PILLAR V – ENABLE CYBERSECURITY OUTCOMES DHS must enable improved cybersecurity risk management outcomes by supporting policy and operational efforts that make the entire cyber ecosystem more secure and reliable. These efforts help shift the advantage away from malicious cyber actors toward those protecting cyberspace. DHS must similarly look internally to align our efforts to maximize cybersecurity outcomes. Goal 6: Strengthen the Security and Reliability of the Cyber Ecosystem We will support policies and activities that enable improved global cybersecurity risk management. A more fundamentally secure cyber ecosystem can help tip the balance toward those protecting networks and away from malicious cyber actors. Strengthening the security and reliability of the cyber ecosystem therefore enables risk management and sets the conditions to support other DHS strategic cybersecurity goals. The cyber ecosystem includes not only the interconnected network of information technology infrastructure we call cyberspace, but also the people, environment, norms, and conditions that influence that network. DHS must support efforts globally that will result in fundamentally improved security outcomes through technological innovation as well as the widespread adoption of improved operational and policy frameworks. DHS must also invest in research and development efforts that support mission objectives. So, too, must DHS develop collaborative communities, build global partnerships, and participate in international and multi-stakeholder venues to advance positive developments in cybersecurity and to impose costs for unacceptable behavior in cyberspace. To create a pipeline to support our cybersecurity goals, DHS must accelerate the expansion of cyber personnel programs. Objective 6.1: Foster improved cybersecurity in software, hardware, services, and technologies, and the building of more resilient networks. DHS must support efforts to identify and develop high-leverage technical, operational, and policy innovations that will result in more secure technologies and resilient networks. Many of today’s greatest challenges are endemic to the current ecosystem. Nearly all cyber incidents, for example, involve exploitation of vulnerabilities or misconfigurations in software or hardware. Network operators are also increasingly dependent on vendors of commercial off-the-shelf products or integrators of commercially available products, and lack the capability to effectively manage supply chain risks. The continued globalization of the information technology supply chain and shifting of information and services to cloud or other shared infrastructure introduces additional risks. As Internet-connected and other new technologies rapidly proliferate, the number of attack vectors also increases. Developers and manufacturers of many internet-of- 22