Key Takeaways
- The Congressional appropriators have announced funding legislation that extends the Cybersecurity and Information Sharing Act of 2015 through the end of the current fiscal year, September 30.
- The legislation provides $2.6 billion for the Cybersecurity and Infrastructure Security Agency (CISA), including money for election security and directives on staffing levels.
- The package also extends the expiring State and Local Cybersecurity Grants Program through the end of fiscal 2026 and the Technology Modernization Fund through September 30.
- The funding bill gives the Department of Homeland Security (DHS) a commandment on CISA staffing levels, which have been significantly reduced under the Trump administration.
- The fate of the minibus depends on several factors, including the thin GOP House majority and rising Democratic opposition to funding for the Immigration and Customs Enforcement agency.
Introduction to the Funding Legislation
The Congressional appropriators have announced a funding legislation package that extends an expiring cyber threat information-sharing law and provides $2.6 billion for the Cybersecurity and Infrastructure Security Agency (CISA). This package, also known as a "minibus," is a collection of several spending bills aimed at keeping the government funded past a January 30 deadline. The legislation includes an extension of the Cybersecurity and Information Sharing Act of 2015 through the end of the current fiscal year, September 30, which provides legal protections for sharing cyber threat data between companies and the government.
Extension of Cybersecurity Laws
The Cybersecurity and Information Sharing Act of 2015 has been a crucial law in facilitating the sharing of cyber threat data between companies and the government. However, the law has been set to expire, and industry and the Trump administration have been seeking a 10-year extension. Although a deal on Capitol Hill has proven elusive, the latest minibus package extends the law through September 30. Additionally, the package extends the expiring State and Local Cybersecurity Grants Program through the end of fiscal 2026. This program provides funding for state and local governments to improve their cybersecurity capabilities and has been temporarily expired during the government shutdown before being included in broader government funding legislation that extended it through January 30.
Funding for CISA and Election Security
The legislation provides $2.6 billion for CISA, which is less than the agency’s budget at the beginning of the Trump administration. The agency’s budget has been a subject of concern, with President Donald Trump seeking nearly half a billion dollars less than the previous budget. However, the funding bill includes $39.6 million for continuing election security programs, including election security advisers in each CISA region across the country and the continuation of the Elections Infrastructure Information Sharing and Analysis Center (EI-ISAC). The EI-ISAC has been a critical component of the country’s election security efforts, and its continuation is a significant development in the ongoing efforts to protect the integrity of the electoral process.
CISA Staffing Levels and Funding
The funding bill also gives the Department of Homeland Security (DHS) a commandment on CISA staffing levels, which have been significantly reduced under the Trump administration. The bill states that CISA shall maintain a workforce consistent with the personnel and full-time employee (FTE) funded by the pay and non-pay amounts provided in the Act. This means that CISA shall not reduce staffing in such a way that it lacks sufficient staff to effectively carry out its statutory missions, including cybersecurity and infrastructure security for federal civilian executive branch agencies, state, local, tribal, and territorial partners, and other stakeholders. This directive is significant, as it ensures that CISA has the necessary resources and personnel to carry out its critical mission.
The Fate of the Minibus
The fate of the minibus depends on several factors, including the thin GOP House majority and rising Democratic opposition to funding for the Immigration and Customs Enforcement agency. The House Appropriations Committee has touted the DHS spending bill, saying that it delivers the personnel, training, and technology to reinforce security at every level. However, the bill’s passage is uncertain, and its fate will depend on the negotiations between the House and Senate. The minibus package is a critical component of the government’s efforts to address the ongoing cybersecurity threats and protect the country’s critical infrastructure.
Conclusion
In conclusion, the funding legislation package announced by the Congressional appropriators is a significant development in the ongoing efforts to address the country’s cybersecurity threats. The extension of the Cybersecurity and Information Sharing Act of 2015, the funding for CISA, and the directives on staffing levels are all critical components of the government’s efforts to protect the country’s critical infrastructure. However, the fate of the minibus remains uncertain, and its passage will depend on the negotiations between the House and Senate. As the country continues to face increasingly sophisticated cybersecurity threats, the passage of this legislation is crucial in ensuring that the government has the necessary resources and personnel to protect the country’s critical infrastructure.
