U.S. CISA Goes Global with First International Strategic Plan

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has taken a significant step forward by introducing its first international strategic plan in an effort to help contain cyber threats that continue to transcend national borders. The initiative recognizes that protecting America's digital infrastructure requires robust global collaboration.

The launch of the international strategic plan reflects the evolving nature of cybersecurity challenges. Modern cyber threats don't respect geographical boundaries—a ransomware attack originating in one country can quickly impact organizations worldwide. This interconnected reality demands coordinated international response and prevention strategies.

To effectively marshal its resources and guide operations, CISA issued the?2023-2025 CISA Strategic Plan, the agency's first comprehensive strategic plan since CISA's establishment in 2018. In recognition of the reality that today's threats transcend borders, CISA developed its International Strategic Plan as a complementary guide for the agency's international activities and outcomes.

Through the goals and objectives outlined in the CISA International Strategic Plan—in coordination with the Department of Homeland Security (DHS), the Department of State, and partners across the interagency, and in accordance with U.S. national security, economic, and foreign policy priorities—CISA will assess and prioritize critical infrastructure dependencies and partner with foreign entities to advance CISA's homeland security mission.

"In following this plan, CISA will improve coordination with our partners and strengthen international relationships to reduce risk to the globally interconnected and interdependent cyber and physical infrastructure that Americans rely on every day," CISA Director Jen Easterly said in a press release.

The nine-point plan aims to build, strengthen, and sustain international relationships to:

1. Advance homeland and national security objectives 2. Prevent incidents and increase resilience of physical and cyber critical infrastructure at home and abroad 3. Increase awareness to detect, deter, and disrupt emerging threats and hazards 4. Manage and reduce systemic risks 5. Increase understanding of international critical infrastructure interdependencies and anticipate cascading impacts 6. Influence international policy, standards, and best practices 7. Assist key partners to address their capability shortfalls 8. Expand bilateral/multilateral exchanges of expertise, in tandem with increased federal inter- and intra-agency coordination, to improve risk management and incident response capacity 9. Mature and strengthen CISA's international partnerships, arrangements, and policies

According to the new plan's executive summary, the CISA International Strategic Plan goals are:

Goal 1: Bolster the Resilience of Foreign Infrastructure on Which the U.S. Depends

Recognizing that much of U.S. critical infrastructure interconnects and/or is interdependent with foreign assets, systems, or networks, CISA will work closely with domestic and international partners to bolster the security and resilience of the international critical infrastructure on which the U.S. depends. These interconnections and interdependencies span the full range of critical infrastructure sectors: pipelines, telecommunications, and essential supply chains, among others. Malicious cyber actors continue to exploit vulnerabilities across these sectors to target critical infrastructure through ransomware and other cyberattacks.

Goal 2: Strengthen Integrated Cyber Defense

Cybersecurity threats extend beyond national borders. Strong international cyber defense partnerships set conditions that reduce risk and minimize the impact of attempts to infiltrate, exploit, disrupt, or destroy critical infrastructure systems that support our national critical functions (NCFs). Engaging international partners allows CISA to build trust, illuminate threats, and facilitate the free flow of cybersecurity defense information.?

Goal 3: Unify Agency Coordination of International Activities

An effective international plan depends on unity of effort across the agency's divisions and mission enabling offices. Accomplishing unity of effort will require that CISA internally prioritizes, coordinates, deconflicts, and aligns international activities through improved organization and governance, integrated functions, and a well-trained workforce.

"These goals position CISA strategically with a posture that reinforces critical partnerships abroad to overcome complex and interconnected challenges," according to the plan. "The strategic approach aligns CISA with the broader U.S. government as well as our international partners to enable access, develop capacity, and ensure the flexibility to support national efforts to compete globally against state and non-state actors."

Source: SecureWorld | Cam Sivesind

There are two ways to see cybersecurity: as a source of vulnerability, risk, and expense – or as a driver of transformation. The difference is the confidence you have in the resilience of your approach. Capgemini delivers the most elusive element in cybersecurity today: confidence. They bring together a business-focused approach, sector-specific expertise, advanced technology, and thousands of skilled professionals to deliver end-to-end portfolio services.