CISA Cross-Sector Cybersecurity Performance Goals (CPG) 2.0
Device Security

CISA Cross-Sector Cybersecurity Performance Goals (CPG) 2.0 CPG-2.F: No Exploitable Services on the Internet

Do not expose services such as RDP, SMB, Telnet, or databases directly to the internet.

Maintained by Gerard BlokdykVerified against the published standard Control text last updated

Other controls in Device Security

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll CISA Cross-Sector Cybersecurity Performance Goals (CPG) 2.0 controls