What do these lessons imply for federal CIP research priorities? The study included a literature review, interviews with government and industry computer experts, and a workshop involving participants in Y2K remediation efforts from industry and government. The report summarizes the workshop activities and synthesizes the key conclusions from all the project activities. It is concluded that new R&D approaches are required to deal with complex and adaptive settings. Vulnerabilities resulting from system complexity are expanding at a much faster pace than our means of understanding them. At the same time, exploitation of infrastructure vulnerabilities for criminal, terrorist, or foreign adversary purposes is a threat that potentially has no boundaries. To make CIP more manageable, research is needed that provides real data and models for understanding highly complex and uncertainty-laden environments. Such research should be a high federal priority and should be pursued aggressively.  less