QUICK TAKE: Hegseth vows a no-fail mission for the vote, and the White House wants to erase CISA’s

The county clerk

The same words, twice

Pete Hegseth called the protection of American elections a “no-fail mission” in a memo made public on September 28, 2026.

The phrase is not new. On August 26, 2022, Gen. Paul Nakasone was already calling it “an enduring, no-fail mission” for Cyber Command and the NSA.

Same mission. Same words. Four years apart.

A lot has changed in between. Not the phrase.

Between the two sentences

Between those two sentences stands a county clerk.

An office in the basement of a town hall. Voter rolls thumbed through page by page. A keyboard clicking late. A landline.

In April, Aghogho Edevbie, Michigan’s deputy secretary of state, told lawmakers that local election officials had lost contact with the CISA staff they relied on, Nextgov reports.

CISA is the federal civilian cybersecurity agency. The one that picked up the phone.

One county. One clerk. One number. That is the scale of an election.

Since 2017, election infrastructure has counted among the country’s critical infrastructure, the Department of Homeland Security recalls.

No-fail twice, and a county clerk in between.

The September 22 memo

One page, three orders

The memo fits on a single page, The Hill notes. Hegseth signed it on September 22.

It is addressed to 4 chiefs. The head of Cyber Command. The heads of the NSA, the Defense Intelligence Agency and the National Geospatial-Intelligence Agency, according to Defense One.

It contains 3 orders, Axios reports.

Prioritize intelligence and cyberdefense resources to keep foreign actors from meddling in elections. Collect intelligence on foreign threats, within the law. Counter foreign cyberthreats together with the Department of Homeland Security.

Every authorized asset

Hegseth tells them to “mobilize every authorized asset” against foreign malign influence, Defense One quotes.

The Pentagon pledges to “identify, disrupt, and neutralize” foreign interference, according to CNN.

Officials tell Axios the effort will use the most advanced artificial intelligence capabilities to date.

Chief Pentagon spokesperson Sean Parnell says federal, state and local authorities are working “in lockstep” with Cyber Command.

The memo rests on a 2025 executive order by Donald Trump on election integrity. It also answers a July speech in which Trump accused China of interfering in 2020. Beijing denied it.

A signed page, three orders, not a single number.

A good move against Moscow and Beijing

The good part first

I’ll start with what is good. Because it is good.

Defending an election against the intelligence services of Moscow, Beijing or Tehran means defending the West where it is most fragile. Its trust.

The New York Times reported that classified assessments show Russia running covert online operations to undermine confidence in these elections, according to Nextgov.

Against that, Cyber Command is the right tool. Hegseth puts it to work. That is an act. A good one.

The polls stay civilian

Democrats are worried, and Trump’s refusal to rule out sending troops to polling places feeds that worry. The memo sends no one to the polls, Axios points out.

It aims outward. It does not touch the count.

And yet a memo is not the machinery itself.

Here is how I read it. Washington sharpens the sword abroad and thins the shield in the county.

No-fail abroad. No budget in the county.

A good move against Moscow and Beijing. I put my name to it.

What the page leaves out

Five blanks

Defense One read the memo all the way through.

The memo names no adversary.

The memo names no operation.

The memo provides for no extra staff.

The memo provides no funding.

The memo sets no deadline.

Five holes. One signature.

A mission without a calendar

A no-fail mission. With no date.

An officer will read guidance into it. A county clerk will look for a phone number. There isn’t one.

This is not a drafting flaw. It is simply what a memo is. The machinery itself has to exist somewhere else.

Where?

Nothing false on the page, and nothing with a number on it.

The group nobody could locate

The lesson of 2016

Cyber Command and the NSA have a tool for this. It is called the Election Security Group.

It has served as a hub where the two agencies share intelligence and strike back at trolls from Russia, Iran and elsewhere, in every election since 2020, CNN recalls.

It was born of the lesson of 2016, when U.S. agencies were caught flat-footed by the Russian influence operation.

Weeks before the 2024 presidential election, Cyber Command hackers carried out a secret operation to disrupt Russian trolls, CNN also reports.

April 2026

In April 2026, the new head of Cyber Command and the NSA, Gen. Joshua Rudd, told lawmakers he did not know whether that group had been activated for the midterms, according to CNN.

And yet at his confirmation hearing, he had called this work “fundamental,” Axios reports.

