"Right now we have CMMC that talks about cybersecurity requirements, even for commercial item suppliers," said Larry Allen.

CISA is still on the hook to define "systemically important entities" as it responds to critical infrastructure risks ranging from cyber attacks to hurricanes.

In 2024 FEVS results of senior leadership, there appears to be variation based on how closely situated employees are to their agency’s headquarters.

"Part of our training has gone to deploying diplomats and civil service employees to these subnational programs," said Marcia Bernicat.

The department is defending its request for emergency funding, saying it would’ve had to delay payments to 7 million veterans and survivors.