From Awareness to Action—Cybersecurity for Everyone from K through Gray

Cyber Civil Defense is a call to action across our Nation—government, industry, nonprofits, academia and individuals—to join forces to prepare for, respond to, and recover from cyber incidents. Cyber Civil Defense seeks to advance citizen cyber education, foster innovation in cyber tools, and build a diverse cybersecurity workforce. By leveraging resources, thinking creatively, and promoting basic cybersecurity practices, we can better protect the nation from cyber actors who threaten our way of life. No single entity can secure the nation alone; it requires a unified effort. At CISA, we are committed to empowering communities to take an active role in safeguarding our shared digital future. 

As a key part of this work, we launched Secure Our World in 2023, our first-ever public awareness program, along with key partners across industry and the non-profit world, to help educate everyone about how they can be a part of our nation’s cyber defense in their ever day lives and in their organizations. The Secure Our World campaign centers around four simple steps to improve cyber hygiene: 1) Use Strong Passwords and a Password Manager; 2) Turn On Multifactor Authentication; 3) Recognize and Report Phishing, and 4) Update Software. It features extensive easy-to-use resources, including tipsheets and how-to guides, as well as a series of animated videos. 

Beyond Secure Our World, we’ve also championed the “Cyber Clinics” model as a promising, scalable solution for enhancing the cyber resilience of small organizations at the local level through the expertise of students studying to be the next generation of cyber defenders. Similar to free legal clinics which are staffed by law students, these cyber clinics help provide cybersecurity students hands-on experience by supporting their local communities with cyber support and guidance. In support of these efforts, we published a new guide in February 2024 highlighting CISA support available to cybersecurity clinics and their clients. It provides information related to informational briefings and partnerships, tools and services, and available grants. Our goal is to ensure that our partners have the right tools and resources to better protect and secure their respective communities. 

In addition to this work, as part of our High-Risk Communities Protection effort, we launched a resource webpage which includes a cyber volunteer portal that highlights several cybersecurity clinics across the country. The goal is to connect expert volunteers with organizations that would benefit from receiving these services. CISA also published a comprehensive cybersecurity toolkit to help high-risk organizations assess their cybersecurity posture and take actionable steps to enhance it. 

Finally, we launched Project Upskill, a program designed to empower vulnerable populations with straightforward guidance to strengthen their cybersecurity. Over the past year, we’ve taken this initiative nationwide, supporting regional events across the country to provide tailored support and deliver this critical guidance directly to at-risk communities.

In a world increasingly reliant on technology, each of us plays a vital role in strengthening cyber resilience. By taking proactive steps—like the four simple steps of cyber hygiene; by encouraging universities to consider starting cyber clinics; or supporting high-risk communities—we can all Secure Our World.