Small US Cyber Agencies Are Underfunded & That's a Problem

This commentary argues that chronic underfunding of key U.S. government cybersecurity functions—exemplified by NIST’s mid-February 2024 pause in enriching the National Vulnerability Database—created measurable risk by disrupting widely relied-upon vulnerability management processes. It urges Congress to provide stable, adequate appropriations, reconsider which entities should operate foundational capabilities like the NVD, and align resources with policy goals to preserve U.S. cyber strength.