Department of Homeland Security — Organization & Components

The Department of Homeland Security is the third-largest Cabinet department — with approximately 240,000 employees and a budget exceeding $100 billion — created by the largest federal reorganization since 1947, when the Homeland Security Act of 2002 (6 U.S.C. § 111 et seq.) merged 22 existing agencies in the aftermath of the September 11, 2001 attacks. DHS is not a single coherent agency but a deliberately heterogeneous collection of components with distinct missions: border control (CBP), interior immigration enforcement (ICE), immigration benefits adjudication (USCIS), transportation security (TSA), emergency management (FEMA), cybersecurity (CISA), the U.S. Coast Guard (USCG), the Secret Service (USSS), and others. The department's breadth — from deporting undocumented immigrants to providing disaster relief to protecting the President — means its components often operate more independently than the Cabinet structure implies, and its budget and personnel are distributed across missions that have little organic connection to each other. In 2025, DHS became the operational locus of the Trump administration's mass deportation agenda, with ICE deportation flights, expanded expedited removal authority, and reinstatement of Remain in Mexico generating both policy impact and litigation across multiple federal circuits.

Legal Authority

• 6 U.S.C. § 111 et seq. — Homeland Security Act of 2002: establishes the Department of Homeland Security; transfers 22 agencies into DHS; defines the Secretary's authorities and the department's primary mission of preventing terrorist attacks, reducing vulnerability to terrorism, and minimizing damage from attacks and natural disasters
• 6 U.S.C. § 121 et seq. — Directorate for Information Analysis and Infrastructure Protection (now CISA): authorizes DHS's information analysis and infrastructure protection mission; provides the statutory basis for CISA's role in protecting federal civilian networks and critical infrastructure
• 8 U.S.C. § 1101 et seq. — Immigration and Nationality Act (INA): the principal statute governing immigration enforcement and benefits; CBP, ICE, and USCIS derive their operational authorities primarily from the INA
• 49 U.S.C. § 114 — Transportation Security Administration: establishes TSA and its authority to screen passengers and cargo at airports and other transportation facilities
• 42 U.S.C. § 5121 et seq. — Robert T. Stafford Disaster Relief and Emergency Assistance Act: authorizes FEMA to administer federal disaster declarations, public assistance, and individual assistance programs
• 6 U.S.C. § 401 et seq. — Post-Katrina Emergency Management Reform Act of 2006 (PKEMRA): reformed FEMA's structure following Hurricane Katrina, elevating its leadership and restoring direct access to the President

Key Mechanics

DHS operates through its major components, each with distinct statutory authorities and operational cultures. The Secretary of Homeland Security exercises departmental authority over all components, but the operational chain for immigration enforcement flows from the Secretary through the Under Secretaries to CBP, ICE, and USCIS — three agencies with distinct but overlapping immigration missions. Budget authority is divided through the appropriations process among separate subcommittees that fund CBP, FEMA, TSA, and other components independently, giving Congress significant leverage over individual DHS components through targeted appropriations.

Organization & Structure

DHS is organized into six operational components with major independent missions, plus a set of smaller directorates and offices. The Secretary of Homeland Security, confirmed by the Senate, manages this array through an Under Secretary-level structure — though the Coast Guard Commandant and Secret Service Director have substantial operational independence rooted in their pre-merger traditions. The DHS Inspector General and Privacy Officer are embedded oversight functions. Because many DHS components (Coast Guard, Secret Service, FEMA) predate the department and retain distinct cultures, congressional oversight is fragmented across multiple authorizing and appropriations subcommittees.

U.S. Customs and Border Protection (CBP) — the largest law enforcement agency in the United States by personnel (~60,000 officers and agents), CBP controls ports of entry (the Office of Field Operations), patrols the land border between ports (Border Patrol), enforces trade and customs laws, and operates Air and Marine Operations for border surveillance. CBP processes approximately 1 million people crossing the border daily at ports of entry and is the front-line agency for both illegal entry interdiction and lawful trade facilitation. CBP's Title 42 and Title 8 authorities for processing and expelling arriving migrants have been the central legal battleground in immigration enforcement debates.

