Following years of shifting responsibilities and goals, the Cybersecurity and Infrastructure Security Agency announced a new plan for the organization which prioritizes resilience and a more aggressive stance.

While the agency’s core mission of working to secure systems across government, infrastructure and commerce remains unchanged, key areas of improvement have been pointed out such as supply chain security and threat intelligence sharing operations.

Resilience also plays a role in the agency’s new plans, with a CISA representative admitting that ultimately disruptions are inevitable and that an organization’s ability to respond and recover from an incident is vital, in addition to working to prevent such an event from taking place altogether.

These moves follow years of changes and the loss of cooperative relationships with industry groups, placing CISA in an unenviable position as threats from both other nations and unaffiliated hacker groups continues to grow.  Despite this, the agency’s new plan is a promising move, and hopefully one that succeeds.