Science & Tech · Cybersecurity · 1 hr ago
CISA sets out proactive cyber defense strategy for critical infrastructure
The US Cybersecurity and Infrastructure Security Agency has published a four-year plan called CISA 2030: Defend, Harden, Prevail.
It aims to shift the agency from passive defense to spotting and disrupting cyber threats earlier.
The plan focuses on US government networks and critical infrastructure, such as systems that support essential services.
CISA says it will work with government, industry and international partners, while improving security for operational technology and supply chains.
It also plans to use intelligence and infrastructure data to focus protection on the most important systems.
The strategy stresses resilient communications and infrastructure so essential operations can continue during disruptions.
CISA will start reviewing its core services within 60 days, complete an implementation plan within 180 days and update the public on progress after one year.
CISA published a four-year strategy called “CISA 2030: Defend, Harden, Prevail” to strengthen cyber defenses.
The plan focuses on defending national networks, prioritizing critical infrastructure and building resilience to attacks.
CISA says it will review its core services and capabilities within 60 days and complete an implementation plan within 180 days.
The agency plans to report on implementation after one year.
Critics say budget cuts under the Trump administration have left CISA understaffed.
- Who
- The Cybersecurity and Infrastructure Security Agency (CISA), led by acting director Nick Andersen.
- What
- CISA published a four-year strategy to strengthen cyber defenses and resilience.
- When
- Monday, October 26, 2026.
- Where
- The United States.
- Why
- To strengthen defenses, prioritize critical infrastructure and help ensure essential operations continue during cyberattacks.
CISA
Critics of the administration’s cuts to CISA
Capacity
CISA
CISA’s strategy sets out a roadmap to strengthen defenses and build resilience.
Critics of the administration’s cuts to CISA
Critics say budget cuts have left the agency understaffed.
Agency direction
CISA
The strategy focuses on CISA’s role in defending networks and critical infrastructure.
Critics of the administration’s cuts to CISA
Cybersecurity Dive says the Trump administration has downsized and marginalized the agency for political reasons.
CISA published a previous strategic plan with three pillars.
The administration published its broader cyber strategy.
CISA published “CISA 2030: Defend, Harden, Prevail.
CISA says it will begin reviewing its core services and capabilities.
CISA says it will complete an implementation plan with metrics for measuring success.
CISA says it will provide an update on implementation.
- Strategy title
- CISA 2030: Defend, Harden, Prevail
- Duration
- Four years
- Strategy length
- 10 pages
- Review deadline
- Within 60 days
- Implementation plan deadline
- Within 180 days
- Progress update
- After one year
3 sources
What people are saying
CISA will transition from passive defense to an aggressive, anticipatory stance that actively eliminates adversarial footholds in defense-critical infrastructure prior to weaponization against our systems.
The threat landscape we face today is not static,
As President Trump has reminded us, resilience must be the foundation of our approach.
CISA 2030 provides a focused roadmap to strengthen defenses, eliminate adversarial footholds, and deny them any advantage that could endanger the nation’s security, economy, or public health.