Risk Management | Cybersecurity and Infrastructure Security ... - CISA
...Risk Management is the process of identifying, analyzing, assessing, and communicating risk and accepting, avoiding, transferring, or mitigating it to an acceptable level considering associated costs and benefits of any actions taken. Effective risk management improves the quality of decision making....
https://www.cisa.gov/topics/risk-management
National Risk Management Center | Cybersecurity and ... - CISA
...The National Risk Management Center (NRMC) provides vital analytic and strategic support to mitigate risk to the cyber and physical infrastructure Americans rely on every day....
https://www.cisa.gov/about/divisions-offices/national-risk-management-center
Cybersecurity Best Practices | Cybersecurity and Infrastructure ... - CISA
...CISA offers a range of cybersecurity services and resources focused on operational resilience, cybersecurity practices, organizational management of external dependencies, and other key elements of a robust and resilient cyber framework....
https://www.cisa.gov/topics/cybersecurity-best-practices
Cybersecurity Governance - CISA
...Cybersecurity governance is a comprehensive cybersecurity strategy that integrates with organizational operations and prevents the interruption of activities due to cyber threats or attacks. Features of cybersecurity governance include: Accountability frameworks Decision-making hierarchies Defined risks related to business objectives Mitigation plans and strategies Oversight processes and ......
https://www.cisa.gov/topics/cybersecurity-best-practices/cybersecurity-governance
Transportation Systems Sector | Cybersecurity and Infrastructure ... - CISA
...Each Sector Risk Management Agency develops a sector-specific plan through a coordinated effort involving its public and private sector partners. The Postal and Shipping Sector was consolidated within the Transportation Systems Sector in 2013 under Presidential Policy Directive 21....
https://www.cisa.gov/topics/critical-infrastructure-security-and-resilience/critical-infrastructure-sectors/transportation-systems-sector
Information and Communications Technology Supply Chain Risk Management ...
...Developed by the ICT Supply Chain Risk Management Task Force, the handbook provides an overview of the highest supply chain risk categories commonly faced by ICT SMBs, including cyber risks, and contains several use cases that can assist ICT SMBs in identifying the necessary resources to implement ICT supply chain security practices....
https://www.cisa.gov/information-and-communications-technology-supply-chain-risk-management
Software Acquisition Guide for Government Enterprise Consumers ... - CISA
...The Software Acquisition Guide for Government Enterprise Consumers: Software Assurance in the Cyber-Supply Chain Risk Management (C-SCRM) Lifecycle product was developed in response to the core challenges of software assurance and cybersecurity transparency in the acquisition process, focusing primarily on software lifecycle activities. Importantly, the Software Acquisition Guide focuses on ......
https://www.cisa.gov/resources-tools/resources/software-acquisition-guide-government-enterprise-consumers-software-assurance-cyber-supply-chain
Cyber Risk Management Primer for CEOs - CISA
...Cyber Risk Management Primer for CEOs Technology has advanced at an exponential rate and your mission increasingly relies on technology. As a Chief Executive Officer (CEO), you understand that any disruption to your information systems can hamper your operations, slow your supply chain, impact your reputation, and compromise sensitive customer data and intellectual property. According to the ......
https://www.cisa.gov/sites/default/files/publications/Cyber%20Risk%20Management%20Primer%20for%20CEOs_0.pdf
CYBERSECURITY PLAN - CISA
...Supply Chain Risk Management [... cyber supply chain risk management (C-SCRM) best practices identified by NIST. This involves identifying, prioritizing, and assessing information technology suppliers, vendors, and service providers to understand the related and/or cascading risks to your (and, as applicable, all your jurisdictions) supply chain]...
https://www.cisa.gov/sites/default/files/2025-06/Cybersecurity%20Plan%20Template.pdf
Industrial Control Systems | Cybersecurity and Infrastructure ... - CISA
...CISA collaborates with the OT community to address immediate operational cyber events and long-term risk affecting ICS. ICS Cybersecurity Challenges Many ICS environments operate with existing ?legacy? technologies and proprietary protocols due to their original design priorities, which focused on operability and reliability rather than cybersecurity. Historically, ICS environments ......
https://www.cisa.gov/topics/industrial-control-systems