How to Align to New Federal Control Systems Performance Goals and Objectives

This report reviews CISA’s 2021 cybersecurity performance goals for critical infrastructure control systems, maps those goals to the C2M2 maturity framework, and provides practical guidance for industrial asset owners. It highlights common gaps (asset visibility, network segmentation and monitoring, incident response planning, third‑party cybersecurity requirements, and resourcing) and advises organizations to assess and align their security programs to CISA baselines and enhanced objectives where applicable.