Cybersecurity Program Review

Overview
The Cybersecurity Program Review (CPR) is a comprehensive review of an agency's information security program that provides insight into the posture and maturity of the agency's cybersecurity program operations. The CPR team develops agency-specific information security program profiles that inform a strengthened federal cybersecurity posture. These project activities and evaluations are not an agency audit or inspection. The CPR project area is comprised of three additional sub-projects: annual interviews with agency CIOs and CISOs, independent evaluations of agencies' information security program operations, and facilitation of OMB's CyberStat reviews &mdash; which is intended to assist an agency in implementation of key strategic enterprise cybersecurity capabilities.