CISA Names Brian Mazanec Acting Infrastructure Security Chief
Former HHS preparedness official Brian Mazanec was sworn in Monday to lead infrastructure security efforts at the Cybersecurity and Infrastructure Security Agency.
Updated on Nov. 3, 2026 in People
The Cybersecurity and Infrastructure Security Agency appointed Brian Mazanec as acting executive assistant director for infrastructure security after he was sworn in on Monday. Mazanec stepped down last week from his role at HHS's Office of the Assistant Secretary for Preparedness and Response, where he had served since January 2023.
Why it matters
The appointment places an official with recent health-sector preparedness experience in charge of security for critical infrastructure across the country. Mazanec's HHS work, including the response to the Change Healthcare ransomware attack, bears directly on the cyber threats CISA is tasked with addressing.
Mazanec will oversee security for 16 critical infrastructure sectors after serving at HHS ASPR from January 2023 until stepping down last week. The announcement does not specify the duration of his acting appointment.
The players
Brian Mazanec
Mazanec is a federal preparedness and cybersecurity official who previously directed the Center for Preparedness at HHS ASPR and worked on joint advisories with CISA and the FBI.
Cybersecurity and Infrastructure Security Agency (CISA)
CISA is the federal agency responsible for protecting the nation's critical infrastructure from cyber and physical threats.
Brian Bonacci
Bonacci is a CISA official who was permanently appointed executive assistant director for emergency communications after serving in an acting capacity since August.
The details
Mazanec previously served as deputy assistant secretary and director of the Center for Preparedness within HHS ASPR, where he helped lead the department's response to the Change Healthcare ransomware attack and partnered with CISA and the FBI on joint cybersecurity advisories. He joins CISA as the agency works on its CI Fortify initiative, launched earlier this year.
Timeline
January 2023: Mazanec begins serving at HHS ASPR.
Monday: Mazanec is sworn in as acting executive assistant director for infrastructure security at CISA.
Last week: Mazanec steps down from HHS ASPR.
Industry Dynamics
Mazanec's background includes leading HHS's response to the Change Healthcare ransomware attack, a major 2024 incident that exposed vulnerabilities in the healthcare sector. Moving into CISA's infrastructure security role places that experience across the 16 critical infrastructure sectors federal authorities now monitor.
Changes in CISA's infrastructure security leadership can affect how cybersecurity guidance reaches the organizations that run power, water, healthcare and other essential services. Readers working in or relying on these sectors may see shifts in the advisories and programs CISA issues.
The takeaway
Leadership changes at federal cybersecurity agencies can reshape priorities for protecting the systems Americans depend on daily. Tracking appointments like this one helps explain how responsibilities for critical infrastructure are being assigned.
Further reading
Explore more federal leadership appointments in our People section.
