Cybersecurity and Infrastructure Security Agency CISA

History

2025

US officially announces cybersecurity spending cuts due to budget shortfall

On March 11, 2025, it became known that cyber security the Agency for and Protection of Infrastructure (USA CISA) reduced the cost of providing information security. One of the reasons for this decision is the federal budget deficit.

CISA plans to cut $10 million in annual funding provided to the Internet Security Center (CIS). The funds went to support the work of the Center for the Exchange and Analysis of Information between the States (MS-ISAC) and the Center for the Exchange and Analysis of Information on Electoral Infrastructure (EI-ISAC). These organizations provide technical assistance and recommendations in the field of cyber threats to interested departments.

𝓲

Фото: Freepik

The funding cuts are supposed to allow CISA to focus on "critical areas and eliminate redundancy." The agency says activities such as cyber threat intelligence and cyber incident response are becoming a priority. The changes will eliminate duplicate services that were provided directly to state, local and territorial entities. The changes are being carried out against the background of the dismissal of hundreds of CISA employees under pressure from the Department of Government Efficiency (DOGE), headed by Elon Musk. DOGE's goal is to optimize the work of government agencies and improve the efficiency of spending.

According to the US Treasury Department, the US budget deficit in fiscal 2024 amounted to $1.83 trillion, which is $137.6 billion (8.1%) more than in 2023. This is the third largest federal budget deficit in US history after negative results during the COVID-19 pandemic, when a deficit of $3.13 trillion was recorded in fiscal 2020 and $2.77 trillion in fiscal 2021.^[1]

Firing hundreds of employees who fought "Russian and Chinese hackers"

On March 14, 2025, it became known that the Agency cyber security for and Protection of Infrastructure (USA CISA) reduced hundreds of employees who specialized in protecting the computer systems of American departments "from Russian and Chinese hackers." In total, more than 200 people were fired.

According to Bloomberg, the reform was carried out under pressure from the Department of Government Efficiency (DOGE), headed by Elon Musk. Among other things, DOGE is responsible for optimizing the work of government agencies and reducing inefficient federal budget spending.

𝓲

Фото: Freepik

As part of the reorganization, about 100 CISA employees were cut. In addition, cooperation with the same number of expert contractors has been severed. The layoffs began in February 2025, that is, almost immediately after the formation of the DOGE structure, which was established by decree of US President Donald Trump of January 20 of the named year.

Individuals with knowledge of the restructuring of CISA reported that some of the dismissed professionals had decades of experience. In particular, workers who simulated attacks on US government networks in order to find potentially weak points that hackers could theoretically exploit have been cut. In addition, employees who searched for critical vulnerabilities were fired.

One Bloomberg source notes that as a result of the "personnel purge," there is a shortage of specialists, which leads to "huge security gaps" in American government agencies. At least one senior CISA official has resigned in protest at the cuts amid concern about the government's ability to protect itself from potentially devastating cyber attacks by foreign criminal gangs.^[2]

2024: Lisa Einstein's appointment as first AI director

In early August 2024, the U.S. Cybersecurity and Infrastructure Protection Agency (CISA) announced the appointment of its first director of artificial intelligence. These duties are assigned to Lisa Einstein, who previously served as executive director of the agency's Cybersecurity Advisory Committee and senior CISA adviser on AI. Read more here.

2022: Opening of the first office abroad

In mid-July 2022, the US Cybersecurity and Infrastructure Protection Agency (CISA) reported on the opening of its first foreign office - in London. Thus, the department will expand work with allies and international partners. It is noted that the branch will serve as an effective model for the development of an international mission to reduce risks in the field of cybersecurity.

The CISA branch London in will partner with the National Cyber ​ ​ Security Center, Great Britain which is dedicated to combating online threats, as well as providing expertise and advice to enterprises and government departments.

US cybersecurity agency announces opening of foreign office

CISA was founded USA in November 2018 and is led by veteran U.S. National Security Council, military and intelligence communities Jen Easterly from 2021 to July 2022. Easterley was appointed after former President Trump fired former director Chris Krebs over a public disagreement with the president.

