President-elect Donald Trump’s return to office signals potential changes for U.S. cybersecurity strategy, with anticipated shifts both in leadership and in the mission of key agencies. As Trump and his administration evaluate new appointees for cybersecurity roles, the Cybersecurity and Infrastructure Security Agency (CISA), in particular, faces significant scrutiny.

While leaders like Sean Plankey, Karen Evans, and Katie Arrington are rumored for top cyber posts, the Trump administration is also weighing a structural overhaul for CISA, which may focus on streamlining its responsibilities and budget.

The anticipated changes to CISA’s mandate reflect a broader movement within Trump’s policy advisors, including calls for scaling back the agency’s role in disinformation and election security. This restructuring could impact how the U.S. addresses cyber threats, regulates critical infrastructure reporting, and balances cybersecurity roles among federal agencies.

Industry leaders and cybersecurity experts are closely monitoring these developments, as they carry wide-reaching implications for both public and private sectors.

Why It Matters: The leadership and direction of cybersecurity policy directly impact national security and critical infrastructure resilience. New appointments and potential CISA restructuring under Trump’s administration could redefine federal cybersecurity priorities, affecting regulatory burdens on businesses and altering roadmaps for cyber incident response and infrastructure protection.

• CISA’s Role and Possible Restructuring: Trump’s administration is considering refocusing CISA’s role solely on core infrastructure protection, reducing its involvement in disinformation and social media monitoring. Conservative think tanks, has recommended narrowing CISA’s mission, and funding cuts are a possible method to accomplish this streamlining.

• Key Figures in the Cyber Leadership Lineup: Potential appointments include Sean Plankey, Karen Evans, Joshua Steinman, Katie Arrington, and Rob Strayer, each with extensive experience in cybersecurity roles. Their influence will shape federal strategies on cyber defense and infrastructure security, setting the tone for Trump’s cybersecurity agenda.

• Business Concerns Over Reporting Mandates: The private sector is attentive to a looming CISA rule that mandates cyberattack reporting from critical infrastructure operators. Trump’s administration may choose to delay or revise this rule as part of an effort to reduce perceived regulatory burdens on businesses, though the rule’s enforcement deadline is set for October 2025.

• Cyber Expertise and Agency Coordination: The administration is expected to review whether cybersecurity roles and expertise are effectively distributed across agencies, aiming to minimize redundancy and regulatory overlap. High-profile appointees like Tesla’s Elon Musk and entrepreneur Vivek Ramaswamy are leading a task force to streamline government, which may affect how CISA, the Transportation Security Administration, and other entities coordinate on cyber rules.

• Concerns About Cybersecurity Stability: Cyber experts warn that major shifts in CISA’s role and leadership must be approached carefully to avoid creating security gaps. Stuart Madnick, a cybersecurity professor at MIT, emphasized that a cautious approach is crucial in a volatile cybersecurity environment where rapid changes can lead to unintended vulnerabilities.

Go Deeper -> Trump’s Second Term Is Expected to Bring Big Change to Top U.S. Cyber Agency – WSJ

Who Stands to Fill Top Cyber Posts in Trump Administration? – Cyber Magazine