Table of Contents Introduction 1 How Did We Get Here? 1 The Way Forward 2 Pillar I: Protect the American People, the Homeland, and the American Way of Life Secure Federal Networks and Information 6 6 6 Further Centralize Management and Oversight of Federal Civilian Cybersecurity 6 Align Risk Management and Information Technology Activities 7 Improve Federal Supply Chain Risk Management 7 Strengthen Federal Contractor Cybersecurity 7 Ensure the Government Leads in Best and Innovative Practices 8 Secure Critical Infrastructure 8 Refine Roles and Responsibilities 8 Prioritize Actions According to Identified National Risks 8 Leverage Information and Communications Technology Providers as Cybersecurity Enablers 9 Protect our Democracy 9 Incentivize Cybersecurity Investments 9 Prioritize National Research and Development Investments 9 Improve Transportation and Maritime Cybersecurity 9 Improve Space Cybersecurity 10 Combat Cybercrime and Improve Incident Reporting 10 Improve Incident Reporting and Response 10 Modernize Electronic Surveillance and Computer Crime Laws 11 Reduce Threats from Transnational Criminal Organizations in Cyberspace 11 Improve Apprehension of Criminals Located Abroad 11 Strengthen Partner Nations’ Law Enforcement Capacity to Combat Criminal Cyber Activity 11 Pillar II: Promote American Prosperity 14 Foster a Vibrant and Resilient Digital Economy 14 Incentivize an Adaptable and Secure Technology Marketplace 14 Prioritize Innovation 14 Invest in Next Generation Infrastructure 15 Promote the Free Flow of Data Across Borders 15 Maintain United States Leadership in Emerging Technologies 15 V