An attaché office will now be set up in London to serve as a focal point for international cooperation between CISA, UK government officials and officials from other federal agencies. The department said the UK office would facilitate CISA missions in cybersecurity, critical infrastructure protection and emergency communications, and use the agency's global network to advance CISA's four international strategic goals:

• Development of operational cooperation;
• Partner Capacity Building;
• Strengthening cooperation through stakeholder engagement and advocacy;
• Shaping the global policy ecosystem.

Of course, you need 24-hour and constant cyber intelligence - and I don't mean the endless alerts that the security team has to review. But highly qualified experts who will actively analyze and see real threats behind data. Increased cooperation between the US and UK, led by CISA, will significantly improve the digital world in which many businesses and citizens interact, said Ian McShane, vice president of strategy at Arctic Wolf.

CISA's first British attaché was Julie Johnson, who previously served as CISA's regional security adviser in New York, where she led research into microgrid, communications and the internet, and the convergence of physical and cyberspace. Johnson also served as CISA's regional leader in federal interagency working groups. Prior to working at CISA, Johnson worked for the U.S. Department of State's Bureau of Intelligence and Research, the Bureau of Narcotics and Law Enforcement, and the Bureau of Education and Culture, where she handled citizen exchange, Fulbright Scholarship, IT center deployments, and international training.^[3]

2020: US President Donald Trump fires agency director Chris Krebs

In November 2020, US President Donald Trump fired Chris Krebs, director of the US Cybersecurity and Infrastructure Security Agency (CISA), because Krebs officially assured the public of the security of the US elections that these were indeed free and fair elections.

"Chris Krebs' statement on the security of the 2020 election was extremely erroneous, there is numerous evidence of massive violations and fraud, including the vote of" dead souls. "

Observers were not allowed to polling stations, there were violations in the operation of voting machines that changed votes from Trump to Biden, late voting and much more. Therefore, from today, Chris Krebs has been fired as director of the Cybersecurity and Infrastructure Security Agency. "

2019: Claim of right to receive subscriber data from ISPs

On October 10, 2019, it became known that the division cyber security U.S. Department of Homeland Security requires amendments to the current legislation that would give it the right to request from Internet-, providers information which allows identifying users of vulnerable systems.

CISA, whose responsibilities include alerting government and commercial organizations to vulnerabilities, complains about the lack of the ability to notify commercial companies of security problems, since it is not always possible to identify the owner of a problem system. Such powers would allow CISA to alert directly owners of vulnerable critical devices (such as industrial control systems) to threats.

Under current U.S. law, ISPs must provide access to subscriber data only if there is a warrant that can be issued by a federal body even without a court order. CISA does not have the right to issue data orders and therefore is forced to apply for them to partner federal bodies. However, there is also a catch here, since federal authorities can only request data if a criminal investigation is carried out. The problem is that CISA should alert owners of vulnerable systems, regardless of whether^[4] is investigating^[5].

2018: Creation of a cybersecurity agency

In November 2018, US President Donald Trump approved a bill to create a new cybersecurity division, called the Cybersecurity and Infrastructure Security Agency (CISA).

According to ZDNet, this bill, known as the CISA Act, provides for the reorganization and rebranding of the National Protection and Programs Directorate (NPPD) initiative within the Ministry of National Security. CISA has become a stand-alone federal agency overseeing civil and federal cybersecurity programs.

Trump signs bill creating new federal cybersecurity agency

The NPPD structure, created in 2007, was engaged in the management of almost all issues and projects related to cybersecurity that the Ministry of National Security had.

The NPPD was the government body responsible for the physical and cybersecurity of federal networks and critical infrastructure. The structure oversaw the Federal Protection Service (FPS), the Department of Biometric Identification Management (OBIM), the Office of Cyber Defense and Infrastructure Analysis (OCIA), the Office of Cybersecurity and Communications (OC&C), and the Office of Infrastructure Protection (OIP).^[6]

CISA received the status of an official agency of federal cybersecurity in the United States, so it will be able to use funds from the federal budget and will receive expanded powers in terms of lobbying for its directives.

The landscape of cyber threats is constantly evolving, and we must be confident in the right alignment of our forces to protect American infrastructure from digital and physical threats. It's time to reorganize the NPPD and put in place the Cybersecurity and Infrastructure Security Agency, "said U.S. Homeland Security Secretary Kirstjen Nielsen.

Notes