National Society of IT Service Providers
PO Box 3948, Parker, CO 80134
admin@nsitsp.org | www.nsitsp.org
Position Statement Regarding Changes to the Cybersecurity and Infrastructure Agency (CISA)
by the National Society of IT Service Providers
The purpose of this document is to express the position of the National Society of IT Service Providers’ (NSITSP) Board of Directors regarding the recent changes at the Cybersecurity and Infrastructure Security Agency (CISA). We believe that the reduction in purpose and removal of industry advisory will have profound negative consequences for the cybersecurity of our nation.
CISA has become an essential pillar in safeguarding our critical infrastructure and digital assets. Its oversight and duties are vital in ensuring a coordinated response to cyber threats, promoting best practices, and facilitating collaboration between the public and private sectors. The reduction of the purpose of the CISA would lead to several detrimental effects:
1. Increased Vulnerability: CISA plays a critical role in protecting the nation’s critical IT infrastructure. Without its support, our nation will face increased vulnerabilities and threats, putting critical systems and data at risk. In 2024, CISA played a vital role in exposing and defending against attacks on United Health Care, which then led to better reporting and defenses for the nation.
2. Loss of Guidance and Support: CISA provides essential resources, guidelines, and best practices for cybersecurity. The dismantling of this agency could result in a lack of standardized practices, making it more challenging for IT service providers to implement effective security measures and comply with regulations.
3. Economic Impact: The cybersecurity sector is a significant part of the economy. If CISA’s role is reduced, it could lead to a loss of confidence in the federal government’s ability to protect critical infrastructure. International organized crime is attacking our nation at an ever higher frequency and a divestment in cyber defenses could embolden them further. A reduced role for CISA may also deter investment in cybersecurity services and technology, negatively impacting IT service providers’ growth and sustainability.
4. Collaboration and Information Sharing: CISA facilitates collaboration between the government and private sector, allowing for information sharing regarding threats and vulnerabilities. Without this collaboration, IT service providers may miss out on vital intelligence that could help them protect their clients more effectively. Criminal attackers thrive on imperfect information creating great risks.
5. Regulatory Challenges: The absence of a centralized authority like CISA could lead to a fragmented regulatory environment, with varying state and local regulations. This inconsistency could create compliance challenges for IT service providers, increasing operational complexity and costs for their clients.
6. Public Trust: The dismantling of CISA may erode public trust in the government’s commitment to cybersecurity. IT service providers often rely on their clients’ confidence in their services, and any perception of increased risk could harm their business relationships. It takes everyone in the nation, not just the government, to address cyber security, but without leadership from the top, local governments and businesses will not feel the urgency necessary to make the investments in improving our national cyber defenses.
The National Society of IT Service Providers believes the reduction of CISA’s role would compromise cybersecurity efforts, hinder economic growth in the technology sector, and create a less secure environment for both IT service providers and their clients. For these reasons, we urge decision-makers to maintain CISA’s oversight and functions as a crucial component of the Department of Homeland Security. We believe that a robust cybersecurity framework is essential for our nation’s safety and our industry’s prosperity.
The NSITSP has the following recommendations:
- Re-instate the CISA advisory committees
- NSITSP members have been willing in the past to sit on the advisory boards to represent the voice of IT service professionals
- Limit reductions in force at CISA to maintain the critical cybersecurity functions
- Maintain the scope of CISA to protect public and private sectors and critical infrastructure
- Keep CISA within DHS.
We stand ready to support efforts that strengthen rather than reduce our cybersecurity infrastructure. Should you have any questions about the National Society of IT Service Providers or this statement, please contact admin@nsitsp.org.
Responses