CISA unveils 2030 strategy for national cyber defense

The Cybersecurity and Infrastructure Security Agency released CISA 2030, a strategy built on three pillars, Defend, Harden and Prevail, that moves the agency from passive defense toward identifying and eliminating adversarial access to critical infrastructure

Why it matters: The strategy sets the terms on which the United States will press owners and operators of critical infrastructure, and software and technology suppliers to them, to harden systems over the next year, with an implementation plan due within 180 days

Data as of CISA press release of October 26, 2026, read in full in this run. Single publisher, the issuing agency itself, reporting its own strategy, so the item rests on the primary document alone.

The Cybersecurity and Infrastructure Security Agency on Monday released its new strategy, CISA 2030: Defend, Harden, Prevail, which it said advances the administration’s Cyber Strategy for America and National Resilience Strategy. The strategy is built on three pillars, leading national cyber defense, prioritizing national infrastructure security and mobilizing national resilience, and it moves the agency from a passive posture toward one focused on identifying, disrupting and eliminating adversarial access to United States networks.

Acting Director Nick Andersen called on every company and organization in the critical infrastructure community, from owners and operators to vendors and technology manufacturers, to act now. CISA said it will begin reviewing its core services and capabilities within 60 days, provide a plan to implement the strategy and measure its results within 180 days, and report on its progress within 365 days.

CISA unveils 2030 strategy for national cyber defense

Sources