ICRI Resources

Iowa Cyber Resilience Initiative (ICRI) Toolkit

CISA CSET & NIST CSF 2.0 Aligned Mitigation Resources for Iowa Local Governments, Counties, & K-12 School Districts

Toolkit Overview

The ICRI Cybersecurity & Operational Continuity Toolkit provides practical, plain-language resources to help Iowa State, Local, Tribal, and Territorial (SLTT) organizations remediate cybersecurity vulnerabilities and build operational resilience. Delivered through Iowa State University’s Center for Cybersecurity Innovation & Outreach (CyIO) and funded by the Federal Emergency Management Agency (FEMA) State and Local Cybersecurity Grant Program (SLCGP), all toolkit resources and assessments are available free of charge.

Each toolkit section aligns directly with the CISA Cybersecurity Evaluation Tool (CSET) and NIST CSF 2.0 framework. Click on any section below to view or download the comprehensive domain document, complete with operational playbooks, CSET trigger conditions, implementation checklists, state resources, and downloadable templates.

Toolkit Capability Domains

Section 1: Incident Response

Section 2: Cybersecurity Awareness

Section 3: Identity & Access Security

Section 4: IT & Operational Documentation

Section 5: Third-Party & Vendor Security

Section 6: Data Protection

Section 7: Asset & Software Management

Section 8: Vulnerability & System Security

Section 9: Backup & Recovery

Section 10: Cybersecurity Governance

Section 11: Operational Continuity

Primary External Resources & Emergency Contacts
  • Federal Resources:
    • CISA SLTT Gateway: Free vulnerability scanning, web application testing, and CPG guidance.
    • NIST Computer Security Resource Center: Federal standards and CSF 2.0 guidelines.
  • SLTT Partner Networks:
    • MS-ISAC Portal: 24x7x365 Security Operations Center and CIRT Emergency Incident Hotline.
  • State of Iowa Resources:
    • Iowa Department of Management (DoIT): Official state cybersecurity incident reporting portal and services.
    • Iowa State Association of Counties (ISAC) TSB: Technology and cybersecurity consulting for county officials.
    • Iowa Homeland Security & Emergency Management (TIIPP): Critical infrastructure protection and threat sharing [CIP@iowa.gov].

Iowa Cyber Resilience Initiative (ISU CyIO): Request free CSET assessments, asset inventories, or CIME tabletop exercises.