Cybersecurity Watchdog in Turmoil: CISA Loses Key Leaders

The US Security Authority Cybersecurity and Infrastructure Security Agency (CISA) is facing a massive change: a large part of the managers have already left the authority or will do so by the end of the month.

Hard break in hard time

This emerges from an internal email that the specialist portal Cybersecurity Dive is present. In view of this, experts warn of an impending loss of expertise and strategic leadership – of all times in a time growing tensions with foreign opponents in the cyber room. Five of the six major operational departments of the authority lose their management, as are six of the ten regional branches. Steve Harris (infrastructure security), Trent Frazier (stakeholder engagement) and Juan Arratia (contract system) have already been eliminated.

Further departures are imminent, including Matt Hartman, Vice Director of the Cybersecurity Department, as well as Boyden Rohner, Head of Integrated Coordination. Important managers in the regions – such as in New York, Atlanta, Chicago and Seattle – also leave the authority.

This development meets Cisa in a critical phase. The authority is considered a central instance for the protection of critical infrastructures in the USA – for example in the areas of energy, telecommunications and health. Your regional teams play a key role in cooperation with states, municipalities, private security companies and international partners.

USA are vulnerable

The unrest grows internally. “It feels like the wrong people are going,” said an anonymous employee. The multitude of departures have doubts as to whether the agency can continue to do justice to its task. Suzanne Spaulding, former head of the predecessor of Cisa, was also concerned: the loss of so many experienced managers makes the country more vulnerable to cyber threats.

Despite the tense situation, CISA director Bridget Bean tried for optimism: “We continue to meet our legal mandate to protect critical infrastructures. The team, which is now on board, is ready to counter the growing threats.” Nevertheless, it remains unclear how the authority wants to compensate for the loss of know-how in the short to medium term- and whether it can hold the trust of its partners.