President Trump tapped Palantir’s top security executive, Michael LoSapio, to finally fill CISA’s long-vacant director’s chair—and the choice lands right at the crossroads of cyber defense, procurement, and power.
Story Snapshot
- President Trump nominated Palantir’s chief information security officer Michael LoSapio to lead CISA.
- The White House transmitted nominations to the Senate on November 10, 2026.
- CISA has lacked a Senate-confirmed director since January 2025.
- The pick puts a major government contractor executive at the helm of a key security agency.
The nomination that could reset CISA’s direction
President Trump nominated Michael LoSapio, the chief information security officer at Palantir, to direct the Cybersecurity and Infrastructure Security Agency. The move aims to close a nearly two-year leadership gap at the nation’s civilian cyber front line. The White House recorded nominations sent to the Senate on November 10, 2026, aligning with reports of LoSapio’s selection. Multiple industry outlets reported the pick, underscoring the administration’s intent to seat a tech-seasoned leader at CISA.
LoSapio’s background signals a bet on operational experience over bureaucracy. Palantir runs large, complex systems for defense, intelligence, and public safety. A leader steeped in that world knows real-time risk, messy data, and mission pressure. Supporters see upside in sharper incident response and faster modernization. Critics will ask how a top executive from a major vendor will balance public stewardship with federal procurement guardrails. That tension is real, and it should be aired in hearings.
Why the vacancy mattered—and what changes now
CISA has carried on with acting leaders since early 2025. Acting leaders can keep the lights on, but they struggle to drive major shifts. Big lifts—sector cyber baselines, software supply chain rules, more joint ops with states—need a Senate-confirmed director with full authority and time. The White House actions page shows nominations moving in this window, which fits the timing of this decision. A confirmed leader could bring stability, set clear priorities, and negotiate hard tradeoffs across government and industry.
Past attempts to fill the post stalled. The earlier nominee withdrew after long delays. That pause extended uncertainty for an agency tasked with defending hospitals, pipelines, grids, and schools from daily attacks. A nominee with enterprise experience may calm partners who want practical help fast. But the Senate will press on oversight, vendor conflicts, and transparency. That is healthy. Conservative governance prizes accountability, duty to taxpayers, and strong national defense. A CISA chief should welcome tough questions and answer them in plain language.
The Palantir factor: capability, risk, and guardrails
Palantir sits at the center of government data and analytics work. That brings assets and scrutiny. On the plus side, LoSapio has managed high-stakes security in environments that look like government: mixed clouds, sensitive data, and relentless threats. On the risk side, Palantir’s role as a vendor raises conflict concerns. Palantir’s own code of conduct promises not to use non-public information to gain unfair advantage in new contracts. A CISA director must meet an even higher bar: recuse when needed, disclose fully, and keep procurement fair.
The fox guarding the hen house, once again.
The nomination of LoSapio, Palantir Technologies' chief information security officer, to lead CISA comes as Americans worry about AI companies' access to our data and the lack of regulations.
We won't continue settling for unregulated… https://t.co/yrWHFvl6uv
— Congresswoman Delia C. Ramirez (@repdeliaramirez) November 10, 2026
Practical steps can ease those concerns. Clear recusals on Palantir matters. Documented ethics screens. A published agenda that focuses on national needs over any single tool. The Senate can lock these in through conditions and robust follow-up. That approach fits common sense and conservative values: guard the public purse, keep the mission first, and make decisions that can be defended on the facts.
What to watch in the Senate process
Committee members will likely probe three buckets. First, independence. Can LoSapio enforce high bars for all vendors, including past employers? Second, priorities. Will CISA double down on critical infrastructure defense, faster incident reporting, and support for state and local partners? Third, execution. How will the agency turn policy into field outcomes—fewer ransomware hits, tighter software supply chains, and quicker recovery? Outlets tracking the nomination stress the urgency of a permanent leader to drive this work.
A swift, serious hearing would give CISA a needed reset. If the Senate confirms, the director should set a 100-day plan with measurable goals: sector-specific playbooks, joint exercises with utilities and hospitals, and simple guidance for small businesses. If the Senate declines, the administration must present another nominee with equal clarity and speed. The threats do not wait. The country needs a steady hand at CISA now.
Sources:
realcleardefense.com, whitehouse.gov
