Community

Free help for the people and organizations security usually leaves behind: small businesses, small utilities, community banks, rural hospitals, and people trying to break into the field. These are separate from our vendor risk tools. They're here because they're worth doing.

For people

Find your local security community

Looking for work in security? Find the ISSA, ISACA, OWASP, DEF CON, BSides, WoSEC and other groups that meet near you, plus how to make the most of your first meetings.

Find groups near you

Free teaching decks

Short slide decks that explain one idea each, with speaker notes: SBOMs, vendor risk, the EU Cyber Resilience Act, AI agents, prompt injection, and why quantum computers break RSA. Learn from them, or present them at your chapter.

Browse the decks

Field kits for organizations

Small Business Starter Kit

Practical security for small businesses with no budget and no security team: lock down your AI tools, vet your IT provider, and check where you stand.

Open the kit

Small Utility Cyber Defense Kit

A tiered field guide for small water and electric utilities with no MSP or security team.

Open the kit

Community Bank and Credit Union Kit

A tiered field guide for community banks and credit unions, with a free or open-source tool mapped to every CIS Control.

Open the kit

Rural and Community Hospital Kit

A tiered field guide for rural and community hospitals and clinics, with a free or open-source tool mapped to every CIS Control.

Open the kit

Follow The Value Chain Risk Institute: LinkedIn · Bluesky · Mastodon · X (@ValueChainRisk) · Newsletter · GitHub
All tools · Talks and videos · Press kit