CISA chooses London for its first-ever overseas office
Within hours of the US' announcement, the EU also said it would be going the other way and opening its first west-coast office to tackle digital diplomacy


The US cyber security authority has announced that it will open its first-ever overseas attaché office later this month in London.
The Cybersecurity and Infrastructure Security Agency (CISA) said the move aims to foster greater collaboration between the US and UK on a range of international issues including cyber security, the protection of critical infrastructure, and emergency communications.
CISA adds 41 vulnerabilities to catalog of exploited bugs US security agency issues emergency alert over vulnerable VMware products NCSC and ICO chiefs plead with lawyers to stop making ransomware payments
CISA’s attaché office will also serve to further the agency’s international strategic goals which include shaping global policy, increasing collaboration across various operations, and building partner capacity.
IT Pro has approached CISA for further details but it did not reply.
“As America’s cyber defence agency, we know that digital threat actors don’t operate neatly within borders,” said Jen Easterly, CISA director. “To help build resilience against threats domestically, we must think globally.
“I’m thrilled for CISA’s first international Attaché Office to open in London - true operational collaboration is a global endeavour.”
"We all know that cybercrime is a global issue; adversary groups and threat actors are not constrained by national borders. So the CISA’s decision to open a London office is an important step to help collaboration and improve resource sharing between US and UK," said Ian McShane, VP of strategy at Arctic Wolf to IT Pro.
Get the ITPro daily newsletter
Sign up today and you will receive a free copy of our Future Focus 2025 report - the leading guidance on AI, cybersecurity and other IT challenges as per 700+ senior executives
Heading up the attaché office is Julie Johnson, who has held numerous positions at CISA. These include roles such as regional protective security advisor in the New York Office, which saw Johnson lead research relating to the internet, microgrids, and physical-cyber convergence.
RELATED RESOURCE
Johnson also served as CISA’s regional lead for federal interagency working groups and before that, held other positions in the US Department of State, including at the Bureau of Intelligence and Research.
“Ms Johnson brings a wealth of knowledge, experience, and expertise in cyber security and critical infrastructure,” said CISA.
Both CISA and the UK’s equivalent authority, the National Cyber Security Centre (NCSC), work together on cyber security matters regularly, along with the cyber security agencies of the other nations in the Five Eyes intelligence alliance.
The two agencies often issue joint advisories for businesses and organisations looking to protect themselves against the latest significant cyber security threats.
Recent advisories have included warnings against the increased risk of cyber attacks on Western organisations as a result of the ongoing conflict between Ukraine and Russia - the first example of a war fought kinetically and in cyber space too.
The warnings proved true months later when representatives from the NCSC and CISA revealed at CYBERUK 2022 that the attribution for the Viasat attacks could be placed on Russia.
EU heads west
The news comes as the Council of the European Union (EC) announced on the same day that it too would be opening an international office in San Francisco to further its efforts in digital diplomacy and tech regulation.
Announcing the plans to open an office in the home to Silicon Valley giants, the EC said digital diplomacy must become a core component of the EU’s outward-facing actions and coordinated with its efforts in tackling cyber crime.
The EC did not specify a date by which the office will open other than saying it will be “soon”, but it will be the first of the EU’s offices to open on the west coast of the US. It currently holds permanent offices in Washington, DC and New York City, NY.

Connor Jones has been at the forefront of global cyber security news coverage for the past few years, breaking developments on major stories such as LockBit’s ransomware attack on Royal Mail International, and many others. He has also made sporadic appearances on the ITPro Podcast discussing topics from home desk setups all the way to hacking systems using prosthetic limbs. He has a master’s degree in Magazine Journalism from the University of Sheffield, and has previously written for the likes of Red Bull Esports and UNILAD tech during his career that started in 2015.
-
CISA issues warning in wake of Oracle cloud credentials leak
News The security agency has published guidance for enterprises at risk
By Ross Kelly
-
Reports: White House mulling DeepSeek ban amid investigation
News Nvidia is caught up in US-China AI battle, but Huang still visits DeepSeek in Beijing
By Nicole Kobie
-
PyPI attack: Targeting of repository 'shows no sign of stopping'
News Greater collaboration and understanding of attackers’ tactics is key to mitigating open source security threats
By Ross Kelly
-
Capita's handling of cyber attack shows companies still fail at breach reporting
Analysis Capita initially told customers there was “no evidence” of data having been compromised in the March cyber attack
By Ross Kelly
-
Malware being pushed to businesses by search engines remains a pervasive threat
News High-profile malvertising campaigns in recent months have surged
By Ross Kelly
-
There's only one way to avoid credential stuffing attacks
Opinion PayPal accounts were breached last year due to a credential stuffing attack, but can PayPal avoid taking responsibility?
By Davey Winder
-
Five things to consider before choosing an MFA solution
In-depth Because we all should move on from using “password” as a password
By Rene Millman
-
Cyber security suffers from a communication problem
News Negative language around ‘human failures’ is eroding trust between security teams and broader business functions - it has to stop
By Ross Kelly
-
Does LastPass really deserve a last chance?
Opinion After several disastrous security incidents and a communications breakdown, it’s time to leave LastPass for pastures new
By Ross Kelly
-
What is the spell-jacking vulnerability and how can your business avoid exposing data?
In-depth Spell-jacking vulnerabilities are threatening to unwittingly leak data to third parties, undermining any drive to protect privacy
By Davey Winder