Chiefs' Corner

US-CERT strives for a safer, stronger Internet for all Americans by responding to major incidents, analyzing threats, and exchanging critical cybersecurity information with trusted partners around the world.

Assessments: Cyber Resilience Review (CRR)

The CRR is a no-cost, voluntary, non-technical assessment to evaluate an organization’s operational resilience and cybersecurity practices. The CRR may be conducted as a self-assessment or as an on-site assessment facilitated by DHS cybersecurity professionals.

The CRR assesses enterprise programs and practices across a range of ten domains including risk management, incident management, service continuity, and others. The assessment is designed to measure existing organizational resilience as well as provide a gap analysis for improvement based on recognized best practices.

Please click on the following links for more information:

PDF File Icon
Self-Assessment Package
Self-assessment form and report generator.
PDF File Icon
Method Description & User Guide
Walk-through for how an organization can conduct a CRR self-assessment.
PDF File Icon
Question Set with Guidance
Self-assessment question set along with accompanying guidance.
PDF File Icon
CRR NIST Framework Crosswalk
Cross-reference chart for how the NIST Cybersecurity Framework aligns to the CRR.
PDF File Icon
Information Sheet
Summary of the CRR process.

 

For more information from US-CERT, please click here

See our Chief’s Corner for more information by Chiefs, for Chiefs.

Directory of Cybercrime Labs and Resources

Search for regional crime labs and other resources to help with cybercrime investigations and assistance.

What's New?

NATIONAL WHITE COLLAR CRIME CENTER CYBER ALERT

Whisper is the largest online platform where people share real thoughts and feelings, forge relationships and engage in conversations on an endless variety of topics—without identities or profiles. Whisper content and stories reach hundreds of millions of people each month across platforms. Whisper is spearheading a movement that believes that happiness starts with being your real self. Whisper is backed by venture investors including Sequoia Capital, Lightspeed Venture Partners, Thrive Capital, Shasta Ventures, Trinity Capital, and CAA Ventures. (“Whisper Press” 2016).

For more information, please visit: http://www.nw3c.org/docs/research/whisper-application.pdf

Protecting law enforcement from cyber threats

This document provides material designed to assist law enforcement in protecting themselves and their families from becoming cyber targets: protecting personal information, cyber dos and don’ts, and links to further cyber training and resources. Download and read the full article at https://www.it.ojp.gov/GIST/1191/Understanding-Digital-Footprints–Steps-to-Protect-Personal-Information

 

Want to follow the LECC on RSS?

Just point your RSS reader to http://www.iacpcybercenter.org/feed/ (for the blogs) and  http://www.iacpcybercenter.org/news/feed/ for our news feeds.

 

Internet of Things Infographic

This fun infographic shows many different kinds of electronic devices that may be found in a residential home. Click on the icons to reveal how the IoT devices generate and store data. Click here to begin exploring the digital home.

 

For the Prosecutor

This information provides resources to those who prosecute cyber crimes, and includes both links to statutes and case law explicitly focusing on cyber crimes, as well as links to other legal resources related to cyber crime prosecution, such as digital search warrants, and litigation guides. Click here to view more.

 

Cybercrime Community Awareness and Prevention

In an effort to support and advance police/community interaction addressing cyber crime and victimization, the National White Collar Crime Center, International Association of Chiefs of Police, and the Office of Community Oriented Policing Services, and the U.S. Department of Justice, have developed training modules that identify the most common types of Internet and computer-related scams, and instructional tools to help people avoid being victimized by these scams. Click here to view the latest training module.

News

More Updates