Between the various services and different offices at the Pentagon, everyone wants a piece of the cyber pie, resulting in a computer network defense posture hampered by too much decentralization, according to a Government Accountability Office report released Monday.
Despite the publication earlier this month of an overarching DOD cyber operations strategy, there’s still no comprehensive department-wide assessment of cyber capabilities and cyber gaps, the report said.
The Pentagon is making strides to address threats, including setting up U.S. Cyber Command to oversee cyberspace operations, the GAO acknowledged.
“However, it is too early to tell if these changes will help DOD better address cybersecurity threats,” the report said.
The Pentagon has a pressing need for an overall joint doctrine defining its cyber operations and clarifying who’s in charge of what, the report said. It echoed a call from Congress last week, when Sen. John McCain, R-Ariz., and Sen . Carl Levin, D-Mich., wrote to the defense secretary complaining the Pentagon has failed to clarify its policies and legal authority for cyber operations.