CENTER FOR INTERNET SECURITY INC

Programs

1. Security best practices combines both the security benchmarks and critical security controls programs. The security benchmarks program helps organizations improve their it security posture by reducing risks resulting from inadequate technical security controls. To accomplish this, the security benchmarks program facilitates the consensus-based development of: (1) best practice standards for security configuration, (2) tools for measuring information security status, and (3) resources for making informed security investment decisions. The critical security controls program is a recommended set of actions for cyber defense that provide specific and actionable ways to thwart the most pervasive attacks. They are a relatively short list of high-priority, highly effective defensive actions that provide a "must do, do first" starting point for every enterprise seeking to improve their cyber defense.

   $40,191,580 spentof which $300,000 as grants$67,416,548 earned by the program
   45% of program spending

2. The ms-isac program provides a common mechanism for raising the level of cybersecurity readiness and response in each state and with local governments and u.s. Tribes and territories with the goal of improving the overall cybersecurity posture of u.s. State, local, tribal, and territorial (sltt) government entities. The ms-isac program collaborates and shares information with its sltt government members, private sector and federal government partners. The ms-isac program leverages trusted relationships with government and private sector entities to generate coordinated and actionable intelligence products to improve the security posture of all partners. The ms-isac also produces educational materials, manages workgroups made up of sltt members, and operates important national cyber security programs. The department of homeland security (dhs) discontinued funding for this program on september 29, 2025, at which time a fee-based membership model was implemented, where sltt member organizations pay a yearly membership fee to receive ms-isac benefits and services.

   $13,463,471 spent
   15% of program spending

3. The cis services program offers services to all state, local, territorial, and tribal entities and public authorities to improve their overall cyber and election security. These services include scanning, security assessments, phishing exercises, and other cyber security related services.

   $31,935,402 spent$37,129,222 earned by the program
   35% of program spending

4. Alan paller laureate: the alan paller laureate program is intended to empower u.s.-based nonprofit organizations, academic institutions, and individuals who are focused on improving cybersecurity by: making cybersecurity controls demonstrably more effective, simpler, and more automated; developing and equipping highly skilled cyber experts and improving the teaching of cyber defense at every level.

   $0 spentof which $248,240 as grants
   0% of program spending

5. Countering hybrid threats: the cis program for countering hybrid threats is a cis-funded and operated initiative, in partnership with industry, community-based organizations, and law enforcement, with the mission of researching and better understanding how terrorist organizations, criminal organizations, and foreign governments facilitate, plan, inform or incite violence and other illegal activity using internet-based communications tools

   $4,176,070 spent$27,500 earned by the program
   5% of program spending

6. The workforce development program was borne out of an unprecedented demand for highly-skilled practitioners capable of building security into new and existing networks, assessing security on a real time basis as new vulnerabilities are identified and disclosed, and acting as front-line cyber defenders across various industries and government agencies. The center seeks to develop assessment instruments to reliably predict future performance and aptitude for cybersecurity jobs, supporting both the growth of the workforce and its ability to deliver positive results.

   $509,695 spent
   1% of program spending

7. Miscellaneous other programs

   $234,630 earned by the program

The 7 programs described on its FY2025 Form 990, listed largest first by expense. Program spending in total: $90,276,218.