National Policy

• NIST Special Publication Library (800 Series)  
• NIST SP 800-146 Cloud Computing Synopsis and Recommendations 
• Social Media, Web-Based Interactive Technologies, and the Paperwork Reduction Act (OMB Memo) 
• (U) National Instruction on Classified Information Spillage (Scroll down to CNSSI 1001) 
• Executive Order 13636 Improving Critical Infrastructure Cybersecurity 

DOD Policy

• DOD Cybersecurity Policy Chart 
• DODI 8260.03, "The Global Force Management Data Initiative" 
• DODI 8500.01, "Cybersecurity" 
• DODI 8510.01, "Risk Management Framework for DOD IT, change 2" 
• DOD Web and Internet-based Capabilities Policies 
• DODD 5240.06 Counterintelligence Awareness & Reporting Table 3; Reportable FIE-Associated Cyberspace Contacts, Activities, Indicators & Behaviors 
• DOD Directive 8000.01 Management of the DOD Information Enterprise 
• DOD Cloud Computer Broker Guidance (CAC Login Required)
• DODD 5500.07 Standards of Conduct 
• DOD CIO, USD(I) & USSTRATCOM Memorandum: "Effective Integration of Cyber and Traditional Security Efforts" 
• DODI 8551.01 "Ports, Protocols, and Services Management (PPSM)" 

DCSA Policy

• DCSA  Assessment and Authorization Process Manual (DAAPM) 
• DAAPM Appendix A Security Controls Version 2.2
• National Industrial Security Program Operating Manual (NISPOM) 

Resources

• DOD CIO Library

Cyber Awareness

• Training
  • eLearning: Cybersecurity Awareness CS130.16
  • Short: Cybersecurity Attacks: The Insider Threat
  • Short: Suspicious Emails
  • OnGuardOnline 
  • Webinar: Common Scams and Frauds
  • Webinar: Preventing and Recovering from Ransomware
  • Webinar: Creating a Workplace Culture of Cybersecurity
  • Video: Ransomware Video Lesson
  • Video: Social Media Video Lesson
• Posters
  • Birthdates Make Terrible Passwords 8.5x11 / 17x22 
  • Conjure Stronger Password 8.5x11 / 17x22 
  • It Came From an Email!!! 8.5x11 / 17x22 
  • The Attachment 8.5x11 / 17x22 
  • Unique Password 8.5x11 / 17x22 
• Security Awareness Games
  • #BeCyberSmart Crossword
  • Cybersecurity Magic 8 Ball 
  • Cybersecurity Trivia Twirl
  • Cybersecurity: Tomorrow's Internet

Special Cyber Topics

• Training
  • eLearning: Cybersecurity for Security Personnel CS160.16 
  • eLearning: Protected Distribution System CS140.16
  • eLearning: Identifying and Safeguarding Personally Identifiable Information (PII) DS-IF101.06
  • eLearning: Applying Assessment & Authorization (A&A) in the National Industrial Security Program (NISP) CS250.16 
  • eLearning: Introduction to the Risk Management Framework (RMF) CS124.16
  • eLearning: CISA Learning 
  • Short: Cybersecurity: Incident Response
  • Short: Data Spills
  • Webinar: Cyber Insider Threat
  • Webinar: Cloud Computing
  • Webinar: Best Practices and Vulnerabilities for Privileged Accounts
  • Webinar: Preventing and Recovering from Ransomwar 
• Policy Guidance
  • Internet Crime Compliant Center – Internet Crime Schemes 
  • NIST Framework for Improving Critical Infrastructure Cybersecurity 

Cyber References

• NIST Computer Security Resource Center 
• Job Aid: DOD Cybersecurity Policy Chart  
• National Information System Security INFOSEC Terms (NTISSI No. 4009)  (Scroll down to No. 4009)
• Security and Intrusion Detection Terms (SANS) 
• Protective Distribution Systems (CNSS No. 7003)  (Scroll down to No. 7003)
• DODD 5240.06 Counterintelligence Awareness & Reporting Table 3; Reportable FIE-Associated Cyberspace Contacts, Activities, Indicators & Behaviors 
• DCSA Assessment and Authorization Process Manual (DAAPM) 

Advanced Education

• Cybersecurity and Oversight of Information System Security ED514.01
• The Future of Security Systems and Information Assurance ED510.01

National Industrial Security Program Authorization Office (NAO)

• Office of the Industrial Security Program Authorization Office (NAO) 
• Webinar: Assessment and Remediation using the SCAP Tool

A&A Process

• eLearning: Introduction to the NISP RMF A&A Process  CS150.16 
• eLearning: Introduction to the Risk Management Framework (RMF) CS124.16
• eLearning: Applying Assessment and Authorization in the NISP CS250.16 
• eLearning: Risk Management Framework (RMF) Prepare Step CS101.16
• eLearning: Risk Management Framework (RMF) Categorize Step CS102.16
• eLearning: Risk Management Framework (RMF) Select Step  CS103.16
• eLearning: Risk Management Framework (RMF) Implement Step CS104.16
• eLearning: Risk Management Framework (RMF) Assess Step CS105.16
• eLearning: Risk Management Framework (RMF) Authorize Step CS106.16
• eLearning: Risk Management Framework (RMF) Monitor Step CS107.16
• Program: NISP Assessment and Authorization (A&A) Program CS350.CU
• Program: Risk Management Framework (RMF) Program CS100.CU 
• RMF Knowledge Service (CAC required)

