For SLTT Organizations
How VouchCore defends state, local, Tribal, and territorial governments — CISA BOD 18-01 aligned.
The SLTT Threat Surface
For SLTT organizations, the brand attack surface includes:
- Constituent-targeted campaigns — Fraudulent emails impersonating your agency to collect payments, credentials, or personal information from the public you serve
- Staff-targeted BEC — Business Email Compromise campaigns targeting finance, procurement, and HR functions
- Lookalike domain infrastructure — Domains designed to impersonate official government addresses (e.g., county-gov.com vs county.gov)
CISA BOD 18-01 Alignment
CISA Binding Operational Directive 18-01 mandates DMARC, SPF, and DKIM implementation for federal agencies and strongly recommends compliance for SLTT organizations. VouchCore's BOD 18-01 Alignment Score provides a 0–100 composite rating across the four BOD 18-01 control factors: DMARC enforcement (40 points), SPF hardfail (30 points), DKIM configuration (20 points), and RUA reporting (10 points).
MS-ISAC Integration Context
VouchCore is designed to complement existing MS-ISAC membership and Albert Network sensor deployments — not replace them. VouchCore's exclusive domain is the email authentication and brand surface vector. Traditional network monitoring and endpoint security are outside VouchCore's scope by design.
Tribal Nation Sovereignty
VouchCore's Enclave Architecture treats Tribal nation tenant data with the same sovereignty considerations as federal data. Your jurisdiction's intelligence is never accessible to other nodes, never shared with other government entities, and never leaves GCP boundaries.