透视《2023至2025年CISA战略规划》  

Perspectives on CISA Strategic Plan 2023—2025

作　　者：吕玮 刘瑶[1] 张依梦 LYU Wei;LIU Yao;ZHANG Yimeng(No.30 Institute of CETC,Chengdu Sichuan 610041,China;China Electronics Technology Cyber Security Co.,Ltd.,Chengdu Sichuan 610041,China)

机构地区：[1]中国电子科技集团公司第三十研究所,四川成都610041 [2]中国电子科技网络信息安全有限公司,四川成都610041

出　　处：《信息安全与通信保密》2023年第1期16-25,共10页Information Security and Communications Privacy

摘　　要：2022年9月,美国网络安全与基础设施安全局(CISA)发布了《2023至2025年CISA战略规划》。作为CISA成立以来的第一份战略规划,该规划立足合作、创新、服务和问责等CISA核心价值观,明确了CISA未来3年的工作重点,希望在CISA的引领和推动下,大幅改善美国各行各业,尤其是关键基础设施行业的网络安全水平。对此,首先介绍了该规划的发布背景,其次详细阐述了该规划的4大战略目标,最后探讨了CISA未来的主要发展方向。In September 2022,the Cybersecurity and Infrastructure Security Agency(CISA)of United States released the CISA Strategic Plan 2023—2025.As the first strategic plan since the establishment of CISA,based on the core values of CISA,such as cooperation,innovation,service and accountability,the plan clarifies the key works of CISA in the next three years,and articulates the vision of significantly improving the cyber security of all sectors in the United States,especially in critical infrastructure,with the guidance and impetus of CISA.This paper firstly addresses the background of the plan,then elaborates on the four strategic objectives of the plan,and finally discusses the main development directions of CISA in the future.

关 键 词：网络安全 网络安全与基础设施安全局 关键基础设施 网络漏洞 

分 类 号：TP393.0[自动化与计算机技术—计算机应用技术]