Departments, Agencies, and More: the Public Sector
Administrative Conference of the United States
Algorithmic Tools in Retrospective Review of Agency Rules (May 2023)
Automated Legal Guidance at Federal Agencies (June 2022)
Managing Mass, Computer-Generated, and Falsely Attributed Comments (June 2021)
Cyberspace Solarium Commission
Countering Disinformation in the United States (December 2021)
View the Commission's final report (March 2020)
Department of Defense
FedRAMP Moderate Equivalency for Cloud Service Provider's Cloud Service Offerings (December 2023)
Proposed Cybersecurity Maturity Model Certification (CMMC) Program Rule (December 2023)
2023 Data, Analytics, and Artificial Intelligence Adoption Strategy (November 2023)
2023 Cyber Strategy of the Department of Defense (September 2023)
DoD Cyber Workforce Strategy 2023-2027 (March 2023)
DoD Zero Trust Strategy (October 2022)
U.S. Department of Defense Responsible Artificial Intelligence Strategy and Implementation Pathway (June 2022)
Department of Health and Human Services
Sign Up for the HHS OCR Privacy and Security Listservs
Healthcare Sector Cybersecurity: Introduction to the Strategy of the U.S. Department of Health and Human Services (December 2023)
Quick-Response Checklist (June 2017)
Fact Sheet: Ransomware and HIPAA (July 2016)
HIPAA Administrative Simplification (March 2013)
Department of Homeland Security
Guidelines for secure AI system development (November 2023)
Review of the December 2021 Log4j Event (July 2022)
Preparing for Post-Quantum Cryptography (September 2021)
Cybersecurity and Infrastructure Security Agency:
- Known Exploited Vulnerabilities Catalog
- Mobile Communications Best Practice Guidance
- Secure Cloud Business Applications Project
- Free Cybersecurity Services and Tools (February 2022)
- Cybersecurity Alerts & Advisories
- 2024 Cybersecurity Performance Goals Adoption Report (January 2025)
- 2023 Top Routinely Exploited Vulnerabilities (November 2024)
- Ransomware Guidance and Resources
- Resources for Lawyers
Department of Justice
One-Stop Ransomware Resource: stopransomware.gov
DOJ Comprehensive Cyber Review - July 2022 (2022)
Best Practices for Partnering with Law Enforcement (2021)
CCIPS Comments on the 2021 DMCA Section 1201 Security Research Exemption (2021)
Report of the Attorney General’s Cyber Digital Task Force (2018)
Best Practices for Victim Response and Reporting of Cyber Incidents, Version 2.0 (2018)
Antitrust Policy Statement on Sharing of Cybersecurity Information (2014)
Department of State
Bureau of Cyberspace and Digital Policy
Additional Guidance on the Democratic People's Republic of Korea Information Technology Workers (2023)
North Korea Using Social Engineering to Enable Hacking of Think Tanks, Academia, and Media (2023)
Joint Statement on Advancing Responsible State Behavior in Cyberspace (International Resolution) (2019)
International Law In Cyberspace (2012)
Department of the Treasury
Managing Artificial Intelligence-Specific Cybersecurity Risks in the Financial Services Sector (March 2024)
Updated Advisory on Potential Sanctions Risks for Facilitating Ransomware Payments (2021)
G7 Fundamental Elements of Cybersecurity for the Financial Sector (2016)
Federal Communications Commission
Updated Data Breach Notification Rules, Report and Order (FCC 23-111) (December 21, 2023)
Proposed Cybersecurity Labeling Program for Smart Devices (August 2023)
Federal Emergency Management Agency
Planning Considerations for Cyber Incidents: Guidance for Emergency Managers (November 2023)
Critical Cyber Asset Identification and Prioritization Checklist (November 2023)
Federal Trade Commission
SIGN UP for FTC Press Release Updates
FTC Privacy & Data Security Update for 2018 (2019)
Cybersecurity Resources for Your Small Business U.S. Federal Trade Commission (2018)
Date Breach Response: A Guide for Business (2016)
Antitrust Policy Statement on Sharing of Cybersecurity Information (2014)
Government Accountability Office
OMB Should Improve Information Security Performance Metrics (January 2024)
Federal Agencies Made Progress, but Need to Fully Implement Incident Response Requirements (December 2023)
Agencies Have Begun Implementation but Need to Complete Key Requirements (December 2023)
Agile Assessment Guide: Best Practices for Adoption and Implementation, revised (November 2023)
Cybersecurity Program Audit Guide (September 2023)
National Cybersecurity Strategy Needs to Address Information Sharing Performance Measures and Methods (September 2023)
Cybersecurity Challenges Facing the Nation (2018)
House Select Committee on the Strategic Competition Between the United States and the Chinese Communist Party
Reset, Prevent, Build: A Strategy to Win America's Economic Competition with the Chinese Communist Party (December 2023)
National Institute of Standards and Technology
SP 800-171 Pre-Draft Call for Comments (2022)
Telework Security Basics (2020)
LAUNCHING: NIST Small Business Cybersecurity Corner U.S. Department of Commerce (2019)
Version 1.1 of Cybersecurity Framework (2018)
Small Business Information Security: The Fundamentals (2016)
Framework for Improving Critical Infrastructure Cybersecurity (2014)
Security and Privacy Controls for Federal Information Systems and Organizations (2013)
National Security Agency
Cybersecurity Services Contact (for DoD contractors)
Office of Management and Budget
Federal Cybersecurity Risk Determination Report and Action Plan (2018)
Memorandum for Heads of Executive Departments and Agencies (2012)
Office of the Director of National Intelligence
Annual Threat Assessment of the U.S. Intelligence Community (2023)
Global Trends 2040: A More Contested World (2021) (National Intelligence Council)
National Counterintelligence Strategy, 2020-2022 (National Counterintelligence and Security Center)
Cyber Training Series (National Counterintelligence and Security Center)
Know the Risks, Raise Your Shield
Secure your business' supply chain, guard against intellectual property theft, and avoid spear-phishing and social media deception. View Press Release. (2019)
Supply Chain Risk Management (2019) (National Counterintelligence and Security Center)
Foreign Spies Stealing US Economic Secrets in Cyberspace (2011) (Office of the National Counterintelligence Executive)
Securities and Exchange Commission
Crypto Assets and Cyber Enforcement Actions
SEC v. SolarWinds Corp. and Timothy G. Brown (October 30, 2023)
SEC v. Covington & Burling, LLP (July 24, 2023)
SEC's Application for Order to Show Cause & Compliance with Subpoena (January 10, 2023)
Covington's Response in Opposition (January 14, 2023)
Amicus Curiae Brief of the Association of Corporate Counsel in Support of Covington & Burling (February 21, 2023)
Cybersecurity Risk Management, Strategy, Governance, and Incident Disclosure (July 2023)
Proposed Rule Cybersecurity Risk Management for Investment Advisers, Registered Investment Companies, and Business Development Companies (February 2022)