CISA most commonly refers to the Cybersecurity and Infrastructure Security Agency, a federal agency within the United States Department of Homeland Security (DHS). Its core mission is to protect the nation’s critical infrastructure—including cyber, physical, and communications systems—against a wide range of threats, both cyber and physical.
Key facts about CISA
CISA was created in November 2018 through the Cybersecurity and Infrastructure Security Agency Act, elevating the former National Protection and Programs Directorate within DHS to agency status. CISA leads national efforts to understand, manage, and reduce risk to the cyber and physical infrastructure that Americans rely on every day.
Core responsibilities
CISA coordinates cybersecurity programs and incident responses across federal, state, local, tribal, and territorial governments, as well as with private sector partners. The agency safeguards essential sectors such as energy, transportation, healthcare, and finance from both cyber and physical threats. CISA ensures interoperable communications for emergency responders and leads efforts to secure national elections. CISA provides risk assessments, technical assistance, training, and resources to help organizations strengthen their security and resilience.
CISA works closely with public and private sector partners, as well as international entities, to share information, develop best practices, and respond to emerging threats.
As of 2025, CISA is headquartered in Arlington, Virginia, but plans to relocate to the DHS St. Elizabeths campus.