During her January 2025 confirmation hearing, Kristi Noem, nominated for secretary of homeland security, stated her intention to make the Cybersecurity and Infrastructure Security Agency (CISA) "smaller" and "more nimble." CISA was established by President Trump during his first term to enhance cybersecurity efforts. Following the agency's declaration of the 2020 presidential election's security, its director, Christopher Krebs, faced backlash from Trump for not supporting claims of election fraud. Subsequently, CISA's budget was reduced, and its staffing decreased by one-third. The agency has not had a permanent director since Trump's return to office, and proposed budget cuts have raised concerns among lawmakers regarding the vulnerability of U.S. infrastructure.
In June, Markwayne Mullin, Noem's successor, indicated a shift in strategy by proposing to add 600 positions at CISA. This comes amid ongoing cyber threats, particularly from Iran, which has targeted U.S. water systems, with attacks reported in over a dozen states. CISA, the FBI, and the EPA have warned of Iranian-affiliated hackers attempting to exploit vulnerabilities in U.S. systems. Despite the heightened threat, the Trump administration has focused on questioning election integrity, halting federal intelligence briefings for state election officials, and investigating the 2020 elections in several states.
The relationship between CISA and state election officials has become strained, with many Democratic officials expressing distrust in the agency's ability to support election security. Some state officials have resorted to collaborating with private contractors and local law enforcement instead of relying on CISA. Experts warn that the lack of federal support and the politicization of cybersecurity could undermine public confidence in democratic processes, especially as the midterm elections approach. Krebs noted that local governments cannot solely bear the responsibility for cybersecurity amid geopolitical conflicts, emphasizing the need for federal support.
CISA's role, intended to be nonpartisan, has been compromised, leading to skepticism among state officials regarding its reliability. As the U.S. faces potential cyber threats, particularly from Iran, the effectiveness of CISA in safeguarding critical infrastructure remains a pressing concern.