Skip to content
Fiscal Receipts

Cyberspace Operations

CYBERCOMProcurementFully ReconciledCY01
What it is
Cyberspace Operations (CY01) is a CYBERCOM procurement line funded in the Procurement, Defense-Wide account.
What changed
-$36.3M FY25→26 P-1 TOA · PB2026
Who gets it
No award linkage at high confidence.

Budget Figures

FY24 Actuals
$94.0MP-1 TOA · PB2026
FY25 Enacted
$109.7MP-1 TOA · PB2026
FY26 Request
$73.4MP-1 TOA · PB2026
FY25→26 Change
-$36.3MP-1 TOA · PB2026

FY2026 award data is a partial year — USASpending awards are reported on a rolling basis and the fiscal year does not close until September 30. why partial FY2026 data? →

Budget Trajectory
The program's 3 summary figures for FY24 to FY26, plotted in fiscal-year order so the direction of travel is readable at a glance: this line ends lower than it starts. The points are the summary cards above, not a separate derivation; the table beside the chart carries each figure with its own citation.
The program's 3 summary figures for FY24 to FY26, plotted in fiscal-year order so the direction of travel is readable at a glance: this line ends lower than it starts. The points are the summary cards above, not a separate derivation; the table beside the chart carries each figure with its own citation.FY24: $94.0MFY25: $109.7MFY26: $73.4MFY24FY25FY26
Budget trajectory: one row per fiscal year, carrying the summary figure the sparkline plots. Every figure opens its own citation.
Fiscal yearAmount
FY24$94.0M
FY25$109.7M
FY26$73.4M

All series figures: P-1 TOA · PB2026

Decade view — P-1/R-1 workbook TOA basis, shown compact in $B/$M (the workbook records USD thousands); each figure cites its own President's Budget edition
5 fiscal years of this program as published (FY2022–FY2026): a line through the actuals (filled dots), with the enacted (hollow circles) and request (diamonds) markers each edition reported. Read it for direction, not for precision — this program's actuals line rises across the span, and 1 year is a break in the line rather than a low value: an edition the program is absent from, never interpolated. The grid below is the same data as text, one cited figure per cell.
5 fiscal years of this program as published (FY2022–FY2026): a line through the actuals (filled dots), with the enacted (hollow circles) and request (diamonds) markers each edition reported. Read it for direction, not for precision — this program's actuals line rises across the span, and 1 year is a break in the line rather than a low value: an edition the program is absent from, never interpolated. The grid below is the same data as text, one cited figure per cell.FY2022 actuals — PB2024 editionFY2024 actuals — PB2026 editionFY2023 enacted — PB2024 editionFY2024 enacted — PB2025 editionFY2025 enacted — PB2026 editionFY2024 request — PB2024 editionFY2025 request — PB2025 editionFY2026 request — PB2026 editionFY22FY23FY24FY25FY26

The vertical scale does not start at zero: the baseline sits just below this program’s smallest year, so a low point on this line is not a small amount. Read the shape for direction and the grid below for the figures.

● actuals (line)  ·  ○ enacted  ·  ◇ request — gaps are editions the program is absent from, never interpolated.

Decade series values by fiscal year and President's Budget edition: one row per series (actuals, enacted, request), one column per fiscal year. Every figure opens its own citation.
SeriesFY22FY23FY24FY25FY26
Actuals$0$94.0M
Enacted$0$129.1M$109.7M
Request$129.1M$69.1M$73.4M

blank = series not published for this year; – = absent from that edition.

Asked vs spent: the PB2024 book requested $129.1M for FY2024; the PB2026 book reported $94.0M as actual total obligation authority — $35.1M below the request. 94.0129.1 = -35.1 USD millions — the compact figures above are rounded for reading.

Program Lineage

No predecessor/successor lineage was recorded for this program element — no FY-to-FY transfer into or out of this line was stated in the ingested J-books, and none was inferred from the program structure.

