Cybersecurity Performance Goals (CPGs) Assessment Training

• The Cross-sector Cybersecurity Performance Goals (CPG) training course is designed to empower students to facilitate a CPG assessment using the Cyber Security Evaluation Tool (CSET®).
• The CPGs are a prioritized subset of information technology (IT) and operational technology (OT) cybersecurity practices that critical infrastructure owners and operators can implement to meaningfully reduce the likelihood and impact of known risks and adversary techniques.
• The goals were informed by existing cybersecurity frameworks and guidance, and by real-world threats and adversary tactics, techniques, and procedures (TTPs). CISA and its government and industry partners observed this.
• By implementing these goals, owners and operators will reduce risks to critical infrastructure operations and to the American people.
• The assessment process depends on in-person interviews leveraging CSET® to track responses, conduct posture analysis, and generate a report.

Learning Objective (LO)

• LO1: State the purpose of CPGs.
• LO2: Describe basic CSET® capabilities.
• LO3: Demonstrate how to perform a CPGs assessment.
• LO4: Discuss CPGs Performance Summaries.
• LO5: Describe CSET® export capabilities.