Printed from https://fiscalreceipts.com/program/0606771D8Z/ — data as of August 12, 2026. Every figure is citation-backed; see the page online for per-number provenance.
Cyber Resiliency and Cybersecurity Policy
Budget Figures
$14.2M discretionary + $25.0M one-time reconciliation. Discretionary change vs FY2025 enacted: -68.7%.
Two official figures, one label— reconciled below
Fiscal Receipts uses P-1/R-1 workbook total obligation authority (TOA) as the headline figure sitewide. The workbook TOA includes budget rows (such as advance procurement) that the R-2/P-40 J-book program line excludes. How the two bases relate →
FY26 Request · $39.2M TOA − $14.2M J-book line = 25.0M (39.2 − 14.2 = 25.0)
Figures in the sentence are rounded for reading; the parenthesised arithmetic is the same subtraction in USD millions, at the precision where it closes.
FY2026 award data is a partial year — USASpending awards are reported on a rolling basis and the fiscal year does not close until September 30. why partial FY2026 data? →
| Fiscal year | Amount |
|---|---|
| FY24 | $40.6M |
| FY25 | $45.4M |
| FY26 | $39.2M |
All series figures: R-1 TOA · PB2026
The vertical scale does not start at zero: the baseline sits just below this program’s smallest year, so a low point on this line is not a small amount. Read the shape for direction and the grid below for the figures.
● actuals (line) · ○ enacted · ◇ request — gaps are editions the program is absent from, never interpolated.
| Series | FY20 | FY21 | FY22 | FY23 | FY24 | FY25 | FY26 |
|---|---|---|---|---|---|---|---|
| Actuals | $0 | $0 | $34.5M | $50.1M | $40.6M | ||
| Enacted | – | $0 | $31.5M | $51.9M | $45.2M | $45.4M | |
| Request | – | – | $31.6M | $32.3M | $45.2M | $40.4M | $39.2M |
blank = series not published for this year; – = absent from that edition.
Asked vs spent: the PB2023 book requested $32.3M for FY2023; the PB2025 book reported $50.1M as actual total obligation authority — $17.8M above the request. 50.1 − 32.3 = 17.8 USD millions — the compact figures above are rounded for reading.
Program Lineage
No predecessor/successor lineage was recorded for this program element — no FY-to-FY transfer into or out of this line was stated in the ingested J-books, and none was inferred from the program structure.
Description
Mission — Cyber Resiliency & Cybersecurity Policy
FY 2026 request for program element includes $14.220 million of discretionary and $25.000 million of mandatory (reconciliation) for a total of $39.220 million. The mandatory funds are for Golden Dome Cybersecurity (U). Further information for this reconciliation request is provided in section 20003 of the Reconciliation Exhibit. This PE supports the Department's initiatives to Revive the Warrior Ethos, Rebuild Our Military, and Reestablish Deterrence. The Cyber Resiliency & Cybersecurity Policy program supports the efforts of the Office of the Under Secretary of Defense, Acquisition and Sustainment (OUSD A&S), focusing on the defense of the Department’s critical mission weapon systems and supporting DoD Installation Critical Infrastructure (ICI)and supporting Commercial Critical Infrastructure (CCI)from cyber attack, protecting the Department’s sensitive unclassified information residing within the Defense Industrial Base (DIB) sector and supply chain , and capability portfolio management for Joint Cyber Capabilities used by the Cyber Mission Force. This program funds the following critical efforts: 1) Cybersecurity for Weapon Systems and Critical Infrastructure: Conduct Capability Portfolio Management and lead the Department’s Strategic Cybersecurity Program (SCP) to continue critical weapon systems and ICI cybersecurity assessments and mitigations and cyber harden priority Department of Defense (DoD) missions. Office of Assistant Secretary of Defense for Acquisition (ASD(A))/Cyber Warfare Directorate (CWD) Cyber Resiliency efforts are aligned with the following initiatives: Assess: - Conduct mission level cyber risk assessments for priority Defense Missions in support of Combatant Commands (CCMDs). Conduct enhanced mission level cyber risk assessments/wargames for the Missile Defense Mission in support of Golden Dome for America. Conduct supporting table top exercises (TTXs). - Conduct Cyber Risk Assessments for ICI and CCI