Description

Description Cyberspace Operations

Cyberspace Operations procures the hardware, software, and licenses required by U.S. Cyber Command (USCYBERCOM),subordinate headquarters, and the Cyber Mission Force (CMF) to prepare for and conduct its mission objectives through four focus areas: (1) defending the DoD Information Network (DoDIN); (2) providing support to combatant commands to execute missions around the world; (3) strengthening the nation's ability to withstand and respond to malicious cyberspace activity (MCA); and (4) increasing DoD Cyber effectiveness through combined efforts with allies and partners. USCYBERCOM defends U.S. interests while delivering warfighting advantage to the Department of Defense (DoD), operating in a global domain. USCYBERCOM defends the DoD Information Network (DoDIN) and develops options for the full spectrum of cyberspace operations to assist Combatant Commanders and the Joint Force in achieving objectives. USCYBERCOM counters cyber threat actors and affiliates who seek to harm the U.S, its interests, and its allies. The command defends the nation against dangerous cyber threat actors serving foreign military and intelligence organizations and terrorists. USCYBERCOM provides options to counter malign actors who exploit cyberspace to support intelligence operations, steal intellectual property, promote violent extremism, impair democratic processes, coerce perceived rivals, and fund transnational illegal activities.

Justification

Justification Cyberspace Operations

CYBER THREAT EMULATION SYSTEM AND TOOLS ($0.817): Provides hardware for operations centers and network vulnerability inspections, which enables unity between USCYBERCOM, its subordinate headquarters, and other DoD Components and ensures the DoDIN is available and secure for Joint Missions, including effects delivered in and through cyberspace. Supports procurement of tech refresh upgrades for Cyber Threat Emulation System and tools that support DoDIN inspections across 45 areas of operation and across Joint Worldwide Intelligence Communications System (JWICS), Non-classified Internet Protocol Router Network (NIPR), and Secret Internet Protocol Router Network (SIPR) systems for 24/7 DoDIN Operations and Defensive Cyber Operations-Internal Defensive Measures (DCO-IDM). Joint Defense Operations Center (JDOC) functions enable real-time situation monitoring of ongoing operations across DoDIN Joint Operations Area (JOA) and a unity of command between USCYBERCOM, subordinate headquarters and mission partners. Increase of $0.058M from FY 2025 to FY 2026 is attributed to tech refresh upgrades. DATA AND SENSORS ($62.547M): Includes Hunt Forward Operations (HFO), Enhanced Sensing and Mitigation, Deployable Mission Support Systems (DMSS) kits, Joint Cyber Hunt Kits (JCHK), plus investment in other sensors used to support the CMF. Mission activities are located around the world at DoDIN and foreign partner network placements. • Provides the Cyber Protection Teams (CPT) with a deployable set of hunt and mitigation tools combined with robust compute and store capability, allowing teams to push forward rapidly and engage threats in forward deployed networks with compute capacity, storage, and tools to complete the cyber defense mission. • Procures software, licensing upgrades, and technical support for hardware/software analytical capability enhancements. • Provides analytical support of host-based mission changes, warnings and mitigations of incidents of malicious activity. • Enables cyberspace defense capability that protects the DoD network enclaves, to include compute systems, software applications and sensitive operational information against unauthorized intrusion, corruption, and/or destruction. In accordance with Section 1815 of the FY 2008 National Defense Authorization Act (P.L. 110-181), this item is necessary for use by the Armed Forces for homeland defense missions, domestic emergency responses, and providing military support to civil authorities. • Initial JCHK prototype effort will be complete in June 2025 with a review of the capability complete by Aug 2025. The production award is scheduled for FY 2026. • Provides Defense Counter Measures (DCM) to secure activity, monitor and defend the DoDIN, and to respond to and reduce MCA's ability to exploit boundary/internet access points (IAP) and cross domain measures to thwart MCA with enhanced sensing. DCM funds procure technology solutions that reduce MCA's ability to exploit boundary/internet access points (IAP) and enable cross domain solution protection. Resources support proactive defense and dynamic defensive measures to thwart MCA with enhanced sensing, collection, aggregation, analysis, and visualization of activity across the DoDIN. • The decrease of -$7.246M from FY 2025 to FY 2026 reduces contracts for Advisory and Assistance Services to promote efficiencies and advance the policies of the Administration in alignment with Executive Order 14222, "Implementing the President's Department of Government Efficiency Cost Efficiency Initiative". ROBUST INFRASTRUCTURE AND ACCESS ($10.000M): Includes the Joint Common Access Platform (JCAP) that supports the Joint Force and Joint Mission Operation Centers (JMOC) and provides a protected, managed, orchestrated environment and common firing platform to coordinate and execute against approved targets. This platform allows CNMFs' to execute operations while preventing detection and managing attribution. • Procures hardware/software support equipment, recurring software licenses, hardware spares, and Cloud services that provide compute, storage, and network resources at classified locations to enable continuity of operations. Additionally, Tier 3 post deployment engineering services support the base architecture and future capability enhancements that progressively integrate complex subsystem(s) for new workflows tied to the Joint Cyber Warfighting Architecture (JCWA). • Enables tech refresh, licenses for production system at deployed sites for the core unclassified systems and storage, compute, and networking resources from a DoD-approved cloud service provider (CSP). • Provides hardware enhancements and updates to the Wide Area Network. • Enables Tier 3 field service representative support at classified locations, Tier 1 24/7 Help Desk capabilities and Tier 2 remote technical support from cross functional teams for resolution of post-deployment technical issues. • Provides technical, logistical, and product support management services that track equipment procurement, warehousing, installation, and provisioning at all JMOCs. Support includes Project Officer oversight of Cross Functional Teams (CFT) for customization, modification, quality testing, and performance of deployed subsystems and services at JMOCs. • The decrease of -$27.693M from FY 2025 to FY 2026 is due to realignment of funding to support current administration priorities -$9.185M and a reduction of software licenses no longer required for the JCAP program and optimized efficiencies found in the new contract -$18.508M, which consolidates and reassigns roles within the program, providing a significant reduction in labor costs. Operational costs were substantially reduced by moving away from the on-premise hardware and adopting cloud solutions. Finally, the program now strategically utilizes Compute Hardware, Enterprise Software and Solutions (CHESS) contracts which yielded significant cost savings and enhanced inventory management in software assets. CYBER WEAPONS AND TOOLS ($0.0M): Decrease of -$1.442M from FY 2025 to FY 2026 is due to the elimination of procurement requirements in FY2026 and out.