U.S. Immigration and Customs Enforcement (ICE) — DHS's interior immigration enforcement agency, ICE operates through two main divisions: Enforcement and Removal Operations (ERO), which arrests and deports noncitizens, and Homeland Security Investigations (HSI), which investigates transnational crime including human trafficking, drug smuggling, financial crimes, and cybercrimes. ICE maintains a nationwide detention network (approximately 40,000 detention beds daily) and executes deportation flights. ICE's 287(g) agreements with state and local law enforcement have expanded its effective reach.

U.S. Citizenship and Immigration Services (USCIS) — the benefits-adjudication arm of DHS immigration, USCIS processes applications for lawful permanent residence (green cards), naturalization, work visas (H-1B, L-1), refugee and asylee status, and the Deferred Action for Childhood Arrivals (DACA) program. Unlike CBP and ICE, USCIS is almost entirely fee-funded (not appropriations-funded) through application fees; its budget is approximately $4.5 billion annually.

Transportation Security Administration (TSA) — created by the Aviation and Transportation Security Act of 2001, TSA is the federal agency responsible for airport security screening, Federal Air Marshals, and surface transportation security. TSA employs approximately 60,000 transportation security officers. TSA moved to DHS from its initial placement in DOT; it is the most publicly visible DHS component for most Americans due to airport checkpoint presence.

Federal Emergency Management Agency (FEMA) — the nation's emergency management coordinator, FEMA administers the Stafford Act disaster declaration process, the National Flood Insurance Program (NFIP), hazard mitigation grants, preparedness grants to states and localities, and individual and public assistance after presidentially declared disasters. FEMA's organizational failures during Hurricane Katrina (2005) — before and after its absorption into DHS — prompted legislative reforms in the Post-Katrina Emergency Management Reform Act of 2006 (PKEMRA), which gave FEMA the Deputy Secretary-equivalent status and direct access to the President during emergencies.

Cybersecurity and Infrastructure Security Agency (CISA) — created by the CISA Act of 2018, CISA is DHS's lead cybersecurity agency, responsible for defending federal civilian networks (.gov), coordinating with critical infrastructure owners and operators, and issuing binding operational directives to federal agencies on cybersecurity vulnerabilities. CISA's election security role — assisting states with election infrastructure security — made it a political target in 2020; former Director Chris Krebs was fired after calling the 2020 election "the most secure in American history."

U.S. Coast Guard (USCG) — the only U.S. military service within a civilian department (rather than DoD), the Coast Guard operates as both a law enforcement agency and a military service under 14 U.S.C. During peacetime, USCG enforces maritime law, conducts search and rescue, regulates vessel safety, and interdicts drug and migrant smuggling at sea. In wartime, the Coast Guard can be transferred to Navy operational command. USCG's unique hybrid status — federal law enforcement, military service, and maritime regulatory agency — reflects its pre-DHS history within the Department of Transportation.

U.S. Secret Service (USSS) — the protective intelligence and financial crimes agency transferred from Treasury to DHS in 2002, USSS has two missions: protective operations (protecting the President, Vice President, visiting heads of state, and major party presidential nominees) and financial crimes investigations (counterfeiting, cyber financial crime). The Service employs approximately 7,500 agents and uniformed officers.

Key Functions & Authorities

Border security and immigration enforcement — CBP's authority to refuse admission, conduct expedited removal, and detain arriving noncitizens at the border flows from the Immigration and Nationality Act (INA, 8 U.S.C. § 1101 et seq.). The expedited removal process (8 U.S.C. § 1225(b)(1)) allows rapid removal of inadmissible noncitizens without full immigration court proceedings; its scope has been expanded and contracted by successive administrations. ICE's interior enforcement authority similarly derives from the INA; the Obama-era DACA deferred action program and subsequent litigation (Texas v. United States, DHS v. Regents) have defined the outer limits of prosecutorial discretion in immigration enforcement.

Emergency and disaster response — FEMA's Stafford Act (42 U.S.C. § 5121 et seq.) authority is triggered by a presidential disaster declaration, which unlocks federal assistance for state and local governments and individuals. The National Response Framework (NRF) and National Incident Management System (NIMS) are the operational doctrine for coordinated disaster response. FEMA's NFIP — which insures approximately 5 million properties in flood-prone areas — is perennially in financial distress due to actuarially unsound pricing and the growing frequency of catastrophic flood events.

