CISA's budget arc, across the vintages the record actually carries.

Cybersecurity and Infrastructure Security Agency · Department of Homeland Security

CISA was established in 2018 to lead the Nation's cyber and critical-infrastructure mission. Its recent funding tells a specific story: two continuing-resolution years that hold the prior level flat, an FY2026 amount enacted in law below that placeholder, and an FY2027 request that restructures the agency. This is the validated series the monitor carries — net discretionary by fiscal year, straight from the DHS Budget-in-Brief and the enacted appropriations act. There is no OMB Historical Table row for a single bureau, so we do not synthesize a longer arc.

First vintage in series

FY2027 request

net discretionary

CR → FY2027 change

FTE, FY2024 → FY2027

requested full-time equivalent

CISA net discretionary — the arc the monitor carries

$ in thousands · BIB vintage per year
loading…

Green bars are continuing-resolution years that hold the prior-year level flat. The amber marker on FY2026 is what was actually enacted in law — below the CR placeholder. The purple bar is the FY2027 President's request.

Reading the arc

For three years the topline barely moves — successive continuing resolutions carry the prior CISA level forward unchanged, which is why FY2024, FY2025, and FY2026 read as a flat line in the Budget-in-Brief. Two things break the flatline. First, the DHS Appropriations Act, 2026 enacted CISA belowthat CR placeholder. Second, the FY2027 request is a restructuring, not a trim: the agency's cyber mission is funded to defend Federal networks and critical infrastructure, the Office of Countering Weapons of Mass Destruction realigns into CISA, and election-security, CFATS, and the National Risk Management Center lines are proposed for elimination. The topline drop understates the churn underneath it — which is exactly why the appropriation-by-appropriation view matters.

See something to improve, want to request a change, or have a question? Leave a note — this monitor is built in public and we iterate live.