CISA CPG Cross-Sector Cybersecurity Performance Goals

The Cross-Sector Cybersecurity Performance Goals (CPGs) document provides a concise, prioritized set of cybersecurity objectives designed to help organizations across various critical infrastructure sectors enhance their cyber resilience. It outlines foundational and advanced cybersecurity practices focused on protecting information technology (IT) and operational technology (OT) environments, emphasizing risk reduction through measures such as asset management, access control, vulnerability management, and incident response. The CPGs serve as a practical framework to guide organizations in implementing consistent, effective cybersecurity controls that align with federal standards, improve communication among stakeholders, and support a unified approach to managing evolving cyber threats.

CISA’s Cross-Sector CPGs have been organized to align to the National Institute of Standards and Technology (NIST) Cybersecurity Framework (CSF) functions. CISA is in the process of updating its Cross-Sector CPGs to align with NIST’s CSF 2.0.

Publication's URL

URL: https://www.cisa.gov/sites/default/files/2023-03/CISA_CPG_REPORT_v1.0.1_FINAL.pdf

Publication's scorecard

Error: unable to get links from server. Please make sure that your site supports either file_get_contents() or the cURL library.