A new, holistic approach to cyber risk management is needed, so federal agencies can build a more secure digital future and better achieve their missions. That includes zero-trust principles, cloud security, and deep understanding of data risk.