The White House has proposed a $707 million reduction in spending for the Cybersecurity and Infrastructure Security Agency (CISA) for fiscal year 2027, marking the latest and deepest attempt by the administration to shrink the nation’s primary cyber-defense body.
If approved by Congress, the cut would follow a period of significant volatility for the agency. During the first year of President Trump’s second term, CISA already saw millions in funding evaporate and lost approximately one-third of its workforce—roughly 1,000 employees—as part of an effort to streamline operations.
The administration argues that these measures are necessary to refocus CISA on its core mission. Still, the move has sparked warnings from former officials that the reductions could leave critical infrastructure more vulnerable to attack by degrading the coordination required to manage systemic cyber risks.
The “Censorship Industrial Complex” and Budgetary Logic
The administration’s justification for the funding slash is rooted in a long-standing ideological conflict over the role of government in monitoring online information. In the proposal, the administration claims CISA has turn into more focused on “censorship than on protecting the Nation’s critical systems,” alleging that the agency has suffered from poor management, inefficiency, and a tendency toward self-promotion.
This rhetoric echoes language previously used by the now-ousted Homeland Security Secretary Kristi Noem and the president himself. Much of the friction stems from CISA’s efforts to counter online disinformation, particularly regarding election security and the influence of foreign actors. The administration has characterized these efforts as part of a “Censorship Industrial Complex” used to target protected speech and violate the First Amendment.
To achieve this “refocus,” the fiscal year 2027 plan seeks to eliminate several specific functions:
- External Engagement: The removal of offices dedicated to council management, stakeholder engagement, and international affairs.
- Information Warfare: The elimination of programs targeting “so-called misinformation and propaganda.”
- School Safety: The removal of targeted school safety programs that the administration deems duplicative of existing state and federal initiatives.
A Pattern of Dismantling Cyber Oversight
The proposed $707 million cut is not an isolated event but the culmination of a broader strategy to reduce CISA’s footprint. The administration has consistently pushed for lower spending; for fiscal year 2026, the president initially sought a $491 million reduction, though Congress eventually settled on a smaller cut of approximately $135 million.
Beyond the balance sheets, the administration has moved quickly to shutter oversight bodies. On the first day of the second term, the Cyber Safety Review Board was abolished. That board had been conducting a critical investigation into “Salt Typhoon,” a Chinese hacking operation that successfully compromised U.S. Government and telecommunications networks.
This action also resulted in the closure of several other advisory committees under the Department of Homeland Security, including:
- The Artificial Intelligence Safety and Security Board
- The Critical Infrastructure Partnership Advisory Council
- The National Security Telecommunications Advisory Committee
- The National Infrastructure Advisory Council
- The U.S. Secret Service Cyber Investigations Advisory Board
| Fiscal Period | Proposed Reduction | Actual/Approved Reduction | Key Impact |
|---|---|---|---|
| FY 2026 | $491 Million | ~$135 Million | Initial funding contraction |
| First Year (Term 2) | N/A | Millions / ~1,000 Staff | Workforce reduction (1/3) |
| FY 2027 (Proposed) | $707 Million | Pending | Removal of engagement offices |
Impact on State and Local Defenses
While the administration focuses on federal “censorship,” the practical effect of these cuts is being felt most acutely at the state and local levels. In March 2025, CISA cut $10 million in funding—nearly half of its total budget—for the Multi-State Information Sharing and Analysis Center (MS-ISAC). The center provides essential, low-cost threat detection and response services for local governments that lack the resources to build their own sophisticated cyber defenses.
Six months later, the agency further severed ties and funding for the Center for Internet Security, a nonprofit that mirrors MS-ISAC’s mission by providing free and affordable cybersecurity tools to state and local entities. These cuts remove a critical safety net for smaller municipalities, which are often the easiest targets for ransomware and state-sponsored attacks.
The Risk to Critical Infrastructure
Critics argue that the administration is confusing political disagreement with operational inefficiency. A former CISA official, speaking on the condition of anonymity due to fear of political repercussions, stated that the proposal removes functions that are integral to the agency’s primary mission.
Managing cyber risk to critical infrastructure requires coordination across federal agencies, [State, Local, Tribal, and Territorial] governments, private operators, and international partners. The offices targeted here enable that coordination by supporting shared awareness, early warning, and aligned response. Eliminating external engagement and international functions will further degrade that coordination.
According to the former official, the result of these cuts is a systemic weakening of the U.S. Cyber defense posture. By reducing the ability to share intelligence and coordinate responses, the administration may be increasing the likelihood that preventable incidents escalate into disruptions of the essential services Americans depend on daily.
The White House and CISA have not yet provided clarification on why the FY 2027 proposal seeks to cut programs that have already been eliminated or defunded in previous months.
The next major checkpoint for these funding changes will be the congressional appropriations process, where lawmakers must decide whether to adhere to the administration’s proposed cuts or restore funding to protect critical infrastructure and local government security.
Do you believe the federal government should prioritize “core” cyber defense over disinformation monitoring, or does this leave the U.S. Too vulnerable? Share your thoughts in the comments.
Keep reading
