May 21, 2018 By David Bisson 2 min read

The Department of Homeland security (DHS) has a new plan to reduce software vulnerabilities, counter malicious actors, respond to incidents and build resiliency. The DHS released a national cybersecurity strategy on May 15, which focused on addressing the evolving digital threat landscape. The unveiled plan is part of the organization’s commitment to implement these cybersecurity responsibilities over the next five years.

DHS Cybersecurity: ‘A Historic Turning Point’

Kirstjen Michele Nielsen, the DHS secretary, explained that the new national cybersecurity strategy responds to changes in the threat landscape. She found the convergence of digital security with personal and private security particularly remarkable — calling this a “historic turning point” that necessitates a reevaluation of her department’s approach to cybersecurity.

“In an age of brand-name breaches, we must think beyond the defense of specific assets — and confront systemic risks that affect everyone from tech giants to homeowners,” Nielsen said in a DHS press release. “Our strategy outlines how DHS will leverage its unique capabilities on the digital battlefield to defend American networks and get ahead of emerging cyberthreats.”

5 Security Objectives of the DHS

The DHS divided its strategy into five pillars:

  1. Bolster risk identification: Understand the department’s posture concerning national cybersecurity risk and prioritize responsive risk management efforts.
  2. Reduce vulnerabilities: Help federal agencies patch up weak points in their networks so they can achieve a reasonable level of cybersecurity.
  3. Diminish threats: Combat transnational criminal organizations and individual actors who abuse the digital space.
  4. Mitigate consequences: Minimize the effects of potentially significant security incidents through the cooperation of the entire community.
  5. Enable cybersecurity outcomes: Support activities and efforts that promote global risk management activities while making the department’s cybersecurity efforts more integrated and streamlined.

The DHS explained it intends to pursue these objectives while upholding the national values of the U.S. and protecting the civil liberties of Americans.

Collaboration in the Name of a Safer World

In its national cybersecurity strategy, the DHS revealed that it would not be able to tackle the majority of its goals alone. It said it would need to draw from the strength of the international community to track down criminals, prepare for attacks (on the scale of WannaCry or NotPetya) and promote risk management worldwide. Toward that end, it expressed its commitment to support research into security innovations that help better protect its networks as well as other organizations’ systems.

More from

FYSA – Adobe Cold Fusion Path Traversal Vulnerability

2 min read - Summary Adobe has released a security bulletin (APSB24-107) addressing an arbitrary file system read vulnerability in ColdFusion, a web application server. The vulnerability, identified as CVE-2024-53961, can be exploited to read arbitrary files on the system, potentially leading to unauthorized access and data exposure. Threat Topography Threat Type: Arbitrary File System Read Industries Impacted: Technology, Software, and Web Development Geolocation: Global Environment Impact: Web servers running ColdFusion 2021 and 2023 are vulnerable Overview X-Force Incident Command is monitoring the disclosure…

What does resilience in the cyber world look like in 2025 and beyond?

6 min read -  Back in 2021, we ran a series called “A Journey in Organizational Resilience.” These issues of this series remain applicable today and, in many cases, are more important than ever, given the rapid changes of the last few years. But the term "resilience" can be difficult to define, and when we define it, we may limit its scope, missing the big picture.In the age of generative artificial intelligence (gen AI), the prevalence of breach data from infostealers and the near-constant…

Airplane cybersecurity: Past, present, future

4 min read - With most aviation processes now digitized, airlines and the aviation industry as a whole must prioritize cybersecurity. If a cyber criminal launches an attack that affects a system involved in aviation — either an airline’s system or a third-party vendor — the entire process, from safety to passenger comfort, may be impacted.To improve security in the aviation industry, the FAA recently proposed new rules to tighten cybersecurity on airplanes. These rules would “protect the equipment, systems and networks of transport…

Topic updates

Get email updates and stay ahead of the latest threats to the security landscape, thought leadership and research.
Subscribe today