Loading story…
House Democrats asked the inspectors general for the intelligence community and the Department of Homeland Security to investigate allegations that former CISA Acting Director Madhu Gottumukkala bypassed intelligence access protocols after failing two polygraph examinations tied to entry into a highly sensitive controlled access program. The lawmakers' letter describes a July 2025 effort to obtain access to one of the government's most restricted intelligence compartments, where admission requires both a demonstrated need-to-know and a successful counterintelligence-scope polygraph.
The request for an independent probe also cites alleged retaliation against career staff, security clearance suspensions, internal investigations, and possible violations of national security directives. Both reports describe the same developing oversight matter and frame it as a governance and security-clearance controversy inside CISA, with lawmakers questioning whether required escalation steps, including notification to the Office of the Director of National Intelligence, were ignored after the failed polygraphs.
See the reporting duties and controls this puts on the clock.
6 events from the most recent confirmed update back to the earliest known activity.
About a week before March 30, 2026, DHS closed its internal investigation into seven CISA employees and a contractor tied to the polygraph episode, clearing the staffers after they had been placed on leave and had clearances suspended. Lawmakers welcomed the reinstatement and criticized the earlier treatment of the employees.
In March 2026, five House Democratic lawmakers sent a letter to the inspectors general for the intelligence community and DHS calling for an independent investigation into the CISA polygraph and clearance controversy.
Following the internal investigation, at least five career CISA employees and one contractor had their security clearances suspended and were placed on administrative leave, prompting concerns about retaliation and personnel practices.
Rather than referring the matter for independent oversight, Gottumukkala allegedly used a newly formed internal investigatory unit to examine staff conduct related to the episode.
During the 2025 review tied to that access request, Gottumukkala allegedly failed two polygraph examinations and may have bypassed required escalation procedures for handling the matter.
In July 2025, then-CISA Acting Director Madhu Gottumukkala requested access to a highly sensitive Controlled Access Program, triggering scrutiny described in lawmakers' later letter.
See what this changes for your reporting obligations and which controls it puts on the clock.
3 references tracked. Mallory keeps watching after this page renders.
nextgov.com
Open sourcebankinfosecurity.com
Open sourcegovinfosecurity.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
The acting director of the Cybersecurity and Infrastructure Security Agency (**CISA**), **Madhu Gottumukkala**, faced escalating scrutiny over leadership and personnel decisions as the agency manages ongoing threats to federal networks and critical infrastructure. Reporting describes an attempted management-directed reassignment of CISA CIO **Robert Costello**—a process that can force an employee to transfer within DHS or resign—that triggered immediate objections from career staff and senior political appointees, leading DHS headquarters to pause and then halt the action the same day. Lawmakers on the House Homeland Security Committee pressed Gottumukkala on broader staffing reductions and whether CISA retains sufficient capacity to execute its mission, including questions about efforts to push out staff and a reported attempt to remove the CIO. A chart entered into the hearing record cited a drop in personnel from **3,387 to 2,389** (a reduction of **998**), figures that aligned closely with Gottumukkala’s testimony; he also cited a **7.5%** attrition rate last year and asserted the agency has “the required staff,” while members warned that cutbacks could weaken national cyber defenses and increase exposure of critical systems and infrastructure.
Jun 29, 2026
Senior lawmakers and federal officials have raised alarms about the lack of a confirmed director for the Cybersecurity and Infrastructure Security Agency (CISA), warning that this leadership gap could undermine the United States' ability to respond to escalating cyber threats. Outgoing Comptroller General Gene Dodaro emphasized to Congress that cybersecurity and critical infrastructure protection are not receiving the urgent attention required, highlighting that CISA has hundreds of outstanding recommendations from the Government Accountability Office (GAO) and that the absence of a permanent director is a significant vulnerability. House Homeland Security Committee Chairman Rep. Garbarino also expressed disappointment over the Senate's failure to approve the White House's CISA nominee, further questioning recent decisions to reverse telecom security rules enacted after a major Chinese cyber intrusion. The ongoing delay in confirming a permanent CISA director has prompted bipartisan concern, with lawmakers and oversight officials warning that "taking our foot off the gas" at CISA could have serious consequences for national security. Acting Director Madhu Gottumukkala has led the agency since the spring, while nominee Sean Plankey's confirmation has stalled due to Senate holds. The GAO has identified cybersecurity as a high-risk area for decades, and the current leadership uncertainty at CISA is seen as a critical issue that could impede progress on closing longstanding security gaps across federal agencies.
Jul 12, 2026
Five House Democrats asked the Government Accountability Office to investigate whether deep staffing and program cuts at the Cybersecurity and Infrastructure Security Agency have weakened the federal government’s ability to defend civilian networks and critical infrastructure. Lawmakers said CISA has lost nearly one-third of its workforce—falling from about 3,300 employees to roughly 2,200, with nearly 1,000 employees fired or departing—during a period of elevated cyber and physical threats, including attacks affecting utilities in at least 12 states and other active threats to critical infrastructure. The lawmakers asked GAO to review CISA’s workforce changes over the past five years, identify which programs were affected, and determine whether the agency’s human capital strategy aligns with its mission. The request comes as officials report reduced responsiveness, disrupted service delivery, leadership instability following Jen Easterly’s departure, and no Senate-confirmed director in place, while budget uncertainty persists over a proposed fiscal 2027 plan that would eliminate about 870 more positions and cut more than **$700 million**, even as House appropriators have backed additional funding and critical hires.
Aug 21, 2026