{"id":48729,"date":"2022-10-03T00:00:00","date_gmt":"2022-10-03T00:00:00","guid":{"rendered":"urn:uuid:757c081a-0ef1-88df-fbea-85cf7f5d4e63"},"modified":"2022-10-03T00:00:00","modified_gmt":"2022-10-03T00:00:00","slug":"cisa-gov-23-25-plan-focuses-on-unified-cybersecurity","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/cisa-gov-23-25-plan-focuses-on-unified-cybersecurity\/","title":{"rendered":"CISA Gov: ’23-25 Plan Focuses on Unified Cybersecurity"},"content":{"rendered":"

<\/p>\n

<\/div>\n

Breakdown of CISA Strategic Plan Goals & Objectives<\/span><\/p>\n

A strategy is a Litmus test for evaluating alternate plans or a guide for investing scare resources. This document plan does not meet those requirements. Instead, it lists a set of noble aspirations and goals.<\/p>\n

Goal 1: Cyber Defense, and Goal 2: Risk Reduction and Resilience, are core to CISA\u2019s mission to protect critical infrastructure. Goal 3: Operational Collaboration and Goal 4: Agency Unification, speak to the challenges CISA faces among its peer agencies and internally.<\/p>\n

While information on how the CISA will accomplish the goals is lacking, there are high level indicators for assessing success. From a quality management perspective, the goals are not measurable, but every journey begins with a first step. Over time, if the goals incorporated in the document endure, the CISA will need to develop measurable ways to track performance against outcomes, tune procedures, and align management behavior to better achieve those goals.<\/p>\n

Effective quality management underpins the guidance this document offers. While the word appears twice, in Objective 3.3, \u201cStreamline Stakeholder Access to and Use of Appropriate CISA Programs, Products, and Services,\u201d the document asserts that the \u201cCISA will measure the quality and accessibility of Division Programs, products, and services.\u201d How that will be done, what measures of quality they will seek, remain undefined for now. It is possible to read too much into this statement, as it equates quality with accessibility \u2013 an important goal but an issue of much different scope.<\/p>\n

Goal 4 will help the CISA guide itself towards more effective performance against its mission. This is useful and important, but much remains. The organization will \u201ctranslate leadership vision into prioritized action\u201d and \u201cstrategically and transparently allocate resources to support efficient delivery across the entire CISA enterprise.\u201d In other words, a representative outcome of Objective 4.1 of the CISA Strategy, \u201cStrengthen and Integrate CISA Governance, Management, and Prioritization,\u201d will be a strategy.<\/p>\n

Objective 4.2: Optimize CISA Business Operations to be Mutually Supportive Across All Divisions speaks to the decades-long organizational silos instituted when the DHS was created. The goal of the DHS was to guide agencies to share information to identify threats collaboratively. The intelligence failures preceding 9\/11 include the FBI and CIA not sharing information between themselves or local law enforcement. DHS does not include the CIA, the FBI, or local law enforcement, but does bring together:<\/p>\n