Post

CISA has terminated a $10m partnership w/ the Center for Internet Security to run the info sharing & analysis centers (ISACs) for state & local govts and elections. Spox says work "no longer effectuates [DHS] priorities" & cut will focus CISA on "mission critical areas" & "eliminate redundancies."

43 reposts78 likes

Signs already pointed to the closure of the elections ISAC (bsky.app/profile/eric...), but it's more surprising to see CISA end support for the state and local government ISAC, which has been a really helpful, resource-filled organization for local officials struggling with cyber threats.

Eric Geller@ericjgeller.com

There have already been some effects, however. The Elections Infrastructure Information Sharing the Analysis Center appears to be defunct. A notice on the website of its operator says it no longer supports the ISAC "due to the termination of funding" by DHS. www.cisecurity.org/ei-isac

Speaking of the ISACs: The National Association of Secretaries of State just shared a letter that it received from DHS Sec Noem responding to members' concerns about CISA ending the EI-ISAC and election security work. Noem said they can continue getting help through the MS-ISAC. Not anymore...

Is there an official release on the MS-ISAC decision? I’ve seen the EI-ISAC language on the CIS site but MS-ISAC still looks the same. FYI some of the largest cybersecurity training assistance for state and local goes through this in the form of voucher discounts for commercial training.

New: The Center for Internet Security says it's concerned that CISA cutting funding for CIS's MS-ISAC "will make state and local governments vulnerable to persistent cybersecurity attacks from foreign adversaries." CIS says it's working with MS-ISAC members to fill the gap left by CISA's decision.