GOAL 1 Address Immediate Threats Today, it is too easy for malicious cyber actors to target American organizations. Our adversaries launch repeated campaigns against government agencies and critical infrastructure entities. Seemingly omnipresent vulnerabilities in widely used software and systems make these campaigns far too successful. In sum, too many American organizations are soft targets. To compound the challenge, we collectively lack visibility into the extent of adversary activity targeting our country. We must increase the costs borne by transgressors and increase friction for malicious activities by leading a national effort defined by speed and scale: when an adversary compromises an American network, they are rapidly detected and evicted before damage occurs; when an exploitable condition manifests, it is similarly detected and remediated before an intrusion takes place. No single organization can achieve this goal alone. We will lead a national effort toward collective defense, working shoulder-to-shoulder with federal government agencies, SLTT governments, the private sector, the security community, international allies, and others to make American networks a challenging and expensive target for our adversaries. C I S A C Y B ER S EC U RI T Y ST R AT EG I C PL A N 8