The acting director of the Cybersecurity and Infrastructure Security Agency, Madhu Gottumukkala, is facing scrutiny following a series of incidents that have drawn attention both inside the agency and across federal cybersecurity circles. Over the past year, Gottumukkala has been involved in a sequence of events that have raised questions about leadership decisions, use of technology, and internal management at the agency responsible for defending federal networks against cyber threats, first reported by Politico.
Last summer, Gottumukkala uploaded contracting documents marked “for official use only” into a public version of ChatGPT, triggering automated security warnings across CISA systems. While none of the documents were classified, the uploads prompted an internal review at the Department of Homeland Security to determine whether the exposure posed any risks to government operations, according to Politico. The files included sensitive information intended for internal use, and officials noted that the use of ChatGPT at the agency was otherwise restricted. CISA spokesperson Marci McCarthy said that the acting director was granted temporary permission to use the tool under DHS controls, and that the agency’s default security posture remains to block public AI tools unless exceptions are authorized.
CISA’s acting director uploaded sensitive government docs INTO ChatGPT.
— Homeland Dems (@HomelandDems) January 27, 2026
Last year he failed a polygraph.
He's in over his head and unfit to lead.
Kristi Noem and her minions are destroying DHS and must be stopped. https://t.co/bNt2wNTDiX
The ChatGPT incident occurred as the federal government seeks to integrate artificial intelligence into operations. President Donald Trump signed an executive order in 2025 aimed at reducing barriers to American leadership in AI, and DHS has issued guidance on responsible use of generative AI tools. Public AI platforms such as ChatGPT, which has over 700 million users, pose a risk of sharing information outside federal networks, prompting careful oversight when government officials engage with these tools.
In addition to concerns about AI use, Gottumukkala faced internal controversy over a polygraph test administered last July. At least six career staff members were placed on paid leave after coordinating the test, which Gottumukkala reportedly failed. DHS opened an investigation into whether the staff provided misleading information about the need for the exam. A spokesperson for the department clarified that the polygraph was “unsanctioned” and that the acting director did not fail a DHS-approved test. Current officials described the fallout as damaging to morale and accountability, noting frustration over leadership and the potential impact on careers, as first reported by Politico.
We’re excited to welcome Dr. Madhu Gottumukkala to the CISA Team as our Deputy Director! A proven leader in cybersecurity, his leadership will advance our mission to safeguard America’s cyber & physical infrastructure. Learn more: https://t.co/a3k3bw2Yuf pic.twitter.com/UHit2CyQH5
— Cybersecurity and Infrastructure Security Agency (@CISAgov) May 19, 2025
The acting director also sought to remove CISA Chief Information Officer Robert Costello from his position late last year, proposing a management-directed reassignment. Other senior political appointees at DHS intervened, objecting to the move, and the reassignment was ultimately paused. Officials said the effort raised concern because Costello is seen as one of the agency’s most experienced technical leaders. The personnel dispute came at a time when CISA had lost roughly a third of its workforce over the past year due to budget cuts and reassignment options, contributing to a climate of uncertainty and low morale within the agency, according to reporting by Politico.
Amid these internal challenges, President Trump renominated Sean Plankey for the position of permanent CISA director. Plankey, a former senior National Security Council and Energy Department official, previously had his nomination blocked by Senator Rick Scott over concerns related to a Coast Guard contract. His renomination signals a White House intent to stabilize leadership at the agency, though questions remain about Senate approval and support among GOP senators. Plankey’s confirmation process unfolds as CISA navigates ongoing scrutiny over its acting director’s decisions, staff morale, and cyber defense operations.
Gottumukkala remains the senior-most political official at CISA, overseeing the agency’s mission to secure federal networks against sophisticated cyber threats, including state-backed attacks from adversarial nations. The series of events, first reported by Politico, highlights both the opportunities and challenges of integrating advanced technology into federal operations and underscores the importance of stable leadership in agencies tasked with protecting critical national infrastructure.
