Trump administration budget chief Russell Vought told lawmakers Tuesday that he’s willing to work with Department of Homeland Security Secretary Markwayne Mullin on re-staffing up the Cybersecurity and Infrastructure Security Agency, following deep personnel cuts and further proposed reductions in the fiscal 2027 budget blueprint.

Mullin said last week at a House Appropriations Subcommittee on Homeland Security hearing that he would like to hire 600 more people at CISA, similar to remarks he made earlier this month at another House hearing. President Donald Trump has cut or lost more than 1,000 from an agency that stood around 3,400-strong at the end of the Biden administration — cuts criticized by lawmakers in both parties.

At a House Appropriations Subcommittee on Financial Services and General Government   hearing Tuesday, Rep. Mark Amodei, R-Nev., asked Vought about Mullin’s CISA remarks.

“You don’t just flip a light switch on, and you got 600 folks over in CISA now. What’s the plan for getting CISA fully operational?” Amodei, who chairs the panel’s Subcommittee on Homeland Security, asked. “How do we make sure we have a robust, effective, cost-effective CISA force? Because I don’t think anybody thinks we have it now.”

Vought, director of the Office of Management and Budget, said he hasn’t received a formal request from Mullin to increase CISA’s number of full-time employees, but knows that hiring isn’t instantaneous.

“He was not here when we developed this budget, so if he feels the need to have additional resources, we will work through that internally, and at the appropriate time, come up and brief you,” he answered Amodei. “I do think he’s in the process still of getting his arms wrapped around the department,” he said. Mullen became DHS secretary in late March.

“This is probably one of those things, particularly in the cyber world, you now have a year and a half of a new administration,” Vought continued, and referred to conservative complaints about how CISA handled election security and disinformation under Biden. “We saw this agency had major concerns with it in our four years outside of government and with new management, I think it’s now an agency, or could be an agency, that plays a very valuable part for DHS’s portfolio.”

Bringing hundreds of new CISA personnel on board could prove challenging for reasons beyond the usual bureaucratic hurdles and security clearance processes that slow any federal hires in the national security space. Past CISA employees and agency observers have said the way the Trump administration has purged personnel and treated those who have stayed could prove a further disincentive to future hires.

Acting CISA director Nick Andersen recently said that the agency has begun the process of hiring new CISA staffers, and expected to have nearly 200 job offers out by the end of this month.

The post Trump budget boss Russell Vought open to re-staffing CISA appeared first on CyberScoop.

The Department of Homeland Security is bringing back a key cybersecurity information sharing effort with critical infrastructure, more than a year after the Trump administration shuttered an existing nerve center between government and private sector.

The Alliance of National Councils for Homeland Operational Resilience – Critical Infrastructure program, first reported by CyberScoop in January, is meant to replace the function of the Critical Infrastructure Partnership Advisory Council.

CIPAC was a federal advisory body that allowed agencies like the FBI, the Cybersecurity and Infrastructure Security Agency and the intelligence community to interact with key owners and operators of water, power, internet and telecommunications to coordinate on cyberattacks and digital vulnerabilities.

ANCHOR will fulfill a similar role.

“ANCHOR-CI will provide forums through which cybersecurity, law enforcement, intelligence, national security, and other government representatives at the federal, state, local, tribal, and territorial levels may engage representatives of private sector entities and critical infrastructure owners and operators in reviewing the current threat environment, discussing potential vulnerabilities, and forming recommendations on securing a more resilient critical infrastructure and cyberspace,” DHS wrote in a federal register notice set to publish July 1.

ANCHOR-CI will be managed by CISA, which will appoint members to the council from industry, trade associations, state and local governments and other sources.

The body will consist of four types of different councils: one focused on federally designated critical infrastructure sectors, cross-sector councils to deal with emerging threats like cyber attacks or zero-day vulnerabilities, critical infrastructure industry councils and regional coordinating councils.

As CyberScoop reported, a key difference between CIPAC and ANCHOR-CI will be the way key meetings will be exempt from public transparency laws.

“In recognition of the sensitive nature of the subject matter involved regarding the assessment and mitigation of security and operational risks through whole-of government coordination, and strong partnership with the private sector that is required to ensure the security and resilience of critical infrastructure, the Secretary hereby exempts ANCHOR-CI from The Federal Advisory Committee Act,” the notice states.

