The US National Cybersecurity Strategy calls for two fundamental shifts: rebalancing the responsibility to defend cyberspace and realigning incentives to favor long-term investments.  

The digital ecosystem’s biggest, most capable, and best-positioned actors – be they in the public or private sectors – can and should assume a greater share of the burden for mitigating cyber risk.  When entities across the public and private sectors face trade-offs between temporary fixes and long-term solutions, they must have the resources, capabilities, and incentives to choose the latter.

The US commitment to international partnerships on cyber issues remains strong, and the Strategy emphasizes working with partners to build a defensible, resilient, and values-aligned digital ecosystem.

This Strategy sets out a path to secure the promise of our digital future.  Its implementation will build a durable cyber foundation for the USA’s goals in infrastructure, clean energy, equity, democracy, and economic opportunity.