The Federal Information Security Management Act (FISMA) is United States legislation that defines a comprehensive framework to protect government information, operations and assets against natural or man-made threats.
CFO Act agencies are those agencies designated in the CFO Act (with the addition of DHS and minus the Federal Emergency Management Agency). In practice, the CFO Act agencies are the 24 largest Federal agencies in terms of budget; the 23 civilian CFO Act agencies are the CFO Act agencies plus the Department of Defense.
Starting 2022, the budget of Department of Defense is not reported.
Citation formats
U.S. cybersecurity spending on CFO Act and non-CFO Act agencies FY 2018- FY 2025
In the fiscal year 2025, ending in March 2025, the United States government's estimated annual civilian cybersecurity spending on the CFO Act agencies was 12.325 million dollars. Furthermore, the non-CFO Act Agencies received 674.3 million U.S. dollars.
Since the fiscal year 2022, the reporting of cybersecurity spending for the Department of Defense was discontinued.
Profit from the additional features of your individual account
Currently, you are using a shared account. To use individual functions (e.g., mark statistics as favourites, set
statistic alerts) please log in with your personal account.
If you are an admin, please authenticate by logging in again.
Learn more about how ÌÇÐÄÆÆ½â°æ can support your business.
US Office of Management and Budget. (March 11, 2024). Estimated cybersecurity spending of the U.S. government on CFO Act and non-CFO Act agencies from FY 2018 to FY 2025 (in million U.S. dollars) [Graph]. In ÌÇÐÄÆÆ½â°æ. Retrieved July 20, 2026, from /statistics/1003402/us-cybersecurity-spending-cfo-act-agencies/
US Office of Management and Budget. "Estimated cybersecurity spending of the U.S. government on CFO Act and non-CFO Act agencies from FY 2018 to FY 2025 (in million U.S. dollars)." Chart. March 11, 2024. ÌÇÐÄÆÆ½â°æ. Accessed July 20, 2026. /statistics/1003402/us-cybersecurity-spending-cfo-act-agencies/
US Office of Management and Budget. (2024). Estimated cybersecurity spending of the U.S. government on CFO Act and non-CFO Act agencies from FY 2018 to FY 2025 (in million U.S. dollars). ÌÇÐÄÆÆ½â°æ. ÌÇÐÄÆÆ½â°æ Inc.. Accessed: July 20, 2026. /statistics/1003402/us-cybersecurity-spending-cfo-act-agencies/
US Office of Management and Budget. "Estimated Cybersecurity Spending of The U.S. Government on Cfo Act and Non-cfo Act Agencies from Fy 2018 to Fy 2025 (in Million U.S. Dollars)." ÌÇÐÄÆÆ½â°æ, ÌÇÐÄÆÆ½â°æ Inc., 11 Mar 2024, /statistics/1003402/us-cybersecurity-spending-cfo-act-agencies/
US Office of Management and Budget, Estimated cybersecurity spending of the U.S. government on CFO Act and non-CFO Act agencies from FY 2018 to FY 2025 (in million U.S. dollars) ÌÇÐÄÆÆ½â°æ, /statistics/1003402/us-cybersecurity-spending-cfo-act-agencies/ (last visited July 20, 2026)
Estimated cybersecurity spending of the U.S. government on CFO Act and non-CFO Act agencies from FY 2018 to FY 2025 (in million U.S. dollars) [Graph], US Office of Management and Budget, March 11, 2024. [Online]. Available: /statistics/1003402/us-cybersecurity-spending-cfo-act-agencies/