cset.inl.govCSET - Home

You may be trying to access this site from a secured browser on the server. Please enable scripts and reload this page. SharePoint To navigate through the Ribbon, use standard browser navigation keys. To skip between groups, use Ctrl+LEFT or Ctrl+RIGHT. To jump to the first Ribbon tab use Ctrl+[. To jump to the last selected command use Ctrl+]. To activate a command, use Enter. Browse Tab 1 of 3. Page Tab 2 of 3. Publish Tab 3 of 3. CSET Sign In It looks like your browser does not have JavaScript enabled. Please turn on JavaScript and try again. Home Currently selected Home Home This Site Has been retired see " https://github.com/cisagov/cset " ​​​​​​ Overview The Cyber Security Evaluation Tool (CSET ® ) is a Department of Homeland Security (DHS) product that assists organizations in protecting their key national cyber assets. It was developed under the direction of the DHS Industrial Control System Cyber Emergency Response Team (ICS-CERT) by cybersecurity experts and with assistance from the National Institute of Standards and Technology (NIST). This tool provides users with a systematic and repeatable approach for assessing the security posture of their cyber systems and networks. It includes both high-level and detailed questions related to all industrial control and IT systems.​ Purpose CSET is a desktop software tool that guides users through a step-by-step process to assess their control system and information technology network security practices against recognized industry standards. The output from CSET is a prioritized list of recommendations for improving the cybersecurity posture of the organization's enterprise and industrial control cyber systems. The tool derives the recommendations from a database of cybersecurity standards, guidelines, and practices. Each recommendation is linked to a set of actions that can be applied to enhance cybersecurity controls. CSET has been designed for easy installation and use on a stand-alone laptop or workstation. It incorporates a variety of available standards from organizations such as NIST, North American Electric Reliability Corporation (NERC), Transportation Security Administration (TSA), U.S. Department of Defense (DoD), and others. When the tool user selects one or more of the standards, CSET will open a set of questions to be answered. The answers to these questions will be compared against a selected security assurance level, and a detailed report will be generated to show areas for potential improvement. CSET provides an excellent means to perform a self-assessment of the security posture of your control system environment. Key Benefits CSET contributes to an organization's risk management and decision-making process Raises awareness and facilitates discussion on cybersecurity within the organization Highlights vulnerabilities in the organization's systems and provides recommendations on ways to address the vulnerability Identifies areas of strength and best practices being followed in the organization ​ Provides a method to systematically compare and monitor improvement in the cyber systems Provides a common industry-wide tool for assessing cyber systems ​​ false,false,1 I Want To Report an ICS incident to ICS-CERT Report an ICS software vulnerability Get information about Reporting Join the Secure Portal ICS-CERT encourages U.S. asset owners and operators to join the Control Systems compartment of the US-CERT secure portal. Send your name, e-mail address, and company affiliation to ics-cert@hq.dhs.gov . Follow ICS-CERT on Twitter Follow ICS-CERT on Twitter Mailing Lists and Feeds Mailing Lists and Feeds Contact Us (877) 776-7585 (208) 526-0900 (International Callers) ICS-Related Cyber Activity General ICS Questions Download PGP/GPG keys Home FAQ Traffic Light Protocol Privacy & Use Accessibility Get a PDF Reader US-CERT is part of the Department of Homeland Security ....