May 21, 2018 By David Bisson 2 min read

The Department of Homeland security (DHS) has a new plan to reduce software vulnerabilities, counter malicious actors, respond to incidents and build resiliency. The DHS released a national cybersecurity strategy on May 15, which focused on addressing the evolving digital threat landscape. The unveiled plan is part of the organization’s commitment to implement these cybersecurity responsibilities over the next five years.

DHS Cybersecurity: ‘A Historic Turning Point’

Kirstjen Michele Nielsen, the DHS secretary, explained that the new national cybersecurity strategy responds to changes in the threat landscape. She found the convergence of digital security with personal and private security particularly remarkable — calling this a “historic turning point” that necessitates a reevaluation of her department’s approach to cybersecurity.

“In an age of brand-name breaches, we must think beyond the defense of specific assets — and confront systemic risks that affect everyone from tech giants to homeowners,” Nielsen said in a DHS press release. “Our strategy outlines how DHS will leverage its unique capabilities on the digital battlefield to defend American networks and get ahead of emerging cyberthreats.”

5 Security Objectives of the DHS

The DHS divided its strategy into five pillars:

  1. Bolster risk identification: Understand the department’s posture concerning national cybersecurity risk and prioritize responsive risk management efforts.
  2. Reduce vulnerabilities: Help federal agencies patch up weak points in their networks so they can achieve a reasonable level of cybersecurity.
  3. Diminish threats: Combat transnational criminal organizations and individual actors who abuse the digital space.
  4. Mitigate consequences: Minimize the effects of potentially significant security incidents through the cooperation of the entire community.
  5. Enable cybersecurity outcomes: Support activities and efforts that promote global risk management activities while making the department’s cybersecurity efforts more integrated and streamlined.

The DHS explained it intends to pursue these objectives while upholding the national values of the U.S. and protecting the civil liberties of Americans.

Collaboration in the Name of a Safer World

In its national cybersecurity strategy, the DHS revealed that it would not be able to tackle the majority of its goals alone. It said it would need to draw from the strength of the international community to track down criminals, prepare for attacks (on the scale of WannaCry or NotPetya) and promote risk management worldwide. Toward that end, it expressed its commitment to support research into security innovations that help better protect its networks as well as other organizations’ systems.

More from

When ransomware kills: Attacks on healthcare facilities

4 min read - As ransomware attacks continue to escalate, their toll is often measured in data loss and financial strain. But what about the loss of human life? Nowhere is the ransomware threat more acute than in the healthcare sector, where patients’ lives are literally on the line.Since 2015, there has been a staggering increase in ransomware attacks on healthcare facilities. And the impacts are severe: Diverted emergency services, delayed critical treatments and even fatalities. Meanwhile, the pledge some ransomware groups made during…

AI and cloud vulnerabilities aren’t the only threats facing CISOs today

6 min read - With cloud infrastructure and, more recently, artificial intelligence (AI) systems becoming prime targets for attackers, security leaders are laser-focused on defending these high-profile areas. They’re right to do so, too, as cyber criminals turn to new and emerging technologies to launch and scale ever more sophisticated attacks.However, this heightened attention to emerging threats makes it easy to overlook traditional attack vectors, such as human-driven social engineering and vulnerabilities in physical security.As adversaries exploit an ever-wider range of potential entry points…

4 trends in software supply chain security

4 min read - Some of the biggest and most infamous cyberattacks of the past decade were caused by a security breakdown in the software supply chain. SolarWinds was probably the most well-known, but it was not alone. Incidents against companies like Equifax and tools like MOVEit also wreaked havoc for organizations and customers whose sensitive information was compromised.Expect to see more software supply chain attacks moving forward. According to ReversingLabs' The State of Software Supply Chain Security 2024 study, attacks against the software…

Topic updates

Get email updates and stay ahead of the latest threats to the security landscape, thought leadership and research.
Subscribe today