CISA director touts private partnerships after agency killed many

Acting CISA Director Nick Andersen emphasized the critical importance of private partnerships as the agency's mission revolves around public-private collaborations during a virtual summit. Andersen stated, "We don't see everything. We're not a law enforcement agency, intelligence agency, or a regulator," highlighting that CISA relies on intelligence and insight from various sources, including government agencies, international partners, and the private sector.

He emphasized the necessity of these partnerships, referring to them as "carrots and partnerships" that motivate entities to collaborate on initiatives like CISA's CI Fortify for building resilient critical infrastructure. However, Andersen's claims are met with skepticism due to CISA's past decisions under the Trump administration.

Trump's administration drastically reduced CISA's budget and programs, including axing the Cyber Safety Review Board, Artificial Intelligence Safety and Security Board, Critical Infrastructure Partnership Advisory Council, National Security Telecommunications Advisory Committee, and US Secret Service Cyber Investigations Advisory Board.

Some of these bodies have since been reinstated or reformed, despite wasting resources that could have been allocated to improved cyber defense. CISA also ended funding and ties to the Center for Internet Security and significantly reduced its workforce, with around a third of the staff departing since Trump's return to office. While CISA has reaffirmed its commitment to rehiring around 300 staff members, a recent budget request proposes cutting an additional 900 positions and nearly a billion dollars from the agency's 2027 budget.

Andersen's claims about the agency's focus on public-private partnerships are questionable, as many outreach employees and general staff remain missing. The effectiveness of CISA's efforts in protecting critical infrastructure may be compromised due to the ongoing budget and staffing cuts, leaving essential systems vulnerable to cyber threats.