CISA replaces acting director following tumultuous tenure

The Cybersecurity and Infrastructure Security Agency (CISA), which serves as the U.S. federal government agency responsible for cybersecurity, has replaced its acting director, Madhu Gottumukkala. According to a statement shared on Friday by CISA spokesperson Marci McCarthy, Nick Andersen will step in to replace Gottumukkala as the agency’s new acting director. Gottumukkala is transitioning to a new position within the Department of Homeland Security, the parent agency of CISA that is led by Secretary of Homeland Security Kristi Noem. This leadership transition follows a highly unstable period for the agency, during which overall staffing at CISA was slashed by one-third of its employees.

Gottumukkala’s tenure as acting director was marked by internal controversy and what has been characterized as a bumbling year on the job. Reports concerning his leadership allege that he struggled to lead the agency and caused security headaches for the organization. Among these security issues, Gottumukkala uploaded sensitive government documents to ChatGPT, according to reports. He also reportedly failed a counterintelligence polygraph—a specialized lie detector test used for security clearance purposes. Despite these reported security incidents and leadership difficulties, CISA spokesperson Marci McCarthy defended his record, stating that Gottumukkala had done a “remarkable job.”

The departure of the acting director is part of a broader wave of departures among senior leadership at the agency. On Thursday, the publication Nextgov reported that CISA lost another top senior official, Bob Costello, who served as the agency’s chief information officer. These high-level departures occur while CISA continues to operate without a permanent, Senate-confirmed leader. A permanent appointment requires a majority vote of approval through the Senate-confirmed U.S. legislative approval process. According to McCarthy, the Trump administration has selected Sean Plankey to serve as the permanent director of CISA, and the White House formally re-nominated Plankey to head the agency in January. However, the Senate has not yet scheduled a nomination hearing for him.

Plankey’s nomination has faced delays in the Senate. U.S. Senator Ron Wyden previously blocked Plankey’s nomination to lead the agency. Wyden’s block on the nomination was tied to demands regarding the agency’s response to international hacks. Specifically, the block followed hundreds of hacks targeting U.S. and international phone and internet providers. These hacks were carried out by Salt Typhoon, a China-backed hacking group.

Why it matters

The Cybersecurity and Infrastructure Security Agency (CISA) remains in a state of flux, operating without a permanent Senate-confirmed leader while navigating significant internal turnover and high-profile security challenges.