CISA Cybersecurity Strategic Plan, FY2024-2026

By UNITED STATES. CYBERSECURITY & INFRASTRUCTURE SECURITY AGENCY

From the document: "Our nation is at a moment of opportunity. The '2023 U.S. National Cybersecurity Strategy' outlines a new vision for cybersecurity, a vision grounded in collaboration, in innovation, and in accountability. Now is the moment where our country has a choice: to invest in a future where collaboration is a default rather than an exception; where innovation in defense and resilience dramatically outpaces that of those seeking to do us harm; and where the burden of cybersecurity is allocated toward those who are most able to bear it. We must be clear-eyed about the future we seek, one in which damaging cyber intrusions are a shocking anomaly, in which organizations are secure and resilient, in which technology products are safe and secure by design and default. This is a shared journey and a shared challenge, and CISA [Cybersecurity and Infrastructure Security Agency], as America's cyber defense agency, is privileged to serve a foundational role in the global cybersecurity community as we achieve measurable progress to our shared end state. [...] We must change how we design and develop technology products, such that exploitable conditions are uncommon and secure controls are enabled before products reach the market. We must quickly detect adversaries, incidents, and vulnerabilities, and enable timely mitigation before harm occurs. We must help organizations, particularly those that are 'target rich, resource poor,' take the fewest possible steps to drive the most security impact."

United States. Cybersecurity & Infrastructure Security Agency. 2023. 36p.