# CISA Prioritizes Cyber and Infrastructure Risks

CISA circulated an internal framework on November 5, 2026, to help senior leaders prioritize cyber and infrastructure risks, identify decision-critical information, and coordinate preparedness and response. The agency plans to issue implementation guidance to its divisions in the coming months. No solicitation or contract opportunity has been announced, but the framework may inform future CISA needs for threat intelligence, incident preparedness, critical-infrastructure resilience, and operational capacity.

- Contractors working in these areas can assess how their existing capabilities align with the priorities identified in the framework.
- CISA’s forthcoming divisional guidance may provide more detail on how the internal priorities translate into implementation needs; the signal does not specify procurement timelines or requirements.
- **Why this matters:** Companies should distinguish this planning development from an active procurement and avoid assuming that it creates a current bid opportunity.

**Jurisdictions:** federal
**Industries:** Information Technology, Public Safety
**Topics:** Cybersecurity
**Published:** November 10, 2026

### Government Entities
- Cybersecurity and Infrastructure Security Agency (CISA)
- Department of Homeland Security (DHS)

### Key Quotes
> Publishing our initial CIRs is the starting point of a deliberate, requirements-driven approach to our mission.
> — Nick Andersen, Acting Director of CISA

### Sources
- [CISA outlines internal plan to swiftly address cyber, infrastructure threats - Nextgov/FCW](https://www.nextgov.com/cybersecurity/2026/11/cisa-outlines-internal-plan-swiftly-address-cyber-infrastructure-threats/417167) - Nextgov/FCW