CISA boasts AI automation improvements to threat analysis, mission support | CyberScoop<\/title> <meta name=\"description\" content=\"CISA officials reveal that AI automation is delivering massive gains in security operations, slashing "noise" for analysts while streamlining HR and finance. Here is how the agency is navigating legacy workflows and new AI governance.\"> <link rel=\"canonical\" href=\"https:\/\/cyberscoop.com\/cisa-ai-automation-security-operations-efficiency-uipath-fusion-event\/\"> <meta property=\"og:locale\" content=\"en_US\"> <meta property=\"og:type\" content=\"article\"> <meta property=\"og:title\" content=\"CISA boasts AI automation improvements to threat analysis, mission support\"> <meta property=\"og:description\" content=\"CISA officials reveal that AI automation is delivering massive gains in security operations, slashing "noise" for analysts while streamlining HR and finance. Here is how the agency is navigating legacy workflows and new AI governance.\"> <meta property=\"og:url\" content=\"https:\/\/cyberscoop.com\/cisa-ai-automation-security-operations-efficiency-uipath-fusion-event\/\"> <meta property=\"og:site_name\" content=\"CyberScoop\"> <meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/cyberscoop\/\"> <meta property=\"article:published_time\" content=\"2026-05-05T19:18:28+00:00\"> <meta property=\"article:modified_time\" content=\"2026-05-05T19:20:36+00:00\"> <meta property=\"og:image\" content=\"https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2026\/05\/cisa-boasts-ai-automation-improvements-to-threat-analysis-mission-support-2.jpg\"> <meta property=\"og:image:width\" content=\"6000\"> <meta property=\"og:image:height\" content=\"4000\"> <meta property=\"og:image:type\" content=\"image\/jpeg\"> <meta name=\"author\" content=\"Tim Starks\"> <meta name=\"twitter:card\" content=\"summary_large_image\"> <meta name=\"twitter:creator\" content=\"@timstarks\"> <meta name=\"twitter:site\" content=\"@CyberScoopNews\">  <link rel=\"dns-prefetch\" href=\"\/\/securepubads.g.doubleclick.net\">\n<link rel=\"dns-prefetch\" href=\"\/\/use.typekit.net\">\n<link rel=\"alternate\" type=\"application\/rss+xml\" title=\"CyberScoop \u00bb Feed\" href=\"https:\/\/cyberscoop.com\/feed\/\">\n<link rel=\"alternate\" type=\"application\/rss+xml\" title=\"CyberScoop \u00bb Comments Feed\" href=\"https:\/\/cyberscoop.com\/comments\/feed\/\"> <link rel=\"stylesheet\" id=\"all-css-2\" href=\"https:\/\/cyberscoop.com\/wp-includes\/css\/dist\/block-library\/style.min.css?m=1774626878g\" type=\"text\/css\" media=\"all\"> <link rel=\"stylesheet\" id=\"all-css-6\" href=\"https:\/\/cyberscoop.com\/wp-content\/mu-plugins\/search\/elasticpress\/dist\/css\/related-posts-block-styles.min.css?m=1778005960g\" type=\"text\/css\" media=\"all\"> <link rel=\"stylesheet\" id=\"all-css-8\" href=\"https:\/\/cyberscoop.com\/wp-content\/themes\/scoopnewsgroup\/dist\/css\/frontend.css?m=1775068334g\" type=\"text\/css\" media=\"all\">\n<link rel=\"stylesheet\" id=\"typekit-css\" href=\"https:\/\/use.typekit.net\/itk2qbh.css?ver=13897d660a0ac2c9c7d1\" media=\"all\"> <link rel=\"https:\/\/api.w.org\/\" href=\"https:\/\/cyberscoop.com\/wp-json\/\"><link rel=\"alternate\" title=\"JSON\" type=\"application\/json\" href=\"https:\/\/cyberscoop.com\/wp-json\/wp\/v2\/posts\/88876\"><meta name=\"generator\" content=\"WordPress 6.8.5\">\n<link rel=\"shortlink\" href=\"https:\/\/cyberscoop.com\/?p=88876\">\n<link rel=\"alternate\" title=\"oEmbed (JSON)\" type=\"application\/json+oembed\" href=\"https:\/\/cyberscoop.com\/wp-json\/oembed\/1.0\/embed?url=https%3A%2F%2Fcyberscoop.com%2Fcisa-ai-automation-security-operations-efficiency-uipath-fusion-event%2F\">\n<link rel=\"alternate\" title=\"oEmbed (XML)\" type=\"text\/xml+oembed\" href=\"https:\/\/cyberscoop.com\/wp-json\/oembed\/1.0\/embed?url=https%3A%2F%2Fcyberscoop.com%2Fcisa-ai-automation-security-operations-efficiency-uipath-fusion-event%2F&format=xml\">   <link rel=\"icon\" href=\"https:\/\/cyberscoop.com\/wp-content\/uploads\/sites\/3\/2023\/01\/cropped-cs_favicon-2.png?w=32\" sizes=\"32x32\">\n<link rel=\"icon\" href=\"https:\/\/cyberscoop.com\/wp-content\/uploads\/sites\/3\/2023\/01\/cropped-cs_favicon-2.png?w=192\" sizes=\"192x192\">\n<link rel=\"apple-touch-icon\" href=\"https:\/\/cyberscoop.com\/wp-content\/uploads\/sites\/3\/2023\/01\/cropped-cs_favicon-2.png?w=180\">\n<meta name=\"msapplication-TileImage\" content=\"https:\/\/cyberscoop.com\/wp-content\/uploads\/sites\/3\/2023\/01\/cropped-cs_favicon-2.png?w=270\"> <\/head><body class=\"wp-singular post-template-default single single-post postid-88876 single-format-standard wp-theme-scoopnewsgroup wp-child-theme-cyberscoop\" id=\"readabilityBody\"> <a href=\"https:\/\/cyberscoop.com\/cisa-ai-automation-security-operations-efficiency-uipath-fusion-event\/#main\" class=\"skip-to-content-link visually-hidden-focusable\">Skip to main content<\/a> <\/p>\n<div class=\"ad ad--top ad--top-desktop\">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div>\n<p> <main id=\"main\" role=\"main\" tabindex=\"-1\"> <\/p>\n<div class=\"ad ad--top ad--top-mobile\">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div>\n<section id=\"stickybar\" class=\"stickybar stickybar--newsletter js-stickybar\" readability=\"0.82\"> <button class=\"stickybar__close js-stickybar-close\" aria-controls=\"stickybar\"> <svg class=\"icon icon--close\" width=\"21\" height=\"22\" viewBox=\"0 0 21 22\" fill=\"none\"><path d=\"m.822.518-.805.805L9.695 11 .017 20.678l.805.805 9.678-9.678 9.677 9.678.806-.805L11.305 11l9.678-9.677-.806-.805-9.677 9.677L.822.518Z\" fill=\"currentColor\" \/><\/svg> <span class=\"visually-hidden\">Close<\/span> <\/button> <\/section>\n<article class=\"single-article content\">\n<div class=\"single-article__container js-single-article-content\">\n<header class=\"single-article__header \" readability=\"27.010385756677\">\n<div class=\"single-article__header-content\" readability=\"36.882352941176\">\n<p> Cybersecurity and Infrastructure Security Agency officials said it\u2019s proven a boon in numerous areas, but there are some hurdles to adoption, still. <\/p>\n<p>  <br \/>\n<audio id=\"audio-player\" src=\"https:\/\/wp-tts-cdn.api.scpnewsgrp.com\/cyberscoop\/88876\/english.openai.mp3\"><\/audio> <\/p>\n<div readability=\"11\">\n<div>\n<p>Listen to this article<\/p>\n<p>  <\/p>\n<p>0:00<\/p>\n<\/p><\/div>\n<p>  <\/p>\n<p> <span id=\"tts-tooltip\">Learn more.<\/span> <span> This feature uses an automated voice, which may result in occasional errors in pronunciation, tone, or sentiment. <\/span> <\/p>\n<\/div>\n<p>  <\/div>\n<div class=\"single-article__cover-wrap\">\n<figure class=\"single-article__cover\"> <img data-recalc-dims=\"1\" fetchpriority=\"high\" width=\"640\" height=\"426\" src=\"https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2026\/05\/cisa-boasts-ai-automation-improvements-to-threat-analysis-mission-support.jpg?resize=640%2C426&ssl=1\" class=\"single-article__cover-image wp-post-image\" alt decoding=\"async\" fetchpriority=\"high\" srcset=\"https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2026\/05\/cisa-boasts-ai-automation-improvements-to-threat-analysis-mission-support-2.jpg 6000w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2026\/05\/cisa-boasts-ai-automation-improvements-to-threat-analysis-mission-support-2.jpg?resize=300,200 300w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2026\/05\/cisa-boasts-ai-automation-improvements-to-threat-analysis-mission-support-2.jpg?resize=768,512 