ISACA State of Cybersecurity 2019 report

https://www.isaca.org/info/state-of-cybersecurity-2019/index.html

Microsoft STRIDE

This is a useful blog post for threat modelling.

https://www.microsoft.com/security/blog/2007/09/11/stride-chart/

IBM Buyer's Guide to MSSP

https://www.ibm.com/downloads/cas/KPEG6J8Q?cm_mc_uid=25953344701415679350681&cm_mc_sid_50200000=46230891567935068106

NIST 800-82 Industrial Control Systems

NIST 800-82:

https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-82r2.pdf

NIST Cyber Security Framework

Good 2019 paper on the NIST CSF:

https://www.oas.org/en/sms/cicte/docs/OAS-AWS-NIST-Cybersecurity-Framework(CSF)-ENG.pdf

The US identified 16 critical infrastructure sectors: Chemical; Commercial Facilities; Communications; Critical Manufacturing; Dams; Defense Industrial Base; Emergency Services; Energy; Financial Services; Food and Agriculture; Government Facilities; Healthcare and Public Health; Information Technology; Nuclear Reactors, Materials, and Waste; Transportation Systems; and Water and Wastewater Systems.