Consortium Public Interest Toolkit - GCA Cybersecurity Toolkit | Tools and Resources to Improve Your Cyber Defenses

In Partnership with:

Cybersecurity Resources for Community-Based Organizations

This toolkit provides resources for community-based organizations interested in improving their cybersecurity, including clients of the Consortium of Cybersecurity Clinics. This page includes links to the GCA Cybersecurity Toolkit for Mission-Based Organizations for more.

Take Steps to Protect Yourself From Cyber Threats

This cybersecurity toolkit is meant to be a resource for public interest groups as they improve their security. You can select from the tools below to find the resources that best fit your needs.

Know What
You Have

Devices and Applications

Discover tools that help you identify and assess your devices so you can take the proper steps to secure them.

Update Your
Defenses

Updates, Patches and Vulnerability Management

Boost your digital immunity by implementing tools that automatically update your systems and applications.

Beyond Simple Passwords

Passwords and Two-Factor Authentication

Safeguard your accounts by learning how to create stronger passwords and adding additional layers of protection.

Prevent Phishing
and Malware

DNS Filters, Anti-Virus and Ad-Blockers

Protect against malicious attacks with advanced tools that help you navigate the internet safely.

Backup and Recover

System Backups

Discover tools that help you routinely backup your data and easily restore it.

Communicate Securely

VPN, Secure Messaging

Use these tools to improve the security of your texts, calls, and emails to better protect your information and data.

Protect Your Email and Reputation

Email Authentication and Brand Monitoring

Explore tools that protect your email domain and brand name from being misused by attackers.

Public Interest Cybersecurity Resources

The following resources are available for public interest groups to learn about the cyber industry and possible training pathways:

Information Security Policy Templates

In collaboration with information security subject-matter experts and leaders who volunteered their security policy know-how and time, SANS has developed and posted here a set of security policy templates for your use.

MS-ISAC Information

The mission of the MS-ISAC is to improve the overall cybersecurity posture of U.S. State, Local, Tribal, and Territorial (SLTT) government organizations through coordination, collaboration, cooperation, and increased communication.

CIS Workbench

Bring your IT expertise to CIS WorkBench, where you can network and collaborate with cybersecurity professionals around the world.

Internet Crime Complaint Center (IC3)

The IC3 accepts online Internet crime complaints from either

the actual victim or from a third party to the complainant.

Mastercard Trust Center

Help defend your organization against cyberattacks.

Cybersecurity and Infrastructure Security Agency

CISA works with partners to defend against today’s threats and collaborates to build a more secure and resilient infrastructure for the future.

State EMA/Law Enforcement Links

Cyber incidents can have serious consequences. The theft of private, financial, or other sensitive data and cyber attacks that damage computer systems are capable of causing lasting harm to anyone engaged in personal or commercial online transactions. Such risks are increasingly faced by businesses, consumers, and all other users of the Internet.

MIT Cybersecurity Case Study: The Oldsmar Attack

Case Study of the cyber attack on the Oldsmar water treatment plant

MIT Cybersecurity Case Study: Washington, D.C. Cyberattack

Case Study of the cyber attack on the Washington, D.C. Metropolitan Police Department.

MIT Cybersecurity Case Study: The Colonial Pipeline Attack

Case Study of the cyber attack on the Colonial Pipeline.

Legal Notice

The Consortium of Cybersecurity Clinics may provide information about third-party products or services, including security tools, videos, templates, guides, and other resources included in our cybersecurity toolkits (collectively, “Third-Party Content”). You are solely responsible for your use of Third-Party Content, and you must ensure that your use of Third-Party Content complies with all applicable laws, including applicable laws of your jurisdiction and applicable U.S. export compliance laws. We provide Third-Party Content as a service to those interested in such content. Your dealings or correspondence with third parties and your use of or interaction with any Third-Party Content are solely between you and the third party. The Consortium of Cybersecurity Clinics does not control or endorse, and makes no representations or warranties regarding, any Third-Party Content, and your access to and use of such Third-Party Content is at your own risk.

Cybersecurity Resources for Community-Based Organizations

Take Steps to Protect Yourself From Cyber Threats

Know What You Have

Update Your Defenses

Beyond Simple Passwords

Prevent Phishing and Malware

Backup and Recover

Communicate Securely

Protect Your Email and Reputation

Public Interest Cybersecurity Resources

Information Security Policy Templates

MS-ISAC Information

CIS Workbench

Internet Crime Complaint Center (IC3)

Mastercard Trust Center

Cybersecurity and Infrastructure Security Agency

State EMA/Law Enforcement Links

MIT Cybersecurity Case Study: The Oldsmar Attack

MIT Cybersecurity Case Study: Washington, D.C. Cyberattack

MIT Cybersecurity Case Study: The Colonial Pipeline Attack

Legal Notice

Tool Types

Time

Tool Levels

Level 1

Level 2

Level 3

Level 4

Support

Know What
You Have

Update Your
Defenses

Prevent Phishing
and Malware