Democrats to lead new push for cybersecurity and AI oversight

A shift in leadership

Democrats have secured control of both the House and Senate, marking a significant turning point for national security policy. This shift will directly impact the Cybersecurity and Infrastructure Security Agency (CISA), which serves as the federal lead for defending against cyber threats. The new leadership intends to prioritize the protection of the country from emerging risks like artificial intelligence and terrorism.

Maggie Hassan is expected to head the Senate Homeland Security and Governmental Affairs Committee. She has stated that the committee must work to ensure the country remains safe from all kinds of threats. Her focus will include guarding against AI security risks and strengthening overall cybersecurity infrastructure.

On the House side, Bennie Thompson is poised to return as chair of the Homeland Security Committee. He plans to work with CISA to expedite a critical re-staffing effort. This move is intended to provide the expertise needed to defend against the speed and scale of AI-enabled cyber-attacks.

Restoring CISA resources

One of the primary goals for the new Democratic leadership is to reverse previous budget cuts that impacted CISA. The agency saw its staff reduced by nearly one-third during the previous administration. Democrats plan to prioritize getting resources back into the hands of defenders to improve the security posture of critical infrastructure owners.

Specific efforts will include extending the State and Local Cybersecurity Grant Program. This funding is intended to support under-resourced sectors, with a particular emphasis on water systems. By providing these resources, lawmakers hope to ensure that local and state entities have the tools necessary to resist cyber intrusions.

Additionally, the new leadership wants to restore cross-sector coordination capacity. They plan to ensure the Anchor-CI is eventually up and running to meet stakeholder needs. This follows the termination of the Cyber Information Sharing Act (CIPAC) by the previous administration, which diminished the agency's ability to coordinate across different industries.

The CISA 2015 deadline

A major legislative priority for the upcoming months is the permanent extension of the Cybersecurity Information Sharing Act of 2015 (CISA 2015). This act is a bipartisan and industry priority that is currently set to expire on December 11. Lawmakers are looking for ways to include this renewal in an omnibus funding bill or the annual defense policy bill.

While current leadership has faced obstacles to reauthorization, there is a possibility that the GOP leadership might support an extension during the lame-duck session. If a long-term solution is not reached by the December deadline, lawmakers may look to a temporary continuing resolution. This would keep the program active while a permanent fix is negotiated.

The Senate version of this legislation contains several noteworthy cyber provisions. These include a broad authorization for contractor-owned, contractor-operated offensive cyber operations. It also requires every artificial intelligence product sold to the Defense Department to include an AI bill of materials, which lists the components used in the software.

AI and oversight goals

As AI models begin to uncover more vulnerabilities, the new leadership will face questions about how to establish guardrails. Democrats have not yet put forward a unified front on AI regulations, but highly capable frontier models are expected to drive much of the discussion. The goal is to ensure the secure development and deployment of these technologies.

Democrats also plan to scrutinize the Department of Government Efficiency (DOGE) for its impact on federal cyber personnel. They will specifically look at the integrity of systems that were touched by DOGE when it was given high privileged access to federal systems. This oversight is part of a broader review of how previous administration changes affected DHS and CISA.

Other priorities include reviewing election security and the Cyber Safety Review Board. The new leadership will also have a say in who manages the Office of the National Cyber Director. They will also be involved in vetting the permanent nominee for the director of CISA, ensuring the agency's leadership aligns with their security goals.

What comes next

The immediate future involves navigating the lame-duck session to secure funding and extensions for existing programs. If the CISA 2015 renewal does not pass soon, it will remain a top priority for the 2027 legislative cycle. Once that is settled, lawmakers will have to decide which next priority takes precedence.

Potential next steps include addressing post-quantum cryptography or government IT modernization. The leadership will also need to decide how to prioritize frontier AI cybersecurity systems. These decisions will determine the roadmap for national defense in the coming years as technology continues to evolve.

Finally, the transition will involve a significant leadership shuffle across various committees. While some members may move to different roles, the overall goal remains a push for bipartisan cooperation on cyber issues. The success of these plans will depend on the ability of the new chairs to coordinate resources and pass meaningful legislation.