APPENDIX 2 Alignment with the National Cybersecurity Strategy NAT IONAL CY BE RS ECURIT Y STRATEGY PILLAR T HR EE | SH A PE MA RKET FO RC E S TO DRI VE SEC URIT Y A ND RES IL IE N C E C I S A CY B ERSEC URIT Y ST R AT EGI C PL A N O B JEC T I V E S 2.1. Understand how attacks really occur — and how to stop them 3.4. Use federal grants and other incentives to build in security 2.2. Drive implementation of measurably effective cybersecurity investments 2.3. Provide cybersecurity capabilities and services that fill gaps and help measure progress 3.3. Contribute to efforts to build a national cyber workforce 2.1. Understand how attacks really occur — and how to stop them 3.5. Leverage federal procurement to improve accountability 2.2. Drive implementation of measurably effective cybersecurity investments 3.1. Drive development of trustworthy technology products 3.6. Explore a federal cyber insurance backstop NAT IONAL CYBERS ECURIT Y STRATEGY PILLAR FOUR | INVES T IN A RESILIE N T FUTURE 2.1. Understand how attacks really occur — and how to stop them 2.2. Drive implementation of measurably effective cybersecurity investments C I S A CY B ERSEC URIT Y ST R AT EGI C PL A N O B JEC T I V E S 1.3. Plan for, exercise, and execute joint cyber defense operations and coordinate the response to significant cybersecurity incidents 4.1. Secure the technical foundation of the internet 2.2. Drive implementation of measurably effective cybersecurity investments 3.1. Drive development of trustworthy technology products 3.2. Understand and reduce cybersecurity risks posed by emergent technologies C I S A C Y B ER S EC U RI T Y ST R AT EG I C PL A N 30

Select target paragraph3