In 2024, US government agencies at the federal, state, and local levels face escalating cybersecurity challenges as advanced threats become increasingly sophisticated. As AI increases the threat surface, agencies are moving quickly to expand the opportunity surface at an even greater rate through AI-enhanced cybersecurity strategies. The complexity and scale of threats necessitate continuous adaptation and innovation, including shifting security left in the software development life cycle.
This report, commissioned by Security Compass, follows up on 2021 and 2023 studies, providing key insights into the current state of secure development and ATO processes in US government agencies. It highlights the challenges and opportunities at federal, state, and local levels, examining software development methods, security expertise, developer controls, communication strategies, and ATO-compliant software development approaches.