Center For Internet Security, Inc.

Class 009: Downloadable electronic briefing publications in the nature of newsletters and reports in the fields of cybersecurity, cyber attacks, and physical threats facilitated by online activity, downloadable electronic briefing publications in the nature of newsletters and reports delivered by email in the fields of cybersecurity, cyber attacks, and physical threats facilitated by online activity, downloadable electronic briefing publications in the nature of newsletters and reports in the fields of cybersecurity, cyber attacks, and physical threats facilitated by online activity, made available to download from an internet website portal, all providing knowledge about adversaries and their motivations, intentions, and methods, and information regarding what is needed to know to defend against or remediate such threats; Class 041: Providing online non-downloadable electronic digital briefing publications in the nature of newsletters and reports in the fields of cybersecurity, cyber attacks, and physical threats facilitated by online activity, providing online non-downloadable electronic briefing publications in the nature of newsletters and reports delivered by email in the fields of cybersecurity, cyber attacks, and physical threats facilitated by online activity, providing online non-downloadable electronic briefing publications in the nature of newsletters and reports in the fields of cybersecurity, cyber attacks, and physical threats facilitated by online activity, via an internet website portal, providing subscription-based online non-downloadable electronic publications in the nature of periodic reports in the fields of cybersecurity, cyber attacks, physical threats facilitated by online activity, emerging cyber and physical threats, and trends in cyber and physical threats, all providing knowledge about adversaries and their motivations, intentions, and methods, and information regarding how to defend against or remediate such threats

Class 009: Downloadable electronic briefing publications in the nature of newsletters and reports in the fields of cybersecurity, cyber attacks, and physical threats facilitated by online activity, downloadable electronic briefing publications in the nature of newsletters and reports delivered by email in the fields of cybersecurity, cyber attacks, and physical threats facilitated by online activity, downloadable electronic briefing publications in the nature of newsletters and reports in the fields of cybersecurity, cyber attacks, and physical threats facilitated by online activity, made available to download from an internet website portal, all providing knowledge about adversaries and their motivations, intentions, and methods, and information regarding what is needed to know to defend against or remediate such threats; Class 041: Providing online non-downloadable electronic digital briefing publications in the nature of newsletters and reports in the fields of cybersecurity, cyber attacks, and physical threats facilitated by online activity, providing online non-downloadable electronic briefing publications in the nature of newsletters and reports delivered by email in the fields of cybersecurity, cyber attacks, and physical threats facilitated by online activity, providing online non-downloadable electronic briefing publications in the nature of newsletters and reports in the fields of cybersecurity, cyber attacks, and physical threats facilitated by online activity, via an internet website portal, providing subscription-based online non-downloadable electronic publications in the nature of periodic reports in the fields of cybersecurity, cyber attacks, physical threats facilitated by online activity, emerging cyber and physical threats, and trends in cyber and physical threats, all providing knowledge about adversaries and their motivations, intentions, and methods, and information regarding how to defend against or remediate such threats

Providing digital briefings in the field of cybersecurity; Downloadable and non downloadable electronic briefings delivered by e-mail in the field of cybersecurity; Downloadable and non downloadable electronic briefings made available in an online portal in the field of cybersecurity; Providing downloadable and non downloadable digital briefings in the field of cybersecurity; Providing online briefings in the field of cybersecurity; Providing subscriptions to digital briefings in the field of cybersecurity; Providing digital briefings in the field of cyber attacks; Downloadable and non downloadable electronic briefings delivered by e-mail in the field of cyber attacks; Downloadable and non downloadable electronic briefings made available in an online portal in the field of cyber attacks; Providing downloadable and non downloadable digital briefings in the field of cyber attacks; Providing online briefings in the field of cyber attacks; Providing subscriptions to digital briefings in the field of cyber attacks; Providing digital briefings in the field of physical threats facilitated by online activity; Downloadable and non downloadable electronic briefings delivered by e-mail in the field of physical threats facilitated by online activity; Downloadable and non downloadable electronic briefings made available in an online portal in the field of physical threats facilitated by online activity; Providing downloadable digital briefings in the field of physical threats facilitated by online activity; Providing online briefings in the field of physical threats facilitated by online activity; Providing subscriptions to digital briefings in the field of physical threats facilitated by online activity; Subscription-based monitoring of cyber threats, cyber attacks, and physical threats; Preparing reports related to cybersecurity, cyber attacks, threat trends, physical threats; Business information reporting services for operational leaders, namely, providing operational leader specific reports for the purpose of analyzing emerging threats and driving business decision making; Offering subscriptions to periodic reports in the field of cybersecurity, cyber attacks, physical threats facilitated by online activity, emerging threats, and threat trends

