The U.S. Department of Homeland Security’s Cybersecurity and Infrastructure Security Agency (CISA) is operating under significant pressure. Workforce reductions, budget constraints, organizational changes, leadership transitions, and limits on contracting are affecting how the agency carries out its mission. At the same time, federal agencies face a more complex cyber threat environment.

Governing powerful technologies under uncertainty requires making bets. The question is not whether to bet. It is whether the bet you are making is calibrated to the actual risk.

As emphasized in President Trump’s Cyber Strategy for America, the transition to PQC must begin immediately. While extensive federal guidance exists, urgent action from Congress and executive agencies is needed to allocate the necessary resources, improve preparedness, and drive adoption across critical infrastructure. The report’s recommendations provide a framework for achieving national PQC resilience.

The Mythos moment is significant for reasons that extend beyond its immediate cybersecurity implications. It establishes, with unusual clarity, that AI capability has crossed a threshold in the offensive domain — and that the defensive and governance infrastructure available to most institutions has not kept pace. That gap is not a projected risk. It is a present condition.

ICIT’s Center for FCEB Resilience marked a pivotal year advancing civilian cyber resilience through research, convenings, and public-private collaboration. See how government, industry, and partners are strengthening the federal enterprise—and how your organization can help lead the next phase.