The U.S. House Committee on Appropriations convened on May 8, 2025, for an oversight hearing focused on the Cybersecurity and Infrastructure Security Agency (CISA). The meeting addressed significant concerns regarding data security practices within the Department of Energy (DOE), particularly related to the handling of sensitive information by its staff.
The session began with a member expressing deep concern over reports of DOE staff sharing sensitive data through unsecured email accounts. This issue has raised alarms among constituents, prompting questions about the potential risks of adversaries accessing this information. The member highlighted a recent Washington Post article discussing DOE's intention to create a centralized account for all Americans' sensitive data, further intensifying worries about data security.
Before you scroll further...
Get access to the words and decisions of your elected officials for free!
Subscribe for Free In response, a CISA representative acknowledged the agency's commitment to enhancing security across federal networks, emphasizing that they operate under congressional direction and funding. The representative noted that CISA is actively working to build tools that protect federal agencies and is continuously seeking efficiencies in its operations.
The discussion then shifted to the specific concerns about the data accessed by DOE employees. The CISA representative admitted they did not have immediate information regarding oversight of the data access and sharing practices but expressed willingness to gather further details and provide a comprehensive response. The representative assured the committee of their interest in the matter and readiness to discuss it further, even in a secure setting if necessary.
As the meeting progressed, the focus remained on ensuring the security of sensitive data and the importance of oversight in preventing unauthorized access. The session concluded with a commitment from CISA to follow up on the inquiries raised, highlighting the ongoing efforts to enhance data security across federal agencies.