CISA 概述了快速应对网络和基础设施威胁的内部计划
原文：CISA outlines internal plan to swiftly address cyber, infrastructure threats
英文正文：点「译成中文」可整篇机器翻译（免费通道，不花钱），翻好永久缓存、下次秒开。
对机构工作人员的指导使用军事和情报规划中熟悉的术语，概述了高级官员需要了解的重大风险、国家准备情况和 CISA 的应对能力。
Nick Andersen, acting director of the Cybersecurity and Infrastructure Security Agency, testifies during a House Homeland Security Committee hearing in Washington, D.C., on Wednesday, March 25, 2026.
Ha Nguyen McNeill, left, acting Transportation Security Administration administrator, and Victoria Barton, Associate Administrator, Office of External Affairs, FEMA, also appeared before the panel. Tom Williams/CQ-Roll Call, Inc via Getty Images
CISA outlines internal plan to swiftly address cyber, infrastructure threats
Guidance to agency staff outlines what senior officials need to know about major risks, national preparedness and CISA’s ability to respond, using terminology familiar in military and intelligence planning.
|
By David DiMolfetta Cybersecurity Reporter, Nextgov/FCW
The Cybersecurity and Infrastructure Security Agency circulated an internal framework last week intended to help senior officials assess cybersecurity threats and act before crisis erupts, according to an internal email viewed by Nextgov/FCW .
In a Nov. 5 email to CISA staff, acting Director Nick Andersen outlined what he says agency leaders need to know to assess risks and make timely decisions. The unclassified message, marked “For Official Use Only,” aimed to help them “cut through the noise."
The framework sets out six “operational focus areas” that include assessing national risk, warding off major cyber threats, preparing for serious incidents, helping critical infrastructure withstand disruptions, and coordinating with partners.
Its “critical information requirements” spell out what senior officials need to know to make decisions. Those include major changes in risk, serious threats and incidents and impacts on nationally significant infrastructure. They also cover how prepared the country is, how efforts are coordinated and whether CISA has the capacity to carry out its mission.
A separate set of “priority intelligence requirements” identifies questions that intelligence work can help answer. These include how changing conditions affect critical infrastructure, what warning signs could point to serious risks and where and how hackers are operating against U.S. and allied computer networks and industrial systems.
Those questions also cover how cyber and physical risks are managed, along with supply chains and production capabilities.
Such terminology has had longstanding uses in military and intelligence planning. Priority intelligence requirements, or PIRs, help focus intelligence collection and analysis on the questions leaders consider most important. Military commanders also establish commander’s critical information requirements, or CCIRs, to identify information essential to timely decisions.
The broad priorities echo the agency’s CISA 2030 strategy released last month, which calls for using threat intelligence and analyzing the potential consequences of disruptions to guide where assistance and investment should go. That strategy also emphasizes protecting industrial technology, improving threat alerts and coordinating more closely with intelligence agencies and infrastructure operators.
The agency will roll out additional guidance in the coming months to help divisions across the cyberdefense shop adopt the priorities, Andersen said in the email.
“Publishing our initial CIRs is the starting point of a deliberate, requirements-driven approach to our mission,” he wrote.
Andersen issued the guidance less than a week before President Donald Trump nominated Michael LoSapio , Palantir’s chief information security officer, to lead CISA on Monday. If confirmed, LoSapio would inherit an agency in the midst of rebuilding after cuts over the last two years have reduced its workforce by roughly a third. The agency has been without a Senate-confirmed director since January 2025 when Trump retook office.
NEXT STORY: Blue wave presages a defense-spending showdown
Back to topNews, analysis, and ideas driving the future of U.S. defense: straight to your inbox. Sign up for Defense One Today Privacy Policy
Almost There! Help us tailor content specifically for you: More from Defense One Privacy Policy
正文由本站服务器抓取保存（已自动过滤广告、推荐位与追踪图片），排版与原站可能不同；版权归原站所有。