in support of CCMDs and asset owners. - Conduct Integrated Sensing Monitoring Experiments (ISMX)and Sensing and Monitoring Pilots to assess the performance of Cybersecurity Sensing and Monitoring capabilities for WS and ICI. Inventory / Prioritize: - Develop, sustain, and employ the Cyber Risk Mitigation Tool (CRMT), an Enterprise-wide decision support tool for tracking and prioritizing cyber vulnerability assessments and mitigations. Develop CCMD specific cyber risk scorecards/risk matrices. - Prioritize and advocate for Cyber Risk Mitigations based upon mission analysis conducted by program offices, the National Security Agency (NSA), Deep Cyber Resiliency Assessment teams, USCYBERCOM (USCC), and other cybersecurity professionals. Mitigate: - Advocate and oversee funding for priority ICI and commercial critical infrastructure (CCI) supporting Golden Dome for America based on a prioritized list of assets. - Conduct SCP POAM periodic updates with Services and Agencies for prioritized DoD weapon systems. Enhance Governance: Conduct 4-Star Level Integrated Acquisition Portfolio Reviews (IAPRs) that address cybersecurity / cyber hardening / cyber defense for priority DoD missions. 2) Weapon System Cyber Security – CCI Cybersecurity // Cybersecurity Supply Chain Risk Management (C-SCRM): In collaboration with the Department of Defense Chief Information Office (DoD CIO), conduct the C-SCRM in support of FY2019 NDAA Section 889, and Title 10 USC Section 3252 and Section 4713 . Partner with other DoD organizations and the DIB / CCI sectors to demonstrate / assess cost-effective and scalable cybersecurity services that augment and/or enhance existing commercial capabilities and services. Focus on identifying options and assessing the efficacy of cybersecurity services for small-to-medium sized DIB / CCI companies that are critical to the DoD supply chain but lack sufficient cybersecurity capabilities to protect CUI , data integrity, and availability of DIB supply chain. 3) Capability Portfolio Management for Cyberspace Operations: Conduct Capability Portfolio Management of the Joint Cyber Capabilities employed by Cyber Mission Force in collaboration with USCYBERCOM. Improve cyber lethality of the capabilities of Joint Cyber Warfighting Architecture (JWCA) supporting offensive and defensive cyberspace operations and improve the readiness of the Cyber Operations Forces to operate in a cyber-contested environment including the ability to Defend the Homeland and key capabilities such as Golden Dome. Work across the Department to reform acquisition processes and accelerate the adoption of modern software practices to deliver warfighting capability at the speed of need.
Mission — Cyber Resiliency & Cybersecurity Policy
The Cyber Resiliency & Cybersecurity Policy program supports the efforts of the Office of the Under Secretary of Defense, Acquisition and Sustainment (OUSD A&S), focusing on the defense of the Department’s critical mission weapon systems and supporting DoD Installation Critical Infrastructure (ICI)and supporting Commercial Critical Infrastructure (CCI)from cyber attack, protecting the Department’s sensitive unclassified information residing within the Defense Industrial Base (DIB) sector and supply chain , and capability portfolio management for Joint Cyber Capabilities used by the Cyber Mission Force. This program funds the following critical efforts: 1) Cybersecurity for Weapon Systems and Critical Infrastructure: Conduct Capability Portfolio Management and lead the Department’s Strategic Cybersecurity Program (SCP) to continue critical weapon systems and ICI cybersecurity assessments and mitigations and cyber harden priority Department of Defense (DoD) missions. Office of Assistant Secretary of Defense for Acquisition (ASD(A))/Cyber Warfare Directorate (CWD) Cyber Resiliency efforts are aligned with the following initiatives: Assess: - Conduct mission level cyber risk assessments for priority Defense Missions in support of Combatant Commands (CCMDs). Conduct enhanced mission level cyber risk assessments/wargames for the Missile Defense Mission in support of Golden Dome for America. Conduct supporting table top exercises (TTXs). - Conduct Cyber Risk Assessments for ICI and CCI in support of CCMDs and asset owners. - Conduct