 Letter from the National Cyber Director I am pleased to present the 2024 Report on the Cybersecurity Posture of the United States. This first-ever report provides important updates on how the Nation is addressing the challenges and opportunities we face in cyberspace. We have made progress in realizing an affirmative vision for a safe, prosperous, and equitable digital future, but the threats we face remain daunting, our defenses are not impregnable, and our work continues to evolve to meet the changing landscape. Simply put, we are in the midst of a fundamental transformation in our Nation’s cybersecurity. It is now clear that a reactive posture cannot keep pace with fast-evolving cyber threats and a dynamic technology landscape, and that aspiring just to manage the worst effects of cyber incidents is no longer sufficient to ensure our national security, economic prosperity, and democratic values. Beginning with Executive Order 14028 on Improving the Nation’s Cybersecurity, the Biden-Harris Administration has advanced an affirmative vision centered on proactively and strategically shaping the digital world around us, positioning it to enable every aspect of our economy and society. The President’s National Cybersecurity Strategy asserts that it is necessary to fundamentally shift the underlying dynamics of the digital world to make it defensible, resilient, and aligned with our values. If we succeed, the digital ecosystem can be a strong foundation for a prosperous, connected future that benefits every American. While we remain postured to forcefully respond to malicious cyber threats, we will not let our adversaries dictate our path forward. Implementing this new vision requires a collaborative, whole-of-nation effort. The most capable and best-positioned actors in cyberspace, in both public and private sectors, need to do more to reshape the digital ecosystem and protect the vulnerable. We are committed to working closely with our partners in the private sector, with State, local, Tribal, and territorial entities, and with like-minded nations around the world to enhance our collective resilience to cyber threats. Congress has also been a vital partner in this implementation process, and we will continue to engage with Congress to ensure that departments and agencies have the resources and authorities they need. With no shortage of challenges on the horizon, the Administration and Congress must continue to work together in a nonpartisan manner to advance U.S. cybersecurity and resilience. As the President stated at the Strategy’s launch, “The steps we take and choices we make today will determine the direction of our world for decades to come.” We need to build on the successes of the past year, learn lessons from where we fell short, and take on hard challenges such as harmonizing cybersecurity regulations, empowering Sector Risk Management Agencies, and supporting smaller organizations facing down capable adversaries. Together, we will build a digital world that keeps Americans safe from cyber threats and enables our grandest ambitions. Harry Coker, Jr. National Cyber Director ii

Select target paragraph3