Chris DeRusha, an ex-Obama staffer and Biden campaign's CISO, announces he has been appointed as the US CISO, responsible for coordinating cybersecurity policy
Context & Ripple Effects
DeRusha's appointment lands while the government's cyber apparatus is still reassembling: CISA has been run on an acting basis by Brandon Wales since the November firing of Chris Krebs, so the new administration is filling its senior cyber posts from the top down.
The US CISO job sits alongside the larger coordination architecture the White House was about to announce — the nominations of Chris Inglis as first national cyber director and Jen Easterly as CISA head followed within months, making DeRusha one piece of a deliberately layered policy structure.
First-order effects
- Federal civilian agencies gain a single coordinator for cybersecurity policy in DeRusha, whose remit runs through the budget and management side of government rather than any operational agency.
- DeRusha brings direct experience securing a presidential campaign into government, giving the White House an in-house counterpart to the acting leadership already running CISA.
Second-order effects
- The appointment sets up a jurisdictional question with the national cyber director role later filled by Harry Coker after Inglis' resignation — two coordination offices whose boundaries Congress and successive administrations have had to keep renegotiating.
- CISA's eventual confirmed director, Jen Easterly, inherits an interagency landscape where policy coordination is split between her agency, the US CISO, and the cyber directorate, shaping how directives reach agencies.
Third-order effects
- If the pattern holds, federal cyber coordination becomes a standing multi-office function that each administration restaffs — with continuity dependent on confirmations surviving political turnover of the kind that removed Krebs and later pushed him out of industry entirely.
- The layering of CISO, cyber director, and CISA points toward a permanent bureaucratic settlement over who owns cyber policy, one that future administrations will inherit rather than rebuild.
The trend: US federal cybersecurity is consolidating into a layered, permanently staffed coordination structure — CISO, national cyber director, and CISA — that each administration now restaffs rather than invents.