Cyber Risks · Dragos Blog

How to Align to New Federal Control Systems Performance Goals and Objectives

Summary: CISA and NIST published initial cybersecurity performance goals and objectives for critical infrastructure control systems in September 2021, following Section 4 of a White House National Security Memorandum that called for DHS and NIST coordination. The goals set baseline practices across nine categories without prescribing how asset owners achieve them, with enhanced objectives for sectors supporting national defense, critical lifelines, or where control system failure could affect safety.

What's compelling: Dragos reports that 90% of its service engagements found a lack of visibility across OT networks and 88% found improper network segmentation, gaps that directly impair an asset owner's ability to satisfy the CISA categories on architecture, integrity, availability, and continuous monitoring.

Read the original at Dragos Blog ↗

Topics
OT / ICS & Critical Infrastructure
Related
Siemens RUGGEDCOM APE1808 Cyber Risks · Nov 12, 2026