Printed from https://fiscalreceipts.com/program/0605041A/ — built September 26, 2026. Every figure is citation-backed; see the page online for per-number provenance.
Defensive CYBER Tool Development
Budget figures
FY2026 award data is a partial year — USAspending reports awards on a rolling basis, and this corpus runs through 2026-09-04. why partial FY2026 data? →
Budget trajectory
| Fiscal year | Amount |
|---|---|
| FY24 | $13.4M |
| FY25 | $4.18M |
| FY26 | $3.61M |
All series figures: R-1 TOA · PB2026
Decade view
P-1/R-1 workbook TOA basis, shown compact in $B/$M (the workbook records USD thousands); each figure cites its own President's Budget edition
The vertical scale does not start at zero: the baseline sits just below this program’s smallest year, so a low point on this line is not a small amount. Read the shape for direction and the grid below for the figures.
● actuals (line) · ○ enacted · ◇ request — gaps are editions the program is absent from, never interpolated.
| Series | FY15 | FY16 | FY17 | FY18 | FY19 | FY20 | FY21 | FY22 | FY23 | FY24 | FY25 | FY26 |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Actuals | $0 | $0 | $32.5M | $41.4M | $33.8M | $50.7M | $28.5M | $18.8M | $33.0M | $13.4M | ||
| Enacted | $0 | $84.3M | $55.2M | $33.8M | $50.7M | $28.5M | $18.8M | $39.0M | $27.7M | $4.18M | ||
| Request | $33.8M | $55.2M | $36.6M | $62.3M | $28.5M | $18.9M | $33.0M | $27.7M | $4.18M | $3.61M |
blank = series not published for this year; – = absent from that edition.
Asked vs spent: the PB2024 book requested $27.7M for FY2024; the PB2026 book reported $13.4M as actual total obligation authority — $14.3M below the request. 13.4 − 27.7 = -14.3 USD millions — the compact figures above are rounded for reading.
Program lineage
No predecessor/successor lineage was recorded for this program element — no FY-to-FY transfer into or out of this line was stated in the ingested J-books, and none was inferred from the program structure.
Description
Mission — Defensive CYBER Tool Development
- Cyber Situational Understanding (Cyber SU): No funding requested in FY 2025 and beyond due to program divestment. Army approved program termination 11 June 2024. - Tactical DCO-I (TDI) is a software only program that consists of pre-configured DCO applications that enable local and remote Cyber defenders to conduct cyberspace surveillance, and maneuver against an adversary traversing within the tactical network. The TDI capability is hosted on the Army's Tactical Network and will reside within the Command Post at the tactical level (up to Army Service Component Commands). - FY 2026 funding in the amount of $3.611 million will support the completion of development engineering and integration of CR 7, CR 8, and CR 9 and beyond including development engineering to collate and aggregate TDI data from various echelons; convergence with Tactical Data Fabric to align with Army Data Strategies, and implement Security Operations, Automated Response contractor and matrix support.
Mission — CYBER Situational Understanding
Cyber SU is a software-only, mission command application designed for use by maneuver commanders at the tactical level (Infantry, Armor, Stryker Brigade Combat Teams, Division, Corps, and Army Service Component Commands). Cyber SU is the first application of its kind designed for maneuver commanders focusing on tactical/ expeditionary combat operations to detect and mitigate cyber and electronic warfare threats and assist with decision making during combat operations. Cyber SU produces a Cyber Electromagnetic Activity overlay on the commander's Common Operational Picture within the Command Post Computing Environment / Tactical Services Infrastructure. Unlike Enterprise Cyber Mission Force(s) Tools, Cyber SU was designed using the CPCE Software Development Kit; to operate within the constraints of Tactical Services Infrastructure hardware, a bandwidth constrained tactical environment and support Common Operating Environment standards in the Army's Command Post. The underlying Cyber SU framework is also being leveraged by the US Air Force to ensure alignment with the Combined Joint All Domain Command and Control. The Army will ensure Cyber SU has an open systems architecture and will continue to explore options to integrate Cyber SU functionality and data ingests between other Services as well as explore insertion of third-party technology within the Cyber SU solution. Cyber SU provides the maneuver commander the ability to visualize and understand any cyber related impacts/threats to physical (geographical), logical (at a specific network internet protocol), and cyber persona layers (bad actors, from individuals to nation states) of tactical cyberspace data. Supporting Cyber Electromagnetic Activity, Cyber SU ingests existing data sources from related programs (e.g., Tactical Defense Cyber Operations Infrastructure, Command Post Computing Environment, Electronic Warfare Planning and Management Tool, Unified Network Operations, Distributed Common Ground System-Army, Data Distribution System), synchronizes and integrates blue (friendly), red (enemy), and grey (commercial/private sector) data and enables collaboration therein at the tactical edge. Cyber SU addressed the principal capability areas from its first Information Technology Box (FY2020 - FY2024), including See Yourself (Initial Capability), See Your Cyber Battlespace, and Understand Your Cyber Battlespace. Cyber SU Information Technology Box requirements will not be renewed. To better meet Army needs, Cyber Electromagnetic Activity requirements captured in the Cyber SU System-Initial Capabilities Document are being subsumed into requirements documents for Informational Dimension, Electronic Warfare Planning & Management Tool. Next, the Unified Network Operations, Lower Tactical Tier, and Upper Tactical Tier requirements. Funding for the Cyber SU program is not required in FY2025 and beyond due to this change in how the Army is addressing these operational requirements and desired capabilities. Army approved program termination 11 June 2024.
