Cybersecurity and Infrastructure Security Agency (CISA) issued two Capacity Enhancement Guides for state, local, tribal, and territorial (SLTT) and private sector partners.
The (TLP:WHITE) Securing Web Browsers and Defending Against Malvertising Capacity Enhancement Guide advises partners on the threat posed by malicious advertisements (malvertising) and recommends actions to protect web browsers from malvertising threats.
The (TLP:WHITE) Counter-Phishing Recommendations Capacity Enhancement Guide recommends technical capabilities to protect email systems and networks against malicious phishing emails. The guidance is meant to inform organizational leadership (senior risk official, chief information officers, and chief information security officers) and also provides sufficient detail to support a technical discussion with implementation teams.
These documents can be found at the following link: https://www.cisa.gov/publication/capacity-enhancement-guides-non-federal-organizations