Acting CISA head's polygraph failure sparks staff probe
Leadership at the Cybersecurity and Infrastructure Security Agency faces a storm of scrutiny after Acting Director Madhu Gottumukkala stumbled through a polygraph test this July.
At least six career staff members were placed on administrative leave following a Department of Homeland Security investigation into whether they misled Gottumukkala into taking an unsanctioned test, Politico reported.
Gottumukkala, appointed as deputy director in May under DHS Secretary Kristi Noem, sought access to highly sensitive intelligence materials, pushing for a counter-intelligence polygraph despite warnings from senior staff. His failure to pass the test has sparked questions about accountability at an agency tasked with safeguarding federal networks.
Unpacking the Polygraph Debacle at CISA
The test, scheduled in late July, aimed to clear Gottumukkala for a controlled access program shared by another spy agency. Senior officials had cautioned that such access wasn’t essential, with some prior leaders opting out of similar exams.
In early June, a senior official rejected an initial request for Gottumukkala’s access, citing no urgent need. By July, after that official was sidelined for unrelated reasons, a second request—signed by Gottumukkala himself—gained approval.
Despite available less-classified alternatives, Gottumukkala pressed forward, reportedly assuring colleagues he’d pass with ease. A current official later remarked he seemed to shift blame, claiming he merely followed staff guidance.
Staff Pay the Price for Leadership Missteps
On August 1, letters from DHS’s then-acting chief security officer informed six staffers their security clearances were suspended for allegedly providing false information about the test’s necessity. By August 4, they were on paid leave pending investigation, a move many see as deflecting responsibility.
Names like Jeffery Conklin, CISA’s chief security officer, and Masoom Chaudhary, deputy chief of staff, are among those sidelined. A letter reviewed by reporters accused them of failing to protect government information, casting doubt on their trustworthiness.
“He ultimately chose to sit for this polygraph,” a current official pointed out, pinning the decision squarely on Gottumukkala. Punishing staff for executing orders smells like a dodge from a leader unwilling to own his choices.
Agency Turmoil Deepens Under Temporary Leadership
CISA’s instability isn’t new, with nearly a third of its workforce gone since January amid budget cuts and forced reassignments to immigration roles under the Trump administration. Without a Senate-confirmed director since Jen Easterly’s exit, Gottumukkala’s interim role stretches on as nominee Sean Plankey awaits confirmation.
Staff morale has cratered, with one official calling the agency “a sinking ship” akin to the Titanic. Gottumukkala’s tenure, described by another as “a nightmare,” fuels fears of further dysfunction at a critical cyber defense hub.
DHS spokesperson Tricia McLaughlin defended Gottumukkala, stating he “did not fail a sanctioned polygraph test” and was misled by staff into an unauthorized exam. Her claim that “random bureaucrats can’t just order a polygraph” raises eyebrows when the acting director himself signed off on the process.
Questions Linger Over Accountability and Trust
Polygraphs aren’t foolproof, often flagging innocuous issues like anxiety, and aren’t admissible in most courts. Still, failing one while leading a national security agency prompts valid concern about handling sensitive data vulnerable to foreign threats.
Some officials wonder if Gottumukkala disclosed to superiors that he was advised against needing the access or that he pursued it anyway. A potential waiver to bypass the test existed, though career staff might not have known such a rare loophole.
The fallout reveals a troubling pattern of shifting blame rather than fixing systemic cracks at CISA. When leadership sidesteps responsibility, it’s the nation’s cyber defenses that risk taking the hit, a reality too grave to ignore in an era of relentless digital threats.





