CISA sets out proactive strategy to defend critical infrastructure

The US Cybersecurity and Infrastructure Agency (CISA) has outlined an “aggressive, anticipatory” approach to safeguarding critical infrastructure, moving beyond what it labels a “passive defence.” In the new strategy document, CISA 2030: Defend, Harden, Prevail, published on 26 October 2026, the agency sets out how it intends to act more proactively—faster threat responses, closer collaboration with partners, and the building of more resilient systems.

Nick Anderson, acting director of CISA, emphasises that the threat landscape is dynamic and that resilience must underpin the response, with a stated aim to detect intrusions quickly, evict adversaries decisively, and keep essential operations running.

The strategy is designed to align with recent White House policy on cybersecurity. It references the national cyber strategy released in March 2026, which advocates government coordination, private sector partnerships, and investment in technology, including the use of offensive cyber operations and other measures to deter and dismantle criminal networks.

The article notes that in August 2026 President Trump announced that federal law enforcement agencies have been authorised to collaborate with private firms on offensive cyber strikes targeting foreign threat actors.

CISA’s three-pillar framework—Defend, Harden, Prevail—seeks to integrate government, industry, SLTT (State, Local, Tribal, and Territorial), and international partners. Defend focuses on lead national cyber defence and modernising OT environments and supply chains, Harden on real-time intelligence and resource prioritisation, and Prevail on resilient communications and emergency connectivity. The agency commits to an implementation plan within 180 days and a progress update within 365 days.