Cybersecurity at Risk: How CISA Budget Cuts Threaten Digital Safety

Cybersecurity at Risk: How CISA Budget Cuts Threaten Digital Safety

At a glance

• CISA cuts: Recent reductions at the Cybersecurity and Infrastructure Security Agency (CISA) could weaken national cyber defense.
• What is at risk: The cuts could limit CISA’s ability to protect critical infrastructure from attack.
• Industry concern: Executives, like Tom Cronkright from CertifID, are warning about the consequences.
• Next steps: Many in industry want resources directed where they protect the most people.

Cuts at the agency that coordinates cyber defense

Attacks on U.S. networks have not slowed. Against that backdrop, cuts to staff and funding at the Cybersecurity and Infrastructure Security Agency (CISA) have alarmed people across the tech industry and beyond. CISA leads the federal effort to protect U.S. critical infrastructure and civilian government networks, and the cuts could affect how much of that work it can do.

Security professionals are asking what happens to services that businesses and local governments have come to rely on.

What CISA does

CISA was created to coordinate the defense of the country’s critical infrastructure and federal civilian networks. It works with sectors such as banking and healthcare. An outage there hurts people quickly.

As attacks grow in number and skill, CISA’s role has expanded. It publishes threat intelligence and alerts. It also advises private companies and public agencies on security practices.

Industry concerns

Tom Cronkright, co-founder and executive chairman of fraud prevention company CertifID, is among those raising concerns. In an interview with HousingWire in March 2025, he warned that the cuts could weaken the threat intelligence and guidance that mortgage and title companies rely on. He argued that attacks are getting more sophisticated, including AI-enabled fraud and email compromise, which makes CISA’s role more important, not less.

Many security leaders share that view and want federal funding to keep pace with the threats.

Effects on defense

Tighter budgets could force CISA to focus only on the most urgent threats, at the cost of long-term planning. The effects reach beyond government. Businesses depend on CISA’s guidance. So do consumers.

There is also a risk that cooperation between CISA and private companies shrinks. Those partnerships are how threat intelligence gets shared and how breaches get contained quickly.

Calls to rethink the cuts

Security experts and some lawmakers are asking for a fresh look at where federal cyber money goes. They argue that cybersecurity is national security, and that cuts to agencies like CISA should be weighed against that.

Many in industry say protecting the country’s digital infrastructure should stay a priority even as budgets tighten.

What businesses should plan for

Cybersecurity underpins trust and commerce. The CISA cuts show how quickly a budget decision can change the support companies count on.

Organizations that rely on CISA alerts and guidance should line up other sources too, such as their sector’s information sharing and analysis center (ISAC) and their vendors’ threat intelligence.

Local governments and small businesses that used free CISA services should confirm which ones are still offered and plan for any gaps.

John King, CISSP, PMP, CISM

John King currently works in the greater Los Angeles area as a ISSO (Information Systems Security Officer). John has a passion for learning and developing his cyber security skills through education, hands on work, and studying for IT certifications.