Acting CISA Director failed polygraph; career staff now under investigation

Tuesday, December 23, 2025 -Acting Director of the U.S. Cybersecurity and Infrastructure Security Agency (CISA), Madhu Gottumukkala, reportedly did not pass a polygraph examination required for access to highly sensitive cyber intelligence. 

The test was part of a controlled access intelligence program, and questions had been raised by senior career staff about whether it was necessary. Despite concerns, Gottumukkala proceeded with the examination.

After the failed polygraph, the Department of Homeland Security (DHS) launched an internal investigation into the circumstances surrounding the test. At least six career CISA employees were placed on paid administrative leave while the agency looked into whether they provided misleading information about the polygraph requirement. 

DHS maintains that the test was “unsanctioned” and that any disciplinary measures align with department policy, though some officials have expressed concern about morale and leadership judgment within the agency.

The controversy has intensified instability at CISA, which has been without a permanent, Senate-confirmed director since early 2025 and has experienced budget cuts and staff departures. 

Observers question how the polygraph incident reflects on leadership credibility and agency cohesion, especially given CISA’s critical mission of protecting national digital infrastructure. As DHS continues its probe, the episode underscores tensions around security protocols, accountability, and oversight at one of the government’s central cybersecurity bodies.