The Cybersecurity and Infrastructure Security Agency (CISA), the federal agency responsible for protecting U.S. Critical infrastructure from cyberattacks, is facing a deepening crisis marked by significant staff reductions, funding cuts, and a prolonged leadership vacuum. Bipartisan concerns are mounting that these challenges are diminishing CISA’s ability to effectively respond to evolving cyber threats, leaving the nation vulnerable.
The agency’s struggles approach as the U.S. Federal government remains partially shut down, entering its third week on February 25, 2026. This shutdown, coupled with broader policy shifts, has created a precarious situation for CISA, impacting its core missions including election security and counter-ransomware initiatives. The current state of affairs raises serious questions about the nation’s preparedness in the face of increasingly sophisticated cyberattacks.
According to reports, CISA has lost approximately one-third of its staff since the beginning of the second Trump administration in 2025. This loss of personnel has resulted in the shuttering of entire divisions and a significant reduction in expertise, impacting programs designed to promote secure software development and combat ransomware. The agency is currently operating at roughly 38% of its full staffing levels, exacerbating the challenges posed by the ongoing government shutdown.
Staffing Crisis and Leadership Void
The staffing shortages are not solely attributable to the shutdown. A significant factor has been the reassignment of hundreds of CISA personnel to support other agencies within the Department of Homeland Security, specifically related to immigration enforcement. This internal redeployment of resources has further strained CISA’s capacity to address its primary cybersecurity responsibilities.
Adding to the agency’s woes is the lack of a permanent director. CISA has been operating under Acting Director Madhu Gottumukkala since President Trump took office in 2025. Sources familiar with the situation suggest Gottumukkala has faced difficulties in leading the agency, contributing to internal challenges. The administration’s nominee for a permanent director, Sean Plankey, has yet to be approved by Congress.
Budget Cuts and Political Interference
The situation is further complicated by proposed budget cuts. A fiscal 2026 budget proposal released in May 2025 suggested a nearly $491 million reduction to CISA’s budget – a nearly 17 percent decrease from its $3 billion allocation. Healthcare Info Security reported that the proposal aimed to eliminate programs focused on what the administration termed “misinformation and propaganda,” claiming they were used to violate the First Amendment.
Some observers have also pointed to the Trump administration’s continued focus on unsubstantiated claims regarding the 2020 election as a contributing factor to the agency’s deprioritization. This political climate has created an environment where cybersecurity concerns may not be receiving the attention they require.
Impact on Core Missions
The cumulative effect of these challenges is a significant erosion of CISA’s capabilities. Experts warn that the agency is “decimated” and struggling to maintain its core missions, including coordinating with industry and protecting federal networks. Organizations that once relied on CISA for assistance are now seeking alternative resources, such as industry alliances and private consultants.
The loss of personnel has particularly impacted CISA’s election security team, raising concerns about the agency’s ability to safeguard the integrity of future elections. This is especially critical given the ongoing threats from foreign adversaries seeking to interfere in U.S. Democratic processes.
When reached for comment, Gottumukkala stated that CISA “remains unwavering in its commitment to protect our federal networks from malicious cyber threat actors despite the multi-week government shutdown” of Homeland Security.
What’s Next?
The future of CISA remains uncertain. The resolution of the ongoing government shutdown and the confirmation of a permanent director are critical steps toward stabilizing the agency. However, even with these changes, addressing the long-term challenges of funding, staffing, and political interference will be essential to restoring CISA’s effectiveness and ensuring the nation’s cybersecurity. The agency’s ability to adapt and overcome these hurdles will be a key indicator of the U.S.’s overall preparedness in the face of increasingly sophisticated cyber threats.
What are your thoughts on the current state of CISA? Share your comments below and help us continue the conversation.
