A Call to Strengthen Cyber Resiliency in the Department of Defense

Cyber threats keep growing year after year. The digital world has become a battleground, and our adversaries constantly probe our defenses for weak spots. We clearly need to strengthen those defenses.

This post looks at why the Department of Defense (DOD) needs strong cybersecurity. It focuses on four ideas: zero trust, continuous testing, full asset management, and human-led testing. Together, these help the DOD face a threat landscape that never stops changing.

Our goal is simple: reduce vulnerabilities, raise attacker resistance scores, and harden cyber defenses. That is how the DOD stays resilient against a relentless cyber threat.

The Freedom of the Cyber Adversary

Our adversaries wage digital war with few limits. Legal boundaries, budgets, and red tape do not slow them down. That freedom lets them exploit weaknesses at will.

As defenders, we know that old, static security no longer works. Attackers win by constantly testing and exploiting gaps in our defenses. To keep pace, the DOD must take a proactive, continuous approach — one built for the limited resources and complexity of military networks.

The Imperative of Zero Trust

The concept of zero trust is becoming a core principle of modern cybersecurity. Traditional models trust anything inside the network perimeter. Zero trust does not. It assumes threats can come from inside or outside, so no user, device, or system is trusted by default. But zero trust is not a one-time project. It needs constant review and testing, so teams can find and fix security gaps as they appear.

Key Areas of Zero Trust

• Identity and access management: Constantly monitor and verify user identities and access rights to block unauthorized access and insider threats.
• Network security: Segment and monitor network traffic to catch and stop attackers moving laterally inside the network.
• Application security: Regular testing and validation of applications finds and fixes vulnerabilities quickly.
• Data protection: Continuously review encryption and access controls to keep sensitive data safe from breaches.

The Need for Continuous Testing

Continuous testing is a cornerstone of strong cybersecurity. Periodic assessments leave gaps. Continuous testing finds and fixes vulnerabilities in near real time. It mirrors how adversaries constantly probe, which helps the DOD stay ahead of threats.

Benefits of Continuous Testing

• Proactive defense: Finds vulnerabilities before attackers can exploit them.
• Real-time insight: Gives an up-to-date view of the organization’s security posture.
• Reduced risk: Fixes vulnerabilities fast, shrinking the window attackers can use.

The Role of Human-led Testing in Cybersecurity

Automated scanners are useful: they catch known vulnerabilities. But they miss flaws that have not been disclosed yet or added to the scanner’s toolbox. That is where human-led testing matters. Skilled researchers bring intuition, creativity, and a deep grasp of the threat landscape that scanners cannot match.

Advantages of Human-led Testing

• Finding unknown vulnerabilities: People can spot and exploit flaws that automated scanners never see.
• Adversary emulation: Human testers copy the tactics, techniques, and procedures (TTPs) of real attackers, giving a realistic view of your defenses.
• Contextual analysis: People judge each vulnerability in context, weigh its real impact, and prioritize fixes accordingly.

Challenges in Human Resource Allocation

The DOD struggles to run a strong testing program due to a shortage of skilled personnel. With too few experts, it cannot test thoroughly with internal staff alone. That leaves gaps attackers can exploit.

Human Resource Constraints

• Limited availability: Too few qualified professionals means the DOD cannot test often or deeply enough.
• Scheduling difficulties: Staff shortages make it hard to test on demand, creating gaps in continuous assessment.
• Narrowed scope: A small team limits how broad and deep assessments can go, so vulnerabilities across the network go unchecked.

The Power of a Comprehensive Vulnerability Dashboard

A continuous testing program needs a clear dashboard that shows the full security picture. A good dashboard lets the DOD:

• Monitor real-time metrics: Track how many vulnerabilities are found, how severe they are, and how well fixes are working.
• Analyze trends: Spot patterns in the data to anticipate and prepare for future threats.
• Manage resources: Focus effort on high-risk areas and fix critical vulnerabilities first.
• Demonstrate compliance: Show that security measures meet regulations and industry best practices.

A strong dashboard does more than centralize the security view. It also drives continuous improvement through data-driven decisions.

Mapping the Organization from an Asset Perspective

Strong cyber defense starts with a full understanding of all assets in the organization. That means not only the systems and devices you actively manage, but also the ones you own but do not manage. Tools that reveal these unmanaged assets are critical. They let you:

• Find hidden vulnerabilities: Secure every entry point, not just the ones you actively monitor.
• Improve asset management: Get a clear inventory so you can allocate resources well.
• Respond faster: Spot and contain threats sooner with a complete view of the network.

Measuring Success: Attacker Resistance Score

To measure how well your defenses work, look beyond a simple vulnerability count. The attacker resistance score gives a fuller picture by weighing three factors:

1. Cost to find vulnerabilities: How much effort attackers need to find a flaw. Higher cost means stronger defenses.
2. Quality and quantity of vulnerabilities: How many flaws there are and how serious they are. Fewer and less severe flaws mean better security.
3. Effectiveness of remediation: How quickly and well you fix flaws. Faster, better fixes raise overall security.

When you focus on these metrics, you do more than find vulnerabilities. You prevent exploitation and build real resilience.

Hardening Assets and Cyber Defenses

Hardening means strengthening systems and networks to shrink the attack surface and block unauthorized access. It includes:

• System and network configuration: Set up systems and networks securely and in line with best practices.
• Patch management: Update software and systems regularly to close known vulnerabilities.
• Endpoint security: Protect devices that reach the network, such as laptops and phones.
• Security awareness training: Teach users best practices and common threats to reduce human error.

The cyber threat landscape keeps changing, and adversaries seize every chance to break through. To protect our digital infrastructure, we need a continuous, proactive approach. That approach rests on zero trust, continuous testing, full asset mapping, and asset hardening.

Add human-led testing, a strong cybersecurity dashboard, and a real fix for the personnel shortage, and the DOD can sharply improve its resilience against cyber threats.

Ed Zaleski is Synack’s Director of Federal Sales for the Department of Defense.

Related reading: Continuous Authorization to Operate (cATO): Tortoise Meets Hare • U.S. strikes on Iran could trigger cyber retaliation • The Top 5 Cybersecurity Vulnerabilities for Government Agencies in 2022