The Department of Homeland Security offers a wide array of free tools and resources to government and private sector partners to enable the critical infrastructure security and resilience mission.
- Cybersecurity and Infrastructure Security Agency's (CISA) Infrastructure Security Division – Leads and coordinates national programs and policies on critical infrastructure security and resilience across multiple sectors and establishes strong partnerships between federal, state, local, tribal, and territorial governments and the private sector. IP also offers tools and trainings to partners to help them manage risks to their assets, systems, and networks.
- National Infrastructure Protection Plan (NIPP 2013): Partnering for Critical Infrastructure Security and Resilience – Outlines how government and private sector participants in the critical infrastructure community work together to manage risks and achieve security and resilience outcomes.
- Hometown Security – Applying four steps—Connect, Plan, Train, Report—in advance of an incident or attack can help better prepare businesses and their employees to proactively think about the role they play in the safety and security of their businesses and communities.
- Protective Security Advisors (PSA) – PSAs are trained critical infrastructure security and resilience and vulnerability mitigation subject matter experts.
- Homeland Security Information Network - Critical Infrastructure (HSIN-CI) – The Homeland Security Information Network (HSIN) is the trusted network for homeland security mission operations to share Sensitive But Unclassified (SBU) information. The Critical Infrastructure community on HSIN (HSIN-CI) is the primary system through which private sector owners and operators, DHS, and other federal, state, and local government agencies collaborate to protect the nation’s critical infrastructure.
- Suspicious Activity Reporting Tool – This HSIN-CI Suspicious Activity Reporting tool allows non-uniformed, law enforcement private sector members to submit formalized suspicious activity reports to appropriate law enforcement officials and to facilitate efficient information sharing and responsiveness.
- Active Shooter Preparedness – Preparedness resources include various trainings; a desk reference guide; a poster; and a pocket-size reference card to address how employees, managers, training staff, and human resources personnel can mitigate the risk of and appropriately react in the event of an active shooter situation. Materials are also available in Spanish.
- Bombing Prevention – Bomb Threats are rare, but should always be taken seriously. How quickly and safely you react to a bomb threat could save lives, including your own.
- Unmanned Aircraft Systems – As the prevalence of unmanned aircraft systems (UAS)—also commonly known as unmanned aerial vehicles (UAV) or drones—increases, the potential threats associated with UAS will continue to expand in nature and increase in volume in the coming years. Because of their physical and operational characteristics, UAS can often evade detection and create challenges for the critical infrastructure community.
- Ready.gov – A national public service advertising campaign designed to educate and empower Americans to prepare for and respond to natural and man-made incidents. The goal of the campaign is to get the public involved and ultimately to increase the level of basic preparedness across the nation.
- Business Continuity Planning Suite – The Business Continuity Planning (BCP) Suite consists of three main components: BCP training, BCP and disaster recovery plan tool, and exercises for an implemented BCP. The suite and training are free and available to all.
- The Infrastructure Development and Recovery Program coordinates a suite of resources and methods to enhance infrastructure security and resilience to all natural and human hazards during planning, maintenance and recovery across the critical infrastructure community. Resources are developed and shared with federal, local, tribal, state, academic, and regional partners and the private sector in order to encourage a holistic resilient strategies, policies, and best practices.
- Sector-Specific Agencies (SSA) – The primary federal entities responsible for coordinating critical infrastructure security and resilience efforts within individual sectors. DHS is the sector-specific agency for 10 of the 16 sectors.
- Sector-Specific Tabletop Exercise Program – This tool allows critical infrastructure partners to develop interactive, discussion-based exercises for their communities of interest, at the sector or a facility level. The program allows users to leverage pre-built exercise templates and tailor them to their communities’ specific needs in order to assess, develop, and update plans, programs, policies, and procedures within an incident management functional area. For more information, contact the IP Exercise Team at SOPD.Exercise@hq.dhs.gov.
Each sector has resources that are tailored to the specific needs of that sector.
Sector Specific Agency
- Infrastructure Visualization Platform (IVP) – This is a data collection and presentation tool that blends immersive imagery with geospatial and hypermedia data of facilities, surrounding areas, travel routes, and other areas of interest to create an interactive guide for a selected location.
- Assist Visits – This two-part voluntary program includes security surveys and outreach. Protective Security Advisors conduct security surveys to assess the overall security posture of the Nation’s most critical infrastructure sites and facilities. For more information, contact the Protective Security Coordination Division at IPAssessments@hq.dhs.gov.
- Regional Resiliency Assessment Program (RRAP) – This resource evaluates critical infrastructure in specific geographic regions to examine vulnerabilities, threats, and potential consequences from an all-hazards perspective.
- National Counter-Improvised Explosive Device (IED) Capability Analysis Database – This resource gathers comprehensive data on state and local first responders to assess readiness, equipment, training, and assets required for effective response to IED threats. The resulting database reports help individual units, agency heads, and state and local homeland security officials understand baseline capabilities and areas for improvement.
- Multi-Jurisdiction Improvised Explosive Device Security Planning – This systematic process fuses counter-IED capability analysis, training, and planning to enhance urban area IED prevention, protection, mitigation, and response capabilities. The process assists with collectively identifying roles, responsibilities, and capability gaps and with optimizing limited resources within a multi-jurisdictional planning area. DHS Cybersecurity Resources.
- Critical Infrastructure Cyber Community C³ Voluntary Program – The Critical Infrastructure Cyber Community C³ (pronounced “C Cubed”) Voluntary Program is the coordination point within the Federal Government for critical infrastructure owners and operators interested in improving their cyber risk management processes.
- Cybersecurity Evaluation Program (CSEP) – Voluntary cybersecurity assessments conducted across all 16 critical infrastructure sectors and within state governments and large urban areas.
Other Critical Infrastructure Resources
- National Risk Managment Center – Provides infrastructure consequence analysis, decision support, and modeling capabilities to public and private-sector partners.
- Center for Faith-Based & Neighborhood Partnerships – One of the 12 federal agency offices/centers under President Obama’s Faith-Based and Neighborhood Partnerships, the role of this center is to maximize the appropriate participation of faith-based and community organizations in Departmental programs.
- State and Major Urban Area Fusion Centers – Focal points within the state and local environment for the receipt, analysis, gathering, and sharing of threat-related information between the federal government and state, local, tribal, territorial (SLTT) and private sector partners.
DHS Resource Catalogs
- Private Sector Resources Catalog
- State and Local Law Enforcement Resource Catalog
- Tribal Resource Guide
Critical Infrastructure Training
The Department offers a wide array of free training programs to government and private sector partners.