Particle.news

Download on the App Store

CISA Ends CIS Partnership, Cutting Federal Funding for MS-ISAC Today

CIS will pivot MS-ISAC to paid memberships, leaving SLTTs unsure which services persist.

Overview

  • CISA confirmed its cooperative agreement with the Center for Internet Security ends September 30, with the agency shifting SLTT support to grants, no-cost tools, regional advisors, incident response coordination, and continued collaboration on information sharing.
  • CIS has been covering costs at over $1 million per month and is phasing out that subsidy as it urges organizations to move to paid MS-ISAC memberships to maintain access, warning of limited disruptions during the transition.
  • MS-ISAC says certain capabilities will continue with federal support, including its security operations center in part, Malicious Domain Blocking and Reporting, the annual NCSR self-assessment, and Albert intrusion detection services, with Albert users directed to coordinate with CIS.
  • The program has served more than 18,000 state, local, tribal, and territorial members with advisories, secure information sharing, tabletop exercises, and other resources since 2003.
  • Efforts by counties and cybersecurity leaders to restore funding through FY2026 appropriations did not succeed before the cutoff, as the 2015 Cybersecurity Information Sharing Act faces an October 1 lapse unless Congress acts and a federal shutdown remains possible.