 Executive Summary The 2024 Report on the Cybersecurity Posture of the United States assesses the cybersecurity posture of the United States, the effectiveness of national cyber policy and strategy, and the status of the implementation of national cyber policy and strategy by Federal departments and agencies. Additionally, this report highlights cybersecurity threats and issues facing the United States, including new or emerging technologies that may affect national security, economic prosperity, and the rule of law. This is the first edition of the report and covers calendar year 2023, with additional consideration of developments in 2024 preceding the publication of this report. Over the past year, U.S. national cybersecurity posture improved, driven by steady progress towards the 2023 National Cybersecurity Strategy’s (NCS) vision of a defensible, resilient, and values-aligned digital ecosystem achieved through fundamental shifts in the underlying dynamics that shape cyberspace. The Administration has successfully begun implementation of the NCS Implementation Plan, which coordinates actions by departments and agencies across the Federal Government to make the President’s affirmative vision a reality. These initial implementation actions set the foundation for further investment and sustained commitment by stakeholders across the digital ecosystem. The Strategic Environment This report begins with an assessment of the strategic environment, the landscape of emerging technologies and cyber risks that present both challenges and opportunities for U.S. cybersecurity policy and strategy. The analysis of emerging technologies considers not just their internal technical characteristics, but also their integration into complex systems and processes, their connection to people and workers, and their relationship to institutions and governance structures. This report also examines the cyber risk landscape, considering both trends in threat actor capability and intent, as well as the evolving vulnerabilities in our own defenses that create pathways for these adversaries to exploit. In 2023, the strategic environment was characterized by complexity, interconnectivity, and competition. Continued progress in digital communications, advanced computing, quantum information science, data storage and processing, and other critical and emerging technologies are rapidly increasing the complexity of our economy and society. These technologies also connect people around the world, enable the proliferation of cyber-physical systems, and create new dependencies between critical infrastructure and essential services across every sector. As this landscape evolves, malicious state and non-state actors are exploiting its seams with growing capability and strategic purpose, making clear that cyberspace is closely aligned with other domains of international conflict and competition. 2024 REPORT iii ON THE CYBERSECURITY OF THE UNITED STATES POSTURE