CISA releases cross-sector cyber ‘performance goals’ focused high impact, low cost actions to improve security

The Cybersecurity and Infrastructure Security Agency has issued cybersecurity “performance goals” providing critical infrastructure operators with actionable steps categorized by impact and costs to improve their security baseline building on the NIST cybersecurity framework.

“Simply put, the CPGs are a prioritized subset of IT and OT cybersecurity practices aimed at meaningfully reducing risks to both CI operations and to the American people,” CISA says in the 28-page publication released today.

The publication says, “These goals are applicable across all...