com/CISAgov" class="c-menu__link--twitter c-menu__link js-top-level" aria-current="false">Twitter</a> </li> <li class="c-menu__item"> <a href="https://www.linkedin.com/company/cybersecurity-and-infrastructure-security-agency" class="c-menu__link--linkedin c-menu__link js-top-level" aria-current="false">LinkedIn</a> </li> <li class="c-menu__item"> <a href="https://www.youtube.com/@cisagov" class="c-menu__link--youtube c-menu__link js-top-level" aria-current="false">YouTube</a> </li> <li class="c-menu__item"> <a href="https://www.instagram.com/cisagov" class="c-menu__link--instagram c-menu__link js-top-level" aria-current="false">Instagram</a> </li> <li class="c-menu__item"> <a href="/subscribe-updates-cisa" class="c-menu__link--rss c-menu__link js-top-level" aria-current="false">RSS</a> </li> </ul> <div class="usa-footer__contact-info"> <span>CISA Central</span> <a href="tel:1-844-Say-CISA">1-844-Say-CISA</a> <a href="mailto:SayCISA@cisa.dhs.gov">SayCISA@cisa.dhs.gov</a> </div> </div> </div> </div> </div> <div class="usa-footer__lower"> <div class="l-constrain"> <div class="usa-footer__lower-row"> <div class="usa-footer__lower-left"> <div class="c-dhs-logo"> <div class="c-dhs-logo__seal">DHS Seal</div> <div class="c-dhs-logo__content"> <div class="c-dhs-logo__url">CISA.gov</div> <div class="c-dhs-logo__text">An official website of the U.S. Department of Homeland Security</div> </div> </div> <ul class="c-menu c-menu--footer"> <li class="c-menu__item"> <a href="/about" class="c-menu__link js-top-level" title="About CISA" aria-current="false" data-drupal-link-system-path="node/6944">About CISA</a> </li> <li class="c-menu__item"> <a href="https://www.dhs.gov/performance-financial-reports" class="c-menu__link js-top-level" title="Budget and Performance" aria-current="false">Budget and Performance</a> </li> <li class="c-menu__item"> <a href="https://www.dhs.gov" title="Department of Homeland Security" class="c-menu__link js-top-level" aria-current="false">DHS.gov</a> </li> <li class="c-menu__item"> <a href="https://www.dhs.gov/foia" class="c-menu__link js-top-level" title="FOIA Requests" aria-current="false">FOIA Requests</a> </li> <li class="c-menu__item"> <a href="/no-fear-act" title="No FEAR Act Reporting" class="c-menu__link js-top-level" aria-current="false" data-drupal-link-system-path="node/21494">No FEAR Act</a> </li> <li class="c-menu__item"> <a href="https://www.oig.dhs.gov/" class="c-menu__link js-top-level" title="Office of Inspector General" aria-current="false">Office of Inspector General</a> </li> <li class="c-menu__item"> <a href="/privacy-policy" class="c-menu__link js-top-level" title="Privacy Policy" aria-current="false" data-drupal-link-system-path="node/16115">Privacy Policy</a> </li> <li class="c-menu__item"> <a href="https://public.govdelivery.com/accounts/USDHSCISA/subscriber/new?topic_id=USDHSCISA_138" title="Subscribe to Email Updates" class="c-menu__link js-top-level" aria-current="false">Subscribe</a> </li> <li class="c-menu__item"> <a href="https://www.whitehouse.gov/" class="c-menu__link js-top-level" title="The White House" aria-current="false">The White House</a> </li> <li class="c-menu__item"> <a href="https://www.usa.gov/" class="c-menu__link js-top-level" title="USA.gov" aria-current="false">USA.gov</a> </li> <li class="c-menu__item"> <a href="/forms/feedback" title="Website Feedback" class="c-menu__link js-top-level" aria-current="false" data-drupal-link-system-path="forms/feedback">Website Feedback</a> </li> </ul> </div> <div class="usa-footer__lower-right"> <iframe src="https://www.dhs.gov/ntas/" name="National Terrorism Advisory System" title="National Terrorism Advisory System" width="170" height="180" scrolling="no" frameborder="0" seamless border="0" ></iframe> </div> </div> </div> </div> </footer> </div> </div> <script src="/core/assets/vendor/jquery/jquery.min.js?v=3.7.1"></script> <script src="/core/assets/vendor/once/once.min.js?v=1.0.1"></script> <script src="/core/misc/drupal.js?v=10.4.1"></script> <script src="/core/misc/drupal.init.js?v=10.4.1"></script> <script src="/core/assets/vendor/tabbable/index.umd.min.js?v=6.2.0"></script> <script src="/modules/contrib/ckeditor_accordion/js/accordion.frontend.min.js?ss1oyc"></script> <script src="/modules/contrib/extlink/js/extlink.js?v=10.4.1"></script> <script src="/core/misc/jquery.form.js?v=4.3.0"></script> <script src="/core/misc/progress.js?v=10.4.1"></script> <script src="/core/assets/vendor/loadjs/loadjs.min.js?v=4.3.0"></script> <script src="/core/misc/debounce.js?v=10.4.1"></script> <script src="/core/misc/announce.js?v=10.4.1"></script> <script src="/core/misc/message.js?v=10.4.1"></script> <script src="/core/misc/ajax.js?v=10.4.1"></script> <script src="/modules/contrib/google_tag/js/gtag.ajax.js?ss1oyc"></script> <script src="/profiles/cisad8_gov/themes/custom/gesso/dist/js/breadcrumb.es6.js?ss1oyc"></script> <script src="/profiles/cisad8_gov/themes/custom/gesso/dist/js/common.js?ss1oyc"></script> <script src="/profiles/cisad8_gov/themes/custom/gesso/dist/js/uswds-init.es6.js?ss1oyc"></script> <script src="/profiles/cisad8_gov/themes/custom/gesso/dist/js/uswds.es6.js?ss1oyc"></script> <script src="/profiles/cisad8_gov/themes/custom/gesso/dist/js/teaser.es6.js?ss1oyc"></script> </body> </html>