Cyber Decoy Strategy

CISA Releases Guidance on Cyber Decoy Strategies to Strengthen Detection & Response Capabilities

Turn the tables on cyber threat actors. Discover how cyber decoys like tripwires and honeytokens attract adversaries, uncover threats that evade traditional defense, and help defenders respond faster to intrusions.

Protecting Tokens and Assertions from Forgery, Theft, and Misuse banner image

CISA and NIST Publish Final Interagency Report on Protecting Identity Tokens and Assertions for Agencies and Cloud Service Providers

This report contains technical recommendations for agencies and cloud providers on safeguarding single sign-on, federation, and application programming interface-based access through stronger key management, token verification and lifecycle controls.

A computer motherboard with icons above pieces to indicate different purposes like files, security, people, data, etc. Has a red bell with the words "Update" in the corner. The bottom of the graphic reads "Guidance: Detecting and Mitigating Active Directory Compromises"

CISA, ASD’s ACSC and Partners Update Guidance on Detecting and Mitigating Microsoft Active Directory Compromises

Active Directory remains a primary target for malicious cyber activity. This guidance details 17 common compromise techniques, along with detection methods and mitigations to reduce the likelihood and impact of compromise.

Reads "National Insider Threat Awareness Month September 2026" next to a badge shape filled with images of 5 faceless people standing below icons of a building, a lock, a badge, an explosion, an eye, a camera with flash, a police badge, a human head with lighting bolt in the mind, a bomb, a bug, and an exclamation mark denoting a warning. All icons are meant to represent potential threats.

Strengthen your security

Stay vigilant. Join CISA’s National Insider Threat Awareness Month events, use our resources, and take steps to strengthen your insider threat program.

A photo of a man's hand scanning an access card over a card reader with the outlined drawings of human bodies to the left representing the identities that could be on the card. One figure is red indicating an issue. The image reads Insider Threat Mitigation Guide.

New: Updated Insider Threat Mitigation Guide

Protect your organization from insider threats. This updated guide offers practical strategies for critical infrastructure stakeholders to establish or improve an effective insider threat mitigation program.

Securing the Next 250 with CISA logo in the corner next to "Cybersecurity Awareness Month"

October is just around the corner!

Get ready for Cybersecurity Awareness Month with tools, tips, and other resources to help you organize your own activities.

JCDC unifies cyber defenders from organizations worldwide. This team proactively gathers, analyzes, and shares actionable cyber risk information to enable synchronized, holistic cybersecurity planning, cyber defense, and response.

StopRansomware.gov is the U.S. Government's official one-stop location for resources to tackle ransomware more effectively.

SAFECOM works to improve emergency communications interoperability across local, regional, tribal, state, territorial, international borders, and with federal government entities.

Additional CISA Resources

abstract cyber space

CISA Resources & Tools

CISA offers an array of free resources and tools, such as technical assistance, exercises, cybersecurity assessments, free training, and more.

Image of an event with speaker and participants

CISA Events

CISA hosts and participates in events throughout the year to engage stakeholders, seek research partners, and communicate with the public to help protect the homeland.

Image

CISA Services Catalog

A single resource that provides you with access to information on services across CISA’s mission areas.

Employees pictured during training session

CISA Training

As part of our continuing mission to reduce cybersecurity and physical security risk, CISA provides a robust offering of cybersecurity and critical infrastructure training opportunities.