CISA's Use of Infrastructure Investment and Job Act Funds

The Cybersecurity and Infrastructure Security Agency’s (CISA) planned activities funded by the Infrastructure Investment and Jobs Act (IIJA) appear related to CISA’s cross-sector role. CISA had only spent a small amount of IIJA funds by the start of fieldwork, limiting our ability to assess how the use of IIJA funding impacted CISA’s cross-sector role. However, CISA has plans for spending all of the $35 million IIJA appropriated funds covered by this report by fiscal year 2026 and had obligated over 45 percent of the funds by the end of FY 2023. CISA’s planned use of these IIJA funds aligns with CISA’s standard financial controls processes and general appropriations requirements.