Blume

OT SECURITY / FIELD OPERATIONS

START A CONVERSATION

FRAMEWORKS / CISA CPGS

AWS hardened images for CISA CPG programs.

Use supported operating-system images as a concrete infrastructure action within a broader set of prioritized cybersecurity outcomes for critical infrastructure.

PROGRAM CONTEXT

High-impact goals need implementation choices that teams can verify and sustain.

CISA's Cross-Sector Cybersecurity Performance Goals are voluntary, prioritized practices for IT and OT owners. A hardened image can support selected infrastructure outcomes, while identity, network design, monitoring, recovery, and operational practice remain separate responsibilities.

01

Prioritize the workload

Start with the service consequence and threat exposure so the team knows why this particular baseline matters.

02

Choose a supportable control

Select an OS, release, architecture, and product profile that can be maintained within the team's actual operating model.

03

Verify the outcome

Test the deployed system and preserve evidence that connects the image baseline to the wider security action.

AUTHORITATIVE REFERENCECISA Cybersecurity Performance Goals ↗

IMAGE SELECTION

Carry the framework context into the catalog.

Use the prioritized outcome to frame the decision, then select and validate the exact image that fits the workload and operating team.

  1. 01

    Choose the product profile.

    Use the named profile and product scope—not the page headline—as the description of image-level hardening.

  2. 02

    Match the operating system.

    Confirm application support, release lifecycle, package behavior, and the team's ability to maintain the platform.

  3. 03

    Select the architecture.

    Choose x86_64 or arm64 against workload compatibility, tooling, performance, and support requirements.

  4. 04

    Validate the complete workload.

    Test identity, networking, applications, monitoring, recovery, exceptions, and operating procedures before production use.

SECTOR ROUTES

Put the framework back into the operating environment.

The same program can lead to different infrastructure decisions when uptime, access, ownership, and service consequences change.

01EnergyInfrastructure supporting production systems benefits from consistent, supportable operating-system baselines.02Electric UtilitiesHardened cloud foundations can support the applications around planning, coordination, and operational visibility.03WaterRepeatable baselines help teams govern the cloud workloads connected to essential service delivery.04IndustrialSupported images give engineering and security teams a common starting point for operational workloads.05TransportSystematic hardening helps reduce avoidable operating-layer variation across distributed environments.

NEXT STEP

Select the image for the CISA CPGs workload.

Browse images for CISA CPGsTalk with Blume