Class 035: Business analysis service, namely, providing compliance benchmarking services in the nature of data compilations, administering benchmark assessments, establishing benchmarks and standards in the nature of business best practice standards in the field of internet security and information technology security to safeguard public and private organizations against cyber threats; Business analysis service, namely, providing comparisons of internet and information technology products and services of others against compliance benchmarks and standards in the field of internet security and information technology security to safeguard public and private organizations against cyber threats

BENCHMARKS

CONTROLS

To indicate membership in a group developing and implementing thorough and effective security configuration policies

Downloadable computer software for testing non-voting internet-connected electronic election systems; Downloadable computer software for testing of computer software products; Technical consulting and evaluation services in the field of datacenter architecture implementation of internet technology goods and services regarding non-voting election technology systems that handle sensitive ballot, voter and election results data developed by third-parties; Evaluating organizations providing non-voting internet-connected election technology goods and services that handle sensitive ballot, voter and election results data to determine whether the organization conforms to established benchmark technology security standards; Testing, analysis, and evaluation of non-voting internet-connected election technology goods and services that handle sensitive ballot, voter and election results data developed by third parties to assure compliance with internet-connected security standards; Providing testing standards through testing, analysis, and evaluation of non-voting internet-connected election technology goods, services, systems and software that handle sensitive ballot, voter and election results data developed by third parties; Testing and verification through technical analysis and evaluation of computer software products of others; Evaluating an organization responsible for developing an internet-connected software product to determine whether the organization conforms to established benchmark technology security standards; Providing testing standards and verification through technical analysis and evaluation of computer software developed by third parties

Promoting public awareness of recommended cybersecurity measures; Marketing services in the nature of promoting cybersecurity for private and public entities and all internet users | Cybersecurity consulting services, namely, computer security consultancy in the field of scanning and penetration testing of computers and networks to assess information security vulnerability; Cybersecurity and IT consulting services, namely, remote electronic monitoring services for securing and protecting network data and information from unauthorized access; Computer security consultancy and computer network security consultancy in the field of risk management featuring the use of tools and methods needed to improve, measure, monitor and secure-internet-connected systems and appliances; Security services, namely, web-based monitoring of computer systems and network data for detecting unauthorized access and potential breaches to address potential threats, vulnerabilities, risks and security events faced by state, local, tribal and territorial (SLTT) governments' Elections Infrastructure, and private entities; Testing, analysis and evaluation of the services of others to determine conformity with certification standards including providing benchmarks and standards pertaining to internet security services, Providing cybersecurity information, including information about computer security and computer network security

"US CYBER CHALLENGE"

"SERVICES"; Cybersecurity consulting services, namely, computer security consultancy in the field of scanning and penetration testing of computers and networks to assess information security vulnerability; Cybersecurity and IT consulting services, namely, remote electronic monitoring services for securing and protecting network data and information from unauthorized access

"SERVICES"; Cybersecurity consulting services, namely, computer security consultancy in the field of scanning and penetration testing of computers and networks to assess information security vulnerability; Cybersecurity and IT consulting services, namely, remote electronic monitoring services for securing and protecting network data and information from unauthorized access

"HARDENED IMAGES"; Software as a service (SAAS) services featuring software for analyzing internet security settings applied to virtual machine images

"HARDENED IMAGES"; Software as a service (SAAS) services featuring software for analyzing internet security settings applied to virtual machine images

Computer security services, namely, remote monitoring of computer systems and network data for others for the purpose of addressing potential threats, vulnerabilities, risks and security events faced by state, local, tribal and territorial (SLTT) governments

Group collaborative purchasing services for U.S. State, Local, Tribal, and Territorial (SLTT) government organizations, not-for-profit entities, and public health and education institutions to improve cybersecurity through cost-effective group procurement; "CYBERMARKET"