768w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2026\/05\/cisa-boasts-ai-automation-improvements-to-threat-analysis-mission-support-2.jpg?resize=1024,683 1024w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2026\/05\/cisa-boasts-ai-automation-improvements-to-threat-analysis-mission-support-2.jpg?resize=1536,1024 1536w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2026\/05\/cisa-boasts-ai-automation-improvements-to-threat-analysis-mission-support-2.jpg?resize=2048,1365 2048w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2026\/05\/cisa-boasts-ai-automation-improvements-to-threat-analysis-mission-support-2.jpg?resize=600,400 600w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2026\/05\/cisa-boasts-ai-automation-improvements-to-threat-analysis-mission-support-2.jpg?resize=252,168 252w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2026\/05\/cisa-boasts-ai-automation-improvements-to-threat-analysis-mission-support-2.jpg?resize=506,337 506w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2026\/05\/cisa-boasts-ai-automation-improvements-to-threat-analysis-mission-support-2.jpg?resize=1013,675 1013w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2026\/05\/cisa-boasts-ai-automation-improvements-to-threat-analysis-mission-support-2.jpg?resize=1265,843 1265w\" sizes=\"(max-width: 1013px) 100vw, 1013px\"><figcaption> Tammy Barbour, acting chief of application management at CISA, left, and Lauren Wind, acting deputy chief technology officer at CISA, speak at the UiPath FUSION Public Sector event hosted by Scoop News Group, on Tuesday, May 5 2026. (Photo by Sergey Kolupaev\/EPNAC) <\/figcaption><\/figure>\n<\/p><\/div>\n<\/header>\n<div class=\"single-article__content\">\n<div class=\"single-article__content-inner has-drop-cap\"> <html readability=\"40.291549734955\"><body readability=\"83.677327647477\"><\/p>\n<p>The Cybersecurity and Infrastructure Security Agency has gotten \u201cby far\u201d the biggest gains from artificial intelligence automation in its security operations unit to help analysts sift through threats, but it\u2019s also proven valuable elsewhere within the agency, CISA officials said Tuesday.<\/p>\n<p>It\u2019s \u201creally allowing those analysts to do triage very fast, so they focus on what matters versus the noise,\u201d Tammy Barbour, acting chief of application management at CISA, said. \u201cThey\u2019re able to do a lot of real-time, quick looks before events happen in most places.\u201d<\/p>\n<p>Barbour, speaking at the <a href=\"https:\/\/uipathfusionpublicsector.upgather.com\/\">UiPath FUSION Public Sector event<\/a> hosted by Scoop News Group, said automation has also been a boon to CISA\u2019s Technology Operations Center.<\/p>\n<p>\u201cThe top analysts are able to quickly respond to customers who are reaching out to talk and asking questions, and be able to get real-time efficiencies with that,\u201d she said. <\/p>\n<div class=\"ad ad--inline_1 \">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div>\n<p>And it\u2019s been a big help for data migration, Barbour said.<\/p>\n<p>Lauren Wind, acting deputy chief technology officer at CISA, said from her wing of the department, it\u2019s focused on finding benefits from automation in areas like human resources, contracting and finance.<\/p>\n<p>\u201cSo we can continue to drive mission, but also accelerate the mission-supporting functions,\u201d she said. \u201cWe really want to ensure that our cyber analysts are focusing on the things that matter, like malware.\u201d<\/p>\n<p>But there are some barriers to adoption of the technology, both said.<\/p>\n<p>\u201cWe\u2019re still kind of in our infancy,\u201d Barbour said. \u201cBut we still struggle with the legacy workflows, processes. We still have some systems that need to be modernized, that we\u2019re currently working towards adoption. People love their spreadsheets. I just can\u2019t force it out of their hands, especially the \u2014 sorry, all the accountants in the room, I apologize, but you\u2019ve got to let it go.