GAO: CISA's OT Teams Inadequately Staffed

A GAO review found that CISA’s OT programs—supporting ICS risk analysis, advisories, tools, and training—are generally valued by external stakeholders but are hampered by inadequate staffing; for example, its threat hunting and incident response team reportedly had only nine personnel and could fulfill just 125 of 572 OT-related requests over four years. While CISA states it is addressing these shortages, GAO recommends stronger workforce planning to improve capacity and responsiveness across OT services.