CISA Pivots to Risk-Based Strategy Amid AI Mandates

CISA Acting Director Nick Andersen announced a shift to a risk-based cybersecurity approach, moving away from broad security protocols. A forthcoming Binding Operational Directive will require federal agencies to prioritize vulnerabilities by specific risk rather than patching everything equally. The agency plans to hire 329 mission-critical staff after workforce reductions.