\u201d<\/p>\n<div class=\"ad ad--inline_1 \">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div>\n<p>AI governance needs to be laid out in advance, too, and transparently, Wind said.<\/p>\n<p>\u201cOne of the biggest things is ensuring that the CTO is driving governance, whether that\u2019s for data, whether that\u2019s for AI,\u201d she said. \u201cI think we\u2019re pretty good on generative, and everyone\u2019s a little bit catching up to industry on agentic.\u201d<\/p>\n<p>How to handle data is another consideration, Wind said.<\/p>\n<p>\u201cWhether you\u2019re on the cloud and you\u2019re serverless or you\u2019re still on prem, if you haven\u2019t figured out what your structure of your data platform looks like, it makes automation a lot more difficult,\u201d she said. <\/p>\n<p>The comments from Barbour and Wind offered a window into how CISA is viewing AI internally. Much of the agency\u2019s recent work related to AI is focused on <a href=\"https:\/\/cyberscoop.com\/cisa-nsa-five-eyes-guidance-secure-deployment-ai-agents\/\">advice for safe deployment<\/a> of agentic AI at other organizations, or examination of the way AI is <a href=\"https:\/\/www.msn.com\/en-us\/news\/technology\/exclusive-us-officials-weigh-cutting-deadlines-to-fix-digital-flaws-amid-worries-over-ai-powered-hacking-sources-say\/ar-AA22b7mJ?gemSnapshotKey=GM3F712977-snapshot-1&cvid=69fa3a1c0b6a4f9e80c223b33a94cb84&ei=15\">deepening threats<\/a>.<\/p>\n<div class=\"ad ad--inline_1 \">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div>\n<p><\/body> <\/p>\n<footer class=\"single-article__footer\">\n<div class=\"author-card\" readability=\"7.7216117216117\">\n<div class=\"author-card__avatar\">\n<figure class=\"author-card__image-wrap\"> <img data-recalc-dims=\"1\" decoding=\"async\" class=\"author-card__image\" src=\"https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2026\/05\/cisa-boasts-ai-automation-improvements-to-threat-analysis-mission-support-1.jpg?w=640&ssl=1\" alt=\"Tim Starks\"> <\/figure>\n<\/p><\/div>\n<div class=\"author-card__details\" readability=\"10.901098901099\">\n<h4 class=\"author-card__name\">Written by Tim Starks<\/h4>\n<p> Tim Starks is senior reporter at CyberScoop. His previous stops include working at The Washington Post, POLITICO and Congressional Quarterly. An Evansville, Ind. native, he’s covered cybersecurity since 2003. Email Tim here: <a href=\"mailto:tim.starks@cyberscoop.com\">tim.starks@cyberscoop.com<\/a>. <\/div>\n<\/p><\/div>\n<div class=\"single-article__tags-container\">\n<h4 class=\"single-article__tags-title\">In This Story<\/h4>\n<\/p><\/div>\n<\/footer>\n<p> <\/html><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<div class=\"single-article__ads js-single-article-sidebar\">\n<div class=\"ad ad--sidebar js-single-article-sidebar-5 ad--rightrail_1 \">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div>\n<div class=\"ad ad--sidebar js-single-article-sidebar-4 ad--rightrail_2 \">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div>\n<div class=\"ad ad--sidebar js-single-article-sidebar-3 ad--rightrail_3 \">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div><\/div>\n<\/article>\n<div class=\"popular-stories popular-stories--single-post\">\n<div class=\"popular-stories__container\">\n<h2 class=\"popular-stories__title\"> More Scoops <\/h2>\n<p>  <\/div>\n<p>\n<\/div>\n<p> <\/p>\n<section class=\"latest-podcasts\">\n<h2 class=\"latest-podcasts__title\"> Latest Podcasts\t<\/h2>\n<\/section>\n<div class=\"top-categories\">\n<div class=\"top-categories__container\">\n<h3 