Cyber Incident Emergency Contact

If you are currently having a cybersecurity incident, WiscNet recommends you contact the Wisconsin Cyber Response Team:

Wisconsin Emergency Management 24 Hour Duty Officer: 800-943-0003, option 2.

CRT@Widma.gov

Table of Contents

Introduction

These pages are intended to provide resources specifically targeted and designed for WiscNet member organizations.  This is not intended to be an exhaustive list of all possible content in the cybersecurity arena, but rather it is intended to be a condensed collection of those resources most relevant and valuable to our members.

Two organizations with a lot of valuable information and resources are the Federal Cybersecurity and Infrastructure Security Agency (CISA) and the Multi-State Information Sharing and Analysis Center (MS-ISAC).  Both of these organizations have a lot of free resources and provide vulnerability alerts.  Please use the links below to explore their resources.

Where Should I Start?

Figuring out where you are in your security journey is a good place to start.  Several organizations provide resources you can use to determine where you're at in your security journey.  These three all provide a good starting point.

CISA - Federal Cybersecurity and Infrastructure Security Agency (part of Homeland Security)

https://www.cisa.gov/cyber-resource-hub - Of particular note see the Cyber Resilience Review and their Security Planning workbook.

For more information contact the CISA Wisconsin District Cybersecurity Advisor:

Bill Nash | 608-590-7105 | william.nash@cisa.dhs.gov

MS-ISAC - Multi State Information Sharing and Analysis Center

Serves the public sector: notably education and government entities.  Lots of free resources here to improve the overall security posture for public sector entities through prevention, detection, response, and recovery.  Many WiscNet members use their resources and find them valuable.

https://www.cisecurity.org/ms-isac

K12SIX

K12SIX is a membership organization with an associated membership fee, but they provide a free self-assessment tool in their Essential Protections series.  The self-assessment tool provides prioritized recommendations based on your answers.  The tool is geared toward K12 schools, but many of the topics apply to other organizations as well.

By WiscNet Member Organization Type

Here are some resources by WiscNet Member organization type.

K-12

  • Start Here: The K12 Six Essentials Series
    • This series includes six different resources, including K12 Six's Cyber Incident Response Runbook.  You will have to provide your contact information to download the resources.
  • CISA's Cybersecurity for K-12 Education
    • Here is a one-page document CISA created that outlines the most impactful security measures you can implement.
    • CISA also provides physical security guidance.  You can find their K-12 School Security Guide Product Suite here.

State, Local, Tribal, and Territorial Government (SLTT)

  • Multi-State Information Sharing and Analysis Center (MS-ISAC)
    • As mentioned above, MS-ISAC is a repository for many services and sources of information.
  • CISA's State, Local, Tribal, and Territorial Government Resources
    • This a hub for CISA's partnership with State, Local, Tribal, and Territorial Governments.  The resources cover both cyber and physical security.

Healthcare and Public Health

Higher Education


What Does this Term Mean?

Need help figuring out what MDR, XDR, MFA, and SIEM mean?  Check out our Glossary on Cybersecurity terms.  We'll update this as new terms cross our paths.

Ask WiscNet a Question

If you have a question you think WiscNet can help you with, please submit your question to security-support@WiscNet.net or call our Support team at 608-442-6761, option 2.

Here are some links that will be helpful in your security journey.

Website

How It's Helpful

https://www.shodan.ioIt is a database of billions of publicly available IP addresses, and it’s used by security experts to analyze network security. It's a search engine, like Google, but instead of searching for website, it searches for devices connected to the Internet. Type the host IP, and it will give you information about the host and what ports it uses. It is helpful to identify potential security issues with their devices.
https://www.virustotal.comAnalyze suspicious files, domains, IPs, and URLs, to detect malware and other breaches, automatically share them with the security community.  Please know, not all threat signatures will be immediately indexed.
MX ToolboxCheck whether your domain is on a block list, check your domain's security health.
SANS Institute Free ResourcesThe SANS Institute has a number of free cybersecurity resources, including training, whitepapers, tools, cheat sheets, and cyber ranges.
Fortinet TrainingFortinet has free training resources for their solutions, including firewalls and FortiAnalyzer.

Upcoming WiscNet Events

Be sure to check out the WiscNet Events page for upcoming security events.


(Work in progress - check back often)

  • No labels