Mapping Cross-Sector Cybersecurity Performance Goals (CPGs) to 5 Critical Controls for ICS/OT Cybersecurity

This report explains the CISA/NIST Cross-Sector Cybersecurity Performance Goals (CPGs), maps each CPG to the SANS five critical controls for ICS/OT security, and highlights Dragos OT-CERT resources to help small and medium-sized organizations implement practical IT/OT cybersecurity practices focused on measurable outcomes such as account, device, data, governance, vulnerability management, supply chain, response/recovery, and network controls.