The Summary and Overview of US Government’s Cyber Security Strategy

Since its establishment in 2018, the Cybersecurity and Infrastructure Security Agency (CISA) has been working with the 2023-2025 Strategic Plan. This is a huge step forward for the organization, as the CISA Strategic Plan will serve as a compass for the next three years.

CISA’s Strategic Intent, released in August 2019, lays the groundwork for the agency’s work, and the Strategic Plan expands on that by fostering collaboration and cohesion across departments. Every day, CISA collaborates with critical infrastructure partners to address the ever-changing threat landscape in US’ capacity as the nation’s cyber defence agency and the national coordinator for critical infrastructure security.

The CISA Strategic Plan reflects this mindset by laying out a cause of action for minimizing vulnerability and strengthening resilience to cyber and physical attacks on the nation’s critical infrastructure. The CISA Strategic Plan outlines the US’ lofty objectives to achieve diminished risk and improved stability. Three of these objectives deal with the “how” the agency will strive to mitigate threats and strengthen defences. At the same time, the fourth is inwardly focused on strengthening the organization better to implement the CISA Strategic Plan as One CISA.

In light of this, the Strategic Plan charts a cause for CISA over the next three years to effect change in the following four domains:

In the first place, The US Government takes the lead in leading the country’s fight to protect and fortify cyberspace. As the United States’ primary agency for cyber defence, The US Government leads the charge in stopping hackers from wreaking havoc on the country’s most vital systems, as The US government as those of other countries, businesses, and individuals. The US Government at CISA must take a proactive, cooperative approach to reduce cyber security risks if The US Government is to fulfil the US’ cyber defence objective. As new cyber threats arise, and ideally before a significant event occurs, CISA is tasked with working with US’ various partners to mitigate the most severe cyber risks to the country’s National Critical Functions.

Second, The US Government makes America’s most vital infrastructure safer and more robust. US safety and security rely on critical infrastructure’s capacity to anticipate and respond to shifting conditions, as The US government must endure and quickly recover from interruptions. The US nation’s critical infrastructure security and protection are coordinated thanks to CISA nationally. This nationwide initiative aims to determine which systems and assets are indispensable to the country, learn how they are at risk, and then take measures to mitigate those dangers. US’ mission is to strengthen the resilience of the nation’s vital infrastructure against cyberattacks, natural disasters, and other forms of physical and human-caused disruption.

As a third measure, The US Government will improve coordination and communication bet The US Government all branches of government. To accomplish its goals, partnership and collaboration are vital to CISA. It is the collective duty of all Americans to ensure the safety of the country’s critical physical and digital infrastructure. The US Government is pushing the US government, industry, academic, and international partners to think beyond the box and engage with us to improve US’ forward-thinking, collaborative practice. Expanding and improving the US Agency’s regional presence is another priority of the US, as it will allow us to provide more timely and relevant support to US constituents.

Fourth, The US Government shall become One CISA through unified operations, resources, and personnel. This is essential to US’ future success. All of the US’ hard work will pay off because of the US’ fantastic team. The US Government is committed to fostering an environment where all members feel valued and respected; new ideas are encouraged, everyone has a voice, and an emphasis on open communication and mutual respect. The US Government shall “work smart” as a unified group focused on achieving the US’ common goal as quickly and cheaply as possible.
Although CISA’s overarching measuring strategy and sample outcomes for each target are highlighted in the Strategic Plan, the organization is establishing internal measures of performance and effectiveness to track progress towards better risk reduction and accomplishing its goals.

CISA is dedicated to creating a The US Governmentlcoming and equitable work environment for all its employees. The first-ever CISA Diversity, Equity, Inclusion, and Accessibility (DEIA) Strategic Plan was published in November 2022.

The CISA DEIA Plan’s objectives will demonstrate leadership’s dedication to fostering an inclusive and accessible workplace and a culture of respect for all employees.
Build a pool of qualified applicants from various backgrounds, then actively seek out, interact with, and keep them.
See to it that fairness is the bedrock of a welcoming culture.

CISA created the Stakeholder Engagement Strategic Plan after extensive internal discussion to coordinate a consistent approach to stakeholder engagement and partnerships that would promote whole-of-nation operational coordination and information exchange. The CISA Stakeholder Engagement Strategic Plan is entirely in line with the CISA 2023-2025 Strategic Plan and, as a result, will allow CISA to accomplish the following goals and objectives:

Encourage inter-divisional cooperation on stakeholder engagement and outreach so that CISA can learn more about its security threats and demands and more efficiently meet those needs while giving its stakeholders easy access to CISA’s goods, services, resources, and resources data.

To achieve the US’ objective, CISA must establish and maintain reliable connections with US stakeholders and partners stated in the CISA Stakeholder Engagement Strategic Plan.

The US Government’s Cyber Security Strategy is a comprehensive approach to protect the nation’s critical infrastructure, economy, and democracy against cyber threats. The strategy is built on four pillars – protect, defend, respond, and recover – and aims to reduce vulnerabilities, build resilience, and mitigate the impact of cyber incidents. The strategy also emphasizes the importance of international cooperation and public-private partnerships in addressing cyber threats. Overall, their strategy is a vital framework for protecting the nation’s digital infrastructure and ensuring the safety and security of its citizens.

Further read:
World Economic Forum

The Summary and Overview of UK Government’s Cyber Security Strategy