Top 10 High Value Controls
The DIB SCC Task Force Working Group Top 10 high value controls are a set of prioritized controls that is used to enhance contractual and regulatory requirements. It builds additional rigor around specific foundational controls already required and additional rigor, specificity and/or inclusion of high-value Advanced Persistent Threat (APT) focused controls.
Protecting Data in the Cloud
The DIB SCC Cloud Working Group has developed frequently asked questions regarding cloud security. These FAQs are provided to assist organizations with implementing cloud solutions.
The Microsoft Cloud Services Working Group brought ND-ISAC members together with Microsoft subject matter experts to elaborate common challenges, understand features, and provide updates on Microsoft Cloud Services roadmap. The Microsoft Reference Identity Architecture for US Defense Industrial Base is a result of months of collaboration among the Microsoft Cloud Services Working Group. It provides the group’s consensus on common challenges coupled with guidance on potential ways to overcome those challenges.
Department of War Brilliant at the Basics
The “Brilliant at the Basics” Information Technology (IT) empowers Defense Industrial Base (DIB) partners—especially innovative small and mid-sized businesses—to rapidly secure their networks and protect sensitive Department of War (DoW) information. By stripping away administrative complexity and compliance overhead, these foundational core practices help you fortify your enterprise, reduce technical debt, and ensure the secure, rapid delivery of superior technology directly to the warfighter at the tactical edge.
Helpful Links
Resources
- Cybersecurity and Infrastructure Security Agency – Stop Ransomware
The U.S. Government's official one-stop location for resources to tackle ransomware more effectively.
- DoD Procurement Toolbox
A collection of tools and services to help you and your organization manage, enable, and share procurement information across the Department of Defense.
- NIST – Small Business Cybersecurity Corner
NIST’s Small Business Cybersecurity Corner is your go-to source for learning how to keep your data safe. You’ll find information on cybersecurity basics, training for you and your employees, a NIST Cybersecurity Framework quick start guide and more, all specifically geared toward small businesses. It also has up-to-date guidance for teleworking security, as that becomes a more common practice in small businesses everywhere.
- Project Spectrum
Project Spectrum is a cybersecurity readiness and compliance resource designed to help businesses, particularly those supporting the Defense Industrial Base (DIB), improve their cybersecurity posture, understand regulatory requirements, and prepare for evolving cyber threats.
- U.S. Small Business Administration – Strengthen Your Cybersecurity
SBA resource that provides an introduction to cybersecurity for small business.
Benchmarks, Policies, and Guides
- Center for Internet Security – Benchmarks
The CIS Benchmarks are prescriptive configuration recommendations for more than 25+ vendor product families. They represent the consensus-based effort of cybersecurity experts globally to help you protect your systems against threats more confidently.
- Center for Internet Security – Critical Security Controls
CIS Controls v8.1 help you keep on top of your evolving workplace, the technology you need to support it, and the threats confronting those systems. It places specific emphasis on moving to a hybrid or fully cloud environment and managing security across your supply chain.
- Center for Internet Security – Hardened Images
CIS Hardened Images are virtual machine (VM) images that are pre-configured to meet the robust security recommendations of the associated CIS Benchmark. They provide users with a secure, on-demand, and scalable computing environment. CIS Hardened Images are available on major cloud service provider marketplaces.
- Center for Internet Security – Telework and Small Office Network Security Guide
This guide is meant to assist individuals and organizations in securing commodity routers, modems, and other network devices. Securing these devices is important as there are serious cybersecurity considerations surrounding the usage of network devices.
- Cybersecurity Hub White Papers
Cyber Security Hub provides enterprise security professionals with the most comprehensive selection of cyber security whitepapers from our own network or cyber security experts. All Cyber Security Hub members can research and be informed on a variety of topics through our collection of whitepapers.
- DISA – Security Technical Information Guide (STIG)
This site contains the Security Technical Implementation Guides and Security Requirements Guides for the Department of Defense (DOD) information technology systems as mandated by DODI 8500.01. This guidance bridges the gap between the National Institute of Standards and Technology Special Publication 800-53 and risk management framework (RMF).
- DISA – Security Technical Information Guide (STIG): Document Library
Direct link to the STIGs document library
- Global Cyber Alliance – Cybersecurity Toolkit for Small Business
The Cybersecurity Toolkit for Small Business website offers a six-step, easy-to-follow set of free and effective tools you can start using today to reduce your cyber risk. Designed for any small organization with limited IT expertise, resources, or budget—whether commercial, nonprofit, or mission-based—it provides practical guidance and ready-to-use resources you can apply right now.
- SANS – Cybersecurity / Information Security Policies and Standards
In partnership, the Cybersecurity Risk Foundation (CRF) and SANS have created a library of free cybersecurity policy templates to help organizations quickly define, document, and deploy key cybersecurity policies.
Training
- Center for Development of Security Excellence (CDSE) – Cybersecurity Awareness
The course introduces the automated information systems (AIS) environment and the threats and vulnerabilities faced when working within the government or defense industrial systems. It provides a working knowledge of cyber intrusion methods and cybersecurity countermeasures to assist employees in preventing cyber attacks and protecting their systems and information.
- DoD Cyber Exchange – Cyber Awareness Challenge 2026
A course to provide an overview of current cybersecurity threats and best practices to keep information and information systems secure at home and at work. This training also reinforces best practices to protect classified, controlled unclassified information (CUI), and personally identifiable information (PII).
- KnowBe4 – Security and Awareness Training
KnowBe4 is a large security awareness training and simulated phishing platform that helps you manage the ongoing problem of social engineering.