Integrated Sensing Monitoring Experiments (ISMX)and Sensing and Monitoring Pilots to assess the performance of Cybersecurity Sensing and Monitoring capabilities for WS and ICI. Inventory / Prioritize: - Develop, sustain, and employ the Cyber Risk Mitigation Tool (CRMT), an Enterprise-wide decision support tool for tracking and prioritizing cyber vulnerability assessments and mitigations. Develop CCMD specific cyber risk scorecards/risk matrices. - Prioritize and advocate for Cyber Risk Mitigations based upon mission analysis conducted by program offices, the National Security Agency (NSA), Deep Cyber Resiliency Assessment teams, USCYBERCOM (USCC), and other cybersecurity professionals. Mitigate: - Advocate and oversee funding for priority ICI and commercial critical infrastructure (CCI) supporting Golden Dome for America based on a prioritized list of assets. - Conduct SCP POAM periodic updates with Services and Agencies for prioritized DoD weapon systems. Enhance Governance: Conduct 4-Star Level Integrated Acquisition Portfolio Reviews (IAPRs) that address cybersecurity / cyber hardening / cyber defense for priority DoD missions. 2) Weapon System Cyber Security – CCI Cybersecurity // Cybersecurity Supply Chain Risk Management (C-SCRM): In collaboration with the Department of Defense Chief Information Office (DoD CIO), conduct the C-SCRM in support of FY2019 NDAA Section 889, and Title 10 USC Section 3252 and Section 4713 . Partner with other DoD organizations and the DIB / CCI sectors to demonstrate / assess cost-effective and scalable cybersecurity services that augment and/or enhance existing commercial capabilities and services. Focus on identifying options and assessing the efficacy of cybersecurity services for small-to-medium sized DIB / CCI companies that are critical to the DoD supply chain but lack sufficient cybersecurity capabilities to protect CUI , data integrity, and availability of DIB supply chain. 3) Capability Portfolio Management for Cyberspace Operations: Conduct Capability Portfolio Management of the Joint Cyber Capabilities employed by Cyber Mission Force in collaboration with USCYBERCOM. Improve cyber lethality of the capabilities of Joint Cyber Warfighting Architecture (JWCA) supporting offensive and defensive cyberspace operations and improve the readiness of the Cyber Operations Forces to operate in a cyber-contested environment including the ability to Defend the Homeland and key capabilities such as Golden Dome. Work across the Department to reform acquisition processes and accelerate the adoption of modern software practices to deliver warfighting capability at the speed of need.
Justification
Accomplishments & Planned Programs (1)
Cyber Resiliency & Cybersecurity Policy
FY 2024 Accomplishments: Conduct Cyber Risk Assessments in support of Combatant Commands (CCMDs). Mission Level Cyber Risk Assessments (MLCRA): - Developed Quick Look Report, After Action Report (AAR), and Out Brief for the Mission Resilience II Wargame conducted in support of United States Space Command (USSPACECOM). Integrated findings into OPS DEPs SCP Briefing, briefed key DoD leaders and briefed Analytic Working Group. - Planned and executed Mission Resilience III Wargame in support of United States Northern Command (USNORTHCOM). Cyber Risk Assessments: - Completed six CRAs for Mission Partners across the DoD including a high priority special request from a Combatant Command (CCMD) and initiated planning for DoD Installation Critical Infrastructure (ICI) Cyber Risk Assessments in support of CCMDs. Mission partners include Army Materiel Command, National Aeronautics and Space Administration (NASA), United States Transportation Command (USTRANSCOM), United States Strategic Command (USSTRATCOM), and United States Indo-Pacific Command (USINDOPACOM). Integrated Sensing and Monitoring Experiments: - Planned and executed the first ever Integrated Sensing and Monitoring Experiment (ISMX) in collaboration with US Space Force and key mission partners. Key findings highlighted areas for investment to improve Department’s capability for conducting cybersecurity sensing and monitoring on mission systems. Inventory/Prioritize: - In consultation with the services, JS, CCMDs, combat support agencies, and USSTRATCOM, refined the requirements and