The Cybersecurity and Infrastructure Security Agency built its reputation on the promise that the 2020 election would be the most secure in American history. Four years later, as voters prepare to head to the polls again, the agency’s public posture has shifted. The loud, unambiguous defence of election infrastructure that defined the Krebs era has given way to a muted, bureaucratic presence. For state officials and congressional overseers alike, the silence is deafening.
The Architecture of a Retreat
The change did not arrive via press release. It emerged in the negative space of budget justifications, in the absence of top leadership at the National Association of State Election Directors conference, and in the careful parsing of testimony before the House Administration Committee. Where CISA once deployed “Protected Critical Infrastructure” designations and rapid-response teams with fanfare, it now offers voluntary cybersecurity reviews and generic threat briefings.
Senior agency officials insist the mission remains unchanged. They point to the continued operation of the Election Infrastructure Information Sharing and Analysis Center (EI-ISAC) and the Joint Cyber Defense Collaborative as proof of enduring commitment. But the tenor has altered. The rhetoric of “foreign adversaries targeting the ballot box” has been replaced by language about “resilience” and “whole-of-society approaches.” In Washington, that distinction is not semantic; it is strategic.
The Political Calculus
The retreat is bipartisan in its causality. Republicans, led by figures such as House Administration Committee Chairman Bryan Steil, have spent years framing CISA’s election work as a vehicle for censorship — pointing to the agency’s since-dissolved “Disinformation Governance Board” and its flagging of social media content in 2020. The message from the right has been consistent: an agency that polices speech cannot be trusted to police the vote.
Democrats, meanwhile, have grown wary of the political blowback. The White House, sensitive to accusations of federal overreach in a polarized election year, has not pressed CISA to maintain a high-profile role. The result is a vacuum. State election directors — Republicans and Democrats — describe a federal partner that is technically available but politically invisible.
“They show up when we ask,” said one secretary of state’s chief of staff, granted anonymity to speak candidly about intergovernmental relations. “They don’t show up when we don’t. That’s a problem when the threat landscape hasn’t improved.”
The Threat Landscape Has Not Improved
Intelligence assessments remain grim. The Office of the Director of National Intelligence continues to identify Russia, China, and Iran as active threats to election integrity. Ransomware gangs target local government networks with increasing sophistication. Generative AI tools lower the barrier for synthetic media operations designed to suppress turnout or incite violence.
Yet CISA’s public messaging treats these as generic cyber hygiene issues. The agency’s “Shields Up” campaign, once explicitly tied to election infrastructure, now addresses critical infrastructure broadly. The specific vulnerabilities of voter registration databases, electronic poll books, and results reporting systems — the very systems CISA spent years mapping — receive scant mention in current outreach.
Why it Matters
The erosion of federal leadership on election security does not merely create a messaging gap; it creates an operational one. States lack the resources to replicate CISA’s threat intelligence capacity, and the private sector cannot fill the authority vacuum. When the agency that designated election infrastructure as “critical” in 2017 stops treating it as a distinct priority, adversaries notice. The midterms will proceed, but the architecture of confidence that underpins democratic legitimacy has been quietly dismantled — not by attack, but by absence.
