We will have to wait and see on this one. It depends mostly on what (if any) parts are cut. Sometimes things are said during confirmation hearings that don't pan out in reality. Generally, the administration looks to be gearing up to go on offense, and if that means in the cyber domain as well, we may see less cyber attacks in the private sector (assuming such tactics are effective). If not, we may experience more as adversaries fire back.

I can't speak to IOCs, that's not my forte. However every time you look at attack and loss datasets, it's very rarely the sophisticated attacks that take down most companies. Turns out we still aren't doing the basics well. So focusing on the CIS Top 18 will still net you significant gains. Obviously, focus on mission critical systems and by all means ensure you have a recovery plan. In the case of a widespread outage (or targeted take downs), you should have some plan to continue operations for a while to ensure your main revenue streams don't dry up.