Event Details

The Cybersecurity and Infrastructure Security Agency (CISA) is creating a common baseline for cybersecurity performance goals in critical infrastructure. These goals are voluntary and intended to help public and private organizations identify areas for improvement around defined security outcomes. To ensure that these goals are actionable and useful for the broad critical infrastructure community, we need your help.

On July 20, 2022, CISA is holding a public workshop to discuss what basic cybersecurity measures can ensure critical infrastructure systems maintain a necessary level of security for national security, economic security, public health and safety, and the unique business functions provided by each organization. Feedback from this workshop will help inform the development of the final set of performance goals.

Workshop Time: 1:00PM-3:15PM EST
Workshop Location: Virtual (See registration info below)

Registration and Meeting Materials

This event is free to attend and open to any member of the public. However, registration is required for all attendees. Please register by selecting the "register" button on the right side of this page. Registration closes on July 19, 2022.

After you register, CISA will provide a dial-in number and link to join the meeting. CISA asks that attendees review the workshop materials prior to the meeting. Click here to download a copy of the Common Baseline v2 Controls List.

If you’re unable to join CISA for the workshop, you will still have a chance view the meeting and provide feedback. Following the event, CISA will post a pre-recording containing the public workshop content. Look for the information on CISA's social media.

Frequently Asked Questions

Q: What is the Common Baseline?

Learn more about the origins and background of the Common Baseline here.

The Common Baseline is intended to be:

A baseline set of cybersecurity practices broadly applicable across critical infrastructure with known risk-reduction value.
A benchmark for critical infrastructure operators to measure and improve their cybersecurity maturity
A combination of best practices for IT and OT owners, including a prioritized set of security controls.
Unique from other control frameworks as the Common Baseline considers not only the practices that address risk to individual entities, but also the aggregate risk to the nation.

The Common Baseline is not:

Comprehensive: The Common Baseline does not identify all the cybersecurity practices needed to protect national and economic security and public health and safety. The document captures a core set of cybersecurity practices with known risk-reduction value broadly applicable across sectors.
Compulsory: National Security Memorandum does not create new authorities that compel owners and operators to adopt the Common Baseline or provide any reporting regarding or related to the Common Baseline to any government agency.

Q: Who should attend the workshop?

This session is open to anyone interested in improving the cybersecurity posture of the United States to reduce risk to national security, economic security, and public health and safety. Specifically, this workshop may be of interest to those who work in IT (information technology) or OT (operational technology) for critical infrastructure entities, and/or experts in cybersecurity.

Q: What are the goals for the workshop?

Ensure that partners have a robust understanding of the purpose and updated content of the Common Baseline control/goal list.
Answer any questions to ensure that our partners are best equipped to provide actionable feedback to improve the current content and structure of the document

Registrations are closed

CISA Workshop: Common Baseline Cyber Performance Goals