Cybersecurity authority — CISA's binding operational directive authority (under 44 U.S.C. § 3553) allows it to require federal civilian agencies to patch known vulnerabilities on defined timelines; known exploited vulnerability (KEV) catalog entries trigger mandatory remediation. CISA coordinates sector-specific cybersecurity coordination through sector risk management agencies (SRMAs) for each of the 16 critical infrastructure sectors.

How It Affects You

If you are a citizen or voter: TSA screening affects every air traveler. FEMA disaster assistance — available after a presidential disaster declaration — can provide housing assistance, individual and household program grants, and public infrastructure reimbursement. USCIS processing times affect immigrant family members, employers sponsoring work visas, and naturalization applicants. CBP and ICE enforcement operations are the visible face of immigration policy for communities with large immigrant populations.

If you are a business or regulated entity: CBP administers trade and customs — tariff collection, anti-dumping and countervailing duty enforcement, and forced labor import restrictions (the Uyghur Forced Labor Prevention Act, UFLPA, enforced by CBP). CISA issues cybersecurity directives that apply to federal contractors with federal information system access. TSA regulations govern airport and surface transportation security requirements for airlines, airports, and freight carriers. The NFIP affects any property in a Special Flood Hazard Area (SFHA) that carries a federally backed mortgage.

If you work at a federal agency: DHS leads the interagency National Response Framework and coordinates with all federal departments during emergencies through the Emergency Support Function (ESF) structure. CISA's known exploited vulnerability catalog and binding directives apply to federal civilian executive branch agencies. The State Department coordinates with CBP and USCIS on visa issuance; DOJ coordinates with ICE on immigration court proceedings and enforcement priorities. The Intelligence Community coordinates with DHS through the Office of Intelligence and Analysis (I&A) on domestic threat assessment.

If you are a journalist, researcher, or policy analyst: DHS's Office of Immigration Statistics publishes enforcement data (deportation totals, detention counts, apprehension statistics) with a lag; CBP publishes monthly encounter statistics for the Southwest border. FEMA's disaster declaration database and public assistance grant tracking are the primary sources for federal disaster spending. CISA's KEV catalog and advisories are publicly available. The DHS Inspector General produces reports on component performance and management challenges.

Recent Developments

• 2025 — The Trump administration directed a major expansion of immigration enforcement: reinstated Remain in Mexico (MPP), expanded expedited removal authority to the entire U.S. interior (a statutory authority historically limited to border zones), directed ICE to conduct mass deportation operations targeting sanctuary cities, and sought to end DACA — generating extensive litigation in multiple federal circuits; DHS invoked the Alien Enemies Act of 1798 for deportations to El Salvador's CECOT detention facility, drawing a Supreme Court challenge.
• 2024 — CBP One, a mobile app system the Biden administration used to allow migrants to schedule legal port-of-entry appointments, processed hundreds of thousands of asylum requests before being shut down by the Trump administration on January 20, 2025; the program had been criticized by Republicans and praised by immigration advocates as a legal-pathway alternative to illegal crossings.
• 2023 — The collapse of the COVID-era Title 42 public health expulsion authority in May 2023 led to record CBP encounter numbers (exceeding 250,000/month) and drove bipartisan Senate negotiations over a border security bill that ultimately failed in early 2024 after opposition from former President Trump.
• 2018 — The CISA Act of 2018 elevated the former National Protection and Programs Directorate (NPPD) to a standalone agency (CISA) with an enhanced cybersecurity mandate, recognizing that cybersecurity had become a primary homeland security threat; CISA's election security role — coordinating with state and local election officials on infrastructure security — was formalized at the same time.
• 2005 — Hurricane Katrina exposed critical DHS and FEMA coordination failures; the Post-Katrina Emergency Management Reform Act of 2006 restructured FEMA within DHS, required the FEMA Administrator to have emergency management experience, and gave FEMA more direct access to the President — acknowledging that the 2002 DHS merger had inadvertently weakened the agency's emergency response capacity by burying it in a new bureaucratic layer.