The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has officially named Madhu Gottumukkala as its new deputy director, marking a key leadership move as the agency continues to operate without a permanent director.
Gottumukkala previously served as Commissioner and Chief Information Officer at South Dakota’s Bureau of Information and Technology. His appointment to CISA was first acknowledged by the state in April, and is now formally confirmed by the agency.
Before his public sector role, he held senior positions at leading organizations including Sanford Health, CallHealth, and Polycom. With experience spanning both government and enterprise, Gottumukkala brings a broad perspective to the agency at a time of heightened cybersecurity risk.
“I’ve seen firsthand the important work CISA does to protect our critical infrastructure,” Gottumukkala said. “Through strong partnerships and transparency, we can strengthen resilience and manage risks across government and industry.”
Leadership Vacuum and Political Roadblocks
Despite the appointment of a new CISA deputy director, the agency still lacks a confirmed director. Bridget Bean currently serves as acting director following the departure of Jen Easterly.
Meanwhile, the Trump administration has nominated Sean Plankey—a cybersecurity expert who held roles at the Department of Energy and the White House—to lead the agency. However, his nomination is stalled in the Senate.
Senator Ron Wyden has blocked the process, demanding the public release of a 2022 unclassified report on vulnerabilities in U.S. telecom networks. These networks were previously targeted by China-linked threat actors seeking to access sensitive government communications.
The delay highlights a growing rift between national security concerns and demands for transparency in cybersecurity policy.
Budget Cuts and Strategic Uncertainty
Compounding the agency’s leadership challenges, the White House has proposed slashing CISA’s budget by $491 million. Officials argue the agency has shifted focus toward what they describe as a “censorship industrial complex,” detracting from its core mission of cyber defense.
This proposed cut arrives at a time when foreign cyber threats are escalating. Several U.S. telecom firms have reportedly faced attacks by state-sponsored actors attempting to track senior officials and political figures. Critics argue that cutting CISA’s funding now could leave critical infrastructure even more exposed.
Still, Gottumukkala’s appointment offers a degree of continuity for CISA’s leadership, especially as the agency navigates a politically charged environment. His stated focus on collaboration and systemic resilience may help stabilize internal operations as broader questions about CISA’s role and direction continue to unfold.