Hassan and Thompson outline CISA and AI priorities

The Cybersecurity Information Sharing Act of 2015 expires Dec. 11, and DHS and CISA are operating under a continuing resolution set to expire Dec. 11. Maggie Hassan and Bennie Thompson set cybersecurity and artificial intelligence priorities in statements to CyberScoop. They spoke as Democrats prepare to lead homeland security and intelligence committees when the new Congress is sworn in on January 3, 2027.

The 2026 midterm election gave Democrats unified control of Congress, positioning them to lead homeland security and intelligence committees in the 120th Congress beginning January 3, 2027. Incoming Senate and House chairs have publicly centered CISA re-staffing, AI security risks, and cybersecurity grant programs as top priorities. Democratic AI governance plans remain unsettled, with no unified posture on Section 702 surveillance or on whether the House will address AI through existing committees, a select panel, or another structure.

Maggie Hassan said the committee must guard against artificial intelligence security risks and strengthen cybersecurity. She said the Trump-Vance administration gutted CISA and that those cuts must be reversed.

In a statement to CyberScoop on Nov. 4, 2026, Hassan said the Trump-Vance administration diverted resources away from combatting fentanyl trafficking, undermining U.S. security.

Bennie Thompson said Democrats will work with CISA to accelerate re-staffing after the agency cut back by nearly one-third. He said CISA must help critical infrastructure owners and operators quickly improve cybersecurity posture against AI-enabled cyber attacks.

Mark Warner, D-Va., will lead the Senate Intelligence Committee and has emphasized cybersecurity in his congressional career. Delia Ramirez, D-Ill., will chair the House Homeland Security cybersecurity subcommittee. Vince Fong, R-California, will become the subcommittee’s top Republican, replacing Andy Ogles, who lost in the primaries. Andrew Garbarino, R-N.Y., will move to the minority on the House Homeland Security panel but has collaborated with Democrats on cybersecurity.

Democrats will seek to extend the State and Local Cybersecurity Grant Program and support under-resourced sectors, especially water. The State and Local Cybersecurity Grants Program at DHS has expired and would require appropriations even if reauthorized.

Democrats will work to ensure CISA’s Anchor-CI cross-sector coordination capacity is running after the Trump administration terminated CIPAC. Lawmakers could temporarily extend the Cybersecurity Information Sharing Act of 2015 through another continuing resolution before Dec. 11.

Long-term renewal of the Cybersecurity Information Sharing Act of 2015 is a bipartisan and industry priority. Rand Paul, R-Ky., has been the biggest obstacle to reauthorizing the Cybersecurity Information Sharing Act of 2015. Lawmakers could attach the extension to an omnibus funding measure or the yearly defense policy bill.

Republicans have talked about completing the fiscal 2027 National Defense Authorization Act in the lame-duck session. The Senate fiscal 2027 NDAA requires every AI product sold to the Defense Department to have an AI bill of materials. The Senate NDAA broadly authorizes offensive cyber operations that contractors own and operate. If the NDAA or a CISA 2015 extension fails in the lame duck, both would be priorities in 2027.

Henry Young, BSA policy director, said CISA 2015 must pass before lawmakers can prioritize post-quantum cryptography, encryption built to resist quantum computers, IT modernization, or frontier AI cybersecurity, protections for the most advanced AI models. Craig Albright, Business Software Alliance senior vice president for U.S. government relations, said highly capable frontier models will drive discussion about AI and cybersecurity.

Nicholas Leiserson said the House may handle AI through existing committees, a select panel, or another structure, with no unified Democratic stance on AI guardrails. Democrats have not put forward a unified posture on expired Section 702 surveillance authorities.

Democrats are expected to scrutinize damage to CISA from Trump administration budget cuts. Democrats may review Trump administration changes at DHS and CISA on election security, the Cyber Safety Review Board, and the Joint Cyber Defense Collaborative.

Nicholas Leiserson said Democratic oversight is likely to examine DOGE cuts to cyber personnel and the integrity of systems accessed with high privileges. If the White House nominates a permanent CISA director, Democrats would vet that person. Democrats would have a say in who leads the Office of the National Cyber Director if incumbent Sean Cairncross departs.

Mark Warner and incoming House Intelligence Chairman Jim Himes, D-Conn., have fought for Section 702 renewal in the past. Section 702 operates under a court order that lasts only through next spring.

Rand Paul could remain a disruptive force on Senate cybersecurity legislation even after losing the HSGAC gavel. Nebraska Sen. James Lankford would take over as top HSGAC Republican if Paul moves panels, and an industry source views him as a CISA 2015 supporter.

The next Congress will likely aim to codify rules for lethal autonomous weapons and their use, CFR experts said. CFR experts also said the next Congress will likely aim to clarify legal protections against AI-enhanced domestic surveillance. The next Congress may renew the Cybersecurity Information Sharing Act of 2015 to strengthen threat sharing if the lame-duck NDAA conference strips it, CFR experts said.

The next Congress aspires to create rules for advanced AI developers and tackle job losses and data center construction, CFR experts said. CFR experts said Democrats need White House buy-in for AI measures, starting with narrower steps such as disclosing risks and reporting incidents affecting national security and public safety.