CISA strategy shifts toward proactive infrastructure defense

The Cybersecurity and Infrastructure Security Agency released its CISA 2030 strategy on October 26, outlining a shift toward more proactive cyber defense, risk-based support for critical infrastructure and greater resilience against disruptions. The plan, titled CISA 2030: Defend, Harden, Prevail, sets out three broad priorities: strengthening cyber defenses with partners, focusing security efforts on infrastructure where failures could have the greatest consequences, and keeping essential services running during and after attacks. It calls for using threat intelligence and potential impacts to guide where CISA directs assistance and resources. Acting Director Nick Andersen said the agency aims to detect adversaries on compromised systems, remove them and maintain critical operations. The strategy also calls for closer work with federal, state and local agencies, infrastructure operators, private companies and international partners. Areas named include operational technology security, supply-chain protection and improved threat information sharing. CISA says it will begin reviewing its core services and capabilities within 60 days of the strategy’s release. Within 180 days,...