What does the do?

Refreshed annually

The Cybersecurity and Infrastructure Security Agency (CISA) is a subdivision of the US Department of Homeland Security responsible for protecting the nation's critical infrastructure from physical and cyber threats. The agency works to enhance the security, resilience, and reliability of the nation's cyber and physical infrastructure through partnerships, information sharing, and risk management. It also provides resources, tools, and support to help organizations and individuals safeguard their systems and respond to incidents. It was established in 2018.

In FY 2025,

$1.12B

was spent by the Cybersecurity and Infrastructure Security Agency
In FY 2025,

1.0%

of Dept. of Homeland Security spending was by the Cybersecurity and Infrastructure Security Agency

How much does the Cybersecurity and Infrastructure Security Agency spend?

The Cybersecurity and Infrastructure Security Agency spent a net total of $1.12 billion in fiscal year (FY) 2025. This was 1% of the $115.3 billion spent by the Department of Homeland Security, which itself was 1.6% of all federal spending. The CISA ranked 9th among DHS subdivisions in net spending.
Net spending is the difference between agency spending and any financial accounts generating funds from the agency’s own activities, like fees or rent. When these funds offset all spending, net spending appears negative. Some agencies tend to operate with positive net spending while others will register negative net spending sometimes or often.

The Cybersecurity and Infrastructure Security Agency ranked 9th among Department of Homeland Security divisions in net spending in 2025.

DHS net spending by division, FY 2025

Like the overall federal budget, agency spending may shift over time due to population growth, changes in policy and programs, and emerging problems to address. Adjusting for inflation, the Cybersecurity and Infrastructure Security Agency’s federal spending has increased from $613.7 million in 2018 to $1.12 billion in 2025.

Get weekly insights

Subscribe for data-driven insights. No spin, just the facts.

The Cybersecurity and Infrastructure Security Agency’s federal spending in FY 2025 was higher than in FY 2018.

Yearly federal net spending by CISA, adjusted for inflation (2025 dollars), FYs 2018–2025

Since 2018, Cybersecurity and Infrastructure Security Agency spending has increased 82%, while overall spending has increased 32.8%.
As a percentage of the overall federal budget, a positive number means agency net spending made up some positive share of total federal spending; a negative number means that net generated funds offset a portion of total spending. CISA spending grew more than overall federal spending since 2018, which means that its share of the federal budget increased. In 2025, CISA accounted for 0.016% of overall federal spending.
Major legislation, internal or global economic conditions, and acute events like the COVID-19 pandemic can affect spending year to year. For example, the federal budget fluctuated during the pandemic, rising from $5.3 trillion (in 2023 dollars) in 2019 to $7.7 trillion in 2020 and $7.8 trillion in 2021.

The Cybersecurity and Infrastructure Security Agency’s share of federal spending in FY 2025 was higher than in FY 2018.

Net spending by CISA as a share of federal spending, FYs 2018–2025

Most federal spending can be categorized as direct or indirect. Direct spending refers to money the federal government spends on budget items such as federal programs, employee salaries, and debt interest. Indirect spending refers to federal transfers to state and local governments.
In FY 2025, all of the Cybersecurity and Infrastructure Security Agency's spending was direct.
The chart below outlines all net CISA spending.

How did the Cybersecurity and Infrastructure Security Agency spend its budget in 2025?

Federal government net spending isolated to CISA, FY 2025

How many people work for the Cybersecurity and Infrastructure Security Agency?

Some 2,231 of the 2.03 million total civilian federal employees work for the Cybersecurity and Infrastructure Security Agency as of May 2026. This is 19.5% fewer people than the division staffed in 2012.

The number of federal employees working for the Cybersecurity and Infrastructure Security Agency has decreased 19.5% since 2012.

Number of federal employees working for CISA, May 2012–2026

The Cybersecurity and Infrastructure Security Agency accounts for 0.1% of the overall federal workforce. As the number of federal employees has changed, so too has the way the workforce is organized, with resources allocated to agencies depending on government priorities. The division constituted a similar share of the overall federal workforce in May 2026 compared to 2012 (0.1%).
While the number of employees on an agency’s payroll contributes to that agency’s expenditures, some agencies have relatively few employees compared to their budget or vice versa, giving them an outsized share of either the budget or the workforce. According to the most recent data, the Cybersecurity and Infrastructure Security Agency’s share of the workforce (0.1%) is larger than its share of the budget (0.016%).

Who leads the Cybersecurity and Infrastructure Security Agency?

The CISA is led by a director. This individual is nominated by the President of the United States and requires confirmation by the Senate. The CISA director reports to the Secretary of Homeland Security. There is no fixed term for this position.

Keep exploring

Methodology

USAFacts standardizes data, in areas such as time and demographics, to make it easier to understand and compare.

Page sources

USAFacts endeavors to share the most up-to-date information available. We sourced the data on this page directly from government agencies; however, the intervals at which agencies publish updated data vary.