 Introduction A fundamental transformation is underway. At the core of this transformation are new technologies which we have made foundational to our national security, our economy, our democracy, and our modern way of life. Innovations in the fields of Artificial Intelligence (AI), quantum information science (QIS), and microelectronics are revolutionizing the advanced computing landscape. Our digital and physical worlds are increasingly connected, in both industrial applications and consumer-facing products. Growing access to high-speed Internet and the proliferation of next-generation telecommunications networks are connecting people and systems around the world. As this digital ecosystem evolves, our adversaries have repeatedly demonstrated their capability and intent to exploit its vulnerabilities. Both state and non-state actors continue to aggressively conduct malicious cyber activity that threatens U.S. national security, public safety, and economic prosperity. Critical infrastructure across the United States has been held at risk by the People’s Republic of China (PRC) and other adversaries who threaten our essential services and public safety in service of their geopolitical ambitions. Ransomware groups have built a business model around targeting schools, hospitals, small businesses, and many others illequipped to defend themselves. In this decisive moment, the Biden-Harris Administration put forth a new approach centered on proactively shaping our shared, digitally-enabled future. Released in March 2023, the President’s National Cybersecurity Strategy (NCS) articulates a new, affirmative vision of a digital ecosystem that is defensible, resilient, and aligned with our values. The NCS moves away from previous approaches that were predicated on managing threat actors in a digital ecosystem that advantaged their malicious activity. Instead, the NCS calls for two fundamental shifts in how we allocate roles, responsibilities, and resources in cyberspace by (1) rebalancing the responsibility to defend cyberspace away from end users and to the most capable and bestpositioned actors in the public and private sectors, and (2) realigning incentives to favor longterm investments in future resilience. The NCS recognizes the need for modern and nimble regulatory frameworks for critical infrastructure cybersecurity. The NCS targets market interventions, such as device labeling programs and a software liability regime, to address economic dynamics that contribute to poor cybersecurity outcomes. Where technical vulnerabilities create pervasive challenges for cyber defenders, the NCS calls for coordinated investment in standards and research and development to eliminate them. And, as the NCS makes clear, investing in talent is a key part of investing in our digital future. The 2023 National Cyber Workforce and Education Strategy (NCWES) outlines a comprehensive approach aimed at addressing both immediate and long-term cyber workforce needs while empowering every American to participate in our digital ecosystem. With this new strategic course set, the Administration has turned to the vital work of implementation. Successful implementation is at its core a collaborative endeavor, requiring contributions from across the Federal Government, industry, academia, civil society, and other partners around the world. Congress has provided essential support to the implementation process by empowering departments and agencies with necessary authorities and resources. 2024 REPORT ON THE CYBERSECURITY OF THE UNITED STATES POSTURE 1