Practical security guidance for cities, counties, and other small public-sector organizations.
Non-technical or executive reader? Start with the Executive Start Here page.
One-page first-day incident checklist plus links to incident log, evidence checklist, timeline, holding statement, and containment decision support.
Executive-friendly readiness kit with a minimum viable checklist, leadership decisions, and follow-on tabletop material.
Fast, non-technical navigation into incident response, ransomware readiness, patch governance, and AI governance.
Policy starter, cheat sheet, and use-case register aligned to NIST AI RMF for quick local adoption.
Turn CISA KEV activity into an executive risk discussion and an actionable IT remediation workflow.
Scenario-based exercises for leadership, IT, security, and communications teams to rehearse difficult decisions before a real incident forces them.
Browser-based workbooks for CJIS, NIST CSF 2.0, NIST 800-53 Moderate, and NIST 800-171/CMMC-oriented readiness work.