CISA acting director Nick Andersen warned Wednesday that staffing shortages, overwhelming technical debt, and AI-driven threats could leave the agency unable to meet the next major cyber crisis. He said about 250 already-cleared hires are still waiting on security clearances, even as the agency tries to refill vacancies created by cuts and attrition.
The problem is less a new attack than the response layer itself: if CISA is short-handed and its systems are weighed down by old technology, it has less ability to coordinate, surge, and guide others when incidents hit at scale. Andersen described AI as a force multiplier that could swamp already strained defenders.
For federal agencies and critical-infrastructure operators that look to CISA as the national backstop, the open question is how much help will still be available when a crisis arrives. The exposure that matters here is not one product or network, but the capacity of the institution expected to steady everyone else.