
CSRF Mission
Conduct Defensive Cyberspace operations to support mission requirements as directed by The Adjutant General or Governor.
Federal Mission
- Provide Defensive Cyberspace Operations capabilities on DODIN and supporting Critical Infrastructure
State Missions
- Provide cyber security assistance to State, Local, and Critical Infrastructure providers
The Cyber Hygiene Cycle
Assessment
- Assessment of information security program, environmental factors, and technical area review
- Purpose is to identify potential gaps in coverage as well as provide baseline of improvement recommendations
- Conducted using industry best practices and DOD Security Technical Implementation Guidelines (STIGs)
- Output is comprehensive report outlining vulnerabilities and recommended solutions
Remediation
- Utilize assessment report to prioritize and address vulnerabilities
- Determine acceptable risk levels and document risk mitigation strategy
- Develop internal processes, policies and procedures to improve security posture
- Leverage report to determine additional resource requirements
Penetration Testing
- Validate the steps taken during remediation to ensure appropriate resolution
- Identify additional areas of concern including user awareness and network monitoring capability
- Output is comprehensive report detailing actions taken and recommended solutions
Remediation
- Address vulnerabilities outlined in penetration testing report
- Identify additional risk acceptance and document mitigation strategy
- Evaluate processes, policies, and procedures to ensure comprehensive coverage
- Leverage report to determine additional resource requirements
Proactive Lines of Effort
Reactive Lines of Efforts