House Democrats would make CISA audit its own workforce after about 1,000 departures
House Democrats introduced a bill ordering CISA to measure its threat hunting, incident response and Joint Cyber Defense Collaborative staffing against its mission, and to report the gaps to Congress.
The Watch · Security desk
What happened
- A group of leading House Democrats introduced legislation Monday requiring CISA to assess whether its workforce is still up to the task after about 1,000 employees left during Trump's second term.
- Rep. James Walkinshaw, a Virginia Democrat, is lead sponsor, joined by Bennie Thompson of Mississippi and Delia Ramirez of Illinois.
- CISA is trying to hire hundreds of new personnel at the same time its latest budget blueprint asks for further funding reductions.
Why it matters
- Who's exposed exposure Defenders whose runbooks name a federal escalation path, or who sit in the Joint Cyber Defense Collaborative, are relying on an assumption about which CISA functions kept their staff. No published figure backs it up.
- What it limits constraint The sponsors are all minority members, so the count gets produced only if Republicans who approved part of the cuts move the bill.
- Who has to decide decision A review that names gaps hands appropriators a specific list to fund; one that reports adequacy makes the case for restoring CISA money harder to argue.
- What doesn't add up contradiction Hiring hundreds while requesting deeper cuts means the staffing trend cannot be read off either document on its own.
Next story · Security · Oct 5
Healthcare cybersecurity bill that lapsed in 2024 clears the Senate by unanimous consentConfirmed2 publishers
Force structure assessments belong to the military branches, and Congress has ordered one before, for Cyber Command [10]. The version in this bill would ask whether CISA still has the necessary personnel, training and certifications after budget cuts and Trump-era departures [3]. Six further areas are written into the review: the security of federal IT systems and support for state and local governments; the risks posed by AI, quantum computing and other cutting-edge technologies; threat hunting and incident response; support for critical infrastructure and operating technology, including CISA's role as a sector risk management agency; the operation of the Joint Cyber Defense Collaborative; and international cooperation [14][15].
The figure driving the bill is a headcount. Around 1,000 employees left during President Trump's second term [2]. The CyberScoop account does not break those exits out by function, so which of the six areas lost people, and at what grade, is unknown.
Walkinshaw said: "Congress needs a clear accounting of whether CISA has the workforce, skills, and resources required to keep Americans safe and enable mission delivery" [5]. The bill would produce that accounting. It does not show that CISA's advisories, its scanning support or its incident response have slowed. The concern is that the staffing cuts hit those areas hard enough to hurt the agency's core functions [9].
Thompson said that after Trump has spent the past two years targeting and slashing CISA's workforce, the agency needs to assess whether it has the right personnel in place to fulfill its mission [8]. Ramirez faulted Republican lawmakers for "a lack of interest in safeguarding our nation's cybersecurity and our residents' civil rights and privacy" in going along with the cuts [7]. Thompson and Ramirez are the ranking Democrats on the committee and subcommittee that would handle the bill [6]. Republicans have voiced concern about the scope of the cuts, approved some of them and pushed back on others [11].
CISA is meanwhile seeking to hire hundreds of new personnel, while its latest budget blueprint calls for further funding reductions [12].
On a separate track, National Cyber Director Sean Cairncross has discussed White House plans for a cybersecurity academy to consolidate and enhance existing federal cyber training and education programs, aimed at workforce shortages; his office has reportedly drafted an executive order establishing it [13]. CyberScoop says the order is still waiting on a signature.
What to watch
- Whether the Republican-led House Homeland Security Committee gives the bill a hearing or markup.
- Whether the executive order establishing the federal cybersecurity academy is signed and published.
- Whether CISA's hiring of hundreds closes before the reductions in its latest budget blueprint take effect.
Clarity's read
What the record supports and how the coverage leans. The claims behind it follow.
Reality
- Evidence58
- Adoption
- Not scored
- Hype gap+10
- Incentives72
- Confidence62
Claim ledger
Ranked by verification strength, evidence, and original report placement.
- [1]
A group of leading House Democrats introduced legislation Monday requiring the Cybersecurity and Infrastructure Security Agency to conduct an assessment of its workforce to determine whether it is up to the task after the exit of around 1,000 employees during President Donald Trump's second term.
- [2]
Around 1,000 employees exited CISA during President Donald Trump's second term.
- [3]
The CISA Force Structure Assessment Act would order the agency to carry out a review of whether it still has the necessary personnel, training and certifications after budget cuts and other Trump-era departures.
- [4]
Rep. James Walkinshaw, a Virginia Democrat, is the lead sponsor of the bill.
- [5]
"Congress needs a clear accounting of whether CISA has the workforce, skills, and resources required to keep Americans safe and enable mission delivery," Walkinshaw said in a news release.
- [6]
Also sponsoring the bill are the top Democrat on the House Homeland Security Committee, Bennie Thompson of Mississippi, and the top Democrat on its cybersecurity subcommittee, Delia Ramirez of Illinois.
- [7]
Ramirez dinged GOP lawmakers for "a lack of interest in safeguarding our nation's cybersecurity and our residents' civil rights and privacy" in going along with the CISA cuts and other developments at the Department of Homeland Security.
- [8]
"After Trump has spent the past two years targeting and slashing CISA's workforce, we need the agency to assess if it has [the] right personnel in place to fulfill its mission," Thompson said.
- [9]
Some lawmakers and other observers have worried those areas have been greatly impacted by staffing cuts, ultimately hurting CISA's ability to carry out its core functions.
- [10]
The concept of a force structure assessment is more common in military branches, including one that Congress previously ordered for Cyber Command.
- [11]
Lawmakers on both sides of the aisle have voiced concern about the scope of cuts at CISA, but Republicans have approved some of them while pushing back on others.
- [12]
CISA is currently seeking to hire hundreds of new personnel, even as its latest budget blueprint calls for yet more funding reductions.
- [13]
National Cyber Director Sean Cairncross has discussed White House plans to develop a cybersecurity academy meant to consolidate and enhance existing federal cyber training and education programs, with the aim of addressing cyber workforce shortages, and his office has reportedly drafted an executive order that would establish that academy.
- [14]
Additional elements of the force structure assessment would include a review of the security of federal IT systems and support for state and local governments; the risks posed by AI, quantum computing and other cutting edge technologies; CISA's threat-hunting and incident response capabilities; support for critical infrastructure and operating technology, including CISA's role as a sector risk management agency for a number of industry sectors; the operation of the Joint Cyber Defense Collaborative; and international cooperation.
- [15]
The bill enumerates six additional review areas beyond personnel, training and certifications.
Sources
2 independent publishers whose own reporting we read for this story.
- cyberscoop.comDems seek top-to-bottom assessment of CISA workforce
1 article · September 21, 2026
- Rep. Walkinshaw
walkinshaw.house.gov
1 article · September 22, 2026
Topics and entities
Topics
- Federal cybersecurity workforce
- US cybersecurity legislation
Entities
- House Homeland Security Committee
- US Cyber Command
- Joint Cyber Defense Collaborative
- Sean Cairncross
- CISA Force Structure Assessment Act
- CISA
- James Walkinshaw