CIS Recaps 2025 Cybersecurity Support for Public-Sector Organizations
Summary
CIS says it maintained MS-ISAC services during the end of federal support, assisted public-sector organizations with incident response and threat monitoring, and expanded its security services and guidance in 2025.
Key points
- CIS covered more than $1 million per month in costs to maintain essential MS-ISAC services for over 19,000 organizations while developing a member-funded solution.
- Twelve states extended MS-ISAC protection to nearly 28,000 public-sector organizations.
- CIS’s Security Operations Center escalated over 64,000 suspicious or malicious incidents, and its Cyber Incident Response Team resolved 74 cases.
- CIS released software-security assessment guidance with SAFECode and launched the CIS SecureSuite Platform.
- CIS reported increased use of its Hardened Images, with over 1.28 billion machine hours across cloud environments.
Article Details
- Event Type
- CIS's 2025 year-in-review of cybersecurity support and services for public-sector organizations.
- Impact
- After federal support for U.S. SLTT cybersecurity programs ended, CIS covered more than $1 million per month in costs to maintain services for over 19,000 organizations until it offered a long-term, member-funded solution. Twelve states extended MS-ISAC protection to nearly 28,000 organizations. CIS reported escalating more than 64,000 malicious or suspicious incidents and resolving 74 incident-response cases.
Vendors
Products
AlbertOur frontline services — including Albert, MDBR, MDBR+, and the newly launched CIS Managed Detection and Response — strengthened protection for critical infrastructure nationwide.CIS BenchmarksThe CIS Critical Security Controls and CIS Benchmarks saw strong growth, and we released Secure by Design: A Guide to Assessing Software Security Practices,, in collaboration with the Software Assurance Forum forCIS Critical Security ControlsThe CIS Critical Security Controls and CIS Benchmarks saw strong growth, and we released Secure by Design: A Guide to Assessing Software Security Practices,, in collaboration with the Software Assurance Forum forCIS Hardened ImagesWe expanded the reach of CIS Hardened Images with customers using over 1.28 billion machine hours total across all cloud environments, an almost 5 percent growth year over year.CIS Managed Detection and ResponseOur frontline services — including Albert, MDBR, MDBR+, and the newly launched CIS Managed Detection and Response — strengthened protection for critical infrastructure nationwide.CIS SecureSuite PlatformWe also launched the CIS SecureSuite Platform, simplifying cybersecurity assessments and helping thousands of members strengthen their security posture.MDBROur frontline services — including Albert, MDBR, MDBR+, and the newly launched CIS Managed Detection and Response — strengthened protection for critical infrastructure nationwide.MDBR+Our frontline services — including Albert, MDBR, MDBR+, and the newly launched CIS Managed Detection and Response — strengthened protection for critical infrastructure nationwide.MS-ISACAs of June 23, 2025, the MS-ISAC has introduced a fee-based membership.
Countries
Industries
Critical infrastructureOur frontline services — including Albert, MDBR, MDBR+, and the newly launched CIS Managed Detection and Response — strengthened protection for critical infrastructure nationwide.Public Sectorfor over 19,000 organizations until a long‑term, member-funded solution was built and offered to public sector organizations nationwide.