CISA published a ten-page strategy on 26 October that largely reaffirms its existing role while committing the agency to a review of whether its core services and capabilities still meet its objectives. The document, "CISA 2030: Defend, Harden, Prevail", sets out three pillars — defend, harden, prevail — prioritises protection of critical infrastructure, and promises resilience as the foundation of the approach rather than prevention. The review of core services is to be completed within 60 days, followed by implementation over 180 days and a progress update after one year. Acting director Nick Andersen wrote in the foreword that "the threat landscape we face today is not static" and that "there is no guarantee that a strong defense will eliminate intrusions", adding that the agency must be able to detect, evict and keep operations running when adversaries gain a foothold. The strategy is framed as aligning with the administration's wider cyber strategy published in March and last year's executive order on state and local preparedness.

• Source article