March 25, 2025

FOIA Requests Target CISA's Ombuds

A recently published log reveals that an investigator using the Freedom of Information Act is demanding correspondence from the Cybersecurity & Infrastructure Security Agency's Organization Ombuds, Dallas Brown, along with other staff members. The FOIA requests seek a wide range communications with the Ombuds for May through September 2024.

Like all federal entities, CISA (the Department of Homeland Security agency that coordinates federal cybersecurity efforts) produces logs of requests for public information. The log published by CISA on March 19, 2025, reveals that it is being asked for records from its Ombuds described as follows:
  1. All congressional correspondence and communications to/from Congressional Offices or Committees for the previous month including responses or document productions to outstanding, extant, or previous congressional inquiries or oversight efforts.
  2. All communications to/from the following email domains: @ucia.gov, @nsc.eop.gov, @eop.gov, @who.eop.gov, @ovp.eop.gov, @mail.house.gov, *.senate.gov. I am amicable to a rolling production as records are available.
  3. All sent communications (not received) mentioning 'Afghanistan', 'Ukraine', 'EUCOM', 'OIG Referral', 'Congressional', 'MDM', 'Iran', 'JCPOA', 'LOE', 'investigation', 'negotiations', 'injunction', 'APT', 'election infrastructure', 'misinformation', or 'disinformation'
A report by Pro Publica offered this explanation:
Three investigators for the Heritage Foundation have deluged federal agencies with thousands of Freedom of Information Act requests over the past year, requesting a wide range of information on government employees, including communications that could be seen as a political liability by conservatives.
* * *
All three men who filed the requests ... did so on behalf of the Heritage Foundation’s Oversight Project, an arm of the conservative group that uses FOIA, lawsuits and undercover videos to investigate government activities.
CISA is not required to publish its response to the FOIA request. (CISA FOIA Logs; ProPublica.)

1 comment:

  1. Good reminder about the risks of including any sensitive information in emails.

    ReplyDelete