GOAL 2 Harden the Terrain Today, CISOs and cybersecurity professionals across the country are arguing for adoption of stronger controls, investment in modern technologies, and deprecation of legacy IT. Too often, CISOs are losing this argument, to the detriment of cybersecurity and, at times, national security. Starting with the federal civilian executive branch, we must shift the balance of risk management and security investment decisions across the country. We will achieve this change by providing clear, actionable guidance, by using all available levers to influence risk decisions of organizational leaders, by providing best-in-class services that help “target rich, resource poor” entities address gaps in their security programs, and by continuously measuring the state of American cybersecurity to understand areas for needed focus and investment, all informed by our understanding of the adversaries. C I S A C Y B ER S EC U RI T Y ST R AT EG I C PL A N 13