Security Guidance for IIS

This document provides practical, risk-informed guidance to help immunization information system (IIS) programs strengthen cybersecurity and operational resilience. It addresses security fundamentals, governance and risk management, operational security, artificial intelligence, business continuity, incident response, and recovery. The guidance identifies priority security practices and practical considerations that IIS programs can tailor to their environments to assess and manage cybersecurity risk, strengthen security controls, and support continuous improvement.