CISA unveils 'CISA 2030' strategy to harden US cyber defences, prioritise critical infrastructure

Three-pillar plan aims to shift from passive defence to aggressive disruption of adversaries

By LineZotpaper AI staff

Published26 October 2026

Read Time2 min

Illustration: CISA unveils 'CISA 2030' strategy to harden US cyber defences, prioritise critical infrastructure

The US Cybersecurity and Infrastructure Security Agency (CISA) on Monday released its new strategic plan, CISA 2030: Defend, Harden, Prevail, setting out a more aggressive posture for protecting the nation’s critical infrastructure from increasingly sophisticated cyber threats. The strategy aligns with President Trump’s Cyber Strategy for America and the National Resilience Strategy.

CISA Acting Director Nick Andersen said the plan provides a focused roadmap for companies, vendors and technology manufacturers to strengthen defences, eliminate adversarial footholds and deny adversaries any advantage that could endanger national security, the economy or public health.

“I call on every company and organization in the critical infrastructure community—from owners and operators to vendors and technology manufacturers—to act now,” Andersen said.

The strategy is built on three pillars: Defend, leading national cyber defence; Harden, prioritising infrastructure security; and Prevail, mobilising national resilience. It recognises that cyber, physical and geopolitical threats increasingly intersect and can disrupt essential services.

CISA said it would move from a passive defence posture toward an aggressive, anticipatory stance focused on identifying, mitigating and reducing malicious access to critical infrastructure. The agency will work with public- and private-sector partners to strengthen operational technology security, advance software security, support secure emerging technologies and improve continuity of National Security and Emergency Preparedness communications.

Implementation milestones are set for the coming year. Within 60 days, CISA will begin reviewing its core services and capabilities. Within 180 days, it will provide a plan to implement the strategy and measure results. Within 365 days, it will report on its progress.

RSS

The Daily Edition

The front page in your inbox each weekday morning: the lead, the picks, and why each one earned its place.

Analysis

Why This Matters

The strategy signals a shift toward proactive, anticipatory cyber defence rather than reactive responses, affecting how the US protects electricity grids, water systems, hospitals and financial networks.
It imposes a clear timeline on CISA to review its capabilities and report progress, creating accountability for the agency’s performance.
The integration of physical and cyber security reflects the growing risk of disruptions that combine digital attacks with physical consequences, such as attacks on operational technology.

Background

CISA serves as the nation’s cyber defence agency and national coordinator for critical infrastructure security. The new strategy comes amid an evolving threat landscape where nation-state actors and criminal groups are increasingly sophisticated in their attempts to compromise US networks. Previous strategies emphasised information sharing and voluntary collaboration; CISA 2030 appears to double down on disruption and hardening, aligning with the Trump administration’s broader cyber and resilience policies.

What to Watch

CISA’s 60-day review of core services, which will indicate where the agency plans to allocate resources or cut redundant programs.
The 180-day implementation plan, which will provide specific metrics for measuring success.
Reactions from critical infrastructure owners and operators, particularly around the feasibility of the more aggressive stance and any additional regulatory or cost burdens.

Sources

CISA Unveils New Strategy to Strengthen National Cyber Defense and Critical Infrastructure Security · CISA News

Checked

11 claims in this story checked against 1 source: 9 supported.

Show each claim

SupportedCISA unveiled its CISA 2030 strategy to strengthen cyber defence and critical infrastructure security.CISA News: “CISA today released its new strategy, CISA 2030: Defend, Harden, Prevail, which advances President Trump’s Cyber Strategy for America and National Resilience Strategy while strengthening the security and resilience of the nation’s critical infrastructure.”
SupportedThe strategy shifts from passive defence towards an aggressive approach to disrupt adversaries.CISA News: “CISA will move from a passive defense posture toward an aggressive, anticipatory stance focused on identifying, mitigating, and reducing malicious access to critical infrastructure.”
Sources say otherwiseCISA released the strategy on Monday.CISA News: “CISA (CISA) today released its new strategy”
SupportedThe strategy advances President Trump’s Cyber Strategy for America and the National Resilience Strategy.CISA News: “which advances President Trump’s Cyber Strategy for America and National Resilience Strategy”
Partly supportedAndersen said the plan provides a focused roadmap specifically for companies, vendors and technology manufacturers.CISA News: ““I call on every company and organization in the critical infrastructure community—from owners and operators to vendors and technology manufacturers—to act now,” said CISA Acting Director Nick Andersen. “CISA 2030 provides a focused roadmap to strengthen defenses, eliminate adversarial footholds, and deny them any advantage that could endanger the nation’s security, economy, or public health.””
SupportedAndersen said, “I call on every company and organization in the critical infrastructure community—from owners and operators to vendors and technology manufacturers—to act now.”CISA News: ““I call on every company and organization in the critical infrastructure community—from owners and operators to vendors and technology manufacturers—to act now,” said CISA Acting Director Nick Andersen.”
SupportedThe plan has three pillars: Defend, Harden and Prevail, focused respectively on national cyber defence, infrastructure security and national resilience.CISA News: “CISA 2030 is guided by three pillars: Defend: Lead National Cyber Defense; Harden: Prioritize National Infrastructure Security, and Prevail: Mobilize National Resilience.”
SupportedThe strategy says cyber, physical and geopolitical threats increasingly intersect and can disrupt essential services.CISA News: “The strategy recognizes that cyber, physical, and geopolitical threats increasingly intersect and can disrupt essential services Americans rely on every day.”
SupportedWithin 60 days, CISA will begin reviewing its core services and capabilities.CISA News: “Within 60 days, CISA will begin reviewing its core services and capabilities to meet key objectives.”
SupportedWithin 180 days, CISA will provide a plan to implement the strategy and measure results.CISA News: “Within 180 days, CISA will provide a plan to implement the strategy and measure its results.”
SupportedWithin 365 days, CISA will report on its progress.CISA News: “Within 365 days, CISA will report on its progress in carrying out the strategy.”