CISA Slashes ISAC Funding; Impacts Hundreds of Cybersecurity Jobs Nationwide

Summary

• The Cybersecurity and Infrastructure Security Agency (CISA) ended about $10 million a year in funding for the MS-ISAC and EI-ISAC, run by the Center for Internet Security.
• The cuts come as threats against state and local governments keep rising.
• The cuts are projected to affect cybersecurity positions nationwide, sparking debate over priorities.
• Security experts say ISACs play an essential role in sharing threat intelligence.
• The move puts public-private partnerships back under review.

What the ISAC Cuts Mean

The Cybersecurity and Infrastructure Security Agency (CISA) in March 2025 cut its cooperative-agreement funding to the Center for Internet Security, which runs the Multi-State ISAC (MS-ISAC) and the Elections Infrastructure ISAC (EI-ISAC). The money came to about $10 million a year. These Information Sharing and Analysis Centers (ISACs) help state and local governments swap threat intelligence and respond fast to incidents.

Critics say the decision will be felt well beyond the two centers, with jobs at risk. It lands while attacks on public bodies grow in number and skill, which is exactly when ISACs matter most.

Why Funding Cuts Now?

CISA said the cuts would eliminate redundancies and let it focus on mission-critical work. Many experts disagree, arguing that ISACs have been vital in closing the information-sharing gap between public bodies and private firms.

Critics have compared the move to switching off an alarm system while a burglar is at the door. (Quotes attributed to unnamed analysts and professionals in an earlier version have been removed because we could not confirm them.)

Impacts on the Workforce

Staff in the sector are already anxious. ISAC jobs are a front line against cybercrime. Losing those people could open a talent gap that slows how quickly local governments can respond.

Losing experienced staff is a real worry when attackers keep changing tactics.

Industry Concerns and Reactions

The announcement set off a fierce debate. Security vendors and industry advocates have raised concerns. So have policymakers.

ISACs act as hubs for threat intelligence, enabling real-time information exchange. That role is part of national security infrastructure, because it helps coordinate response quickly at both local and international levels.

Industry voices are asking CISA to reconsider. Their worry is that the cuts will damage a cooperative system that took years to build.

Re-Imagining Public-Private Partnerships

The episode is a reason to rethink how public-private partnerships in security are funded. Better collaboration and targeted investment could leave both sides better prepared.

Restoring the money is one option. New frameworks for sharing threat intelligence are another, and the case for closer cooperation is clear while criminals keep using new tools to break in.

Where CISA and the ISACs Go Next

The cut comes at a sensitive time for national cyber strategy. It forces a conversation about matching funding to security priorities. As the story develops, policymakers will need a plan that keeps defenses strong.

Investing in talent and rethinking how resources are split could help. Losing sight of those priorities risks undoing years of progress. Stakeholders on all sides need to engage now.

John King, CISSP, PMP, CISM

John King currently works in the greater Los Angeles area as a ISSO (Information Systems Security Officer). John has a passion for learning and developing his cyber security skills through education, hands on work, and studying for IT certifications.