desired functionality for the Cyber Risk Mitigation Tool (CRMT) into categories of strategic, operational, and tactical. - In support of CCMD Mission Prioritization, developed a methodology to measure and weigh combatant commands mission interdependencies and how to define risk to mission from kinetic and non-kinetic fires. - Established working relationships with 10 of 11 Combatant Commands (CCMD) and refined methodology to measure and weigh combatant commands mission interdependencies and decompose mission risk and impact into discrete joint mission threads and critical capabilities. - Developed and presented a model to quantify and prioritize weapon systems for Strategic Cybersecurity Program (SCP) assessment based on mission impact. Mitigate: - Developed and coordinated the Strategic Cybersecurity Program (SCP) Policy for issuance. - Developed, coordinated, and delivered initial annual report to Congress on the SCP covering FY22 and FY23 - Developed draft Initial Capabilities Document (ICD) for cybersecurity sensing and monitoring at scale on key cyber terrain. - Developed Framework for applying Zero Trust Principles to WS and ICI. - Initiated oversight of the $250M in funding for DoD ICI Cyber Hardening. - Supported Cyber Supply Chain Risk Management initiatives across the Department including support to implementation of Section 889/1656 Prohibitions on covered information and communication technologies for programs in acquisition and sustainment. - Conducted Critical Infrastructure Cybersecurity Engagements with NATO and USINDOPACOM. Enhance Governance: - Supported multiple OUSD(A&S) Integrated Acquisition Portfolio Reviews (IAPR) with cybersecurity contributions as a factor in determining overall acquisition risk. - Conducted Phase I of Cyber Defense of the Global Logistics Mission IAPR in collaboration with USTRANSCOM and briefed results to 4-Star Level forum chaired by the USD(A&S). Weapon System Cyber Security - Cybersecurity Supply Chain Risk Management(C-SCRM): - Completed DIB Cybersecurity Study in Collaboration with DoD CIO and presented findings and recommendations to CAPE in support of PBR2026. Conducted detailed analysis of the firmographics of the DIB in collaboration with key industry partners. Collaborated with DoD CIO and other DoD Stakeholders in the Development of the initial DoD DIB Cybersecurity Strategy. Initiated planning for Weapon System C-SCRM Pilots. Capability Portfolio Management for Cyber Capabilities: - Conducted Capability Portfolio Management for Joint Cyber Warfighting Capabilities in accordance with DoDD 7045.20. Informed the DepSecDef directed Counter C5ISR-T Integrated Acquisition Portfolio Review (IAPR) by providing cyber related inputs including DOTMLPF-P analysis. - Continued to provide Principal Staff Assistant (PSA) oversight to USCYBERCOM Component Acquisition Executive as the command executes joint cyberspace operations capabilities System of Systems (SoS) Systems Engineering & Integration (SE&I) Authority delegated to the command through an Acquisition Decision Memorandum in July 2023. - In collaboration with USCYBERCOM, developed the response to FY2023 NDAA Section 1509 to review the organizational, programmatic, and technical enablers for PEO JWCA to enable the command to deliver cyber warfighting capabilities are speed and scale.
Budget Line Items(workbook-cited)
P-1/R-1 workbook Total Obligation Authority basis (USD thousands) · PB2026.
Exhibit R-1
| Account | Org | Type | Amount |
|---|---|---|---|
| Research, Development, Test and Evaluation, Defense-Wide | OSD | FY24 Actuals | $40.6M |
| Research, Development, Test and Evaluation, Defense-Wide | OSD | FY25 Enacted | $45.4M |
| Research, Development, Test and Evaluation, Defense-Wide | OSD | FY25 Total | $45.4M |
| Research, Development, Test and Evaluation, Defense-Wide | OSD | FY26 Disc. Request | $14.2M |
| Research, Development, Test and Evaluation, Defense-Wide | OSD | FY26 Reconciliation | $25.0M |
| Research, Development, Test and Evaluation, Defense-Wide | OSD | FY26 Total | $39.2M |
Budget Details(R-2/P-40 facts)
J-book detail basis (R-2/P-40, USD millions) · PB2026 — a different accounting basis from the P-1/R-1 workbook TOA above; where the two disagree, the reconciliation strip under Budget Figures shows both.
