CISA advisory committee approves four draft reports on critical infrastructure resilience

CISA’s Cybersecurity Advisory Committee approved four draft reports recommending actions to strengthen critical infrastructure resilience, encourage adoption of CISA’s secure-by-design initiative, improve strategic communications, and mitigate risks in the open-source software supply chain; the reports warn of nation-state threats—particularly Chinese state-sponsored actors using “living off the land” techniques—and propose measures such as joint resilience planning, studies on breach impacts, and accountable intermediaries for open-source risk.