Andrew Schoka, who worked at Cyber Command in 2020, tells CNN the work takes months of planning. Starting now, he says, limits the impact on adversaries before the vote.

On September 28, Rudd said Cyber Command and the NSA regularly counter malicious foreign cyber actors, including those who seek to interfere in the democratic process.

The same day, CNN wrote that it was unclear what role the group will play.

The commander did not know if his own group existed.

Three shields, all thinner

At the FBI and in intelligence

Meanwhile, other doors have closed.

The second Trump administration dismantled the FBI’s Foreign Influence Task Force, Defense One writes.

At the Office of the Director of National Intelligence, an overhaul scattered the duties of the Foreign Malign Influence Center. In May, 2 officials were assigned to coordinate election-threat intelligence, according to Nextgov.

Two officials. For 50 states. Do the math.

At CISA

At CISA, election support has been cut back, Defense One adds.

CNN sums up the worry among current and former national security officials. In their view, this administration is not making election defense a priority.

Trump has also kept dismissing or questioning past intelligence on Russian and Chinese efforts to influence elections, CNN writes.

Three shields. All thinner.

Three shields thinned before the sword came out.

CISA’s budget line

The 2027 budget

In April 2026, the White House’s proposed 2027 budget called for about $700 million in cuts to CISA programs, Nextgov reported.

The budget proposed eliminating the agency’s election security program entirely.

The budget proposed cutting the election advisers deployed across the country.

The budget proposed ending CISA’s support for the election infrastructure information-sharing center, the alert hub for local election officials.

Axios sums it up in one sentence. Trump proposed cutting CISA’s election security budget.

Congress has the last word

Congress has to approve these changes. Last year, it sharply narrowed the cuts that were requested, Nextgov recalls.

Andrew Garbarino, the Republican chair of the House Homeland Security Committee, says he strongly supports CISA’s mission.

Defending elections is not a party matter. A Republican says so. I take note.

Proposing is not voting. But a proposal tells you what someone wants to keep.

One budget line struck out, and it belongs to the vote.

Hunting for yesterday’s fraud

Eyes on 2020

While civilian defense gets leaner, other efforts get bigger.

Significant resources have gone into looking for fraud in past elections and on voter rolls, with part of Homeland Security’s staff assigned to the task, Axios writes.

Eyes on 2020. In January, the FBI seized voting machines used in 2020 in Fulton County, Georgia.

Eyes on 2024. The Justice Department asked 30 state election offices to hold on to their records from that election, as part of litigation.

Eyes on the voter rolls, combed through in search of fraud.

The eyes that are missing

Earlier this year, Trump told the New York Times he regretted not ordering the National Guard to seize machines in 2020, Axios reports.

Hegseth’s memo, for its part, sends no one after the machines.

But a government has only so many eyes. The ones turned toward yesterday are not watching tomorrow.

Yesterday searched, tomorrow left uncovered.

The September 24 plan

Ten regional advisers

Here is what unsettles this quick take, and I am publishing it anyway.

On September 24, two days after the memo, the Department of Homeland Security released CISA’s 2026 election infrastructure security plan.

Free, voluntary services. Threat information sharing. Technical expertise. Vulnerability scanning.

“Election security is national security,” said Secretary Markwayne Mullin. The plan will be “implemented in full,” he promises.

The plan makes CISA’s 10 regional directors election security advisers. Classified briefings reach more than 70 secure locations, according to Nextgov.

The promised sharing platform was used during the 2026 World Cup, the agency says. All election officials will have access at no cost.

What it leaves uncounted

It is a real step. It does not change the question.

The plan does not say how many employees will do the work.

The plan does not restore the dedicated election adviser positions.

The plan does not name the election information-sharing center that received CISA’s support until now.

And it does not explain how it squares with a budget that proposes eliminating the election program, Nextgov notes.

Ten directors, and not one staffing number.

Another memo, in 2020

The raw data

There is another memo worth remembering.

After the 2020 defeat, Trump allies circulated a text. It asked the president to use the Pentagon’s and the NSA’s “unprocessed raw signals data” to investigate election fraud, according to the Washington Post as cited by Axios.

The officials it named said at the time they had not seen it.

Six years later, the same president has already used federal officials to hunt for evidence of fraud, Axios writes.

Within the law

The 2026 memo says something else. Collection will be done “in accordance with the law, regulation, Executive direction,” Axios quotes.

Defense One stresses it too. Cyber Command will act under its existing authorities.

