One key piece of the plan is to put more responsibility on tech companies to secure their products.