“We thank all of our partners in government and the private sector who played an essential role in the development of CISA’s Cyber Essentials Toolkit,” said CISA Director Christopher Krebs. “We hope this toolkit, and the ones we are developing, fills gaps and provides executives the tools they need to raise the cybersecurity baseline of their teams and the organizations they lead.”

Developed in collaboration with small businesses and state and local governments, Cyber Essentials aims to equip smaller organizations that historically have not been a part of the national dialogue on cybersecurity with basic steps and resources to improve their cybersecurity. Cyber Essentials includes two parts – guiding principles for leaders to develop a culture of security, and specific actions for leaders and their IT professionals to put that culture into action.

Each of the six Cyber Essentials includes a list of actionable items anyone can take to reduce cyber risks. These are: 

• Drive cybersecurity strategy, investment, and culture; 
• Develop heightened level of security awareness and vigilance; 
• Protect critical assets and applications; 
• Ensure only those who belong on your digital workplace have access; 
• Make backups and avoid loss of info critical to operations; and 
• Limit damage and restore normal operations quickly. 

To learn more about the Cyber Essentials Toolkits, visit www.cisa.gov/cyber-essentials.