Amid growing unrest over federal cybersecurity readiness, the Acting Director of the U.S. Cybersecurity and Infrastructure Security Agency (CISA), Nicholas Andersen, provided a stark warning to House lawmakers on Wednesday regarding the escalating risks posed by an ongoing Department of Homeland Security (DHS) shutdown. During a recent hearing, Andersen highlighted that staffing shortages and operational pauses are severely limiting the agency’s ability to proactively defend against cyber threats targeting both federal networks and critical infrastructure.

During his testimony before the House Homeland Security Committee, Andersen expressed grave concerns about the impact of funding lapses on CISA’s operational capabilities. Approximately 60% of the agency’s workforce has been furloughed, leaving only a fraction of personnel available to perform essential mission functions. These remaining employees are operating without pay, all while they face mounting pressures from nation-state actors and cybercriminals alike, who are increasingly targeting the nation’s vital infrastructure.

“The remaining personnel are executing critical operations, but the resources available are far from adequate for addressing the growing threats,” Andersen articulated to the lawmakers. He emphasized that while basic operations, such as the agency’s 24/7 operations center and vulnerability sharing exist, the narrowed mission scope significantly restricts CISA’s overall effectiveness in mitigating risks. “These necessary functions are becoming insufficient to stay ahead of an evolving threat landscape,” he stated.

Andersen elaborated that operational constraints permeate nearly all facets of CISA’s work. With proactive cybersecurity services, stakeholder engagement, and long-term strategic planning efforts curtailed or halted, the agency has found itself struggling to coordinate effectively with private sector entities, state and local governments, and other federal agencies. These disruptions are already having a noticeable impact, especially concerning the agency’s policy work, including cybersecurity incident reporting rules, which have faced delays, alongside multiple planned town halls being temporarily canceled.

As the agency grapples with these ongoing challenges, Andersen stated that CISA is currently facing around 1,000 vacancies and highlighted concerning trends regarding staff retention. Recently, an alarming incident occurred in which six members of a specialized threat-hunting team resigned within a single day. He underscored the detrimental effects the prolonged shutdown could have on CISA’s future recruitment and retention efforts, despite receiving permission to hire 329 new employees, a move aimed at replenishing the depleted workforce.

The uncertainty surrounding leadership within CISA compounds these difficulties. The agency has been without a Senate-confirmed director for over a year, which has further complicated efforts to stabilize and rebuild the agency after experiencing significant cuts and organizational restructuring.

At a time when the cybersecurity landscape is fraught with risks, Andersen noted that the timing of the shutdown is particularly troubling. The agency is preparing for several high-profile events, including the upcoming America 250 celebration and the FIFA World Cup. Both events will require extensive coordination between cyber and physical security efforts, raising the stakes for a robust cybersecurity posture.

“As the shutdown drags on, the compounded risk within this dynamic threat landscape could lead to real harm for the American populace,” Andersen justified, warning that each day the shutdown persists increases the potential for adversaries to exploit vulnerabilities created by the diminished federal cybersecurity capacity. The challenges ahead appear daunting, as CISA wrestles with its role in safeguarding critical infrastructure amidst an uncertain operational environment.