Cybersecurity Glossary

CISA

The United States Cybersecurity and Infrastructure Security Agency, and its free guidance and services.

What CISA means

CISA publishes advisories, a catalogue of vulnerabilities known to be exploited, and practical guidance aimed at organisations without security teams. It also offers free services including vulnerability scanning of internet facing systems for eligible organisations, including many nonprofits.

Why CISA matters for small businesses and nonprofits

For a small organisation this is high quality guidance at no cost, and the catalogue of exploited vulnerabilities is a very good patching priority list. Many funders and public sector clients recognise its material.

What to do about CISA

Three steps to deal with CISA

  • Use the known exploited vulnerabilities catalogue to prioritise patching
  • Check eligibility for the free scanning services
  • Follow the advisories relevant to the products you actually run

Not sure where you stand on this?

We review your current setup against the basics, tell you plainly what is covered and what is not, and give you a ranked list with effort and cost. No jargon and no scare tactics.