CISA Unveils New Strategy to Strengthen National Cyber Defense and Critical Infrastructure Security

WASHINGTON – The Cybersecurity and Infrastructure Security Agency (CISA) today released its new strategy, CISA 2030: Defend, Harden, Prevail, which advances President Trump’s Cyber Strategy for America and National Resilience Strategy while strengthening the security and resilience of the nation’s critical infrastructure.

The strategy addresses an increasingly complex threat environment, strengthens national cyber defense, and prioritizes the infrastructure most essential to America’s national security, economy, public health, and safety.

The threat landscape is evolving at an unprecedented pace. Nation-state actors and other malicious adversaries are becoming increasingly sophisticated in their attempts to compromise U.S. networks. CISA is strengthening national cyber defense through decisive, proactive action to identify, disrupt, and eliminate adversarial access while hardening critical infrastructure against emerging threats.

“I call on every company and organization in the critical infrastructure community—from owners and operators to vendors and technology manufacturers—to act now,” said CISA Acting Director Nick Andersen. “CISA 2030 provides a focused roadmap to strengthen defenses, eliminate adversarial footholds, and deny them any advantage that could endanger the nation’s security, economy, or public health.”

CISA 2030 is guided by three pillars:

• Defend: Lead National Cyber Defense;
• Harden: Prioritize National Infrastructure Security, and
• Prevail: Mobilize National Resilience. Under the strategy, CISA will strengthen security across the interconnected physical and cyber dimensions of critical infrastructure.

The strategy also reaffirms CISA’s role, as delegated by the Department of Homeland Security, in leading the initiation and restoration of National Security and Emergency Preparedness communications, which are essential to maintaining continuity of government and public safety during crises.

The strategy recognizes that cyber, physical, and geopolitical threats increasingly intersect and can disrupt essential services Americans rely on every day. CISA will work with public- and private-sector partners to strengthen the security and resilience of operational technology, advance software security, support secure emerging technologies, and improve continuity of National Security and Emergency Preparedness communications.

In alignment with Cyber Strategy for America, CISA will move from a passive defense posture toward an aggressive, anticipatory stance focused on identifying, mitigating, and reducing malicious access to critical infrastructure. The agency will also improve its ability to prioritize risk, mobilize partners, and support rapid, coordinated action when threats emerge.

The strategy sets out CISA’s priorities for the coming year:

• Within 60 days, CISA will begin reviewing its core services and capabilities to meet key objectives.
• Within 180 days, CISA will provide a plan to implement the strategy and measure its results.
• Within 365 days, CISA will report on its progress in carrying out the strategy.

CISA 2030: Defend, Harden, Prevail delivers a clear, decisive roadmap for advancing the agency’s mission and strengthening the security and resilience of the nation’s critical infrastructure in service to the American people.

###

About CISA

As the nation’s cyber defense agency and national coordinator for critical infrastructure security, the Cybersecurity and Infrastructure Security Agency leads the national effort to manage, uncover, and reduce risk to our digital and physical infrastructure Americans rely on every hour of every day. 

Visit CISA.gov for more information and follow us on X, Facebook, LinkedIn, Instagram.