Press "Enter" to skip to content

CISA Faces Budget Cut Amid Growing Cyber Threats and Political Backlash

The United Nations General Assembly has unanimously adopted a non-binding resolution led by the US to ensure the safety, security, and trustworthiness of artificial intelligence (AI) design, development, and deployment. The resolution highlights the potential benefits of AI while emphasizing the need for safeguards and protections against its misuse. Although the resolution does not include enforceable measures, it sets a precedent for global regulation of AI and provides a framework for countries to develop their own policies.

There’s also been clarification on the role of NIST’s new AI Safety Institute.  At an event Monday, new director Elizabeth Kelly laid out aims to lead domestic and international discussions on standardization for artificial intelligence tools and applications, focusing on monitoring synthetically generated content.

And while I’m on legislation, the government spending bill includes a cut in funding for the Cybersecurity and Infrastructure Security Agency (CISA). The bill grants CISA $2.8 billion for fiscal year 2024, which is $35 million less than the previous year. The Senate is likely to approve the package without significant changes. CISA has emphasized the importance of funding for its operations in combating cyber threats. However, allegations of CISA working with tech platforms to censor conservative voices have led to growing GOP backlash and resistance to empowering the agency. Ongoing pressure from conservative critics has also affected CISA’s information-sharing initiatives.

Why do we care?

Today feels very tactical, keeping up with the moves. I continue to be inspired by companies building their own frameworks. I was having this conversation just this morning when considering the work to be ready for AI. Putting in place a framework in your customers’ organizations and focusing on data readiness are immediate opportunities.

I’d also be remiss if I didn’t point out that if you want to be selling cybersecurity, you should want a strong CISA that is investing in readiness and making it a societal priority.