Cybersecurity Funding Priorities Under Fire as Trump Administration Proposes Deep Cuts

Democratic lawmakers on Thursday sharply criticized President Trump's cybersecurity funding priorities during a House Homeland Security subcommittee hearing, highlighting what they described as misplaced spending priorities as critical state and local cybersecurity programs face potential elimination.

The criticism centers on the administration's proposed $1 billion White House security and ballroom project alongside a nearly $1.8 billion allocation for what Democrats term a "slush fund" for Trump allies connected to the January 6 Capitol riot, while simultaneously pushing deep cuts to cybersecurity funding.

"Budgets are moral documents, and spending a billion dollars on a ballroom, which is what the president wants, or $1.7 billion to incentivize insurrectionists while we still are waiting for the reauthorization of this critical grant program, says a lot about where priorities are right now with this administration," stated Rep. Delia Ramirez (D-IL) during the hearing focused on state and local cybersecurity.

The hearing comes as Congress weighs reauthorization of the State and Local Cybersecurity Grant Program (SLCGP), which was established in 2022 with $1 billion allocated to state and local governments over four years to help mitigate cyber risks. The program's future remains uncertain as the administration appears poised to let it expire without renewal.

CISA Budget and Workforce Reductions

Rep. James Walkinshaw (D-VA) highlighted the administration's proposed cuts to the Cybersecurity and Infrastructure Security Agency (CISA), noting that while CISA's 2025 budget was approximately $3 billion, President Trump has proposed slashing $707 million from the cyber-defense agency's 2027 budget, reducing it to just over $2 billion.

These cuts follow reductions already implemented since Trump returned to office, including $135 million in cuts to CISA's budget and approximately one-third of its workforce—close to 1,000 personnel.

"So we are looking at a one-third cut in federal funding for cybersecurity," Walkinshaw emphasized. "If President Trump gets his way, we'd be spending a billion dollars for the ballroom and $1.8 billion for the January 6 slush fund – $2.8 billion just on those two items, $800 million more than his total commitment to cybersecurity."

MS-ISAC Shift to Fee-Based Model

Additional concerns were raised about the elimination of federal support for the Multi-State Information Sharing and Analysis Center (MS-ISAC), which previously provided free and low-cost threat detection and response services to state and local governments. The center has since transitioned to a fee-based model to support its state threat sharing program.

This shift creates significant challenges for smaller jurisdictions with limited resources.

"Jurisdictions that most need the help are least likely to be able to afford it," explained Samir Jain, VP of policy for the Center for Democracy and Technology, who testified as an expert witness. "Smaller jurisdictions, because if they don't have the resources and the money to join the ISAC, they probably also don't have the resources and the money to buy equipment, to buy network monitoring tools, to have cybersecurity staff. It's the ones who need it the most are the least likely to be able to get it as a result."

State and Local Cybersecurity Needs

Expert witnesses from Tennessee, New York, and Florida emphasized the growing cybersecurity threats faced by state and local governments and the urgent need for increased funding.

"State and local governments operate critical systems that citizens rely on every day, including emergency services, schools, utilities, courts, and public infrastructure," stated Tennessee CIO Kristin Darby. "Those systems are increasingly targeted by criminal organizations and nation-state actors."

Darby highlighted that as AI-enabled attacks, ransomware infections, and cloud-based system intrusions accelerate across Tennessee, "many local governments across our state have little or no dedicated cybersecurity staff. This creates a dangerous imbalance between highly sophisticated attackers and severely resource-constrained defenders."

New York state director of security and intelligence Colin Ahern urged lawmakers to "reauthorize and fully fund the state and local cybersecurity grant program, which is the single most consequential investment in the cyber protection of state and local governments in this country."

Ahern also advocated for expanded access to frontier-model AI capabilities for state and local governments, which are responsible for protecting critical infrastructure including the power grid, drinking water supply, and public health systems.

"We cannot do that while frontier defensive AI capabilities are restricted to federal partners and a handful of large enterprises," Ahern warned. "Cybersecurity is the silent partner of democracy. When the utilities, school districts, and state and local governments that constitute the operational fabric of American life are hollowed out by cyber attacks, the institutions that support our democratic life are hollowed out with them."

The hearing underscored the growing disconnect between federal cybersecurity priorities and the critical needs of state and local governments, which serve as the first line of defense for many essential services and infrastructure systems that citizens rely on daily.

The cybersecurity landscape continues to evolve rapidly, with state and local governments facing increasingly sophisticated threats while resources remain constrained. The outcome of the SLCGP reauthorization efforts and the final shape of CISA's budget for 2027 will have significant implications for the nation's overall cybersecurity posture.