CISA Cyber Resilience Review (CRR) v4.0
What is CISA Cyber Resilience Review (CRR) v4.0?
CISA's Cyber Resilience Review: the 42 goals and their practices across ten domains that an organisation is assessed against for one critical service, from asset and controls management through change, vulnerability, incident and continuity management to risk, external dependencies, training and situational awareness, scored on the six-level MIL scale. It comprises 42 controls organised across 10 domains, and applies in the United States.
Map this against the frameworks you already hold
The compliance knowledge graph holds cross-framework control mappings for hundreds of standards, including the ones you are likely to be certified against already.
Browse the framework graph →Where CISA Cyber Resilience Review (CRR) v4.0 overlaps with the standards you already hold
What CISA Cyber Resilience Review (CRR) v4.0 means in your sector
What CISA Cyber Resilience Review (CRR) v4.0 means for your job
Questions people ask about CISA Cyber Resilience Review (CRR) v4.0
What is CISA Cyber Resilience Review (CRR) v4.0?
How many controls does CISA Cyber Resilience Review (CRR) v4.0 have?
Where does CISA Cyber Resilience Review (CRR) v4.0 apply?
Which version of CISA Cyber Resilience Review (CRR) v4.0 is covered here?
Query CISA Cyber Resilience Review (CRR) v4.0 programmatically
CISA Cyber Resilience Review (CRR) v4.0, its 42 controls and every mapping into other standards are available over a REST endpoint and an MCP server, so an agent can read them directly. The free tier is 10 calls a day and needs no signup.
CISA Cyber Resilience Review (CRR) v4.0 API reference and MCP config →How ready are you for CISA Cyber Resilience Review (CRR) v4.0?
Answer 25 questions and get a professional readiness report with gap analysis, maturity scores, and prioritised action items. Results in 5 minutes.