# CISA Revises Cyber Retention Incentives

CISA will continue its Cybersecurity Retention Incentive program through fiscal 2027, but eligibility requirements narrowed effective October 1, 2026. Employees must meet specified cyber job-series or duty-time thresholds and receive a performance rating of “exceeds expectations” or higher to qualify for an incentive of up to 25% of base salary. A government-wide cap limiting top performance ratings to 40% of employees may further constrain eligibility, creating potential retention and workforce-capacity risks for CISA’s cyber missions. No specific contract or solicitation is identified.

- Contractors supporting CISA cyber missions should assess whether staffing assumptions and delivery plans depend on agency workforce capacity, given the possibility of increased attrition among employees who no longer qualify for incentives.
- Companies pursuing or supporting CISA work can factor agency hiring and workforce needs into recruiting plans; DHS’s Cyber Talent Management System is identified as a recruiting channel.
- The revised eligibility rules took effect October 1, 2026, and the incentive program is set to continue through fiscal 2027.

**Jurisdictions:** federal
**Industries:** Information Technology, Public Safety
**Topics:** Cybersecurity
**Published:** October 07, 2026

### Government Entities
- Cybersecurity and Infrastructure Security Agency (CISA)
- Department of Homeland Security (DHS)

### Sources
- [
        CISA to keep cyber pay incentives, but less staff will qualify - Federal News Network](https://federalnewsnetwork.com/cybersecurity/2026/10/cisa-to-keep-cyber-pay-incentives-but-less-staff-will-qualify) - federalnewsnetwork.com
- [
        CISA to keep cyber pay incentives, but fewer staff will qualify - Federal News Network](https://federalnewsnetwork.com/podcast/federal-drive-with-terry-gerton-podcast/cisa-to-keep-cyber-pay-incentives-but-fewer-staff-will-qualify) - Federal News Network