Cybersecurity Evaluation Tool Now Open Sourced

The Cybersecurity and Infrastructure Security Agency (CISA) shared something InfoSec professionals will appreciate.

Another cybersecurity tool is now open-sourced and free:

On Twitter, at least, the news was meme-worthy:

What is the government cybersecurity evaluation tool?

So what is the Cyber Security Evaluation Tool (CSET)? 

It is a stand-alone desktop application that guides asset owners and operators through a systematic process of evaluating both Operational Technology and Information Technology. So this is potentially good news for OT and IT.

"After completing the evaluation, the organization will receive reports that present the assessment results in both a summarized and detailed manner. The organization will be able to manipulate and filter content in order to analyze findings with varying degrees of granularity," CISA says.

Where can I download CISA Cyber Security Evaluation Tool?

You can go to CISA's GitHub page for documentation, installation, and implementation instructions.

Free cybersecurity tools and online courses

We know of other free cybersecurity tools and resources, as well. Here are a couple of them:

1. Free ransomware decryption tool for dozens of ransomware variants. This is a joint effort by many cybersecurity vendors and government agencies.
2. Free SecureWorld cybersecurity webinars and web conferences for continuing education and CPE credits. These are incredibly insightful with industry leaders presenting on relevant security topics.

And ransomware, BEC attacks, and security in the cloud are also frequent topics at SecureWorld cybersecurity conferences across North America. Be a part of the event in your region.

[Note: These conferences are not free—but we hear they are valuable!]