Specific A&A Procedures

• eLearning: Technical Implementation of A&A in the NISP CS300.06 
• International Programs Security Handbook: Appendix V, "Protection of Information Handled in IT and Communication Systems" 
• DCSA Assessment and Authorization Process Manual (DAAPM) 
• Job Aid: Plan of Action and Milestones 

Self-Inspections

• Self-Inspection Handbook for NISP Contractors 
• NIST SP 800-37 Rev. 2 Risk Management Framework for Information Systems and Organizations: A System Life Cycle Approach for Security and Privacy 
• NIST SP 800-39 Managing Information Security Risk 
• NIST SP 800-137 Information Security Continuous Monitoring for Federal Information Systems and Organizations 
• NIST SP 800-137A Assessing Information Security Continuous Monitoring (ISCM) Programs: Developing an ISCM Program Assessment 

Media Destruction

• NSA Media Destruction Guidance 
• NSA Destruction Facility Guidelines 
• DCSA Assessment and Authorization Process Manual (DAAPM) 

Templates/Samples

• FOCI Tools & Resources 
• NISP Tools and Resources 

Auditing

• DCSA Assessment and Authorization Process Manual (DAAPM) 

Risk Management Framework

• eLearning: Applying the Risk Management Framework to Federal Information Systems
• eLearning: Continuous Monitoring CS200.16 
• eLearning: Introduction to the Risk Management Framework (RMF) CS124.16

Procedures

• DCSA Assessment and Authorization Process Manual (DAAPM) 
• Protected Distribution Systems (CNSS No. 7003)  (Scroll down to No. 7003)
• eLearning: Protected Distribution Systems CS140.06 
• Webinar: Information Security Continuous Monitoring

Regulatory Guidance

• DODI 8500.01, "Cybersecurity" 
• DODI 8510.01, "Risk Management Framework for DOD IT, change 2" 
• NIST SP 800-37 Rev. 2 Risk Management Framework for Information Systems and Organizations: A System Life Cycle Approach for Security and Privacy 
• NIST SP 800-137A Assessing Information Security Continuous Monitoring (ISCM) Programs: Developing an ISCM Program Assessment 
• NIST SP 800-39 Managing Information Security Risk 
• NIST SP 800-137 Information Security Continuous Monitoring for Federal Information Systems and Organizations 

Advanced Education

• Cybersecurity and Oversight of Information System Security ED514.01
• The Future of Security Systems and Information Assurance ED510.01

General Network Defense

• DCSA Assessment and Authorization Program Manual (DAAPM) 
• Distance Learning: Cybersecurity and Oversight of Information System Security ED514.01

Assured File Transfer (Previously referred to as Trusted Download)

• DCSA Assessment and Authorization Program Manual (DAAPM) 

Incident Response

• DCSA Assessment and Authorization Program Manual (DAAPM) 
• Short: Cybersecurity: Incident Response
• NIST SP 800-61, rev 2: Computer Security Incident Handling Guide 
• Security Incident​ 

Data Spills

• DCSA Assessment and Authorization Program Manual (DAAPM) 
• CNSSI 1001 National Instruction on Classified Information Spillage 
• DODM 5200.01, Vol 3, DOD Information Security Program: Protection of Classified Information 
• Short: Data Spills

Contingency Planning

• DCSA Assessment and Authorization Program Manual (DAAPM) 

Cloud Computing

• DOD Cloud Services Support 
• NIST SP800-146 Cloud Computing Synopsis and Recommendations 
• DOD Cloud Computing SRG 

Communications and Wireless

• Voice Over Internet Protocol (VoIP) Telephony (CNSSI No. 5000)  (Scroll down to No. 5000)
• NIST SP800-58 for Voice over Internet Protocol 
• DOD Directive 8100.02 Use of Commercial Wireless Devices, Services, and Technologies in the Department of Defense Global Information Grid 
• Guidelines for Managing the Security of Mobile Devices in the Enterprise 

Social Media Policies

• DOD Web and Internet-based Capabilities Policies 
• Social Media, Web-Based Interactive Technologies, and the Paperwork Reduction Act (OMB Memo) 
• DODD 5500.07 Standards of Conduct 

Social Media Threat Awareness/Best Practices

• Social Media @ DOD 
• Short: Suspicious Emails
• Social Media: Leveraging Value While Mitigating Risk 
• Internet Social Networking Risks 

Job Aids

• Facebook Smartcard (Trifold) 
• Facebook Smartcard (Configuration Guide) 
• LinkedIn Smartcard (Trifold) 
• Twitter Smartcard (Trifold) 
• Twitter Smartcard (Configuration Guide) 

Supply Chain Risk Management Policy

• DODI 5200.44 Protection of Mission Critical Functions to Achieve Trusted Systems and Networks (TSN) 
• Computer Security Resource Center NIST 
• DODI-O 5240.24 CI Activities Supporting Research, Development and Acquisition (CAC Required) 
• DODM 4140.01 Volume 1-11 DOD Supply Chain Materiel Management Procedures 
• National Defense Authorization Act 2014, Page 414 - 415 

Threat Awareness

• Computer Security Resource Center NIST 
• Software and Supply Chain Assurance DHS US CERT Website 

Best Practices

• Defense Acquisition Portal SCRM Blog 
• Computer Security Resource Center NIST 
• NIST Interagency Report 7622 Notional SCRM Practices for Federal Information Systems 
• Securing The Software Supply Chain for Customers 
• Securing The Software Supply Chain for Developers 
• Securing The Software Supply Chain for Suppliers