Conclusion The next three years will set a new course for CISA and for national cybersecurity. It is a bold and expanded path, but this work is essential to a safe and secure cyberspace for all Americans. Given the untenable cyber risks our country, our businesses, and our communities face, we have no other choice. Together with our partners, we hope to look back on 2023 as the point when the trajectory of national cybersecurity risk began to change for the better. Through the implementation of this strategy, we will first focus our efforts and energy to ensure our core cybersecurity functions are executed to the greatest effect. We must get the fundamentals right. We will optimize our cyber defense operations to identify, prevent, and address acute threats and vulnerabilities, and mitigate incidents more quickly. We will provide innovative shared services to directly address risks as well as actionable and practical guidance that helps defenders prioritize investments to address the most likely and impactful threats. But we know this is not enough. We will drive progress toward a future where technology is purposely designed, built, tested, and maintained to significantly reduce the number of exploitable flaws before it is introduced to the market for broad use. We will take steps to shift the burden for security to those who can bear it. And we will do to it together. The risks are severe and mounting, the hurdles are high. But they are surmountable. Through our shared efforts, we will shift the arc of national risk and create a safer future for generations to come. C I S A C Y B ER S EC U RI T Y ST R AT EG I C PL A N 23