Palantir’s Security Chief Is Nominated to Lead CISA
Mapletechie Editorial · Published November 10, 2026 · Business & Policy
News analysis
President Donald Trump has nominated Palantir’s chief information security officer, Michael LoSapio, to lead the Cybersecurity and Infrastructure Security Agency. The announcement could end a long vacancy in permanent leadership, but a nominee is not yet a confirmed director.
The White House’s November 9 notice formally sends LoSapio’s name to the Senate. Reuters reports that CISA has gone almost 22 months without a Senate-confirmed head and that its staffing has fallen by roughly a third since Trump returned to office in 2025. Nick Andersen is the acting director.
Confirmation is a separate event
The White House notice establishes the nomination. It does not establish Senate approval, a start date or a new agency policy. Reports saying LoSapio is already “taking over” should be read with that distinction in mind.
Cyber Daily’s profile describes LoSapio’s previous leadership of Palantir’s infrastructure and network security group before becoming CISO in 2024. That experience explains the operational-security background he would bring. It does not answer what authority, staffing or budget Congress and the administration would give him.
Three tests matter more than the appointment headline
Capacity: filling the top job cannot by itself replace lost expertise. The useful evidence would be a credible staffing plan, retention of specialist knowledge and clear priorities for the services operators actually use.
Independence: a senior executive arriving from a government supplier raises questions about procurement boundaries, recusals and the handling of commercially sensitive information. Those are questions for disclosure and scrutiny, not allegations that LoSapio has acted improperly.
Information sharing: civilian defence depends on organizations receiving useful warnings and knowing who can act on them. A strategy should be judged by whether it makes notification, remediation and cross-sector coordination faster, while protecting the information operators provide.
These are editorial tests for the prospective leadership, not promises the nominee has made.
Why Canadian infrastructure operators should pay attention
CISA’s remit includes civilian networks and coordination with critical-infrastructure operators. Its public warnings and security guidance are used beyond the US federal government, including by organizations deciding which threats deserve immediate attention.
A change in leadership could eventually affect those priorities, but the nomination does not alter Canadian law or prove that a particular information-sharing arrangement will change. Canadian operators should continue following the Canadian Cyber Centre and their own sector requirements rather than wait for a US confirmation process.
The problem is broader than one country. Mapletechie’s analysis of South Korea’s coordination review asks who has authority to turn a warning into action. CISA’s next director will face a related practical test inside an existing agency: matching responsibility with enough people and clear decisions to deliver it.