United states, China and the role of CISA (Cybersecurity and infrastructure security agency)

Abstract

The escalating cyber rivalry between the United States and China marks a defining feature of modern geopolitical conflict, with cyberspace emerging as a boundless battlefield targeting national infrastructure and digital sovereignty. This study explores the evolving cyber dynamics with a focus on the U.S. Cybersecurity and Infrastructure Security Agency (CISA), highlighting its strategies to counter cyber threats, particularly from China. These threats range from state-sponsored espionage to infrastructure attacks, with over 20,000 incidents targeting U.S. critical systems in 2023 alone. Established in 2018, CISA plays a central role in securing national cyber resilience and coordinating responses across sectors. Through qualitative case studies, policy analysis, and thematic review, the research assesses CISA’s operational responses—such as during the 2021 Colonial Pipeline attack—and its partnerships with government, private, and international actors. It also identifies institutional limitations and strategic gaps. This paper underscores the importance of domestic institutional readiness in addressing global cyber threats, advocating for adaptive governance, increased investment, and international cooperation. CISA is portrayed not merely as a reactive entity, but as a strategic asset in the United States’ digital defense architecture.