#CISA Publications

#Core Resources

#Known Exploited Vulnerabilities (KEV) Catalog

• URL: https://www.cisa.gov/known-exploited-vulnerabilities-catalog
• Searchable web + downloadable JSON/CSV. 1,484+ vulnerabilities.
• BOD 22-01 mandates federal remediation by stated dates.
• Patch these first regardless of CVSS score.

#Zero Trust Maturity Model v2.0 (Apr 2023)

• URL: https://www.cisa.gov/zero-trust-maturity-model
• Five pillars: Identity, Devices, Networks, Applications/Workloads, Data
• Three cross-cutting: Visibility/Analytics, Automation/Orchestration, Governance
• Four maturity stages: Traditional, Initial, Advanced, Optimal

#Shields Up

• Main: https://www.cisa.gov/shields-up
• Org guidance: https://www.cisa.gov/shields-guidance-organizations

#Shields Ready (Critical Infrastructure Resilience)

• URL: https://www.cisa.gov/shields-ready

#Secure by Design

• URL: https://www.cisa.gov/securebydesign

#Cybersecurity Alerts and Advisories (real-time)

• URL: https://www.cisa.gov/news-events/cybersecurity-advisories

#Best Practices Portal

• URL: https://www.cisa.gov/topics/cybersecurity-best-practices

#Incident Response

#IR Training Pathway

• PDF: https://www.cisa.gov/sites/default/files/2025-09/Incident-Response-Pathway_Course-Catalog-FY26-Update_FINAL-508.pdf

#SIEM and SOAR Implementation Guidance (May 2025)

• URL: https://www.cisa.gov/news-events/alerts/2025/05/27/new-guidance-siem-and-soar-implementation

#Digital Forensics Plan for Control Systems

• PDF: https://www.cisa.gov/sites/default/files/recommended_practices/Forensics_RP.pdf

#Network Edge Device Protection

• URL: https://www.cisa.gov/resources-tools/resources/guidance-and-strategies-protect-network-edge-devices

#Enhanced Visibility Guidance for Communications Infrastructure (Dec 2024)

• URL: https://www.cisa.gov/resources-tools/resources/enhanced-visibility-and-hardening-guidance-communications-infrastructure

#Tools

#RITA (Real Intelligence Threat Analytics)

• CISA page: https://www.cisa.gov/resources-tools/services/rita
• GitHub: https://github.com/activecm/rita
• Beacon detection, DNS tunneling, long connections, data exfil detection