Our Strategic Intent In alignment with the 2023 National Cybersecurity Strategy and the Fiscal Year 2023 – 2025 CISA Strategic Plan, this CISA Cybersecurity Strategic Plan describes how we will execute our cybersecurity mission and advance our cybersecurity capabilities. Within CISA, this Plan will serve as a keystone for implementation, resource, and operational planning, as further executed through our Annual Operating Plans. Externally, it will help stakeholders understand and participate in our long-term cybersecurity planning and prioritization. OUR MISS ION IS WEL L - SUM M A R IZ E D IN TH E N ATI O N A L S TR ATE GY: “Defending the systems and assets that constitute our critical infrastructure is vital to our national security, public safety, and economic prosperity … We aim to operationalize an enduring and effective model of collaborative defense that equitably distributes risk and responsibility and delivers a foundational level of security and resilience for our digital ecosystem.” TH IS IS OUR NORTH S TA R . As we implement our Strategic Plan, changes to the threat and technology environments may require periodic re-evaluation of strategic priorities. However, the fundamental security shifts toward which we will drive, and the long-term investments defined by this Plan will endure. C I S A C Y B ER S EC U RI T Y ST R AT EG I C PL A N 3

Select target paragraph3