Senate confirms ex-NSA official Jen Easterly as CISA's director, a role that was vacant since Trump fired Chris Krebs in Nov. for refuting conspiracy theories
looking forward to working with Jen Easterly to strengthen our nation's cybersecurity. https://www.politico.com/... @therecord_media : The Senate on Monday confirmed President Joe Biden's pick to lead the Cybersecurity and Infrastructure Security Agency, filling a critical vacancy as the country reels from a series of digital assaults, via @martinmatishak https://therecord.media/...
Context & Ripple Effects
Biden named Easterly alongside Chris Inglis for the new national cyber director post in April; Inglis was confirmed in June, though Congress had not funded his office. Easterly's confirmation completes the administration's initial effort to put Senate-confirmed leaders atop both CISA and the national cyber director role after CISA's extended vacancy.
First-order effects
- CISA moves from a director vacancy to confirmed leadership under Easterly, giving the agency a permanent Biden-appointed head.
- Easterly and Inglis now form the administration's two confirmed senior cyber leaders, following their joint nomination in April.
Second-order effects
- Coordination between CISA and the national cyber director can shift from nomination-stage planning to an operating relationship, but Inglis's unfunded office limits the capacity Congress has provided for that role.
- The Senate's confirmation gives CISA a clearer institutional counterpart for federal agencies and the organizations it works with on cybersecurity and infrastructure protection.
Third-order effects
- The paired appointments point toward a more formal federal cyber leadership structure, with CISA's operational role alongside a White House-level national cyber director; its durability depends on Congress matching the new offices with resources.
- Future cybersecurity policy will increasingly be shaped by how responsibilities are divided between CISA and the national cyber director rather than by a single agency acting alone.
The trend: US cybersecurity governance is becoming more institutionalized through separate but complementary operational and White House-level leadership posts.