In October 2018, the Department of Homeland Security’s National Protection and Programs Directorate (NPPD) was poised to become the Cybersecurity and Infrastructure Security Agency (CISA). The Senate had passed the CISA Act, but Senate amendments meant the House still had to vote. The proposed name change made the office’s cybersecurity and infrastructure-protection mission clearer and put it on a statutory footing.
What was DHS’s top cyber office called before CISA?
It was the National Protection and Programs Directorate, or NPPD, an existing DHS directorate. A CyberScoop report published October 4, 2018, described NPPD as the federal government’s lead for securing federal networks and critical infrastructure. The bill before Congress proposed renaming and reorganizing that office as CISA. CyberScoop’s contemporaneous report
Why was NPPD being renamed?
The proposed name spelled out the office’s central responsibilities more directly than “National Protection and Programs Directorate.” The change was also intended to codify the office and help it recruit talent and focus on protecting the country from cyberattacks.
The mission described in the report extended beyond federal networks. NPPD had also been leading federal election-security efforts since threats became apparent in 2016, sharing information and cybersecurity best practices with state and local election offices.
The Tool Desk
Outbyte Driver Updater FREEFix the driver behind crashes, sound loss and screen glitchesFind Drivers →Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →#1 Best Overall
What would the CISA Act change?
The proposal would change the office’s name and legal footing, while making its mission and leadership structure more explicit. It was a reorganization of an office within DHS, not a proposal to move cybersecurity out of the department.
| Aspect | NPPD before the proposed change | CISA under the 2018 proposal |
|---|---|---|
| Legal status | Existing DHS directorate | Office to be placed on a statutory footing |
| Name | National Protection and Programs Directorate | Cybersecurity and Infrastructure Security Agency |
| Mission visibility | Securing federal networks and critical infrastructure; election-security coordination | Cybersecurity and infrastructure security made explicit in the name |
| Leadership structure | Led by an undersecretary | Proposed agency director |
Sen. Ron Johnson, chair of the Senate Homeland Security Committee, said the act could help the office recruit talent and focus on protecting the homeland from cyberattacks. Sen. Claire McCaskill, the committee’s ranking member, said the reorganization would help the cyber division operate efficiently and effectively to secure systems. DHS Secretary Kirstjen Nielsen called enactment urgent, citing heightened cyber activity from hostile nation-states.
Had Congress created CISA yet?
Not at the point described by the October 4, 2018 report. The Senate had passed the bill, but amendments required another House vote; House action was still pending. So the headline’s “about to” referred to a legislative step in progress at that time, not a current announcement.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Who was expected to lead the proposed agency?
Chris Krebs, then the NPPD undersecretary, was identified in the report as the expected director if the office became CISA. That was an expectation reported during the 2018 legislative process, not a claim about who leads the agency today.
Do these 3 things before closing this tab:
1Repair Windows errors before they cause bigger problems2Scan for outdated or missing drivers - takes under a minute3Clear out junk files and repair common Windows errorsQuick Recap
Best Value
Rank #4
Rank #3
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.

