What happened
A new federal budget proposal would cut hundreds of millions of dollars more from CISA, sharply reducing funding for the agency’s cybersecurity and critical infrastructure work. The fiscal 2027 proposal would reduce CISA’s total by $707 million, according to the budget summary, though another budget document points to a smaller but still significant $361 million reduction. The budget appendix says CISA would end up with slightly more than $2 billion in discretionary funding under the plan. The proposal says the budget would refocus CISA on federal network defense and the security and resilience of critical infrastructure while eliminating what it describes as weaponization and waste. The summary also repeats language used in the prior budget cycle and refers to programs that had already been ended.
Who is affected
The direct impact would fall on CISA and the federal government programs it supports. The proposal is also relevant to critical infrastructure operators and government agencies that rely on CISA’s work in network defense, resilience, and broader cybersecurity coordination.
Why CISOs should care
This matters because the proposal would further reduce the size of a central federal cybersecurity agency at a time when cyber threats against government and critical infrastructure remain a major concern. It also raises questions about how much support, coordination, and operational capacity CISA would be able to sustain if Congress enacted the latest funding blueprint.
3 practical actions
- Review dependence on federal support: Identify where your organization relies on CISA programs, coordination, or services so leadership understands what could be affected by deeper cuts.
- Plan for reduced central capacity: Assess whether fewer federal resources could affect information sharing, resilience support, or operational coordination tied to government and critical infrastructure cybersecurity.
- Track the budget process closely: Monitor how the proposal changes in Congress, since the final funding level and scope of the reductions remain unsettled.
For more news about federal cyber policy and government security developments, click Cybersecurity to read more.