At the West 2018 conference in February, Patrick Shanahan, the deputy secretary of defense, gave one of those keynote speeches that was long-ish on vision and can pass for news among a corner of the press corps.<\/p>\n\n\n\n
On the opening day, Shanahan talked about the need to bolster cybersecurity \u2014 an unquestionably important priority for any organization in the United States, much less the Department of Defense. Shanahan, who is still quick to remind audiences he spent three decades at Boeing, then said the Pentagon needs to hold companies more accountable for their cybersecurity practices \u2014 agreed \u2014 and implied that CEOs in the defense community need to take the issue more seriously. Sure, great.<\/p>\n\n\n\n
As if to drive home the point, he compared poor cybersecurity practices to smoking a few decades ago when the unhealthy habit was common and far less people talked about the long-term risks.<\/p>\n\n\n\n
All of this is unassailable … except it puts most of the onus on industry and ignores a simpler solution. To make cybersecurity a priority within the defense community, the Pentagon has its acquisition office.<\/p>\n\n\n\n
There\u2019s a defense community clich\u00e9 that industry mimics the military it serves. Today, industry is just as serious about cybersecurity as it believes the Pentagon wants it to be. According to the fiscal 2019 budget request, the Pentagon is serious to the tune of $15 billion \u2014 up nearly 18 percent from two years ago. Fairly serious, but unquestionably more could be done.<\/p>\n\n\n\n
It\u2019s easy to imagine the long-lasting reverberations if a prime contractor lost a big deal for cybersecurity reasons or if the Pentagon put a program back up for competition after a breach or known vulnerability. The level of cyber hardening and network protection would increase exponentially.<\/p>\n\n\n\n
Yet, for as much as senior leaders say they are worried about cybersecurity, they spend more time talking about innovation. Why? Because DoD leaders are terrified of falling behind and, frankly, too often cyber discussions make people\u2019s eyes glaze over because it can be out of their comfort zone.<\/p>\n\n\n\n
Worse, more stringent cyber requirements might make small, groundbreaking companies question the value proposition of doing business with the DoD.<\/p>\n\n\n\n
If the Defense Department falls behind on cybersecurity, catching up is significantly harder, and any effort at innovation matters little to none.<\/p>\n\n\n\n
The Pentagon can talk about hardened networks and security being baked in and not bolted onto weapon systems, but until contracts are won and lost on the security of those companies, cyber remains a hollow promise.<\/p>\n","protected":false},"excerpt":{"rendered":"
To make cybersecurity a priority within the defense community, the Pentagon has its acquisition office.<\/p>\n","protected":false},"author":7,"featured_media":27458,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"_yoast_wpseo_meta-robots-noindex":"","_yoast_wpseo_meta-robots-nofollow":"","_yoast_wpseo_canonical":"","_acf":"","_yoast_wpseo_primary_category":24,"_jetpack_feature_clip_id":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","_smg_distribution_targets":[]},"categories":[106,32,24],"tags":[],"coauthors":[3361],"class_list":["post-24836","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-daily-brief","category-newsletters","category-opinion"],"acf":{"subheadline":"","legacy_arc_id":"SFWLE3VROVHJ3AHDKO72KEJRTE","arc_canonical_url":"\/opinion\/2018\/04\/02\/how-the-pentagon-can-get-serious-about-cyber\/","remove_feature_photo":false,"is_sponsored":false,"subtype":"","redirect_url":"","disable_inline_ads":false,"native_logo_pretext":"Presented By:"},"yoast_head":"\n