Revisiting CISA Priorities for FY2026 and Beyond

This report outlines CISA’s 2025 priorities under new leadership, emphasizing refocusing on core missions—protecting .gov, coordinating critical infrastructure security and resilience, and promoting secure-by-design—amid staffing and budget constraints and the MS-ISAC shift to paid membership. It highlights a strategic emphasis on defending critical infrastructure in light of potential China-related conflict scenarios by 2027, notes strong demand for CISA’s free OT vulnerability scanning and risk assessments, and references guidance urging organizations to reduce internet exposure through asset assessment, necessity review, mitigation of exposed systems, and routine reassessment.