{
  "$schema": "https://bestinsuranceresearch.com/llms-full.txt",
  "recordType": "source",
  "id": "cisa-cpg-program-page",
  "canonicalUrl": "https://bestinsuranceresearch.com/sources/cisa-cpg-program-page",
  "contentVersion": "2026.08.31",
  "generatedFor": "2026-09-06",
  "operator": {
    "legalName": "WJB Services, Inc.",
    "dba": "Bollinsure Insurance Services",
    "license": "6013787",
    "licenseAuthority": "California Department of Insurance"
  },
  "license": "Text on this page may be quoted with attribution and a link to the canonical URL.",
  "notice": "Public page facts only. This record contains no visitor question, no tool input, and no identifier. It is not a coverage determination, an eligibility decision, or individualized advice.",
  "title": "Cross-Sector Cybersecurity Performance Goals (program page)",
  "publisher": "Cybersecurity and Infrastructure Security Agency, U.S. Department of Homeland Security",
  "url": "https://www.cisa.gov/cross-sector-cybersecurity-performance-goals",
  "officialHost": true,
  "sourceType": "official-documentation",
  "authorityLevel": "secondary",
  "primary": true,
  "jurisdiction": "US",
  "publishedDate": "2025-12-01",
  "effectiveDate": "2025-12-01",
  "accessedDate": "2026-08-31",
  "lastChecked": "2026-08-31",
  "updateCadence": "as-needed",
  "status": "active",
  "supportsClaims": [
    {
      "claimId": "cisa-cpg-program-page#c1",
      "canonicalUrl": "https://bestinsuranceresearch.com/sources/cisa-cpg-program-page#c1",
      "checksum": "8732122c3dbc",
      "text": "CISA's Cross-Sector Cybersecurity Performance Goals 2.0 are a subset of cybersecurity practices aimed at meaningfully reducing risks to critical infrastructure operations and the American people."
    },
    {
      "claimId": "cisa-cpg-program-page#c2",
      "canonicalUrl": "https://bestinsuranceresearch.com/sources/cisa-cpg-program-page#c2",
      "checksum": "724a1e959e89",
      "text": "Cross-Sector CPGs 2.0 have been updated to align to the NIST Cybersecurity Framework (CSF) 2.0 functions and build upon the foundation established in version 1.0.1, with the addition of the GOVERN function."
    },
    {
      "claimId": "cisa-cpg-program-page#c3",
      "canonicalUrl": "https://bestinsuranceresearch.com/sources/cisa-cpg-program-page#c3",
      "checksum": "784a2c36de12",
      "text": "Net-new goals address managed service providers (MSPs), the principle of least privileges, and incident communication procedures."
    },
    {
      "claimId": "cisa-cpg-program-page#c4",
      "canonicalUrl": "https://bestinsuranceresearch.com/sources/cisa-cpg-program-page#c4",
      "checksum": "020fe6ea663a",
      "text": "The CPGs are intended as a baseline set of practices broadly applicable across critical infrastructure and a benchmark for operators to measure and improve."
    },
    {
      "claimId": "cisa-cpg-program-page#c5",
      "canonicalUrl": "https://bestinsuranceresearch.com/sources/cisa-cpg-program-page#c5",
      "checksum": "fed629050b50",
      "text": "Sector-Specific Goals are available now for the Chemical, Energy (Distribution and Distributed Energy Resources), Healthcare, and Information Technology sectors, with Financial Services SSGs listed as coming."
    },
    {
      "claimId": "cisa-cpg-program-page#c6",
      "canonicalUrl": "https://bestinsuranceresearch.com/sources/cisa-cpg-program-page#c6",
      "checksum": "762ff30cf3b6",
      "text": "A new CSET assessment module for CPG 2.0 and an updated CPG 2.0 Checklist are noted as becoming available in Q1 2026."
    },
    {
      "claimId": "cisa-cpg-program-page#c7",
      "canonicalUrl": "https://bestinsuranceresearch.com/sources/cisa-cpg-program-page#c7",
      "checksum": "5b417766861e",
      "text": "These voluntary Cross-Sector CPGs strive to help small- and medium-sized organizations kickstart their cybersecurity efforts by prioritizing investment in a limited number of essential actions with high-impact security outcomes."
    }
  ],
  "reliedOnBy": [
    {
      "kind": "Module",
      "title": "Cyber Control Readiness (3 checks)",
      "url": "https://bestinsuranceresearch.com/tools/cyber-control-readiness"
    }
  ],
  "reliedOnByCount": 1,
  "citation": {
    "text": "Cybersecurity and Infrastructure Security Agency, U.S. Department of Homeland Security. \"Cross-Sector Cybersecurity Performance Goals (program page).\" 2025-12-01. https://www.cisa.gov/cross-sector-cybersecurity-performance-goals (retrieved 2026-08-31).",
    "viaThisSite": "BestInsurance Research source record cisa-cpg-program-page, content version 2026.08.31. https://bestinsuranceresearch.com/sources/cisa-cpg-program-page",
    "note": "Cite the underlying source when you can. Cite this record when you are describing our synthesis or our claim list."
  }
}