The US Cybersecurity and Infrastructure Security Agency (CISA) released its new strategy, CISA 2030: Defend, Harden, Prevail, in a press release dated 26 October 2026.

CISA says the strategy advances President Trump's Cyber Strategy for America and National Resilience Strategy and has three parts: Defend: Lead National Cyber Defense; Harden: Prioritize National Infrastructure Security; and Prevail: Mobilize National Resilience.

CISA says it will work with public- and private-sector partners to strengthen the security and resilience of operational technology, advance software security, support secure emerging technologies and improve continuity of National Security and Emergency Preparedness communications, and that, in alignment with the Cyber Strategy for America, it will move from a passive defence posture toward an aggressive, anticipatory stance focused on identifying, mitigating and reducing malicious access to critical infrastructure.

CISA Acting Director Nick Andersen said: "I call on every company and organization in the critical infrastructure community—from owners and operators to vendors and technology manufacturers—to act now." CISA sets out its priorities for the coming year: within 60 days it will begin reviewing its core services and capabilities, within 180 days it will provide a plan to implement the strategy and measure its results, and within 365 days it will report on its progress (source: CISA).

According to Help Net Security, the Defend pillar includes leading national analysis and coordination to secure new technologies, including superintelligence and quantum computing, and under Prevail CISA will equip advisors across its ten regional offices. Wire: Help Net Security (27 Oct).