Mission — Tactical DCO-I
TDI is a software only program that pre-configures DCO applications to allow local and remote Cyber defenders the ability to conduct cyberspace surveillance and maneuver against an adversary traversing within the tactical network. The TDI capability includes: 1) Mission Protection: Ability to automate deployment of DCO tools to protect the virtual server environment of the Command Post Computing Environment. 2) Discovery/Counter-Infiltration: Ability to auto detect multiple virtual cyber threats and facilitate the mitigation/denial of adversarial actions. 3) Cyberspace Support/Readiness: Allow global and regional cyberspace defenders to assist units with countering advanced persistent threats. TDI follows a five-year, Information Technology (IT) Box construct to deliver capability over time, based on approved requirements. In IT Box (FY 2023-2027), TDI will develop Capability Releases (CR) (CR 1 - CR 12) to implement TDI software change activities and updates to provide value to Brigades to ASCCs. CR 1 collated and aggregated TDI data from various echelons and presented it into rolled-up status dashboards reflecting various roles and responsibilities. CR 2 integrated Security Orchestration, Automation, and Response and with Big Data Platform to initiate alignment with the Army's tactical data fabric efforts. CR 3 and CR 4 leveraged Artificial Intelligence/Machine Learning models generated from BDP and implemented it at the tactical edge. CR 5 and CR 6 supported capabilities and technologies to address emerging cyber threats and techniques, tactics, and procedures. FY 2026 funding in the amount of $3.611 million will support the completion of development engineering and integration of CR 7, CR 8, and CR 9 and beyond including development engineering to collate and aggregate TDI data from various echelons; convergence with Tactical Data Fabric to align with Army Data Strategies, and implement Security Operations, Automated Response contractor and matrix support.
Justification
Accomplishments & Planned Programs (6)
Development Engineering and Integration
Leverage industry developed prototype software, as well as ingest and synchronize cyber data from multiple Program of Record (PoRs) to develop and engineer the Cyber SU capability.
Systems Engineering/Management
Systems Engineering/Management includes business, technical and logistical staff support and overall management of program execution, major events and reporting.
Development Engineering
Efforts include development engineering and integration required for DCO tools to be utilized on the Tactical Network.
Systems Test and Evaluation
Efforts include the planning and execution of T&E events including Developmental Test, recurring developmental operations (DEVOPS) Soldier Touch Points, continuous Interoperability Testing, Software Acceptance Testing, Integration Events, Risk Reduction Events, Information Assurance, collaboration tool maintenance and User Tests/Evaluations.
Training Development
The development of training support products, including coordination with US Army Training and Doctrine Command (TRADOC) US Army Cyber Command, PORs, and related organizations to develop applicable program of instruction.
Systems Engineering/Management
Systems Engineering/Management includes business, technical and logistical staff support and overall management of program execution, major events and reporting.
Budget line items(workbook-cited)
P-1/R-1 workbook Total Obligation Authority basis (USD thousands) · PB2026.
Exhibit R-1
| Account | Org | Type | Amount |
|---|---|---|---|
| Research, Development, Test and Evaluation, Army | A | FY24 Actuals | $13.4M |
| Research, Development, Test and Evaluation, Army | A | FY25 Enacted | $4.18M |
| Research, Development, Test and Evaluation, Army | A | FY25 Total | $4.18M |
| Research, Development, Test and Evaluation, Army | A | FY26 Disc. Request | $3.61M |
| Research, Development, Test and Evaluation, Army | A | FY26 Total | $3.61M |
Budget Details(R-2/P-40 facts)
J-book detail basis (R-2/P-40, USD millions) · PB2026 — a different accounting basis from the P-1/R-1 workbook TOA above; where the two disagree, the reconciliation strip under Budget figures shows both.
