CISA publishes four-year strategy under Trump alignment
The "CISA 2030" plan reaffirms existing roles but launches a 60-day capability review, critics say the agency is already understaffed from prior cuts.
TL;DR
CISA released "CISA 2030: Defend, Harden, Prevail," a 10-page strategy Monday that largely reaffirms the agency's existing cyber defense and critical infrastructure roles. Acting Director Nick Andersen frames it as alignment with the Trump administration's March cyber strategy and last year's executive order on state and local preparedness. The agency will begin reviewing core services and capabilities within 60 days, followed by 180 days of implementation and a one-year progress update. Critics, however, say budget cuts under the Trump administration have already diminished CISA's capacity, including in areas the strategy highlights.
The three pillars are familiar: defend (lead national cyber defense), harden (prioritize critical infrastructure security), and prevail (mobilize national resilience). Under each, CISA lists objectives, integrating state and local cyber defense, protecting operational technology, coordinating intelligence for critical infrastructure, strengthening communications interoperability, and investing in resilience, among others. The structure echoes the 2023 strategic plan's three goals of addressing immediate threats, hardening the terrain, and driving security at scale, though the rhetoric has shifted from the Biden-era "rebalance responsibility" framing to Andersen's emphasis on resilience and rapid eviction of adversaries.
Andersen's foreword is blunt about the threat model: "there is no guarantee that a strong defense will eliminate intrusions." The posture is detect, evict, keep running. He invokes President Trump's view that resilience must be the foundation and calls on critical infrastructure owners, operators, vendors, and manufacturers to "act now."
The capability review that begins within 60 days is the operational hook. It's meant to determine whether existing services and capabilities actually serve the new strategy's objectives. That's a legitimate question, critics, as CyberScoop notes, say much of CISA has been badly diminished by Trump administration budget cuts, leaving it understaffed in several areas the strategy now flags as priorities. The review will either surface those gaps or paper over them. The one-year progress update will tell which.
Published ·Deep Fathom