Thank you for your patience. Your civilization is very important to us.
Thank you for your patience. Your civilization is very important to us.
Agency Report Card
Protect the nation from cyber-based threats
Protect the nation from cyber-based threats
2017 Equifax breach — 147M Americans' data stolen. $700M settlement, no one jailed. ↗
2018 CISA established within DHS ↗
2020 SolarWinds hack — Russian intelligence inside US government networks for 9 months undetected ↗
2021 Colonial Pipeline ransomware — gas shortages across East Coast. $4.4M ransom paid. ↗
CISA's budget (NPPD before FY2019) grew 87% ($1.53B → $2.87B) while reported cybercrime losses exploded 1,409% ($1.1B → $16.6B). Complaints nearly tripled. Reported losses grew about 16x faster than the cyber-defense budget.
| Year | CISA enacted net discretionary budget authority (FY2015–FY2018: predecessor NPPD; nominal USD) | IC3 reported cybercrime losses (USD, calendar year, self-reported) | IC3 reported cybercrime complaints |
|---|---|---|---|
| 2015 | $1.53B | 1,100,000,000 | 288,012 |
| 2016 | $1.64B | 1,500,000,000 | 298,728 |
| 2017 | $1.82B | 1,400,000,000 | 301,580 |
| 2018 | $1.91B | 2,700,000,000 | 351,937 |
| 2019 | $1.68B | 3,500,000,000 | 467,361 |
| 2020 | $2.02B | 4,200,000,000 | 791,790 |
| 2021 | $2.02B | 6,900,000,000 | 847,376 |
| 2022 | $2.59B | 10,300,000,000 | 800,944 |
| 2023 | $2.91B | 12,500,000,000 | 880,418 |
| 2024 | $2.87B | 16,600,000,000 | 859,532 |
“Mandatory breach bonds, auto-patching, and public bug bounties”
CISA + FBI cyber spending in 2024 data
Cybercrime losses reported to IC3 in 2024
Cybercrime complaints reported to IC3 in 2024
Increase in reported losses since 2015
“Nearly three billion dollars a year for CISA and cybercrime losses went from one billion to sixteen and a half billion. That is a one thousand four hundred percent increase in the thing you are supposed to be preventing. On my planet, we would fire the firewall.”
On a well-run planet, this agency would have been deprecated centuries ago. Here is what replaces it.
Protocol Security Agency — Cybersecurity Bureaucracy (CISA + FBI Cyber Division)