La CISA (Cybersecurity and Infrastructure Security Agency) is a U.S. government agency attached to the Department of Homeland Security. Department of Home Security (Department of Homeland Security, DHS).
Created in 2018, this national cyber security authority s primary mission is to protect the United States' critical infrastructure and strengthen its security. cyber security national response to cyber and physical threats.
CISA budget (2025) : 3 billion
CISA workforce (2025) : 3,641 full-time equivalents (FTEs) out of a total of 4,021 positions
🎯 Main tasks
- Critical infrastructure protection :
- Monitors and secures essential sectors (energy, transport, health, water, telecommunications, etc.) against terrorist attacks. cyber attacksor malicious acts.
- Cybersecurity :
- Coordinates the defence of government and private networks against cyber threats (ransomwareespionage, state attacks).
- Implements tools such as Shields Ready (preparation) and Shields Up (heightened alert) for organisations.
- Emergency management :
- Ensures resilience emergency communication systems (e.g. network FirstNet for public services).
- Raising awareness and working together :
- Publishes safety notice (e.g. : vulnerabilities best practice).
- Collaborates with public (FBI, NSA), private and international partners.
🔑 Key activities
- Risk analysis Identifies and assesses vulnerabilities in critical systems.
- Incident response Response: Responds to major cyber attacks (e.g. ransomware attacks on hospitals).
- Standards and guides Security: Proposes security frameworks (e.g. recommendations for the cloud, IoT).
- Awareness campaigns Initiatives such as "Cybersecurity Awareness Month to educate the public.
📣 Target audience
CISA is aimed at a wide audience, including :
- Government organisations (federal, state and local)
- Critical infrastructure operators (companies managing energy, transport, health, etc.)
- Private companies of all sizes, whatever their sector of activity
- Local authorities (cities, counties, regions)
- The general publicthrough its awareness campaigns.
Impact and scope
- National Protects the strategic interests of the United States (e.g. elections, energy networks).
- International Cyber: working with allies (NATO, EU) to combat transnational cyber threats.