Budget Line Items(workbook-cited)

P-1/R-1 workbook Total Obligation Authority basis (USD thousands) · PB2026.

Exhibit P-1

AccountOrgTypeAmount
Procurement, Defense-WideCYBERFY24 Actuals$94.0M
Procurement, Defense-WideCYBERFY25 Enacted$109.7M
Procurement, Defense-WideCYBERFY26 Disc. Request$73.4M
Procurement, Defense-WideCYBERFY26 Total$73.4M

Budget Details(R-2/P-40 facts)

J-book detail basis (R-2/P-40, USD millions) · PB2026 — a different accounting basis from the P-1/R-1 workbook TOA above; where the two disagree, the reconciliation strip under Budget Figures shows both.

Wider than this screen — swipe the table sideways for the remaining fiscal-year columns.

ProjectFY24 ActualsFY25 TotalFY26 BaseFY26 Request
Program Element$94.0M$109.7M$73.4M$73.4M

No follow-the-dollar view — this program's awards haven't been crosswalked at high confidence (flows cover 17 of 1,741 programs). why coverage is partial? →

Awards

No awards are linked to this program element at high confidence — the budget→award crosswalk only asserts links it can defend, and this line has none yet.

Lobbying Mentions

No Senate LDA lobbying filing in the tracked data mentions this program element by code or alias.

Oversight

Department-level designation (not specific to this program)

GAO lists 5 high-risk areas for DOD as a whole. That designation covers the department, not Cyberspace Operations — no program-specific GAO finding for this line is in the ingested data. See the DOD oversight record.

No research dossier for this program — dossiers cover 50 of 1,741 programs, the largest fully J-book-detailed lines by FY2026 requested dollars. why no dossier here? →