Fed Agencies See Cyberthreats as Key Barrier to Tech Improvements

Why It Matters

Cyber threats are slowing federal digital transformation, risking service continuity and national security, while limited AI adoption curtails potential defense gains.

Key Takeaways

• 56% rank cybersecurity among top modernization priorities
• 33% view threats as barrier to agency goals
• 85% give agencies A or B cybersecurity grades
• Only 20% finished modern, secure platform transformation
• Majority testing AI, not fully deployed yet

Pulse Analysis

The federal government’s push to modernize its IT estate has run into a familiar obstacle: legacy systems that are both costly to replace and vulnerable to attack. Agencies continue to rely on aging mainframes and fragmented networks, creating a patchwork of security gaps that cyber adversaries readily exploit. This structural weakness forces leaders to allocate disproportionate budget portions to defensive measures, diverting funds from innovation projects that could improve citizen services and operational efficiency.

EY’s recent survey sheds light on the paradox between perception and reality within federal cyber readiness. While a strong majority—85 percent—rate their cybersecurity posture as "A" or "B," only a fifth have fully transitioned to a modern, secure infrastructure. The gap suggests confidence may stem from incremental improvements rather than comprehensive transformation. Moreover, AI, touted as a force multiplier for threat detection, remains largely in pilot stages, with most agencies merely testing tools rather than integrating them into daily operations.

The implications are clear: without accelerated investment in cloud migration, zero‑trust architectures, and scalable AI solutions, the federal sector risks falling behind private‑sector security standards. Policymakers must prioritize funding mechanisms that reward end‑to‑end modernization rather than isolated upgrades. Embracing AI at scale—paired with robust data governance—can shorten detection cycles and automate response, turning cyber threats from a barrier into a catalyst for faster, more resilient digital services.