Wider than this screen — swipe the table sideways for the remaining fiscal-year columns.
| Project | FY24 Actuals | FY25 Total | FY26 Base | FY26 Request |
|---|---|---|---|---|
| Program Element | $13.4M | $4.18M | $3.61M | $3.61M |
| XU3: Tactical DCO-I | $6.00M | $4.18M | $3.61M | $3.61M |
| CY5: CYBER Situational Understanding | $7.38M | — | — | — |
Follow the dollar
No follow-the-dollar view — this program's awards haven't been crosswalked at high confidence (flows cover 312 of 1,938 programs). why coverage is partial? →
Awards
No awards are linked to this program element at high or medium confidence — the budget→award crosswalk only asserts links it can defend, and this line has none yet.
Lobbying mentions
No Senate LDA lobbying filing in the tracked data mentions this program element by code or alias.
Oversight
Department-level designation (not specific to this program)
GAO lists 5 high-risk areas for DOD as a whole. That designation covers the department, not Defensive CYBER Tool Development. No program-specific GAO finding for this line is in the ingested data. See the DOD oversight record.
Program dossier
No research dossier for this program — dossiers cover 50 of 1,938 programs, the largest fully J-book-detailed lines by FY2026 requested dollars. why no dossier here? →
Primary sources
Open any budget figure for its exact receipt. Verified line items lead with the highlighted government PDF; original spreadsheets download with their budget edition and exhibit in the filename.
Budget totals · TOA sources
FY2026 Department of Defense Budget: RDT&E Programs (R-1) · comptroller.war.gov
Exhibit R-1 · J138
Complete workbook · unchanged saved copy. Saves as PB2026_DoD_R-1_Research-Development-Test-Evaluation.xlsx.
FY2017 Department of Defense Budget: RDT&E Programs (R-1) · comptroller.war.gov
Exhibit R-1 · J121
Complete workbook · unchanged saved copy. Saves as PB2017_DoD_R-1_Research-Development-Test-Evaluation.xlsx.
FY2018 Department of Defense Budget: RDT&E Programs (R-1) · comptroller.war.gov
Exhibit R-1 · J131
Complete workbook · unchanged saved copy. Saves as PB2018_DoD_R-1_Research-Development-Test-Evaluation.xlsx.
FY2019 Department of Defense Budget: RDT&E Programs (R-1) · comptroller.war.gov
Exhibit R-1 · J134
Complete workbook · unchanged saved copy. Saves as PB2019_DoD_R-1_Research-Development-Test-Evaluation.xlsx.
FY2020 Department of Defense Budget: RDT&E Programs (R-1) · comptroller.war.gov
Exhibit R-1 · J157
Complete workbook · unchanged saved copy. Saves as PB2020_DoD_R-1_Research-Development-Test-Evaluation.xlsx.
FY2021 Department of Defense Budget: RDT&E Programs (R-1) · comptroller.war.gov
Exhibit R-1 · J164
Complete workbook · unchanged saved copy. Saves as PB2021_DoD_R-1_Research-Development-Test-Evaluation.xlsx.
FY2022 Department of Defense Budget: RDT&E Programs (R-1) · comptroller.war.gov
Exhibit R-1 · J133
Complete workbook · unchanged saved copy. Saves as PB2022_DoD_R-1_Research-Development-Test-Evaluation.xlsx.
FY2023 Department of Defense Budget: RDT&E Programs (R-1) · comptroller.war.gov
Exhibit R-1 · J132
Complete workbook · unchanged saved copy. Saves as PB2023_DoD_R-1_Research-Development-Test-Evaluation.xlsx.
FY2024 Department of Defense Budget: RDT&E Programs (R-1) · comptroller.war.gov
Exhibit R-1 · J130
Complete workbook · unchanged saved copy. Saves as PB2024_DoD_R-1_Research-Development-Test-Evaluation.xlsx.
FY2025 Department of Defense Budget: RDT&E Programs (R-1) · comptroller.war.gov
Exhibit R-1 · J128
Complete workbook · unchanged saved copy. Saves as PB2025_DoD_R-1_Research-Development-Test-Evaluation.xlsx.
Detailed budget justification
The related TOA spreadsheets above use a different accounting basis from R-2/P-40 detail. Their amounts are not assumed to match these detailed sources.
RDTE - Vol 3 - Budget Activity 5A · www.asafm.army.mil