Congress Proposes $268 Million Budget Cut for CISA

The Congress of the United States proposed a bicameral funding bill for fiscal 2026 that would reduce the Cybersecurity and Infrastructure Security Agency's budget by nearly $268 million, bringing the total to approximately $2.6 billion. The proposed cuts specifically target non-defense cyber funding, including $22.2 million from vulnerability management, $17.5 million from threat hunting, and the complete elimination of procurement funding for the National Cybersecurity Protection System. To offset these reductions, the bill earmarks $40 million for election security and $20 million for targeted hiring.

These financial constraints follow a period of volatility for CISA. Acting Director Madhu Gottumukkala testified before the House Homeland Security Committee that the agency has stabilized after losing approximately 1,000 employees—nearly a third of its staff—during a Trump administration effort to shrink the federal government. The agency currently employs over 2,400 personnel.

Lawmakers are divided over the strategy. Republican representatives argue that a narrower, more technical focus will improve security outcomes. Conversely, Democrats warn that these cuts will erode cybersecurity gains and leave federal networks vulnerable to threats from China, Russia, and Iran. While Congress cautioned that staffing should not be reduced to levels that hinder statutory missions, CISA spokesperson Marci McCarthy stated that budget pressures have not altered the agency's core operational priorities.