United States Computer Emergency Readiness Team Related Web Sites

• CERT Coordination Center
• Forum of Incident Response and Security Teams (FIRST)

• National Vulnerability Database (NVD)
  Search U.S. government vulnerability resources for information about vulnerabilities on your systems
• Common Vulnerabilities and Exposures List (CVE)
  Search vulnerabilities by CVE name or browse the US-CERT list of vulnerabilities in CVE name order
• Open Vulnerability Assessment Language (OVAL)
  Identify vulnerabilities on your local systems using OVAL vulnerability definitions
• National Infrastructure Advisory Council's Vulnerability Disclosure Framework 

• Build Security In
  Collection of software assurance and security information to help software developers, architects, and security practitioners create secure systems
• National Institute of Standards and Technology (NIST)
  NIST offers Security Practices & Checklists as well as Special Publications.
• Center for Education and Research in Information Assurance and Security (CERIAS)
• Operationally Critical Threat and Vulnerability Evaluation (OCTAVE)

• F-Secure Corporation's Data Security Summary for 2004
• Information Security Management References 

• Federal Cyber Service: Scholarship for Service Program (SFS)
  The SFS program seeks to increase the number of skilled students entering the fields of information assurance and computer security.
• National Centers of Academic Excellence in Information Assurance Education (NCAEIAE)
  The NCAEIAE program strengthens higher education in information assurance programs to meet America's growing requirements for cyber security professionals.

• OnGuard Online
  Provides practical tips from the federal government and technology industry to help consumers guard against Internet fraud, secure their computers, and protect personal information
• Stay Safe Online
  Sponsored by the National Cyber Security Alliance (NCSA) to promote safe behavior online
• The NetSmartz Workshop
  Educational resource material for children and teens

• Banking and Finance
  Financial Services ISAC
• Emergency Services
  Emergency Management and Response ISAC
• Energy
  Electricity Sector ISAC
• Food and Agriculture
  Food and Agriculture ISAC
• Government
  Multi-State ISAC
• Information and Telecommunications
  Telecommunications ISAC
• Real Estate
  Real Estate ISAC
• Transportation
  Surface Transportation ISAC
• Water
  Water ISAC

• National Strategy to Secure Cyberspace
  This document outlines an initial framework for both organizing and prioritizing efforts to protect against disruptions to our critical information systems and reduce vulnerabilities to cyber threats. The Department of Homeland Security's National Cyber Security Division (NCSD) has been charged with coordinating the implementation of the strategy.
• E-Government Act of 2002 including Title III - The Federal Information Security Management (FISMA) Act 
  The purpose of this Act is to enhance the management and promotion of electronic government services and processes. Title III of this act is the Federal Information Security Management Act of 2002. The E-Government Act permanently supersedes the Homeland Security Act in those instances where both Acts prescribe different amendments to the same provisions of the United States Code.
• Office of Management and Budget Guidance on FISMA 
  The subject of this memorandum is Reporting Instructions for the Federal Information Security Management Act and Updated Guidance on Quarterly IT Security Reporting.
• Homeland Security Presidential Directive/HSPD-7
  This directive establishes a national policy for Federal departments and agencies to identify and prioritize United States critical infrastructure and key resources and to protect them from terrorist attacks.

The United States Computer Emergency Readiness Team (US-CERT) is a partnership between the Department of Homeland Security and the public and private sectors. Established in 2003 to protect the nation's Internet infrastructure, US-CERT coordinates defense against and responses to cyber attacks across the nation.

US-CERT is charged with protecting our nation's Internet infrastructure by coordinating defense against and response to cyber attacks. US-CERT is responsible for

• analyzing and reducing cyber threats and vulnerabilities
• disseminating cyber threat warning information
• coordinating incident response activities

US-CERT also provides a way for citizens, businesses, and other institutions to coordinate directly with the United States government about cyber security.