CISA’s New Strategy Runs Into America's Blind Trust Problem
CyberScoop, Tuesday, November 3rd, 2026
An op-ed argues CISA's 2030 strategy requires operators to revisit long-standing trust in OT devices, software updates and credentials.
This CyberScoop op-ed examines CISA 2030: Defend, Harden, Prevail, which prioritizes operational technology security, software supply chain integrity and continuity of essential services.
The author argues that much infrastructure still trusts devices, updates and machine identities simply because they were approved once, even as firmware, contractors and connections change over decades.
Asset inventories are only a starting point, and responsibility for device security, software assurance and identity is often split across teams.
The piece calls for clear accountability, verifying software before deployment, protecting signing keys and limiting permissions for AI agents used in equipment maintenance.