CISA got state election officials on a conference call Monday, 85 days before the November midterms. The agency's acting director, Nick Andersen, and its head of integrated operations, Jim Harrell, briefed secretaries of state on a call hosted by the National Association of Secretaries of State, offering physical and cybersecurity assessments on request, walking through how to reach regional CISA directors, and acknowledging that outside foreign actors are attempting to influence elections [1].
That is the standard playbook, and requesting an assessment is genuinely useful to a county clerk with a voter-registration database and no security staff. The call's defining moment was not in the playbook. One official asked the CISA leadership directly, in words PBS reported verbatim: why should we trust working with you all as an agency when your boss says that he wants to jail us [1].
The boss in question is DHS Secretary Markwayne Mullin, who has recently threatened to prosecute election officials he deems non-cooperative. CISA sits inside DHS. The officials being offered free security help and the officials being threatened with prosecution are the same people [1].
The capacity ledger runs alongside the trust ledger. CISA has lost roughly a third of its workforce under the current administration, and other agencies have similarly pared back election-security operations. One participant summarized the briefing as closer to security theater than actually helping these election officials, and another described the effort as the agency covering itself [1].
What CISA actually committed to is worth recording precisely, because it is the checkable part: assessments upon request, referral paths to regional directors, and an acknowledgment of foreign influence attempts without specifics. What remains open, per the officials on the call, is whether tabletop exercises, penetration testing and intelligence briefings arrive before November [1].
Steel-manning the agency's position: a depleted CISA holding the call at all, and pointing officials to concrete request channels, is the responsible version of what a shrunken agency can do. The distrust in the room was not directed at the briefers' checklist. It was directed at the department above them, and no assessment offer on a conference call can answer it [1].
