Cybersecurity Dive December 12, 2025
The agency streamlines and supplements goals it first issued in 2022.
The Cybersecurity and Infrastructure Security Agency has updated a list of goals that it hopes water treatment facilities, hospitals and other critical infrastructure operators will use to protect their systems from hackers.
Version 2.0 of CISA’s Cross-Sector Cybersecurity Performance Goals (CPGs), which the agency released on Thursday, “incorporates three years of operational insights, and address emerging threats through data-driven, actionable guidance,” CISA said in a statement. “These enhancements are designed to promote accountability, improve risk management, and support strategic cybersecurity governance across sectors.
The changes include the addition of a new “Govern” category of goals, meant to reinforce the importance of business leaders’ involvement in overseeing cybersecurity; the consolidation...







