This briefing shares the findings of a cross-sector task force of CISOs and staff who developed a comprehensive guide and toolkit for preventing, detecting, and responding to the ransomware threat. The Best Practices Guide: (1) prioritizes controls and strategies based on effectiveness, cost, and implementation difficulty; (2) provides insights on incident response and business continuity; (3) shares approaches for presenting the threat to the Board; and (4) offers perspectives on making the "pay or not pay" decision.

CISA has released Capacity Enhancement Guide (CEG): Social Media Account Protection, which details ways to protect the security of organization-run social media accounts. Malicious cyber actors that successfully compromise social media accounts—including accounts used by federal agencies—could spread false or sensitive information to a wide audience. The measures described in the CEG aim to reduce the risk of unauthorized access on platforms such as Twitter, Facebook, and Instagram.