U.S. offensive cyber capabilities are world-class, but defensive capabilities are fragmented because 85% of critical infrastructure is in private-sector hands and not all of it is well defended; that gap requires focused investment in cybersecurity defenses.