US Consumer Product Safety Commission (CPSC): every control, and what you already have

23 controls 260 frameworks share controls with it United States (CPSC) verified against its source document

Every control below is one this framework asks for. The right hand column counts how many other frameworks in our corpus carry the same control, which is the difference between doing this work once and doing it again for the next standard.

There is no implementation kit for this framework yet. The control list and the overlap above are free and complete.

What you already have

Frameworks whose controls overlap this one, most first. If you run any of them, the count is roughly what you have already evidenced.

If you run	Shared controls
AWWA Cybersecurity Guidance for the Water Sector (American Water Works Association)	7	measure it →
API 1164	6	measure it →
CISA Cross-Sector Cybersecurity Performance Goals (CPG) 2.0	6	measure it →
IEC 62443	6	measure it →
IEEE 1686	6	measure it →
ISO/IEC 27019:2024	6	measure it →
NIS2 Directive Implementing Acts	6	measure it →
NIST SP 1800-32	6	measure it →
South Korea ISMS-P	6	measure it →
FFIEC Cybersecurity Assessment Tool (CAT)	5	measure it →
New Zealand Information Security Manual (NZISM)	5	measure it →
NIST Privacy Framework	5	measure it →

Every control

Code	Control	Also in
`CPSC-CS.1`	Network Security for Connected Products	63
`CPSC-CS.2`	Authentication and Access Controls	154
`CPSC-CS.3`	Data Protection for Safety Systems	103
`CPSC-CS.4`	Vulnerability Disclosure	10
`CPSC-PM.1`	Incident Monitoring and Reporting	0
`CPSC-PM.2`	Product Recall Procedures	10
`CPSC-PM.3`	End-of-Life Safety Planning	0
`CPSC-PM.4`	Consumer Safety Communication	0
`CPSC-RA.1`	Hazard Analysis for Connected Products	0
`CPSC-RA.2`	Failure Modes and Effects Analysis	0
`CPSC-RA.3`	Lifecycle Risk Assessment	150
`CPSC-RA.4`	Critical Component Identification	0
`CPSC-STD.1`	UL 2900-1 Cybersecurity Compliance	0
`CPSC-STD.2`	UL 5500 Remote Update Compliance	16
`CPSC-STD.3`	Voluntary Standards Participation	0
`CPSC-STD.4`	Interoperability Safety	66
`CPSC-SW.1`	Secure Software Development	0
`CPSC-SW.2`	Software Update Safety Verification	16
`CPSC-SW.3`	Remote Update Security	16
`CPSC-SW.4`	Firmware Integrity	0
`USCPSC-1`	Section 15(b) Substantial Product Hazard Reporting	1
`USCPSC-2`	Connected Product Cybersecurity Hazard Identification	0
`USCPSC-3`	Recall, Corrective Action, SaferProducts.gov	0

Tell me when US Consumer Product Safety Commission (CPSC) files something new

One email when a public company newly discloses something this framework governs, naming the company and what our corpus says it puts in scope. Nothing else, and one click to stop.

What this page is

A control-level reference for US Consumer Product Safety Commission (CPSC), drawn from our framework corpus. Control codes and titles are references to the standard, not reproductions of it. The overlap counts and the auditor artefacts are our own work and are the part you will not find elsewhere.

Measure this against what you already run · All frameworks · Today's edition