Warner presses DHS on CISA staffing and MS-ISAC funding
The fight over CISA’s mission has become a fight over whether core shared defense services get paid at all.
TL;DR
Sen. Mark Warner wrote Tuesday to DHS Secretary Markwayne Mullin and CISA’s acting chief, The Record reports, warning that CISA cuts and staffing gaps are hollowing out the cyber agency. He urged DHS to prioritize the Cybersecurity and Infrastructure Security Agency and pay for the Multi-State Information Sharing and Analysis Center. For practitioners, the signal is blunt: shared defense capacity weakens when appropriations and headcount are treated as separable from mission.
Warner’s latest Cybersecurity and Infrastructure Security Agency (CISA) letter turns a familiar cyber-defense argument into a funding demand. According to The Record, Warner wrote Tuesday to Department of Homeland Security (DHS) Secretary Markwayne Mullin and CISA’s acting chief, warning about CISA cuts and staffing gaps and saying DHS must prioritize CISA and pay for the Multi-State Information Sharing and Analysis Center (MS-ISAC). That turns the usual mission argument into a budget question about funded people and funded services.
The context is ugly enough without embellishment. Recorded Future News previously reported that CISA plans under discussion included removing about 1,300 people, cutting roughly half of full-time staff and 40 percent of contractors (https://therecord.media/trump-administration-planning-workforce-cuts-at-cisa). It also reported that Kristi Noem gave senators few details on a proposed $491 million CISA reduction (https://therecord.media/noem-cisa-cuts-senate-hearing). During the DHS shutdown, CISA’s acting chief told lawmakers about 60 percent of the agency’s workforce was furloughed, the agency had 1,000 vacancies, and six members of a technical threat hunting and incident response team resigned in one day (https://therecord.media/cisa-acting-chief-warns-shutdown-increasing-risks-leading-to-retention-issues).
That is why MS-ISAC belongs in the same conversation as staffing gaps. CISA’s acting chief said the shutdown constrained work with private-sector, state and local, and federal partners, and left the agency largely limited to imminent threats, critical information sharing and keeping its 24/7 operations center running (https://therecord.media/cisa-acting-chief-warns-shutdown-increasing-risks-leading-to-retention-issues). For those partners, the operational test is whether shared services still operate and whether the CISA teams with the relevant institutional memory are still there.
Published ·Deep Fathom