Official resource
Cross-Sector Cybersecurity Performance Goals
A prioritized set of security practices aimed at organizations without a dedicated security team.
Cybersecurity Basics for Fire & EMS Departments
What you are actually exposed to, what your vendors are responsible for, and the handful of controls worth arguing for first.
Start here
If you read one thing on this subject, read this.
Official resource
Emergency Services Sector Cybersecurity Framework Implementation Guidance
How to apply the national cybersecurity framework specifically to an emergency services organization.
Why it matters
Written for this sector, so it deals with dispatch and response continuity rather than generic business risk.
Go deeper
Official resource
Cybersecurity Framework 2.0
The full framework, explicitly written to be usable by organizations of any size or maturity.
Official resource
Emergency Services Sector Cybersecurity Best Practices
The shorter practical companion to the implementation guidance.
Why it matters
A reasonable first checklist for a department with no dedicated security staff.
Official resource
The NIST Cybersecurity Framework (CSF) 2.0
The framework itself, in its current version.
Why it matters
Nearly every vendor security questionnaire is derived from this. Read it before you answer one.
Official resource
Cross-Sector Cybersecurity Performance Goals
A prioritised, plain-language baseline of security practices.
Why it matters
A realistic starting list when everything looks equally urgent.
This is a reading list, not a guide
Everything above was published by someone else, and is here because it is the clearest treatment of the subject we could find and verify. The Hub’s own guide to this topic is still being written. If you know a better source than the ones listed, that is worth telling us before it is.
Send a note