Group collaborative purchasing services for U.S. State, Local, Tribal, and Territorial (SLTT) government organizations, not-for-profit entities, and public health and education institutions to improve cybersecurity through cost-effective group procurement; "CYBERMARKET"

Security services, namely, monitoring of computer systems and network data for addressing potential threats, vulnerabilities, risks and security events faced by state, local, tribal and territorial (SLTT) governments and providing incident response services to cyber security events for SLTT governments

Arranging and conducting educational conferences related to cyber security for state, local, tribal and territorial (SLTT) governmental entities; arranging and conducting of educational workshops and other training programs related to cyber security threats, vulnerabilities, risks, mitigation and cyber hygiene for Elections Infrastructure of SLTT participants

Security services, namely,web-based monitoring of computer systems and network data for detecting unauthorized access and potential breaches to address addressing potential threats, vulnerabilities, risks and security events faced by state, local, tribal and territorial (SLTT) governments' Elections Infrastructure

"CENTER"

Class 045: Security services, namely, on-site monitoring of computer systems and network data for addressing potential threats, vulnerabilities, risks and security events faced by state, local, tribal and territorial (SLTT) governments' Elections Infrastructure

Arranging and conducting educational conferences related to cyber security for state, local, tribal and territorial (SLTT) governmental entities; arranging and conducting of educational workshops and other training programs related to cyber security threats, vulnerabilities, risks, mitigation and cyber hygiene for Elections Infrastructure of SLTT participants; "ELECTIONS INFRASTRUCTURE" AND "ISAC"

"ELECTIONS INFRASTRUCTURE" AND "ISAC"; Security services, namely, web-based monitoring of computer systems and network data for detecting unauthorized access and potential breaches to address potential threats, vulnerabilities, risks and security events faced by state, local, tribal and territorial (SLTT) governments' Elections Infrastructure

"CONTROLS"; Computer security consultancy and computer network security consultancy in the field of risk management featuring the use of tools and methods needed to improve, measure, monitor and secure-internet-connected systems and appliances

Arranging and conducting conferences related to cybersecurity for state, local tribal and territorial (SLTT) governmental entities, arranging and conducting of workshops and other training programs related to cyber security threats, vulnerabilities, risks, mitigation and cyber hygiene for SLTT participants

Security services, namely, monitoring of computer systems and network data for addressing potential threats, vulnerabilities, risks, and security events faced by state, local tribal and territorial (SLTT) governments and providing incident response services to cyber security events for SLTT governments

Computer and computer network security consultancy in the field of risk management, namely, providing the tools and methods needed to improve, measure, monitor, and secure internet-connected systems and appliance

Computer and computer network security consultancy in the field of risk management, namely, providing the tools and methods needed to improve, measure, monitor, and secure internet-connected systems and appliance

Computer and computer network security consultancy in the field of risk management, namely, providing the tools and methods needed to improve, measure, monitor, and secure internet-connected systems and appliance

Computer and computer network security consultancy in the field of risk management, namely, providing the tools and methods needed to improve, measure, monitor, and secure internet-connected systems and appliance

Security services, namely, monitoring of computer systems and network data for addressing potential threats, vulnerabilities, risks and security events faced by state, local, tribal and territorial (SLTT) governments and providing incident response services to cyber security events for SLTT governments

Arranging and conducting conferences related to cyber security for state, local, tribal and territorial (SLTT) governmental entities; arranging and conducting of workshops and other training programs related to cyber security threats, vulnerabilities, risks, mitigation and cyber hygiene for SLTT participants

Class 042: Computer technical support services, namely, monitoring technological functions of computer network systems and providing technical support and response services in the nature of diagnosing and correcting computer hardware, computer network and software problems for state, local, tribal and territorial (SLTT) governments

Class 041: Arranging and conducting conferences related to cyber security for state, local, tribal and territorial (SLTT) governmental entities; arranging and conducting of workshops and other training programs related to cyber security threats, vulnerabilities, risks, mitigation and cyber hygiene for SLTT participants

"SECURITY CONTROLS"

"SECURITY BENCHMARKS" AND "CERTIFIED"

"SECURITY BENCHMARKS" AND "MEMBER"