CERT Division at the Software Engineering Institute

The decision makers in CERT Division at the Software Engineering Institute are Gregory Touhill, Kris Rush, etc. Click to Find CERT Division at the Software Engineering Institute decision makers emails.

CERT offers a comprehensive suite of incident response services designed to help organizations prepare for, respond to, and recover from cybersecurity incidents. These services include incident analysis, containment strategies, recovery planning, and post-incident reviews. Our team of experts works closely with organizations to develop tailored incident response plans that align with their specific needs and regulatory requirements.

CERT provides a range of resources and training programs focused on secure coding practices. This includes the development of coding standards, guidelines, and best practices to help software developers write secure code and mitigate vulnerabilities. Additionally, CERT offers workshops and training sessions that educate developers on common security pitfalls and how to avoid them, ensuring that security is integrated into the software development lifecycle.

CERT serves a wide array of industries, including government, finance, healthcare, and critical infrastructure sectors. Our services are designed to address the unique cybersecurity challenges faced by these industries. For example, in healthcare, we focus on protecting sensitive patient data, while in finance, we help organizations comply with regulatory standards and safeguard financial transactions. Our expertise in incident response, secure coding, and risk management is applicable across various sectors.

Yes, CERT provides guidance and resources to help organizations establish effective cybersecurity governance frameworks. This includes developing policies, procedures, and best practices that align with industry standards and regulatory requirements. Our experts work with organizations to assess their current governance structures, identify gaps, and implement improvements that enhance their overall cybersecurity posture.

CERT offers a variety of training programs and security exercises designed to enhance an organization's cybersecurity readiness. These include tabletop exercises, simulation-based training, and workshops that focus on incident response, threat detection, and risk management. By participating in these exercises, organizations can evaluate their preparedness, identify weaknesses, and improve their response capabilities in the event of a cybersecurity incident.

CERT provides resources and strategies to help organizations identify, mitigate, and respond to insider threats. This includes conducting risk assessments, developing insider threat programs, and offering training for employees on recognizing suspicious behavior. Our approach emphasizes the importance of creating a culture of security awareness and implementing technical controls that can detect and prevent insider threats before they escalate.