CISA Infrastructure Resilience Planning Framework (IRPF) March 2025
CISA's five-step framework for bringing security and resilience into community infrastructure planning: lay the foundation, identify and prioritise critical infrastructure and its dependencies, assess threats, vulnerabilities, consequences and risk, develop and select resilience solutions with implementation strategies, and implement, evaluate and update through existing plans.
CISA Infrastructure Resilience Planning Framework (IRPF) March 2025 is a compliance framework from United States with 5 domains and 20 controls. The largest domains are Step 1: Lay the foundation – CISA Infrastructure Resilience Planning Framework (IRPF) March 2025 (5 controls), Step 4: Develop actions – CISA Infrastructure Resilience Planning Framework (IRPF) March 2025 (5 controls), Step 3: Assess risk – CISA Infrastructure Resilience Planning Framework (IRPF) March 2025 (4 controls). Every control below carries what it requires and what an assessor expects to see.
Framework summaries on this platform are interpretations grounded in the published source, for educational and compliance planning purposes. They do not reproduce or replace the official standards. Refer to the authoritative source for the definitive text. Framework names and trademarks belong to their respective organisations.
Framework Domains (5)
Step 1: Lay the foundation – CISA Infrastructure Resilience Planning Framework (IRPF) March 2025
| Code | Title |
|---|---|
| cisa-infrastructure-resilience-planning-framework-irpf-march-2025::1.1 | Identify a project champion who will back the planning effort with time and resources |
| cisa-infrastructure-resilience-planning-framework-irpf-march-2025::1.2 | Define and scope the effort: resources, a planning team lead and preliminary activities |
| cisa-infrastructure-resilience-planning-framework-irpf-march-2025::1.3 | Collect and review existing information before the first planning meeting |
| cisa-infrastructure-resilience-planning-framework-irpf-march-2025::1.4 | Form a collaborative planning group and secure commitments from participants and stakeholders |
| cisa-infrastructure-resilience-planning-framework-irpf-march-2025::1.5 | Establish goals and objectives for infrastructure security and resilience |
Step 2: Identify critical infrastructure – CISA Infrastructure Resilience Planning Framework (IRPF) March 2025
| Code | Title |
|---|---|
| cisa-infrastructure-resilience-planning-framework-irpf-march-2025::2.1 | Identify the infrastructure critical to the community, including cyber infrastructure |
| cisa-infrastructure-resilience-planning-framework-irpf-march-2025::2.2 | Prioritise the identified infrastructure by its impact on the community |
| cisa-infrastructure-resilience-planning-framework-irpf-march-2025::2.3 | Identify the dependencies among infrastructure systems |
Step 3: Assess risk – CISA Infrastructure Resilience Planning Framework (IRPF) March 2025
| Code | Title |
|---|---|
| cisa-infrastructure-resilience-planning-framework-irpf-march-2025::3.1 | Identify the threats and hazards to prioritised infrastructure and their likelihood, including cyber threats |
| cisa-infrastructure-resilience-planning-framework-irpf-march-2025::3.2 | Assess the vulnerabilities of prioritised infrastructure to the identified threats and hazards |
| cisa-infrastructure-resilience-planning-framework-irpf-march-2025::3.3 | Assess the consequences of disruption in human, economic, mission and psychological terms |
| cisa-infrastructure-resilience-planning-framework-irpf-march-2025::3.4 | Combine threat, vulnerability and consequence to prioritise risk to infrastructure |
Step 4: Develop actions – CISA Infrastructure Resilience Planning Framework (IRPF) March 2025
| Code | Title |
|---|---|
| cisa-infrastructure-resilience-planning-framework-irpf-march-2025::4.1 | Refine the goals and objectives in light of the infrastructure and risk findings |
| cisa-infrastructure-resilience-planning-framework-irpf-march-2025::4.2 | Identify resilience solutions that mitigate the prioritised risks, including cybersecurity improvements |
| cisa-infrastructure-resilience-planning-framework-irpf-march-2025::4.3 | Identify and assess existing resources and capabilities for implementation |
| cisa-infrastructure-resilience-planning-framework-irpf-march-2025::4.4 | Select resilience solutions for implementation against agreed evaluation criteria |
| cisa-infrastructure-resilience-planning-framework-irpf-march-2025::4.5 | Develop an implementation strategy for each prioritised solution |
Step 5: Implement and evaluate – CISA Infrastructure Resilience Planning Framework (IRPF) March 2025
| Code | Title |
|---|---|
| cisa-infrastructure-resilience-planning-framework-irpf-march-2025::5.1 | Implement solutions through existing planning mechanisms and identify funding and technical assistance |
| cisa-infrastructure-resilience-planning-framework-irpf-march-2025::5.2 | Monitor and evaluate the effectiveness of the resilience solutions through a defined framework |
| cisa-infrastructure-resilience-planning-framework-irpf-march-2025::5.3 | Keep a process for updating the plans |
What is CISA Infrastructure Resilience Planning Framework (IRPF) March 2025 and who does it apply to?
CISA Infrastructure Resilience Planning Framework (IRPF) March 2025 is a compliance framework from United States with 5 domains and 20 controls. CISA's five-step framework for bringing security and resilience into community infrastructure planning: lay the foundation, identify and prioritise critical infrastructure and its dependencies, assess threats, vulnerabilities, consequences and risk, develop and select resilience solutions with implementation strategies, and implement, evaluate and update through existing plans. It is used by organisations to establish and maintain compliance with industry standards and regulatory requirements.
What does CISA Infrastructure Resilience Planning Framework (IRPF) March 2025 actually require?
CISA Infrastructure Resilience Planning Framework (IRPF) March 2025 has 20 controls organised across 5 domains. The largest domains are Step 1: Lay the foundation – CISA Infrastructure Resilience Planning Framework (IRPF) March 2025 (5 controls), Step 4: Develop actions – CISA Infrastructure Resilience Planning Framework (IRPF) March 2025 (5 controls), Step 3: Assess risk – CISA Infrastructure Resilience Planning Framework (IRPF) March 2025 (4 controls). Each control defines specific requirements that organisations must implement to achieve compliance.
If I already comply with another framework, how much of CISA Infrastructure Resilience Planning Framework (IRPF) March 2025 do I already cover?
CISA Infrastructure Resilience Planning Framework (IRPF) March 2025 does not currently have cross-framework mappings in our system. Check back as we continuously expand our mapping database.
How do I implement CISA Infrastructure Resilience Planning Framework (IRPF) March 2025?
Start your CISA Infrastructure Resilience Planning Framework (IRPF) March 2025 compliance journey by running a self-assessment on our platform to identify your current compliance posture. Our AI advisory can answer specific questions about CISA Infrastructure Resilience Planning Framework (IRPF) March 2025 requirements, and cross-framework mapping helps you leverage existing controls from other frameworks you may already comply with. Create a free account to access all 20 controls and track your progress.
Start Your Compliance Journey
Create a free account to run self-assessments, get AI advisory, and track your compliance progress across 1,248 frameworks.
Get Started Free →Free forever, no credit card required