The disbanding of CIPAC under then-Secretary of Homeland Security Kristi Noem was part of a larger dismantling of DHS advisory bodies set up under previous presidential regimes. Critical infrastructure owners and operators felt blindsided by the move and many found themselves without access to the kind of federally-enabled threat intelligence and cybersecurity support that had become a staple of U.S. cyber defense over the past decade.

A source told CyberScoop that new Secretary Markwayne Mullin was sympathetic to concerns from critical infrastructure owners and operators that they felt abandoned by DHS under Noem’s leadership, and was determined to make efforts to repair that relationship.

The restoration of information sharing services under ANCHOR-AI is one part of that effort.

Representative Andrew Garbarino, R-N.Y., chair of the House Homeland Security Committee, called ANCHOR “a welcome step” toward strengthening operational partnerships between industry and CISA at a time when China and other adversaries are using AI and other tools to target U.S. critical infrastructure.

“The abrupt elimination of CIPAC last year caused unnecessary confusion and strain in these coordination efforts, and I appreciate Secretary Mullin prioritizing this partnership moving forward and for recognizing the importance of rebuilding CISA’s cybersecurity workforce,” said Garbarino in a statement to CyberScoop.

According to a former CISA official, ANCHOR-CI gives the CISA director more authority over the makeup and direction of the organization than under CIPAC.

Bob Kolasky, who ran the National Risk Management Agency at CISA, said the new organizational structure for ANCHOR “really puts CISA  in the position of having authority over who participates,” a change from CIPAC, when the private sector and other sector risk management agencies were given autonomy to choose their representatives.

“Previous iterations of CIPAC and the way it was operationalized leaned heavily on the idea that private sector coordinating councils were self-governed and self-organized, and the DHS Secretary and the CISA Director…managed the overall partnership structure,” said Kolasky, now senior vice president of critical infrastructure at Exiger. “They were not given the authority to make decisions on who would participate in that partnership structure.”

Under previous administrations, CISA officials frequently partnered with industry to build trusted lines of communication and work on cross sectoral cybersecurity initiatives. Most of these efforts were voluntary – a reflection of the agency’s limited regulatory mandate but also of CISA’s view that they were the nation’s risk advisor, not its manager.

Kolasky said some there remain unanswered questions from the information released so far in the Federal Register notice, including how the CISA director would choose representatives and what role other sector risk management agencies would play influencing ANCHOR. He said “what is important is consistent processes” that ensure membership isn’t dependent on being in the good graces of a particular agency or administration.

“I want it to be a partnership structure between industry and government and not something that is completely operated and mandated by the government,” said Kolasky.

The post DHS to unveil replacement council for critical infrastructure cybersecurity appeared first on CyberScoop.

Department of Homeland Security Secretary Markwayne Mullin told Congress Wednesday that the Cybersecurity and Infrastructure Security Agency would ideally have 2,800 personnel, up from approximately 2,200 now and down from 3,400 before the second Trump administration began.

President Donald Trump has pushed to dramatically reduce personnel numbers at the agency, something that has drawn criticism from both Democrats and Republicans on the Hill. Trump has proposed hundreds of millions more in cuts for fiscal 2027.

House Homeland Security Committee Chairman Andrew Garbarino, R-N.Y., asked Mullin at a hearing Wednesday about further proposed CISA budget cuts, saying he was “concerned” about personnel numbers and funding for education programs and whether the fiscal 2027 blueprint would “negatively impact those efforts.”

Mullin said DHS funding lapses have made the department rethink CISA, although the deep CISA personnel reductions predate the recent spate of government shutdowns. 

“We had to readjust the way we’re looking at CISA and better lean on public partnerships,” he said. The agency can work well with 2,800 people “If we can actually have the partnerships we need with states and be able to use the grants, the monies that [we] saved with CISA to be able to invest with local and state municipalities. … We’re not going to fail on the mission we have in front of us.”

CISA personnel figures are in a constant state of flux. The CISA staff figure of 2,200 Mullin gave is down even from December. In March, acting director Nick Andersen said CISA was looking to hire 300 people.

There’s been no proposal from the Trump administration to-date to take funds formerly allocated to CISA and shift them to state governments for cybersecurity. State officials have said CISA budget cuts have made their jobs harder, and most experts have said the Trump administration’s approach to shift cyber responsibilities to states is badly misguided.

