This 2019 Federal Cybersecurity Research and Development Strategic Plan supersedes the 2016 Federal Cybersecurity Research and Development Strategic Plan. The Plan aims to coordinate and guide federally funded R&D in cybersecurity, including development of consensus-based standards and best practices. The Plan identifies four interrelated defensive capabilities (deter, protect, detect, and respond) and six priority areas for cybersecurity R&D (artificial intelligence, quantum information science, trustworthy distributed digital infrastructure, privacy, secure hardware and software, and education and workforce development) as the focusing structure for Federal cybersecurity R&D activities and investments to benefit the Nation.
Information technology (IT) provides exceptional benefits to society. However, the more society relies on IT, the greater the potential disruption and destruction that adversaries can create via malicious cyber activities. Advances in cybersecurity are urgently needed to preserve the Internet's social and economic benefits—as well as the security of the Nation and its online commercial and public infrastructure—by thwarting adversaries and strengthening public trust in cyber systems. The Cybersecurity Enhancement Act of 2014 (Public Law 113-274) requires the National Science and Technology Council and the Networking and Information Technology Research and Development Program to develop, maintain, and update every four years a cybersecurity research and development (R&D) strategic plan to guide the overall direction of federally funded R&D in cybersecurity. This strategic plan (this "Plan") fulfills this mandate and updates the 2016 Federal Cybersecurity Research and Development Strategic Plan. This Plan also addresses priorities established by the 2018 National Cyber Strategy of the United States of America, including both its domestic and foreign policy priorities, and by the Administration's FY 2021 Research and Development Budget Priorities Memorandum.
The Plan identifies the following goals for cybersecurity R&D: Understand human aspects of cybersecurity; provide effective and efficient risk management; Develop effective and efficient methods for deterring and countering malicious cyber activities; Develop integrated safety-security-privacy framework and methodologies; Improve systems development and operation for sustainable security.
This compilation includes a reproduction of the 2019 Worldwide Threat Assessment of the U.S. Intelligence Community.
