In 2025, the US government established the Department of Government Efficiency (DOGE) to identify and eliminate waste across federal agencies. The resulting reductions in budget and headcount significantly constrained agencies’ ability to manage rapidly expanding compliance, security, and regulatory demands. With fewer resources to address increasingly sophisticated cyber threats, many agencies have experienced heightened vulnerability, greater operational risk exposure, and widening gaps in essential cybersecurity coverage. These constraints have forced leaders to reassess how they safeguard critical systems and data amid sustained pressure on resources.
In December 2025, online survey of 212 cybersecurity decision-makers was conducted to understand the operational fallout and the approaches agencies are now taking. The research found that although the impacts of the 2025 reductions remain significant — particularly in staffing, capability coverage, and risk posture — agencies are beginning to shift toward more efficient, technology-forward security operations. Many are exploring emerging tools, including AI and automation, to help offset staffing shortages, reduce vulnerability, and support a leaner but more resilient cybersecurity model.