CISA Cross-Sector Cybersecurity Performance Goals (CPG) 2.0
Account Security

CISA Cross-Sector Cybersecurity Performance Goals (CPG) 2.0 CPG-1.F: Phishing-Resistant MFA

Enable phishing-resistant MFA (FIDO2, PIV) for all IT accounts; at minimum, MFA for all internet-facing and privileged accounts.

Other controls in Account Security

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll CISA Cross-Sector Cybersecurity Performance Goals (CPG) 2.0 controls