Policy · 47 days ago
CISA acting director Nick Andersen warned Wednesday that staffing shortages, overwhelming technical debt, and AI-driven threats could leave the agency unable to meet the next major cyber crisis. He said about 250 already-cleared hires are still waiting on security clearances, even as the agency tries to refill vacancies created by cuts and attrition.
The problem is less a new attack than the response layer itself: if CISA is short-handed and its systems are weighed down by old technology, it has less ability to coordinate, surge, and guide others when incidents hit at scale. Andersen described AI as a force multiplier that could swamp already strained defenders.
For federal agencies and critical-infrastructure operators that look to CISA as the national backstop, the open question is how much help will still be available when a crisis arrives. The exposure that matters here is not one product or network, but the capacity of the institution expected to steady everyone else.
5 sources covering this story
CISA Calls for More Guidance, Less Spin, as Outages Escalate
A new joint government advisory presses organizations to adopt more transparent breach notification and incident response protocols.
CISA Updates Insider Threat Guide With New Mitigation Advice
CISA has updated its insider threat guide with new advice on remote work, AI and risk detection
CISA urges critical infrastructure to strengthen insider threat programs against cyberattacks, data theft and sabotage.
CISA is on the verge of filling hundreds of critical vacancies
The agency is also working to finalize an incident-reporting regulation and set up a new industry coordination structure, its acting director said.
The Record from Recorded Future
CISA head says agency must change quickly to prevent the 'worst that could happen'
CISA's cybersecurity, infrastructure security and emergency communications divisions are among the priorities as the agency fills vacancies created at the beginning of the Trump administration, acting director Nick Andersen says.
Part of the PlainSec briefing for 2026-09-14