The CISA released CISA 2030: Defend, Harden, Prevail on Oct 26, committing the agency to move from passive defense to an “aggressive, anticipatory” stance built on three pillars: leading national cyber defense, prioritizing infrastructure security and mobilizing national resilience. The Defend pillar calls for modernizing operational technology, improving asset visibility and anomaly detection, and strengthening supply chain integrity.
Jason Brown, Director of Customer Advisory Counter Fraud Lead, iCOUNTER
“CISA 2030 is an honest strategy. It accepts that intrusions will happen and commits the agency to an anticipatory stance. Detect adversaries early, evict them decisively, and remove footholds before they are weaponized. That is exactly the right goal.
The gap is the third party. The strategy treats supply chain as a question of technology and software integrity, but adversaries are not waiting for a flawed product. They are compromising the service providers, platforms, and partners that organizations already trust, and using that access to reach the real target. Verizon’s 2026 Data Breach Investigations Report found third parties involved in 48% of breaches, up from 30% a year earlier.
CISA is also asking for an intelligence to operations pipeline, and that is the right instruction. Intelligence that only informs is not enough. It has to drive action, with remediation attached, at machine speed. As CISA narrows its focus and pushes more action to the local level, owners and operators will carry more of that mission themselves. The organizations that extend it across their third party ecosystem will be the ones that stop the compromise before the incident reaches them.”
Everyone should take time to read it and doing all things possible to make sure that are not pwned by threat actors. Ever. Even with their staffing challenges.
Related
This entry was posted on October 27, 2026 at 1:32 pm and is filed under Commentary with tags CISA. You can follow any responses to this entry through the RSS 2.0 feed.
You can leave a response, or trackback from your own site.
The CISA’s new strategy promises to evict hackers before they strike, with nearly 968 fewer staff to do it
The CISA released CISA 2030: Defend, Harden, Prevail on Oct 26, committing the agency to move from passive defense to an “aggressive, anticipatory” stance built on three pillars: leading national cyber defense, prioritizing infrastructure security and mobilizing national resilience. The Defend pillar calls for modernizing operational technology, improving asset visibility and anomaly detection, and strengthening supply chain integrity.
Jason Brown, Director of Customer Advisory Counter Fraud Lead, iCOUNTER
“CISA 2030 is an honest strategy. It accepts that intrusions will happen and commits the agency to an anticipatory stance. Detect adversaries early, evict them decisively, and remove footholds before they are weaponized. That is exactly the right goal.
The gap is the third party. The strategy treats supply chain as a question of technology and software integrity, but adversaries are not waiting for a flawed product. They are compromising the service providers, platforms, and partners that organizations already trust, and using that access to reach the real target. Verizon’s 2026 Data Breach Investigations Report found third parties involved in 48% of breaches, up from 30% a year earlier.
CISA is also asking for an intelligence to operations pipeline, and that is the right instruction. Intelligence that only informs is not enough. It has to drive action, with remediation attached, at machine speed. As CISA narrows its focus and pushes more action to the local level, owners and operators will carry more of that mission themselves. The organizations that extend it across their third party ecosystem will be the ones that stop the compromise before the incident reaches them.”
Everyone should take time to read it and doing all things possible to make sure that are not pwned by threat actors. Ever. Even with their staffing challenges.
Share this:
Like this:
Related
This entry was posted on October 27, 2026 at 1:32 pm and is filed under Commentary with tags CISA. You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site.