The Department of Homeland Security (DHS), in partnership with sector partners, works to develop cybersecurity-focused resources for the Commercial Facilities Sector. These efforts serve to raise private sector awareness of cyber risk and provide guidance as to appropriate mitigation efforts.
Cybersecurity in the Retail Subsector Webinar
Cybersecurity in the Retail Sector provides retail employees and managers with an overview of the cyber threats and vulnerabilities facing the industry. The webinar also reviews the types of cyber systems and infrastructure used by the retail industry, and steps retail personnel can take to address the industry's unique vulnerabilities to those cyber resources.
Commerical Facilities Cybersecurity Working Group
The Commercial Facilities Cybersecurity Working Group is a collaborative platform for all eight Commercial Facilities Subsectors, which facilitates the identification of long- and short-term cyber threats and vulnerabilities within the sector. In addition, risk mitigation deliverables and information-sharing mechanisms are being developed to appropriately address these cyber risks.
The specific projects and initiatives undertaken by the working group reflect the evolving priorities and concerns of its members; working group leadership will always strive to ensure the content and direction of the working group is driven by partner priorities. The overarching goal is to provide a comprehensive hub for cybersecurity collaboration that brings cyber partners from across the Commercial Facilities Sector to work together to understand the ever-dynamic landscape of cyber threat, and to address that threat through a spectrum of activities--from information sharing, both formal and informal; to the production of resources, products, and tools; to the creation of networking platforms.
Department of Homeland Security Cybersecurity Resources
DHS has developed many tools and programs that it makes available to public and private sector partners. By leveraging DHS's significant resources, partners can participate in extensive and sophisticated information-sharing networks focused on raising awareness of the evolving cyber environment. In addition, DHS tools and resources can help owners and operators assess the cyber risks faced by their facilities.
United States Computer Emergency Readiness Team
The United States Computer Emergency Readiness Team (US-CERT) is one of the primary platforms where the private sector can both provide and receive information about cyber risk and cyber attacks. In addition, US-CERT provides a suite of services, which include: alerts and tips, security publications and a network of security organizations.
Cybersecurity Evaluation Tool
The Cybersecurity Evaluation Tool (CSET) is a desktop software tool that guides users through a step-by-step process to assess their control system and information technology network security practices against recognized industry standards. The output from CSET is a prioritized list of recommendations for improving the cybersecurity posture of the organization's enterprise and industrial control cyber systems. The tool derives the recommendations from a database of cybersecurity standards, guidelines, and practices. Each recommendation is linked to a set of actions that can be applied to enhance cybersecurity controls.