Security News

Uncertainty Over Who Will Lead CISA as Acting Director's Time Limit Nears

CyberScoop · 2 Nov 2026
Key Takeaway Leadership changes at government agencies like CISA can affect guidance and support, so make sure your business does not depend on any single source and keeps its own security basics, such as patching, multi-factor authentication and backups, up to date.

The clock is running down on Nick Andersen's time as acting director of the US Cybersecurity and Infrastructure Security Agency (CISA), according to CyberScoop. He has held the role since February. Sean Plankey withdrew his nomination for the Senate-confirmed position in April, and in June, Homeland Security Secretary Markwayne Mullin said a likely replacement had met with the president and a nomination was coming soon. Four months later, no nominee has appeared.

An acting director is limited to 210 days in the role. Mark Montgomery of the Foundation for Defense of Democracies said the easiest way to keep Andersen in place would be to name a nominee, which would pause that limit. He suggested there may be little appetite at the White House to raise CISA with the president, given his past animosity toward the agency. A DHS spokesperson said the department proudly supports Andersen's work, while the White House did not respond to questions.

Multiple sources told CyberScoop the administration has been working to keep Andersen in the job, possibly by changing his title to "senior official performing the duties of" CISA director. Some would like him to have the role full-time, but sources say the search to replace Plankey initially sought someone with a high profile, such as a role at a big-name tech company. This article covers only the opening of the original report.

CISA Cyber Policy Government Leadership

Summarised by CISO AI from CyberScoop, written with Claude Sonnet 5.5. We link back to every original so you can read it yourself.