CISA Sets New Critical Infrastructure Defense Priorities
The agency plans to identify malicious network access earlier, strengthen essential systems and improve coordination during disruptions.
- By Chelsey Arries
- Oct 26, 2026
Critical infrastructure security, earlier detection of malicious network access and continuity of emergency communications are central to a new strategy released by the Cybersecurity and Infrastructure Security Agency (CISA).
The strategy, CISA 2030, calls for a more proactive approach to finding and removing attackers from infrastructure networks. It also prioritizes systems whose disruption could threaten national security, economic activity or public health and safety.
The framework organizes the agency’s work around three areas: cyber defense, infrastructure protection and national resilience. It addresses the connections between digital systems and physical infrastructure, recognizing that threats affecting either can interrupt essential services.
CISA plans to work with government agencies and private organizations to improve operational technology security, strengthen software protections and support the secure use of emerging technologies. The agency also intends to improve how it evaluates risks and coordinates responses with partners.
Emergency communications are another priority. The strategy reinforces CISA’s responsibility, delegated by the Department of Homeland Security, to help establish and restore communications needed to sustain government operations and public safety during crises.
Implementation will proceed through several milestones. Within 60 days of the strategy’s release, CISA plans to begin assessing its principal services and capabilities. An implementation plan with measures for evaluating results is due within 180 days, followed by a progress report within a year.
About the Author
Chelsey Arries is assistant editor of Security Today, Campus Security Today, Occupational Health & Safety and Environmental Protection Online.