Cybersecurity: Converting Shock Into Action (Part 1)

Abstract

Despite the DoD's good intentions in their policy declarations, focusing on the cybersecurity behavioral changes in the acquisition community is an equally important consideration that does not appear to be highly visible. The number of cyber threat actors who have the ability to exploit DoD's systems is growing at a staggering rate, while too many people involved in the acquisition community may not have fully embraced (or even understand) their role in cybersecurity. It's vitally important to elevate the acquisition community's knowledge of all cybersecurity risks in order to more carefully plan, decide, and act for the inescapable and impending cybersecurity threats. Admittedly, the danger signs are very telling, and they are not all good. No one would argue that cybersecurity is taking center stage as our dependency on the internet continues to increase. Following a particular organization responsible for auditing the implementation of cybersecurity imperatives has been quite informative and has highlighted instrumental triggers and influencers that are so central to the achievement of desired learning outcomes. The personnel involved in the case study is still underway. In Part 1 of a two-part research project, the authors helped reinforce which critical behaviors the participants had to embody to assess mission assurance. Time will tell if it resulted in any expected gains. In the interim, the Assistant Auditor General for Financial Management & Comptroller Directorate intends to monitor, encourage, reinforce, and reward the behaviors required by their daily duties to guide them and convert shock into action. Part II will address their successes as well as any particular challenges they faced through ample objective evidence.