That clause is not decoration. It draws the line between watching foreign actors and watching your own voters.

I welcome it. I will keep it in view until the vote.

One line. But the right one.

Outward, and only outward.

The phone in Michigan

What local officials lost

Back to the county clerk.

The clerk doesn’t read Pentagon memos. The clerk reads voter rolls. Checks the machines. Waits for an alert.

In April, in Michigan, lawmakers were told that link had snapped. The people you used to call were no longer there.

The Record, cited by Nextgov, reports that the administration will issue no more declassified public warnings before the vote. In 2024, federal agencies put out frequent updates.

The sword and the shield

Cyber Command strikes far away, beyond the borders. CISA talks to the county.

One is a sword. The other, a service counter. Both matter.

One gets a memo. The other gets a proposed cut.

If a county detects an intrusion the night before the vote…

I would like to write that the soldier will answer the clerk. Nothing in the memo says so.

A silent phone makes no noise. It only leaves the room colder.

No-fail at the Pentagon, no answer in the county.

Russia, China, Iran

The threat named elsewhere

The threat is real. It has names.

In 2022, the Office of the Director of National Intelligence named Russia, China and Iran among the actors likely to interfere, the Pentagon recalled.

In 2026, according to the New York Times as cited by Nextgov, Russia is running covert online operations. The assessments found no attempt to compromise voting machines.

These adversaries operate below the threshold of armed conflict, the group’s military co-lead said in 2022. “It’s our job to disrupt them,” he added.

What Trump did with the evidence

In July, Trump used declassified documents on U.S. voter data held by China to revive his claims about 2020.

A review concluded those documents did not establish that Beijing had altered ballots or the result, Nextgov reports.

Hegseth’s memo names neither Moscow, nor Beijing, nor Tehran.

Caution may explain that. The silence leaves room for every reading.

Moscow is already at work, and the memo won’t name it.

75 days against five weeks

August 2022

In 2022, under Joe Biden, the Pentagon announced its setup 75 days before the midterms.

The Election Security Group had been stood up again early that year. It had two named co-leads, a Cyber Command brigadier general and an NSA senior executive.

Its objectives were written down. Understand adversaries. Share with partners. Impose costs on foreign actors.

“We can’t just watch our adversaries,” its NSA co-lead said. “We have to do something about it.”

September 2026

In 2026, the memo arrives about five weeks before the vote, according to CNN.

It names no one to lead the group. It does not say whether the group still exists in that form.

“This is what CYBERCOM does every day,” an official told Axios. Defending the country against foreign cyber actors, the official added, is an enduring mission.

And yet a permanent mission does not need to be announced five weeks before the vote.

Seventy-five days is a season. Five weeks is a sprint.

In 2022, 75 days ahead. In 2026, five weeks.

What the memo reveals

The sword and the counter

Here is what this quick take keeps.

The memo reveals a shift. Defense of the vote is moving from the civilian service counter to the military sword.

The sword strikes far away, in secret. The counter answers the phone, in public, in the county.

A democracy needs both. Washington has just announced one and proposed cutting the other.

Look at the page

Look at what you are shown. One signed page, five weeks before the vote.

Look at what you are not shown. A headcount, a budget, a date, the name of an adversary.

An act can be right and insufficient at the same time. This one is.

I do not fault Hegseth for signing. I fault his government for letting people believe a signature is enough.

The sword comes out, and the shield wastes away.

A page doesn’t answer the phone

Election Day

The memo is good. The machinery it assumes is nowhere in sight.

The civilian plan exists. Its budget is slated for the cut.

In between, a county clerk waits for an alert that will come, or won’t. The memo will sit in a binder.

On the other end of the line

On Election Day, will the county clerk who lost a CISA contact still know whom to call?

Cyber Command will be at work, somewhere.

The phone in the basement will ring in an empty room. Or it won’t ring at all.

A no-fail mission, and a county with no voice on the line.

Sources:

Primary Sources:

• Axios — Hegseth’s September 22 memo and its three orders, September 28, 2026
• Department of Homeland Security — 2026 election infrastructure security plan, September 24, 2026
• DoD News (CHIPS) — Cyber Command and NSA defend the midterm elections, August 26, 2022

Secondary Sources:

• CNN — Hegseth directs the military to defend the midterms, September 28, 2026
• Defense One — Hegseth’s memo and the retreat of civilian defenses, September 2026
• Nextgov/FCW — CISA’s election plan after the cuts, September 2026