Skip to main content
U.S. flag

An official website of the United States government

Dot gov

The .gov means it’s official.
Federal government websites often end in .gov or .mil. Before sharing sensitive information, make sure you’re on a federal government site.

Https

The site is secure.
The https:// ensures that you are connecting to the official website and that any information you provide is encrypted and transmitted securely.

Critical Infrastructure Resources

General

Critical Infrastructure

SMB

International

Federal

Assessment & Auditing

SLTT

Academia

Resources related to the 16 U.S. Critical Infrastructure sectors.

CHEMICAL SECTOR

COMMERCIAL FACILITIES SECTOR

COMMUNICATIONS SECTOR

CRITICAL MANUFACTURING SECTOR

DAMS SECTOR

DEFENSE INDUSTRIAL SECTOR

  • NIST Special Publication (SP) 800-171

EMERGENCY SERVICES SECTOR

ENERGY SECTOR

  • Department of Energy's Energy Sector Cybersecurity Framework Implementation Guidance
  • (NEW!) Federal Energy Regulatory Commission’s Cybersecurity Incentives Policy White Paper (DRAFT)
    (A white paper on potential incentives to encourage utilities to go above and beyond mandated cybersecurity measures.)
  • National Association of Regulatory Utility Commissioners’ Cybersecurity Preparedness Evaluation Tool
    (A tool to help Public Utility Commissions examine a utility’s cybersecurity risk management programs and their capability improvements over time.)
  • National Association of Regulatory Utility Commissioners’ Understanding Cybersecurity Preparedness: Questions for Utilities
    (A tool to help Public Utility Commissions ask questions to utilities to help them better understand their current cybersecurity risk management programs and practices.)
  • NIST's Cybersecurity Framework Smart Grid Profile
    (This profile helps a broad audience understand smart grid-specific considerations for the outcomes described in the NIST Cybersecurity Framework)
  • Ontario Energy Board (OEB) – Ontario Cyber Security Framework and Tools
    (The Ontario Energy Board (OEB) initiated a policy consultation to engage with key industry stakeholders to continue its review of the non-bulk electrical grid and associated business systems in Ontario that could impact the protection of personal information and smart grid reliability. The goal of this policy consultation will be to identify industry standards and best practices in order to establish a sector wide consistent framework for continuing to protect personal information and the reliable operation of the smart grid.)

FINANCIAL SERVICES SECTOR

  • Conference of State Bank Supervisors' Cybersecurity 101: A Resource Guide for Bank Executives 
    (A non- technical, easy-to-read resource on cybersecurity that community bank CEOs, senior executives and board members can use to help mitigate cybersecurity threats at their banks.)
  • Federal Financial Institutions Examination Council's Cybersecurity Assessment Tool
    (An Assessment is based on the cybersecurity assessment that the FFIEC members piloted in 2014, which was designed to evaluate community institutions’ preparedness to mitigate cyber risks. NIST defines cybersecurity as “the process of protecting information by preventing, detecting, and responding to attacks.”)
  • Federal Financial Institutions Examination Council's Mapping Cybersecurity Assessment Tool to NIST Cybersecurity Framework
  • The Financial Industry Regulatory Authority Report on Cybersecurity Practices
    (A report which details practices that firms can tailor to their business model as they strengthen their cybersecurity efforts.)
  • The Financial Services Sector Coordinating Council’s (FSSCC) Financial Services Sector Cybersecurity Profile (Profile), Version 1.0 (a customization of the NIST Cybersecurity Framework that financial institutions can use for internal and external cyber risk management assessment and as a mechanism to evidence compliance with various regulatory frameworks).

FOOD AND AGRICULTURAL SECTOR

GOVERNMENT FACILITIES SECTOR

  • No known available resources. We encourage submissions!

HEALTHCARE AND PUBLIC HEALTH SECTOR

INFORMATION TECHNOLOGY SECTOR

  • No known available resources. We encourage submissions!

NUCLEAR REACTORS, MATERIALS, AND WASTE SECTOR

TRANSPORTATION SYSTEMS SECTOR

WATER AND WASTEWATER SYSTEMS SECTOR

Created February 6, 2018, Updated June 25, 2020