Downloading and Installing CSET

The Cyber Security Evaluation Tool (CSET®) provides a systematic, disciplined, and repeatable approach for evaluating an organization’s security posture. CSET is a desktop software tool that guides asset owners and operators through a step-by step process to evaluate their industrial control system (ICS) and information technology (IT) network security practices. Users can evaluate their own cybersecurity stance using many recognized government and industry standards and recommendations.

Download CSET using the link at the bottom of this page or by clicking here. After clicking the link, you will be asked to identify yourself and will then be given the opportunity to download the file CSET_x.x.iso (where x.x represents the download version).

The CSET download is in a file format known as “ISO.” This file is an “image” of the equivalent installation files included on the CSET CD. Because of this format, it is necessary to process the download using one of the following methods:

  1. Decompressing the File - Open the file using any one of the newer compression utility software programs.
  2. Mounting the File - this method loads the ISO file using utility software to make the file appear like a virtual drive with the original CD loaded.
  3. Burning the file to CD - this method uses CD-burn software and the ISO file to burn the files onto your own CD to create a physical disk identical to the CSET original.

These methods require separate software utilities. There are a variety of both free and purchased utility programs available through the Internet that will work with the ISO file format. As DHS does not recommend any specific application or vendor, it will be necessary for you to find a product that provides the necessary functionality. Step by step instructions for each method are provided below:

Decompressing the File

  1. CLICK the "Download CSET" link at the bottom of this page and complete the requested information to download the ISO file.
  2. SAVE the file to your hard drive of choice (i.e., your computer hard drive or USB drive) maintaining the file name and extension (.iso).
  3. OPEN the ISO file with a compression utility program and SAVE the files to your hard drive of choice maintaining the original names and file extensions.
  4. COMPLETE the Installing the CSET Program instructions below.

Mounting the File

  1. CLICK the “Download CSET” link at the bottom of this page and complete the requested information to download the ISO file.
  2. SAVE the file to your hard drive of choice (i.e., your computer hard drive or USB drive) maintaining the file name and extension (.iso).
  3. RUN your ISO-specific utility program that is capable of mounting the file. COMPLETE the instructions within the utility software to create a virtual drive using the ISO file. If you do not have an ISO utility application you will need to find and install one before continuing with these instructions.
  4. COMPLETE the Installing the CSET Program instructions below.

Burning the file to CD

  1. CLICK the "Download CSET" link at the bottom of this page and complete the requested information to download the ISO file.
  2. SAVE the file to the hard drive on your computer maintaining the filename and extension (.iso).
  3. INSERT a blank, writable CD into the computer’s CD drive.
  4. RUN your CD-burn utility program. COMPLETE the instructions on your utility program to burn the ISO image to your DVD. (If you do not have an application that can do this, then you will need to find and install one before continuing with these instructions.)
  5. COMPLETE the Installing CSET Program instructions below.

Installing the CSET Program

  1. FIND the CSET_Setup.exe file in the folder, virtual drive, or CD containing the CSET files.
  2. DOUBLE-CLICK the CSET_Setup.exe file to execute. This will initiate the installer program.
  3. COMPLETE the instructions in the installation wizard to install the CSET program.
  4. READ the material within the ReadMe document for a summary explanation of how to use the tool. Help is also available through the User Guide, screen guidance text, and video tutorials.

Video Tutorials

A number of video tutorials are available to help you better understand how to use this tool. They are designed to play within YouTube. Therefore, you must have an active internet connection to view them. You can access these videos by navigating to the CSET YouTube channel (https://www.youtube.com/c/CSETCyberSecurityEvaluationTool).

To view close captioning in YouTube, click on the "cc" icon on the video window.

System Requirements

In order to execute CSET, the following minimum system hardware and software is required:

  • Pentium dual core 2.2 GHz processor (Intel x86 compatible)
  • CD-ROM drive if creating a physical CD
  • 5 GB free disk space
  • 3 GB of RAM
  • Microsoft Windows 7* or higher
  • A Microsoft Office compatible (.docx) document reader is required to view reports in .docx format
  • A Portable Document Format (PDF) reader such as Adobe Reader is required to view supporting documentation. The latest free version of Adobe Reader may be downloaded from http://get.adobe.com/reader/
  • Microsoft .NET Framework 4.6 Runtime (included in CSET installation)
  • SQL Server 2012 Express LocalDB (included in CSET installation)

NOTE: For all platforms, we recommend that you upgrade to the latest Windows Service Pack and install critical updates available from the Windows Update website to ensure the best compatibility and security.

CSET Hash Values

SHA-256: B7061B169E3461A298E58B99FADC9978D9F6CE22A0747669A538BDAF39C214ED

MD5: 53f2f71eb6e3bb54471e75318eaa64ee

SHA-1: f2b020e3a73db9b72ff85bd9b5e158449f6c003a

To download CSET, select the following link:

Download CSET

If you are unable to download or install CSET from the link, you may request a copy be shipped. To request a copy, please send an email to: cset@hq.dhs.gov. Please insert "CSET" in the subject line and include the following in your email request:

  • Your name
  • Organization name
  • Complete street address (no P.O. boxes)
  • Telephone number
  • The error or installation issue you encountered when attempting the download