Wider than this screen — swipe the table sideways for the remaining fiscal-year columns.
| Project | All Prior Years | FY24 Actuals | FY25 Total | FY26 Base | FY26 Request |
|---|---|---|---|---|---|
| Program Element | $84.5M | $40.6M | $45.4M | $14.2M | $14.2M |
| 145: Cyber Resiliency & Cybersecurity Policy | $84.5M | $40.6M | $45.4M | $14.2M | $14.2M |
No follow-the-dollar view — this program's awards haven't been crosswalked at high confidence (flows cover 17 of 1,741 programs). why coverage is partial? →
Awards
No awards are linked to this program element at high confidence — the budget→award crosswalk only asserts links it can defend, and this line has none yet.
Lobbying Mentions
24 mentions from the Senate LDA disclosure database.
H.R. 1- The One Big Beautiful Bill Act; S.3605/H.R.7450 - Disaster Zone and Energy Affordability Act ; S. 448, the…
General discussions and lobbying on the following issues: Universal Service Funding program reform and oversight…
H.R. 46: Rural Broadband Window of Opportunity Act; all provisions H.R. 278: BROADBAND Leadership Act; all provisions H.
H.R. 1- The One Big Beautiful Bill Act; H.R. 2872, the RESILIENCE Act of 2025; S. 448, the CIRCUIT Act; H.R.5376…
H.R. 2872, the RESILIENCE Act of 2025; S. 448, the CIRCUIT Act; H.R.5376, Inflation Reduction Act of 2022; H.R. 7024…
H.R. 1- The One Big Beautiful Bill Act; H.R. 2872, the RESILIENCE Act of 2025; S. 448, the CIRCUIT Act; H.R.5376…
H.R. 1- The One Big Beautiful Bill Act; H.R. 2872, the RESILIENCE Act of 2025; S. 448, the CIRCUIT Act; Resiliency…
General discussions and lobbying on the following issues: Universal Service Funding program reform and oversight…
General discussions and lobbying on the following issues: the Senate Commerce Committee Congressional Review Act (CRA)…
General discussions and lobbying on the following issues: Universal Service Funding program reform and oversight…
General discussions and lobbying on the following issues: the Senate Commerce Committee Congressional Review Act (CRA)…
H.R. 46: Rural Broadband Window of Opportunity Act; all provisions H.R. 278: BROADBAND Leadership Act; all provisions H.
H.R. 46: Rural Broadband Window of Opportunity Act; all provisions H.R. 278: BROADBAND Leadership Act; all provisions H.
H.R. 46: Rural Broadband Window of Opportunity Act; all provisions H.R. 278: BROADBAND Leadership Act; all provisions H.
H.R. 46: Rural Broadband Window of Opportunity Act; all provisions H.R. 278: BROADBAND Leadership Act; all provisions H.
Issues related to Space Resiliency and Security Clearance Reform
Issues related to Space resiliency
Issues related to Space resiliency
H.R. 5803/S. 1793, the Grid Resiliency Tax Credit Act; H.R. 3746, the Fiscal Responsibility Act; H.R.5376, Inflation…
H.R. 5803/S. 1793, the Grid Resiliency Tax Credit Act; H.R. 3746, the Fiscal Responsibility Act; H.R. 5376, Inflation…
H.R. 5803/S. 1793, the Grid Resiliency Tax Credit Act; H.R. 3746, the Fiscal Responsibility Act; H.R.5376, Inflation…
H.R. 3746, the Fiscal Responsibility Act; H.R.5376, Inflation Reduction Act of 2022; S. 1793, Grid Resiliency Tax…
H.R. 5803/S. 1793, the Grid Resiliency Tax Credit Act; H.R. 3746, the Fiscal Responsibility Act; H.R.5376, Inflation…
General lobbying on the following issues: access and siting of radios on the grounds of the US Capitol; Universal…
Oversight
Department-level designation (not specific to this program)
GAO lists 5 high-risk areas for DOD as a whole. That designation covers the department, not Cyber Resiliency and Cybersecurity Policy — no program-specific GAO finding for this line is in the ingested data. See the DOD oversight record.
No research dossier for this program — dossiers cover 50 of 1,741 programs, the largest fully J-book-detailed lines by FY2026 requested dollars. why no dossier here? →