# Assessments and Evaluations Cyber Vulnerabilities — Program Element 0606942A

**Program element:** 0606942A  
**Component:** U.S. Army  
**Appropriation:** 2040 — RDT&E, Army  
**Budget Activity:** 6 — RDT&E Management Support  
**Vintage:** President's Budget PB2027  
**Canonical URL:** https://hitchintel.com/programs/0606942A

## Summary

U.S. Army requests $6.5M in FY2027, sustained across the five-year plan. In the FY2027 defense authorization, the House funded it in full; the Senate funded it in full; House appropriators funded it in full.

## Funding profile

| Fiscal Year | Estimate Type | Amount ($M) |
|---|---|---|
| FY2025 | Actual | 10.1 |
| FY2026 | Enacted | 6.4 |
| FY2027 | Request | 6.5 |
| FY2028 | Outyear | 6.5 |
| FY2029 | Outyear | 6.6 |
| FY2030 | Outyear | 6.7 |
| FY2031 | Outyear | 6.7 |

> Estimate types are not summed — the profile mixes actuals, enacted law, the request, and outyear projections.

## Congressional marks (FY2027)

| Stage | Marked ($M) | Change ($M) |
|---|---|---|
| Request | 6.5 | — |
| House NDAA (HASC) | 6.5 | +0.0 |
| Senate NDAA (SASC) | 6.5 | +0.0 |
| House Approps (HAC-D) | 6.5 | +0.0 |

> FY2027 NDAA authorization marks, as of 2026-07-27. Not appropriations or final law.

## Projects (1)

| Project | Title | FY2025 actual | FY2026 enacted | FY2027 request | Move |
|---|---|---|---|---|---|
| FL2 | Cyber Vulnerabilities Assessments and Evaluations | 10.1 | 6.4 | 6.5 | +2% |

> Projects are the summable leaves: the program element total is their sum, never added to it.

### Project FL2 — Cyber Vulnerabilities Assessments and Evaluations

This funding line reduces the Army's risk to adversarial cyber intrusions or attacks that could compromise critical weapon systems and kill chains. Cyberspace Operational-Resilience Assessment - Platform (CORA-P) is the Army program to improve survivability across Army modernization efforts and maintain readiness of operational capabilities. CORA-P addresses the requirements of Section 1502 of the FY24 NDAA, which directed the Services to harmonize the identification and mitigation cyberspace vulnerabilities in critical weapon systems. Headquarters, Department of the Army initially established CORA-P to continue Section 1647 assessments, while expanding to include supply chain risk analysis and electromagnetic spectrum vulnerabilities. CORA-P has since shifted from executing new assessments to harmonizing defensive efforts across existing Army and DoW assessment programs (including the Strategic Cybersecurity Program). CORA-P now focuses on developing and delivering vulnerability remediations that result from these assessments as well as from sensitive threat intelligence and other potential indicators of compromise. Activities include improving the structure and visibility of vulnerability data to improve portfolio risk management, initiating remediation efforts for high-priority, crosscutting issues, and avoiding future risks by driving improvements earlier in materiel development for modernization programs. As part of CORA-P, the Army identifies and prioritizes capabilities most-relevant to National Defense Strategy priorities based on input from mission planning, JROC guidance, and sensitive threat intelligence. This also includes coordinating Army Cyber Command lead Crisis Action Teams, where specific vulnerabilities affect the Army weapon/business systems. A key aspect is integrating efforts across both HQDA and Army Commands to understand total risk exposure while avoiding duplication. The Army then reviews the security posture of these critical components, develops remediation strategies, and facilitates delivery of fixes at mission-relevant speed. This includes working with program offices, capability managers, and resource managers to develop realistic plans of action for manage risk across outyears, and then gaining Army Senior Leader approval as needed.

| Activity (R-2A) | FY2025 | FY2026 | FY2027 |
|---|---|---|---|
| Cyberspace Operational Resiliency Assessment - Platform (CORA-P) | 6.2 | 6.4 | 6.5 |
| Red Team | 3.9 | — | — |

> R-2A activities carry the prior, current and budget year only — no five-year plan. Coverage is partial, so count them, never total them.

## Mission & acquisition strategy

This funding line reduces the Army's risk to adversarial cyber intrusions or attacks that could compromise critical weapon/business systems and kill chains. Cyberspace Operational-Resilience Assessment - Platform (CORA-P) is the Army program to improve survivability across Army modernization efforts and maintain readiness of operational capabilities. CORA-P addresses Congressional requirements beginning with FY16 NDAA Section-1647, and through FY24 NDAA Section-1502, which directs the Services to identify and mitigate cyberspace vulnerabilities in critical weapon systems.

## Related program elements

- [0604222F — Nuclear Weapons Support](https://hitchintel.com/programs/0604222F) (Air Force)
- [0303004F — Operational System Development - Hq USAF Only](https://hitchintel.com/programs/0303004F) (Air Force)
- [0606942N — Assessments & Evals Cyber Vulnerabilities](https://hitchintel.com/programs/0606942N) (Navy)
- [0608231N — Maritime TACT CMD & Control - SOFT PLT PRGM](https://hitchintel.com/programs/0608231N) (Navy)

## Source & machine access

- **Source:** FY2027 Department of the Army RDT&E Budget Justification, Exhibits R-2/R-3, PE 0606942A (PB PB2027); FY2027 NDAA committee marks (as of 2026-07-27).
- **MCP:** `mcp.hitchintel.com` — `budget_get_program_element(pe="0606942A")`.

*HitchAI is an independent intelligence service, not affiliated with the U.S. Department of Defense. Budget figures are requests/estimates, not obligations.*