CISA Builds a New Model for Cyber Resilience Through Collaboration

Original Broadcast Date: 6/14/2026

Sponsored by Forward Network and Carasoft

The Cybersecurity and Infrastructure Security Agency is taking a broader approach to strengthening the nation's resilience, and Acting Director Nick Andersen says collaboration will be central to that effort.

Speaking at TechNet Cyber in Baltimore, Andersen discussed CISA's role as the lead organization for the new Homeland Defense Working Group, an initiative designed to bring together federal agencies, critical infrastructure operators, industry partners, and international allies around a common goal: ensuring the continuity of essential services during times of crisis.

According to Andersen, the effort begins with a clear responsibility.

"The American people have given special trust and confidence in us as their government to look out for their resilience," he says.

The working group focuses on the services and systems that Americans rely on every day, including public health and safety, national security, defense operations, critical infrastructure, and economic continuity. Andersen says the goal is not simply to coordinate activities across government, but to create measurable improvements in resilience over time.

A key element of the initiative is determining which organizations are best positioned to lead specific efforts. Andersen explains that the answer will not always depend on formal authorities or organizational charts.

Instead, he says that success often comes down to relationships and capabilities.

Across the nation's 16 critical infrastructure sectors, designated sector risk management agencies already play leadership roles. However, Andersen notes that in some situations another partner may be better positioned to deliver results.

Organizations such as the FBI, U.S. Cyber Command, and the National Security Agency all bring unique capabilities to the table. If one of those organizations has stronger relationships or greater technical expertise in a specific area, Andersen says they may be the best choice to lead a particular effort.

The objective is straightforward: identify the "best athlete" for the mission and build joint work plans that strengthen resilience.

Measuring success will be equally important.

Andersen says the Homeland Defense Working Group will focus on quantifiable outcomes. One example involves defense-related critical infrastructure and the energy systems that support military operations. If an energy provider can achieve specific resilience targets that ensure a military installation maintains minimum power requirements during a crisis, that represents measurable progress.

For Andersen, resilience is a practical concept that applies across government and industry.

Whether the disruption comes from a hurricane, wildfire, ice storm, equipment failure, or cyberattack, organizations must be prepared to continue operating and recover quickly.

"I think it's largely the same," Andersen says when discussing how resilience is viewed across different sectors. "It's the ability to recover quickly and continue to provide those available services."

That philosophy is also guiding another major CISA initiative: CI Fortify.

Andersen says one of the biggest lessons emerging from the effort is the need to prepare for degraded operating environments. Organizations must understand how they will continue delivering essential services if critical systems, such as telecommunications infrastructure, are disrupted.

The challenge extends beyond government agencies. CI Fortify brings together infrastructure owners and operators, government stakeholders, international partners, equipment manufacturers, and technology vendors.

According to Andersen, those groups must work together to identify operational challenges and incorporate lessons learned into both technology development and infrastructure planning. The initiative also encourages manufacturers to think about how their products will perform in real-world operating environments and how secure-by-design principles can be integrated into their development processes.

International cooperation plays an important role as well.

Andersen points to collaboration with Five Eyes partners, including Canada, the United Kingdom, Australia, and New Zealand. While those countries may organize their cyber operations differently, he says they share common goals around maintaining essential services during crises.

One concept that resonates with Andersen comes from Canada, where officials describe resilience through a "minimum viable Canada" framework. The idea focuses on identifying the essential capabilities required to succeed during the most challenging circumstances.

For Andersen, that concept aligns closely with the mission of both CI Fortify and the Homeland Defense Working Group.

Ultimately, he says the measure of success for CISA comes down to accountability. Cybersecurity and resilience professionals understand the risks facing the nation, and that knowledge creates a responsibility to act.

As he reflects on his time leading the agency, Andersen says he hopes to leave behind demonstrable reductions in risk and stronger protections for communities across the country.

The goal, he says, is simple: make meaningful investments today that help ensure Americans can continue to rely on the services they need when challenges arise tomorrow.