“CISA plays a critical role in protecting our nation’s cybersecurity infrastructure, and the Trump-Vance administration has undermined CISA by cutting its funding, reducing agency staff, and making us vulnerable to cyberattacks from our adversaries,” Sen. Maggie Hassan, D-N.H., said in a statement to CyberScoop.
Sen. Maggie Hassan, Sen. Gary Peters, and Rep. Bennie Thompson voice reservations
The Trump administration on Monday announced its intent to nominate Michael LoSapio, chief information security officer for Palantir, to the Senate-confirmed post of director of the Cybersecurity and Infrastructure Security Agency (CISA). Incoming and current congressional homeland security leaders responded with caution.
Hassan said she would “carefully review Mr. LoSapio’s nomination,” and added she has “serious questions about whether he has the independence and judgement needed for this position.” Rep. Bennie Thompson, D-Miss., the likely incoming House Homeland Security Committee chair, warned that LoSapio’s “relationship with Palantir raises very serious concerns given its role in DHS surveillance programs,” and urged senators to “thoroughly vet Mr. LoSapio before proceeding with his nomination.”
The current top Democrat on the Senate Homeland Security and Governmental Affairs Committee, Sen. Gary Peters of Michigan, said “Mr. LoSapio must demonstrate that he possesses the independent judgment and qualifications to decisively place national security and the national interest above political pressure.” That committee has authority over approving CISA director nominees.
A spokesperson for the current committee chairman, Sen. Rand Paul, R-Ky., didn’t respond to a request for comment, and the source notes Paul “won’t hold the gavel much longer” with Hassan in line to take over as chair in 2027.
Palantir tie: conflict-of-interest and procurement questions from Patrick Eddington (Cato Institute)
Patrick Eddington, a senior fellow at the Cato Institute, acknowledged LoSapio’s technical background but framed the nominee’s Palantir role as a central ethics concern. “The nominee would come from the vendor whose software is already being bought, without competition, by the office he’d run,” Eddington said. “Putting the company’s security chief in charge of the agency that sets the security bar for those systems, with a one-year recusal as the main safeguard, risks making CISA one vendor’s customer, regulator and alumni network all at once.”
Eddington listed specific questions senators should ask before confirming LoSapio: what Palantir stock or other holdings he has and whether he’ll divest them; whether he’ll recuse himself from Palantir matters for longer than the administration would require; and whether he has made bargains to return to Palantir after serving at CISA.
The source also reports that Palantir is a customer of CISA’s parent department and subagencies, and that a Palantir spokesperson didn’t respond to requests for comment.
Audit-ready is a season. It shouldn't be.
Evidence in spreadsheets, controls drifting between audits, frameworks multiplying on flat headcount. Nubivance runs continuous compliance on Rapid7 Cyber GRC - SOC 2, HIPAA, ISO 27001, PCI, CMMC.
End the scrambleTechnical credentials and endorsements for Michael LoSapio
Several voices in the story underline LoSapio’s technical qualifications. A former Trump administration official told CyberScoop that LoSapio’s cybersecurity certifications and experience managing cyber risk for a major public company “would make him a good fit for the role.” A cybersecurity executive who has worked with LoSapio called him an “exceptional choice” and “an extremely competent and talented cybersecurity leader,” adding: “He knows his stuff. He defends one of the most targeted organizations on the planet.”
The source contrasts LoSapio with another recent nominee: “Unlike another of the top cybersecurity officials in the Trump administration prior to his nomination, National Cyber Director Sean Cairncross, LoSapio comes with technical credentials.” The cybersecurity executive also described LoSapio as “high-integrity” and not “dogmatic or political.”
Acting leadership at CISA and stewardship concerns — Nick Andersen and Joshua Corman
Andrew Garbarino, current chair of the House Homeland Security Committee, welcomed the nomination as providing a needed Senate-confirmed director for an agency that “has lacked” one during the president’s second term, while praising the leadership of acting director Nick Andersen. Garbarino said he “looks forward to reviewing the qualifications of Michael LoSapio and urge[s] the Senate to do so with urgency.”
Joshua Corman, a former CISA adviser, said Andersen and his team “never gave up” on the agency and had set priorities for “the most life-safety of our critical functions.” Corman cautioned that confirmation and substantive change take time: with two years left in the administration, “it may be hard to have much of a dent, no matter who gets the nod,” and he urged leaning on the current steward.
What this means for DHS, the Senate Homeland Security Committee, and technologists
- DHS and ICE: Democrats cited Palantir’s work across DHS and ICE as the source of concern; lawmakers will scrutinize whether a former Palantir security chief can exercise independent judgment on systems the company supplies.
- Senate Homeland Security Committee and oversight staff: The committee holds confirmation authority and will be asked to probe conflicts of interest, holdings, recusal plans and post‑government employment agreements, per Eddington’s list of recommended disclosures.
- Technologists and security teams: Some security professionals in the story defended LoSapio’s technical ability to “defend one of the most targeted organizations on the planet,” while critics worry agency procurement and security oversight could become too closely aligned with a single vendor.
The nomination sets up a confirmation fight that will hinge on two tight issues repeated across the record: LoSapio’s technical qualifications and his ties to Palantir. Senators questioning independence, the ethics of vendor-to-regulator transitions, and the scope of recusal or divestiture will drive the next chapter; in the meantime, acting leadership under Nick Andersen remains the immediate steward of CISA’s priorities.