class=\"top-categories__category-title\">Government<\/h3>\n<\/p><\/div>\n<div class=\"top-categories__container\">\n<h3 class=\"top-categories__category-title\">Technology<\/h3>\n<\/p><\/div>\n<\/p><\/div>\n<p> <\/main> <\/p>\n<div class=\"ad ad--bottom \">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div>\n<div id=\"interstitial\" class=\"welcome__container\"> <button id=\"close-modal-1\" class=\"welcome__clickable_area\"><\/button> <\/p>\n<div class=\"welcome__ad_wrapper\">\n<p> <button id=\"close-modal-3\" class=\"welcome__continue-button\">Continue to CyberScoop<\/button> <\/p>\n<\/p><\/div>\n<\/p><\/div>\n<p>   <\/body> <a href=\"https:\/\/cyberscoop.com\/cisa-ai-automation-security-operations-efficiency-uipath-fusion-event\/\">Source<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>CISA boasts AI automation improvements to threat analysis, mission support<\/p>\n","protected":false},"author":11,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[235,384,452,4748,117,6571],"tags":[236,388,454,4750,119,6572],"class_list":["post-8613","post","type-post","status-publish","format-standard","hentry","category-ai","category-artificial-intelligence-ai","category-cybersecurity-and-infrastructure-security-agency-cisa","category-cyberthreats","category-government","category-uipath","tag-ai","tag-artificial-intelligence-ai","tag-cybersecurity-and-infrastructure-security-agency-cisa","tag-cyberthreats","tag-government","tag-uipath"],"featured_image_urls":{"full":"","thumbnail":"","medium":"","medium_large":"","large":"","1536x1536":"","2048x2048":"","chromenews-featured":"","chromenews-large":"","chromenews-medium":""},"author_info":{"display_name":"Cyber Scoop","author_link":"https:\/\/ddi.mohflo.net\/index.php\/author\/cyberscoop\/"},"category_info":"<a href=\"https:\/\/ddi.mohflo.net\/index.php\/category\/ai\/\" rel=\"category tag\">AI<\/a> <a href=\"https:\/\/ddi.mohflo.net\/index.php\/category\/artificial-intelligence-ai\/\" rel=\"category tag\">artificial intelligence (AI)<\/a> <a href=\"https:\/\/ddi.mohflo.net\/index.php\/category\/cybersecurity-and-infrastructure-security-agency-cisa\/\" rel=\"category tag\">Cybersecurity and Infrastructure Security Agency (CISA)<\/a> <a href=\"https:\/\/ddi.mohflo.net\/index.php\/category\/cyberthreats\/\" rel=\"category tag\">cyberthreats<\/a> <a href=\"https:\/\/ddi.mohflo.net\/index.php\/category\/government\/\" rel=\"category tag\">Government<\/a> <a href=\"https:\/\/ddi.mohflo.net\/index.php\/category\/uipath\/\" rel=\"category tag\">UiPath<\/a>","tag_info":"UiPath","comment_count":"0","jetpack_featured_media_url":"","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/posts\/8613","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/users\/11"}],"replies":[{"embeddable":true,"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/comments?post=8613"}],"version-history":[{"count":0,"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/posts\/8613\/revisions"}],"wp:attachment":[{"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/media?parent=8613"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/categories?post=8613"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/tags?post=8613"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}

{"id":8613,"date":"2026-05-05T14:18:28","date_gmt":"2026-05-05T19:18:28","guid":{"rendered":"https:\/\/cyberscoop.com\/?p=88876"},"modified":"2026-05-05T14:18:28","modified_gmt":"2026-05-05T19:18:28","slug":"cisa-boasts-ai-automation-improvements-to-threat-analysis-mission-support","status":"publish","type":"post","link":"https:\/\/ddi.mohflo.net\/index.php\/2026\/05\/05\/cisa-boasts-ai-automation-improvements-to-threat-analysis-mission-support\/","title":{"rendered":"CISA boasts AI automation improvements to threat analysis, mission support"},"content":{"rendered":"