CISA Cuts and Staffing Gaps
Sen. Mark Warner (D-VA) has expressed alarm over widespread cuts at the Cybersecurity and Infrastructure Security Agency (CISA), short-staffed regional divisions, and the disbanding of an information sharing and analysis center that supports state and local critical infrastructure operators.
Last week, Warner introduced legislation known as the Guaranteeing Universal Access to Cybersecurity Act, which would fund the information sharing and analysis center, the MS-ISAC, after former Department of Homeland Security (DHS) Secretary Kristi Noem stopped paying for the program and blocked federal grant funding from being used by state local governments to participate.
Letter to Acting Director Nick Andersen
Warner sent a letter to CISA Acting Director Nick Andersen, underscoring the risks critical infrastructure in states face as a result of the cuts at the agency. This administration has cut about one-third of CISA’s staff, with many of those laid off workers coming from the ranks of CISA’s senior staff.
The cut of more than $700 million in CISA’s proposed fiscal year 2027 budget “demonstrates a dangerous underestimation of the threats facing our nation,” the letter said. Warner told Andersen that governors, mayors, city and county executives, state chief information officers, school district leaders and education advocates, law enforcement, and cybersecurity experts have “expressed grave concern at the state of CISA and its ability to function.”
Industry Concerns
Industry leaders and state and local officials have told Warner’s office they have “reduced responsiveness and support” from CISA and that “staffing turbulence at CISA has disrupted its service delivery and operations.”
Andersen recently announced that CISA is hiring more than 300 additional workers, with some having already started. CISA will “continue to make these significant investments as the secretary indicated to Congress just in these last couple of weeks,” Andersen said in a speech last week.
Regional Director Vacancies
Five of the 10 CISA regional directors are serving in an acting capacity, and a regional website includes the misspelled name of one such acting director. Warner also raised concerns about the “high turnover and persistent vacancies [that] plague CISA's headquarters leadership as well.”
CISA has been without a permanent director since January 2025. Nominee Sean Plankey withdrew himself from consideration after senior senators blocked the vote for months. Andersen took over in February and then battled a record-setting shutdown during which a large percentage of employees were furloughed.
Requests for Information
Warner’s letter asked CISA to produce organizational charts for regional offices and headquarters as they existed on January 20, 2025, October 1, 2025, and currently, all with enumerated vacancies explaining why individuals left.
Warner also asked for a list showing how much “security services” CISA provided to state and local officials on a regional basis. The report must list vulnerability scans, risk assessments, and incident response.
CISA also must include the number of inbound service requests it received, how many were completed, and what the average response time was. The letter also seeks to find out how many of CISA’s soon-to-be-hired employees are earmarked for regional jobs and what kind of experience the new hires possess.
Source: The Record