 March 2023, EO 14093 on Prohibition on Use by the United States Government of Commercial Spyware that Poses Risks to National Security restricts the U.S. Government’s operational use of commercial spyware that poses risks to national security or poses significant risks of improper use by a foreign government or foreign person. EO 14093 was the first step in a broader campaign to counter the threat posed by the proliferation and misuse of commercial spyware, including through: (1) diplomatic engagement, primarily through a coalition of 17 like-minded partners endorsing the U.S.-led Joint Statement on Efforts to Counter the Proliferation and Misuse of Commercial Spyware and the Guiding Principles on Government Use of Surveillance Technologies; (2) continued use of Department of Commerce export controls on specific commercial spyware vendors; (3) a new State Department visa ban policy targeting those who misuse commercial spyware or benefit from its misuse; and (4) Treasury Department sanctions against commercial spyware vendors and their leadership. The Administration seeks not only to mitigate the harms of existing vulnerabilities in our digital ecosystem, but also to promote our values through international cyber norms. The United States is committed to promoting the United Nations (UN) framework for responsible state behavior in cyberspace, making progress on confidence building measures, and upholding norms through the UN Open-Ended Working Group. The United States also continues to promote the establishment of the permanent UN Cyber Programme of Action (POA) to advance the UN framework, with 161 governments voting to support the creation of such a mechanism in the General Assembly. The United States will continue to work with allies, partners, and organizations such as the U.SEU Trade and Technology Council and International Telecommunication Union to shape technology standards in alignment with U.S. values. In May 2023, the Administration also published the first ever National Standards Strategy for Critical and Emerging Technology which puts forward an affirmative vision of standards that embrace transparency, openness, impartiality and consensus, effectiveness and relevance, coherence, and broad participation. 2024 REPORT ON THE CYBERSECURITY OF THE UNITED STATES POSTURE 27