Congress has yet to permanently reauthorize the State and Local Cybersecurity Grant Program that expired last year before it got a temporary extension and is due to expire again in September.

CISA has gone without a Senate-confirmed director for the entirety of the second Trump administration. Mullin said “we’ve got a person soon to be nominated that will be running CISA that has the ability to recruit and focus on the authorities we have.”

Mullin said CISA has “unique” authorities that haven’t “been completely utilized.” 

“We want CISA to be the leader in cybersecurity,” he said. “They should be and they will be.”

A House Appropriations subcommittee is set to consider a DHS funding bill Friday.

The post DHS Secretary Markwayne Mullin pinpoints optimal CISA staffing levels appeared first on CyberScoop.

Sean Plankey, most recently the nominee for director of the Cybersecurity and Infrastructure Security Agency, is joining defense technology company UFORCE as its U.S. chief executive officer.

The London-based company created out of nine Ukrainian-based firms announced Plankey’s move Monday less than a month after he withdrew his nomination amid difficulties overcoming objections from senators who had placed a hold on it.

Plankey’s a cyber veteran of the first Trump administration but also had been serving as senior adviser on the Coast Guard at the Homeland Security Department, retiring from the Coast Guard this year.

UFORCE makes combat drones for air, land and sea and plans to have its first U.S.-made unmanned surface vessels hitting the water by this summer. The startup reportedly brought its valuation to $1 billion earlier this year.

“The United States and its allies are looking for defense technology partners that can move

quickly, innovate continuously and deliver systems already proven across theaters of combat,” Plankey said in a statement. “UFORCE is uniquely positioned to meet that demand and we will do that by manufacturing these capabilities in America.”

Said Oleg Rogynskyy, co-founder and CEO of UFORCE: “Sean’s decision to join UFORCE reflects the strength of our platform and the growing recognition that the future of autonomous defense will be shaped by companies able to combine real combat validation with scalable Western deployment,” 

CISA has gone without a permanent director for the entirety of the second Trump administration, and the president has yet to put forward a nominee for the position since Plankey’s withdrawal last month.

Former Oklahoma senator Markwayne Mullin took over as DHS secretary in late March.

The post Former CISA nominee Sean Plankey named US CEO of defense startup appeared first on CyberScoop.

The Senate’s top Democrat called on the Department of Homeland Security Friday to work closely with state and local governments to defend against artificial intelligence-strengthened hacks. 

Senate Minority Leader Chuck Schumer, D-N.Y., wrote to DHS Secretary Markwayne Mullin to make sure state, local, tribal and territorial (SLTT) governments aren’t left behind as AI models advance, posing new hacking threats.

“There is a race between cybersecurity defenders and AI-enabled hacking — and there’s no time to waste,” Schumer wrote.

“While the White House has reportedly begun hosting meetings about its internal security priorities following these frontier AI cyber breakthroughs, it is glaringly obvious that the Department of Homeland Security needs an updated plan for coordinating these efforts with [state, local, tribal and territorial] governments and implementing procedures to reduce the risk of disruptive cyberattacks enabled by frontier AI,” he stated.

Schumer said he was worried about the capabilities of DHS and its Cybersecurity and Infrastructure Security Agency to carry out that coordination, given federal funding cuts to the Multistate Information Sharing and Analysis Center, and the lack of a Senate-confirmed CISA director for the duration of the second Trump administration.

Schumer wants a plan from DHS by July 1 on coordinating with state and local governments on a range of questions, such as how to identify top AI talent, carry out rapid patching and conduct risk assessments.

“AI is changing the cyber battlefield fast — and we cannot let hackers get there first,” Schumer said in comments accompanying the letter. “Hospitals, power grids, water systems, schools, elections, and emergency services cannot be left exposed while criminal gangs and state-backed hackers race to exploit new AI tools. DHS must immediately help states and localities find and fix vulnerabilities before Americans are hit with outages, disruptions, and attacks that could put lives and livelihoods at risk.”

CISA is using AI to help on the defensive side internally, agency officials recently said.

The post Sen. Schumer seeks DHS plan on AI cyber coordination with state, local governments appeared first on CyberScoop.