Cybersecurity: CISA 2030 Strategy

The Cybersecurity and Infrastructure Security Agency (CISA) published its new strategy, “CISA 2030: Defend, Harden, Prevail,” which orients the agency’s planning and activities through 2030 around three pillars representing CISA’s priorities.

The strategy builds on the "Cyber Strategy for America," the White House’s overarching policy architecture for cybersecurity and resilience (see KPMG Regulatory Alert here), and the National Resilience Strategy.

The three pillars of CISA’s strategy include: Pillar 1 - “Defend”: Detecting, disrupting, and mitigating cyber threats.

CISA outlines a phased process for implementing the strategy: Within 60 days (approximately December 25, 2026), begin a programmatic review of its core services and capabilities.

Analyzing infrastructure data to develop the National Risk Register and to prioritize and quantify risk.