PILLAR 1 – RISK IDENTIFICATION DHS must understand the global cybersecurity landscape and associated risks at the strategic level to effectively allocate our resources and prioritize departmental efforts to address vulnerabilities, threats, and consequences across all of our cybersecurity activities. Goal 1: Assess Evolving Cybersecurity Risks We will understand the evolving national cybersecurity risk posture to inform and prioritize risk management activities. For DHS to effectively execute our mission in the long-term, we must work with stakeholders, including sector-specific agencies, nonfederal cybersecurity firms, and other federal and nonfederal entities, to gain an adequate understanding of the national cybersecurity risk posture, analyze evolving interdependencies and systemic risk, and assess changing techniques of malicious actors. Objective 1.1: Maintain strategic awareness of trends in national and systemic cybersecurity risks. Understanding trends in threats, vulnerabilities, interdependencies, and potential consequences over time will allow DHS to prioritize our protective, investigative, and response activities, and to plan and budget appropriately. DHS must also take stock of gaps in national analytic capabilities and risk management efforts to ensure a robust understanding of the effectiveness of cybersecurity efforts. We must anticipate the changes that future technological innovation will bring, ensure long-term preparedness, and prevent a “failure of imagination.” Sub-Objectives: a. Identify evolving cybersecurity risks that affect national security, public health and safety, and economic security. b. Identify and develop plans to address gaps in analytic capabilities and risk management efforts across DHS and national cybersecurity stakeholders. c. Develop scenarios and plans for future technology developments and potentially disruptive innovations and adjust DHS efforts accordingly. Outcomes: DHS understands national and systemic cybersecurity risks and regularly adjusts our program and policy efforts to account for evolving technologies and operational priorities. 7