In another significant move, the Multi-State Information Sharing and Analysis Center (MS-ISAC) has lost its federal funding due to redundancy with other services provided by the Cybersecurity and Infrastructure Security Agency (CISA). This decision is expected to save taxpayers approximately $10 million annually. While cost savings are always welcome, the impact on state and local cybersecurity operations cannot be overstated. Federal Funding Cut: MS-ISAC's loss of federal funding means state and local governments must now rely more heavily on CISA's services. This shift requires a strategic approach to ensure continued cybersecurity resilience. Cost Savings: While the $10 million annual savings seems like a clear benefit, it's crucial to balance this with the potential risks of losing specialized support that MS-ISAC provided to over 18,000 entities. It also adds strain to CISA, which has seen 130 positions cut this year so far. Impact on States: State and local officials valued MS-ISAC's resources, including intelligence briefings, incident response support, and penetration testing. The loss of these services will create gaps in their cybersecurity posture. It is not clear if CISA will be able to perform all functions of MS-ISAC, but it seems unlikely. State officials have expressed concerns over the loss of MS-ISAC's services, emphasizing their importance in safeguarding elections and overall cybersecurity. State and local governments should fully utilize CISA's security advisers and services for cybersecurity and physical security assessments. The loss of MS-ISAC's federal funding is a wake-up call for state and local governments to immediately reassess their cybersecurity strategies and be prepared to fill in any gaps: likely on their own. Read more at StateScoop: https://lnkd.in/ehhAT6nZ
Consequences of Cybersecurity Budget Cuts
Explore top LinkedIn content from expert professionals.
Summary
Cutting budgets for cybersecurity can leave organizations vulnerable to risks like data breaches, operational disruptions, and an inability to respond to emerging threats. These financial decisions often demand organizations to prioritize threats with fewer resources, risking overall security and resilience.
- Reassess priorities: Focus on critical areas by identifying the most immediate and significant risks to ensure limited resources are used wisely.
- Invest in partnerships: Collaborate with external agencies, vendors, and public-private partnerships to bridge gaps in cybersecurity capabilities.
- Advocate for balanced spending: Work with leadership to align new technology investments with the necessary security measures to mitigate potential vulnerabilities.
-
-
Boards Funnel Cash to AI, Starve Security, Invite Breach AI is now the top tech spending priority for 2025, with 45% of IT leaders ranking generative AI above cybersecurity (AWS Generative AI Adoption Index). Yet, boards continue to cut cyber budgets, overlooking unresolved risks like outdated firewall rules and unpatched vulnerabilities. Median breach costs were up 10% YoY per our favorite IBM Data Breach Report Investing in AI without matching security measures is an open invitation to attackers. We have yet to see what a true AI-related data breach will cost. Listen, AI spending will always outpace security, but we need to work with our C-Suites and boards to ensure that every AI investment is matched with security funding and oversight commensurate with risk. This is CISO'ing 101. "The CISO Evolution: Business Knowledge for Cybersecurity Executives" is a great resource to help. Matthew Sharp #AI #Cybersecurity #BoardGovernance #Leadership