CISA looks to global collaboration as fraught US election begins By: Alex Scroxton

The United States’ Cybersecurity and Infrastructure Security Agency (CISA) this week launched a two-year International Strategic Plan – its first ever – aligning with domestic plans and policies and focusing on organisations beyond the US’ borders to strengthen security and resilience.

The agency said that the risks faced by US federal agencies, state and local governments, other public sector bodies, and operators of critical national infrastructure (CNI) were complex, geographically distributed and did not abide by borders, requiring the concerted efforts of industry and partner agencies, such as the UK’s National Cyber Security Centre (NCSC), all over the world.

“In following this plan, CISA will improve coordination with our partners and strengthen international relationships to reduce risk to the globally interconnected and interdependent cyber and physical infrastructure that Americans rely on every day,” said CISA director Jen Easterly.

The International Strategic Plan focuses on three core pillars:

Improving the resilience of global infrastructure on which the US depends;

Strengthening integrated cyber defences;

And unifying agency coordination of activities beyond the US.

It also hopes to help do more to prevent incidents, disrupt threats and reduce systemic risk; improve global awareness and understanding of dependencies; influence international policy, standards and best practice; help key partners address cyber capability shortfalls; and expand bilateral and multilateral exchanges of expertise.

Emily Phelps, director of Cyware , a threat intelligence specialist, commented: “CISA’s 2025-2026 International Strategic Plan underscores the urgency of an interconnected approach to securing critical infrastructure across borders.

“As cyber threats grow increasingly complex and far-reaching, swift, collaborative information-sharing becomes essential to mitigate risks that could impact not just a single nation but the global landscape. CISA’s commitment to bolstering the resilience of international assets and systems vital to US security reflects a forward-thinking acknowledgement of interdependencies in today’s cyber ecosystem,” she said.

Phelps welcomed the focus on strengthening integrated security defences and establishing clearer governance structures, describing them as a “strategic leap” towards a more cohesive approach to shared threats.

“This approach…can set a precedent for global cybersecurity initiatives, reinforcing that collective defence is the linchpin in navigating future cyber challenges,” she said.

CISA was established during the first administration of president Donald Trump in 2018 as a successor body to the National Protection and Programs Directorate (NPPD) within the Department for Homeland Security (DHS).

It ran afoul of Trump following the contested 2020 presidential election, when it rebutted his false claims that electronic voting systems were compromised, saying there was absolutely no evidence of this.

This incident cost founding director Christopher Krebs his job , but CISA has rebounded under president Biden with new leadership, although US lawmakers have expressed concerns that it may find its operations drastically cut back under a second Trump administration.

Regardless of its future, CISA is continuing to monitor and protect US election systems from malicious interference – which has usually come from nation-state actors.

This week, it launched a one-stop shop website under the auspices of its ongoing #Protect2024 project , to provide US citizens with information on cyber threats and disinformation surrounding the Tuesday 5 November poll.

Some of its recent work on election includes the disruption of a Russian deepfake disinformation campaign in the form of a video that appeared to depict an individual destroying paper ballots in the state of Pennsylvania. The material has been thoroughly debunked.

“This Russian activity is part of Moscow’s broader effort to raise unfounded questions the integrity of the US election and stoke divisions among Americans, as detailed in prior ODNI [Office of the Director of National Intelligence] election updates,” a spokesperson for CISA said.

“In the lead up to election day and in the weeks and months after, the IC expects Russia to create and release additional media content that seeks to undermine trust in the integrity of the election and divide Americans.”

CISA director Jen Easterly emphasised at Black Hat 2024 that election stakeholders cannot be complacent because ‘the threat environment has never been so complex ’.

CISA and partners released a cyber security advisory regarding threat actors, such as Pioneer Kitten and UNC757, some of which have ties to the Iranian government .

CISA executive director Brandon Wales speaks with TechTarget Editorial to CIRCIA and the importance of incident reporting to the larger cyber security ecosystem .

US CISA agency extends Iran cyber alert, warns of CNI threat By: Alex Scroxton

US cyber agency CISA faces stiff budget cuts By: Alex Scroxton

Microsoft calls on Trump to ‘push harder’ on cyber threats By: Alex Scroxton

Industry groups express concern over proposed CIRCIA reporting requirements By: Jill Hughes

CIOs looking for ways to say yes to the iPad in the enterprise CIOs are looking for ways to say yes to the iPad in the enterprise, despite the technological and cultural challenges associated ...

CIOs are looking for ways to say yes to the iPad in the enterprise, despite the technological and cultural challenges associated ...

What CISOs should take from the Hugging Face-OpenAI incident Security experts say the lesson isn't to abandon sandboxing, but to strengthen the security controls around surrounding systems ...

Security experts say the lesson isn't to abandon sandboxing, but to strengthen the security controls around surrounding systems ...

Red agents vs. blue agents: How to make AI better at defense The agentic AI playing field was heavily tilted toward offense, so researchers began using red team agents to help teach their ...

The agentic AI playing field was heavily tilted toward offense, so researchers began using red team agents to help teach their ...

When AppSec scanners become a supply chain attack vector New research shows how security scanners embedded in the software supply chain can be attacked to serve as a foothold for ...

New research shows how security scanners embedded in the software supply chain can be attacked to serve as a foothold for ...

5G Quiz - Can you speak 5G? -generation 5G wireless technology will offer faster speeds and increased capacity. Do you speak the language well enough to ...

-generation 5G wireless technology will offer faster speeds and increased capacity. Do you speak the language well enough to ...

5G expansion is coming, but where will operators reap profits? In this recap of industry blogs, networking pundits examine the profit potential of 5G expansion, responsible use of AI and some ...

In this recap of industry blogs, networking pundits examine the profit potential of 5G expansion, responsible use of AI and some ...

5G, cloud embolden network outsourcing and ultimate virtualization Could the cloud, 5G, small cell technology, BYOD and carrier-provisioned networks completely virtualize network infrastructure? ...

Could the cloud, 5G, small cell technology, BYOD and carrier-provisioned networks completely virtualize network infrastructure? ...

Distributed computing: The infrastructure shift AI demands The hyperscale era is ending. AI's energy and latency demands are driving infrastructure toward the edge -- closer to users, ...

The hyperscale era is ending. AI's energy and latency demands are driving infrastructure toward the edge -- closer to users, ...

Why and the NSA love graph databases Graph databases play six degrees of separation to find real connections. See how IT teams can use the database approach for ...

Graph databases play six degrees of separation to find real connections. See how IT teams can use the database approach for ...

DevOps and Agile IT save mainframe training from skills quagmire The problem isn't that new hires aren't familiar with the complex, custom daily tasks of mainframe ops. The problem is that ...

The problem isn't that new hires aren't familiar with the complex, custom daily tasks of mainframe ops. The problem is that ...

HR makes major strides toward improving employee engagement

Cloud vs. legacy ERP systems: Tug of war intensifies for SMBs Aging legacy ERP systems at SMBs seem to be getting plenty of scrutiny these days. Heightened consumer demands, shifting ...

Aging legacy ERP systems at SMBs seem to be getting plenty of scrutiny these days. Heightened consumer demands, shifting ...

Develop smart AI in CRM strategies to win and keep customers Of the three words that comprise customer relationship management , one word binds the other two. As necessity and ...

Of the three words that comprise customer relationship management , one word binds the other two. As necessity and ...