CISA Cross-Sector Cybersecurity Performance Goals (CPG) 2.0
What is CISA Cross-Sector Cybersecurity Performance Goals (CPG) 2.0?
CISA's Cross-Sector Cybersecurity Performance Goals (CPGs) are a prioritized subset of IT and OT cybersecurity practices aimed at meaningfully reducing risk to critical infrastructure operations. Aligned with the NIST Cybersecurity Framework, CPGs provide a common set of protections that all critical infrastructure owners and operators can implement.. It comprises 35 controls organised across 8 domains, and applies in the United States.
How CISA Cross-Sector Cybersecurity Performance Goals (CPG) 2.0 maps to other frameworks
All 35 controls, each one mapped to the equivalent requirement in other standards, with the evidence that carries across and the mappings that were judged and rejected shown alongside. No account needed to look.
See the control mappings →The 8 domains CISA Cross-Sector Cybersecurity Performance Goals (CPG) 2.0 groups its controls into
Where CISA Cross-Sector Cybersecurity Performance Goals (CPG) 2.0 overlaps with the standards you already hold
What CISA Cross-Sector Cybersecurity Performance Goals (CPG) 2.0 means in your sector
What CISA Cross-Sector Cybersecurity Performance Goals (CPG) 2.0 means for your job
Questions people ask about CISA Cross-Sector Cybersecurity Performance Goals (CPG) 2.0
What is CISA Cross-Sector Cybersecurity Performance Goals?
How many controls does CISA Cross-Sector Cybersecurity Performance Goals have?
Where does CISA Cross-Sector Cybersecurity Performance Goals apply?
What frameworks does CISA Cross-Sector Cybersecurity Performance Goals map to?
How do I get started with CISA Cross-Sector Cybersecurity Performance Goals compliance?
Query CISA Cross-Sector Cybersecurity Performance Goals (CPG) 2.0 programmatically
CISA Cross-Sector Cybersecurity Performance Goals (CPG) 2.0, its 35 controls and every mapping into other standards are available over a REST endpoint and an MCP server, so an agent can read them directly. The free tier is 10 calls a day and needs no signup.
CISA Cross-Sector Cybersecurity Performance Goals (CPG) 2.0 API reference and MCP config →What CISA Cross-Sector Cybersecurity Performance Goals (CPG) 2.0 requires, control by control
Each page carries the requirement text for one CISA Cross-Sector Cybersecurity Performance Goals (CPG) 2.0 control and what an assessor expects to see as evidence.
- CPG-1-A Changing Default Passwords
- CPG-1-C Unique Credentials
- CPG-1-D Revoking Credentials for Departing Employees
- CPG-2-A Asset Inventory
- CPG-2-B Prohibit Connection of Unauthorized Devices
- CPG-3-A Log Collection
- CPG-3-B Secure Log Storage
- CPG-3-C Strong and Agile Encryption
- CPG-4-B OT Cybersecurity Leadership
- CPG-4-C Basic Cybersecurity Training
How ready are you for CISA Cross-Sector Cybersecurity Performance Goals (CPG) 2.0?
Answer 25 questions and get a professional readiness report with gap analysis, maturity scores, and prioritised action items. Results in 5 minutes.