CISA 2030 targets OT modernization, asset visibility, supply chain security through risk-based critical infrastructure defense – Industrial Cyber

CISA 2030 targets OT modernization, asset visibility, supply chain security through risk-based critical infrastructure defense The U.S. Cybersecurity and Infrastructure Security Agency released a new strategy that shifts the nation’s cyber defense from passive measures to finding and removing adversaries already inside critical infrastructure networks. Titled ‘CISA 2030: Defend, Harden, Prevail,’ the document supports the Cyber Strategy for America and the National Resilience Strategy. It calls for concentrating resources on systems whose disruption would most damage national security and the economy. The strategy rests on three pillars: leading national cyber defense, prioritizing national infrastructure security and mobilizing national resilience. CISA said it reflects the growing overlap of cyber, physical and geopolitical threats to essential services.

CISA set out a timeline for putting the strategy into practice. Within 60 days, the agency will begin a programmatic review of its core services and capabilities to ensure they support its key objectives. Within 180 days, it will deliver an approach for implementing and measuring outcomes aligned with its guiding pillars and key objectives. Within 365 days, CISA will provide an update on its progress in implementing the strategy. Operational technology (OT) security is a central objective under the first pillar. CISA said it will work with infrastructure owners, operators and other public and private partners to modernize OT environments, improve asset visibility and