Introducing the Cybersecurity Extension Pack

‍What is the Cybersecurity Extension Pack?

The Cybersecurity Extension Pack is a bundle of pre-built D4H Status Boards, Forms, and Tasks built to help organizations manage cyber risks. We’ve leveraged standards and frameworks from cybersecurity bodies such as CERT-RMM, CISA, NIST, and SAFECOM, however, please note that Extension Packs should not be considered as professional advice. While the packs offer valuable guidance, it's crucial to use your own judgment and expertise to ensure the templates are aligned with your organization’s specific protocols, procedures, and incident management needs. Always ensure that your final configurations comply with your internal policies and any relevant regulations or standards.

What is an Extension Pack?

An Extension Pack is a powerful tool within the D4H ecosystem, offering users pre-made templates that seamlessly integrate into their existing D4H Crisis Management Software. These free add-ons are designed to address specific emergency management needs, providing ready-to-use resources that enhance operational capabilities and improve situational awareness. They save you having to start from scratch, allowing you to quickly deploy specialized tools and best practices for specific incident types or industries. Each Extension Pack includes status boards, checklists, and other essential components tailored to particular scenarios, they can be used “as is” or they provide an excellent starting point to customize and adjust the templates in accordance with your organization’s own unique requirements and workflows.

Why did we create the Cybersecurity Extension Pack?

The threat landscape is evolving rapidly, and as organizations rely more on digital infrastructure, the need for comprehensive cybersecurity tools has never been greater. We designed the Cybersecurity Extension Pack to help organizations manage everything from asset inventories to incident and cyberattack response in one streamlined system. Whether you’re looking to track cyber threats, perform risk assessments, or respond to breaches, this pack brings everything together under one roof.

What Can You Expect from the Cybersecurity Extension Pack?

Here’s a breakdown of the key components you’ll find inside this powerful extension pack:

Status Boards

• Service Catalog Status Board – Based on CERT-RMM, this board helps you track and manage cybersecurity services across your organization. By maintaining an up-to-date catalog, you’ll always know the current status of key services.
• People Asset Information Status Board – Also following the CERT-RMM model, this board allows you to keep detailed records of personnel involved in cybersecurity, including roles, responsibilities, and contact information.
• Information Security Risk Assessment Status Board – This board provides a space for conducting detailed risk assessments, helping you identify potential vulnerabilities and prioritize mitigation strategies.
• Framework Mapping Matrix (CISA) – This status board maps the CISA’s Emergency Services Sector Planning Guidance, offering a structured way to align your cybersecurity efforts with national standards.
• Cyber Security Risk Mitigation Plan Matrix – Here, you can plan and track your cybersecurity risk mitigation strategies, ensuring that all identified risks are addressed and accounted for.
• Asset and Inventory Change Tracker Status Board – This board follows the CERT-RMM framework for managing asset changes, ensuring that you’re always aware of shifts in your organization’s inventory.
• Asset Profile Catalog Status Board – Another CERT-RMM tool, this board helps catalog and track critical assets, from software to hardware, making sure nothing slips through the cracks.
• RACI Matrix Status Board – Clearly outline roles and responsibilities with the CERT-RMM-based Responsible, Accountable, Consulted, Informed (RACI) Matrix. This board ensures accountability in all areas of your cybersecurity plan.

Forms

The Cybersecurity Extension Pack also includes essential forms to help you document and respond to incidents:

• Common Definition of Assets Form – Use this CERT-RMM form to ensure that all assets are clearly defined and categorized.
• SAFECOM Cyber Risk Assessment – This form helps you assess cyber risks based on SAFECOM guidelines, providing a structured approach to evaluating threats and vulnerabilities.
• Security Incident Response Form – When an incident occurs, this form ensures a standardized response, helping you keep track of the steps taken during and after a security breach.
• Notice of Data Breach (FTI) – This form, designed for reporting breaches involving Federal Tax Information (FTI), ensures compliance with data breach notification laws.

Tasks

Finally, the pack comes equipped with essential checklists to guide your team through cybersecurity planning and response:

• Cybersecurity Framework (CSF) Core Checklist – Based on the NIST Cybersecurity Framework, this checklist ensures that your organization’s cybersecurity measures align with established standards.
• Incident Response Checklist – From CISA’s Cybersecurity Incident and Vulnerability Response Playbooks, this checklist helps you stay organized during incident response, ensuring no critical steps are missed.
• Incident Response Planning Checklist – Also based on CISA’s Playbooks, this checklist focuses on pre-incident planning, helping your team prepare for potential cyber threats.

Try It Out

If your emergency management organization is already using D4H’s emergency management software, you can visit our Extension Pack Library on our Help Center. Extension Packs are a free resource designed to extend the functionality of your D4H software. They’re easily downloadable, shareable, and customizable by you.

If you’re not yet using D4H, we would be delighted to chat about your needs in more detail. Please feel free to contact us today for more information and a custom demo.

Demo Video

In this video, Billy, our Emergency Management Solutions Specialist introduces D4H's brand-new Cybersecurity Extension Pack.

Other Extension Packs

Interested in learning more about our range of Extension Packs? Check out these blog posts:

• Introducing D4H's Free Hurricane Extension Pack
• Introducing the Election Season Extension Pack
• Introducing the Hospital Incident Command System (HICS) IRG Extension Pack