Federal cyber budgets trimmed
CSO reported the Trump administration’s 2027 civilian budget trims overall federal cybersecurity funding and proposes deep cuts at CISA, prompting emphasis on measurable outputs over broad programs. The coverage argued that tighter budgets will favour reusable, evidence‑rich controls and dashboards that can prove operational value to auditors and stakeholders. (csoonline.com)
The White House’s fiscal 2027 budget would cut total civilian federal cybersecurity spending from $12.455 billion to $12.228 billion, even though ransomware gangs and foreign intrusions are still hitting U.S. networks every week. (whitehouse.gov) (csoonline.com) The biggest target is the Cybersecurity and Infrastructure Security Agency, the Department of Homeland Security office that helps defend federal civilian networks and works with power companies, hospitals, water systems, and state governments. The administration’s proposal removes about $707 million in programs there, with a net reduction of about $360 million after transfers and adjustments. (nextgov.com) (cybersecuritydive.com) That cut is not just a smaller check. The budget justification says it would eliminate roughly 867 positions and shut down work in election security, stakeholder engagement, and some infrastructure protection programs. (nextgov.com) One of the clearest examples is election security. The proposal would end the agency’s election security program, remove dedicated election security advisers, and stop support for the Elections Infrastructure Information Sharing and Analysis Center that sends alerts and incident help to state and local officials. (nextgov.com) The administration says it is narrowing the agency back to “core mission” work. In budget language repeated across coverage, that means federal network defense and protection of critical infrastructure, while cutting programs the White House calls “duplicative,” “waste,” or tied to past misinformation efforts. (whitehouse.gov) (govexec.com) (cyberscoop.com) This is also a sequel to last year’s fight. In the 2026 cycle, the White House sought nearly $495 million in cuts to the same agency, and Congress restored about $361 million of that request before the budget became law. (csoonline.com) (govexec.com) So the immediate story is not “cyber spending disappears.” It is that money shifts away from broad, shared programs and toward places the administration can describe as direct operational output, while some departments still get more. The Department of Justice would rise by $312 million to $1.27 billion, and the State Department would rise by $174 million to $809 million. (csoonline.com) That split changes what survives inside agencies. A reusable control like multi-factor authentication on every employee account is easier to defend in a budget hearing than a general outreach office, because an inspector can count how many accounts are covered and how many attacks were blocked. (csoonline.com) The same logic applies to dashboards. If a chief information security officer can show patching rates, privileged-account reductions, incident response times, and audit findings on one screen, that program looks less like overhead and more like a machine with a speedometer. (csoonline.com) The catch is that many of the programs on the chopping block are the connective tissue. CISA’s stakeholder offices are the channels that link Washington to governors, county election officials, utilities, and private operators that own much of the country’s critical infrastructure. (nextgov.com) (govexec.com) Congress still writes the final budget, and last year lawmakers already showed they were willing to reverse part of these cuts. But the opening bid for 2027 is now clear: fewer broad cyber programs, fewer people at the main civilian cyber agency, and a much tougher test for anything that cannot prove its value with numbers. (whitehouse.gov) (csoonline.com)
