What the FY2027 request buys
Verbatim from the R-2A exhibit for project CY50H1 of PE 0306250JCY. This is the budget justification's own description of work that has not happened yet — the one thing no other level of the budget carries.
With $138.068M, USCYBERCOM will scale and operationalize AI capabilities across all four thrust areas—ISR, Enhancing OCO, Enhancing DCO, and Integrated Foundational Activities—to deliver AI‑enabled effects at campaign‑level scale. This investment advances the Command’s strategic priority to integrate AI across JCWA and accelerate mission impact. Major FY 2027 initiatives include: • Replicating AI task forces across the Command to scale successful pilot outcomes and institutionalize AI enabled mission workflows. • Providing LLM access at multiple classification levels, enabling ISR, OCO, and DCO teams to leverage advanced analytic capabilities across operational environments. • Establishing an AI fabric to automate data flows, accelerate mission execution, and enhance operator effectiveness. • Integrating AI into the cyber workforce training pipeline, including incorporation into the Persistent Cyber Training Environment, ensuring CMF teams are trained to employ AI enabled capabilities. ISR Enhancements: • Expand AI/ML applications that improve ISR support to OCO and DCO missions. • Continuously adapt analytic models to evolving adversary TTPs. • Implement verification and validation mechanisms to ensure AI generated intelligence is accurate, trusted, and operator validated. OCO Enhancements: • Integrate agentic data triage, automated planning, mission dependency monitoring, and rapid target development. • Accelerate mission planning and reduce operator workload through AI enabled automation. • Increase the number and timeliness of operational options available to Commanders. • Prioritize AI enabled targeting of critical technologies used by adversaries and malicious cyberspace actors. DCO Enhancements: • Scale analyst capacity to identify malicious actors across the DoWIN, national security systems, and critical infrastructure. • Fuse cyber threat intelligence with partner agency holdings to drive prioritization of defensive actions. • Accelerate malware analysis in Hunt Forward Operations. • Prototype AI enabled protocol analysis capabilities for IT and OT environments. Integrated Foundational Activities: • Enhance C2, planning, training, and rehearsal of cyber operations through AI enabled capabilities. • Optimize data storage across classification levels to support performant AI models. • Implement MLOps capabilities to accelerate AI development and deployment. • Expand access to cloud based and generative AI models in operational environments. • Integrate Retrieval Augmented Generation and agentic AI frameworks. • Continue AI assurance activities to validate AI outputs and ensure operator trust.
This funding request reflects the Command’s prioritization of scaling AI‑driven capabilities across the Joint Cyber Warfighting Architecture (JCWA) and the expanding scope of AI integration across USCYBERCOM missions. Additional resources will accelerate the transition of successful pilot capabilities into operational use, expand AI access across classification levels, and support the rapid development, deployment, and governance of AI tools essential to the Department of War and USCYBERCOM missions. This increase also reflects the growing urgency to apply AI at operational scale to counter rapidly advancing adversary capabilities.
FY2026: the year under way
Prior-year accomplishments and current-year plans from the same exhibit. Context for the FY2027 plan, not a series — an activity partitions its project exactly in the request year, but can under-cover it in earlier years.
$5.000M in funding will enable CNMF to continue executing an agile 90-day AI pilot cycle, a rapid evaluation framework that allows the Command to test, validate, and iterate on AI capabilities against real operational use cases. This approach ensures that only the most effective technologies advance toward operationalization while maintaining the flexibility to counter evolving adversary tactics. Key FY 2026 efforts include: • Rapid AI prototyping and validation focused on improving threat detection, automating data analysis, and accelerating decision making across CMF missions. • Operational testing of AI applications that reduce manual workload, enhance threat hunting efficiency, and increase mission throughput. • Early identification of integration challenges and development of best practices to support broader adoption across the Command. • Foundational AI activities, including deployment of cloud-based AI models in operational environments and prototyping pipelines for model provenance, security, and risk assessment, enabling safe and rapid adoption of advanced AI capabilities. These efforts ensure USCYBERCOM can quickly identify high value AI capabilities and transition them into mission workflows at speed. FY 2026 funding will also support select foundational activities, including deployment of cloud-based AI models in operational environments and prototyping pipelines for model provenance, security, and risk assessment. These activities enable safe, rapid adoption of more performant AI capabilities across the Command.
Three years, and no five-year plan
An R-2A activity publishes the prior year, the current year and the budget year. The FYDP outyears exist at project and program-element level and are deliberately absent here rather than inferred. Estimate types are colored and never summed into one figure.
| Fiscal Year | Estimate Type | Amount ($M) |
|---|---|---|
| FY2026 | Enacted | 5.0 |
| FY2027 | Request | 138.1 |
This activity is 100% of project CY50H1's FY2027 request and 11% of PE 0306250JCY's. In the request year the activities under a project sum to it exactly; in the current year they under-cover it in about 9% of cases, so an activity's delta can legitimately exceed its parent's and the two must not be compared row to row.
1 activity in project CY50H1
Every R-2A line of this project, largest FY2027 request first. Linked where the activity has enough of its own narrative to carry a page; the rest are shown in full on the project page.