CISA Releases Cybersecurity Performance Goals 20 for Critical Infrastructure

Ashden Fein Caleb Skeath John Webster Leslie and Krissy Chapman of Covington and Burling write On December 11 2025 the US Cybersecurity and Infrastructure Security Agency CISA released its Cybersecurity Performance Goals 20 CPG 20 an update to its core set of recommended cybersecurity practices for critical infrastructure owners and operators which we previously wrote about here Established by the Source