The National Cybersecurity Strategy is a mandate for change in a changed world \u2013 a shot across the bow acknowledging that modern digital infrastructure is increasingly interconnected and vulnerable to cyber threats. <\/p>\n\n\n\n
It builds on the President\u2019s Executive Order 14028, which includes several provisions to increase our nation\u2019s security.<\/p>\n\n\n\n
The NCS acknowledges that our cybersecurity posture and supply chain are too complex and important to be left to any single business, government agency, person, or organization. It is intended to disrupt threat actors and their methods \u2013 such as ransomware, a borderless cyber crime requiring international cooperation to combat. <\/p>\n\n\n\n
Recent research shows a 37% increase in global ransomware attacks, with the U.S. as the most affected country. Working across the public and private sectors and with our allies, we need collective approaches that reduce cyber risk and promote national security and global stability. The U.S. is making progress. The National Cybersecurity Strategy Implementation Plan was built with contributions from the public and private sectors and emphasizes collaboration between government agencies, international partners, and the private sector throughout, bringing in a whole-of-society mindset. <\/p>\n\n\n\n
The Cybersecurity and Infrastructure Security Agency\u2019s 2024-2026 Cybersecurity Strategic Plan is a prime example of an agency mobilizing plans to meet the NCS requirements. Notably, CISA will work with partners to gain visibility into the breadth of intrusions targeting the U.S., disrupt\/mitigate threat actor campaigns, and accelerate mitigation of exploitable conditions.<\/p>\n\n\n\n
We are also making progress establishing a foundation for continuous collaboration. CISA\u2019s Joint Cyber Defense Collaborative has reduced risk to the cyber ecosystem and critical infrastructure by increasing visibility into threats worldwide, strengthening industry and government communication, and fostering initiatives, like updates to the Known Exploited Vulnerabilities Catalog and developing the Geopolitical Tensions Cyber Defense Plan. <\/p>\n\n\n\n
Additionally, the NIST Cybersecurity Center of Excellence, uses experts from industry, government, and academia to generate new ideas and guidance \u2013 like a draft practice guide on \u201cImplementing a Zero Trust Architecture.\u201d<\/p>\n\n\n\n
But risk to critical infrastructure, our business, and societies continues to evolve. To maximize cyber resiliency, the U.S. (and our allies) must go beyond requesting information to actively engage industry for second and third-order effect considerations that can be incorporated into strategies, programs, and funding.<\/p>\n\n\n\n
\u00b7 Continuously work with private sector partners on cutting-edge technologies and research and development (R&D) programs on all levels \u2013 threat identification, mitigation, and solution development to maximize agility and accelerate cyber resiliency <\/p>\n\n\n\n
\u00b7 Leverage industry cyber investment. Programs like FedRAMP, StateRAMP, TIC 3.0, CDM, and Protective DNS capitalize on private sector knowledge and resources, circumventing constantly developing new processes and programs<\/p>\n\n\n\n
\u00b7 Prioritize implementing cyber best practices, solutions, and guidance; recommendations are useless if not applied to ongoing work<\/p>\n\n\n\n
\u00b7 Increase collaboration across the private and public sectors, including agency-to-agency and global government-to-government<\/p>\n\n\n\n
\u00b7 Strengthen supply chain security and transparency. Much of our critical infrastructure is privately owned, sharing threat information and embracing CISA\u2019s secure-by-design guidance further ensures the security and reliability of our international supply chain<\/p>\n\n\n\n
\u00b7 Invest in novel approaches to attracting and training the global cyber workforce and support knowledge exchange with the government<\/p>\n\n\n\n
\u00b7 Prioritize cybersecurity R&D to increase the use of advanced security measures such as zero trust that strengthen organizational security and protect cloud migration<\/p>\n\n\n\n
\u00b7 Share lessons learned from fielding and securing new technologies with government agencies so the U.S. is armed with the latest capabilities<\/p>\n\n\n\n
Funding is the other obvious critical component. While the Administration\u2019s cyber budget priorities align with the NCS, agencies need dedicated funding \u2013 which is not available today. The Technology Modernization Fund (TMF) and State and Local Cybersecurity Grant Program show how targeted funding programs can propel cybersecurity initiatives across different levels of government. <\/p>\n\n\n\n
As TMF and SLCGP solidify cyber security postures governmentwide, there are no similar commercial programs to spur this level of cybersecurity maturity yet. <\/p>\n\n\n\n
\u00b7 Determine initial security needs and resource those appropriately within a company\u2019s fixed budget <\/p>\n\n\n\n
\u00b7 Understand and follow the Office of Management and Budget\u2019s Zero Trust Strategy and CISA\u2019s Zero Trust Maturity Model to apply best practices already in-use by the government <\/p>\n\n\n\n
\u00b7 Utilize CISA\u2019s free services and tools to test and assess solutions for better cyber investment decision-making<\/p>\n\n\n\n
Meanwhile, agencies should align budgets according to the NCSIP\u2019s timelines, and also procure capabilities supporting established, highly effective programs including FedRAMP, StateRAMP, TIC 3.0, CDM, and Protective DNS \u2013 with a mindset of quality over quantity. <\/p>\n\n\n\n
Federal agencies and private sector partners must work together to educate Congress and the Administration on evolving threats and where increased funding is vital to maintain national security and global competitiveness for us and our allies. <\/p>\n\n\n\n
Stephen Kovac is the vice president and chief compliance officer at Zscaler, where he leads efforts to advance federal IT modernization. <\/i><\/p>\n","protected":false},"excerpt":{"rendered":"
Recent research shows a 37% increase in global ransomware attacks, with the U.S. as the most affected country.<\/p>\n","protected":false},"author":7,"featured_media":74443,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"_yoast_wpseo_meta-robots-noindex":"","_yoast_wpseo_meta-robots-nofollow":"","_yoast_wpseo_canonical":"","_acf":"","_yoast_wpseo_primary_category":26,"_jetpack_feature_clip_id":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","_smg_distribution_targets":[]},"categories":[31,33,26],"tags":[],"coauthors":[5905],"class_list":["post-25750","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-home","category-newsletters","category-opinions"],"acf":{"subheadline":"","legacy_arc_id":"GMSIDPMSOVARPBVE3Q4U6WGT7Y","arc_canonical_url":"\/opinions\/2023\/09\/08\/achieving-the-national-cyber-strategy-hinges-on-joint-collaboration\/","remove_feature_photo":false,"is_sponsored":false,"subtype":"","redirect_url":"","disable_inline_ads":false,"native_logo_pretext":"Presented By:"},"yoast_head":"\n