cisa-cpg pack — content licence
===============================

This pack is derived from:
    Cross-Sector Cybersecurity Performance Goals 2.0 (CISA CPG 2.0)
    Cybersecurity and Infrastructure Security Agency (CISA),
    CPG 2.0 (2024-25 refresh, aligned to NIST CSF 2.0 incl. GOVERN)

Source licence: Public Domain (US Government work, 17 U.S.C. § 105)  (tier 1 — see ../../docs/SOURCE-VETTING.md)
No source-material download link is published (see ../../docs/LICENSING.md).

This source is a work of the United States Government, prepared by CISA (a component
of the U.S. Department of Homeland Security), and is therefore NOT subject to copyright
protection in the United States (17 U.S.C. § 105). It is in the public domain: anyone may
reproduce, transform, and redistribute it for any purpose, including commercially, without
permission.

Attribution to CISA is provided as a courtesy (see the repository NOTICE), not a legal
obligation. CISA does not endorse this pack or its authors.

NOTE: This file governs the CONTENT of this pack. The repository tooling is licensed
separately under MIT (see ../../LICENSE).