DHS needs to be able to adapt and respond to cybersecurity threats, and developing a strategy is a logical step towards that goal.
Congress shouldn’t need to be asking DHS to come up with a cybersecurity strategy. DHS ought to refresh its strategy every few years automatically.