Information Systems Security Program

The DoW CIO information systems security program (ISSP) provides focused defense cybersecurity and information assurance technology and technical solutions research, development, testing, and integration critical to meet Title 10 U.S. Code Section 2224 (10 U.S.C. §2224) (Defense Information Assurance Program); Public Law 113-283 (Federal Information Security Modernization Act of 2014); Office of Management and Budget (OMB) Circular A-130; multiple DoW cybersecurity-related instruction series, such as 8500, 8510, 8520, 8530, and 8540; Executive Order 14028, “Improving the Nation’s Cybersecurity”; National Defense Authorization Act (NDAA) for Fiscal Year (FY) 2022, Section 1528; National Cybersecurity Strategy (March 2023), OMB M-22-09, “Moving the U.S. Government Toward Zero Trust Cybersecurity Principles”; National Security Memorandum 8, “Memorandum on Improving the Cybersecurity of National Security, Department of Defense, and Intelligence Community Systems”; FY 2022 – 2026 DoW Strategic Management Plan; DoW CIO 2024 Defense Industrial Base Cybersecurity Strategy; and DoW CIO 2022 Zero Trust (ZT) Strategy. ISSP assists the DoW CIO and mission partners in: developing cybersecurity governance processes; modernizing communications security (COMSEC) and cryptography, including post-quantum solutions; integrating and synchronizing the DoW information environment; enhancing communications cybersecurity and national security system protection; adopting ZT cybersecurity principles; defending against supply-chain attacks; overseeing cybersecurity risk management; developing and sustaining defense industrial base (DIB) cybersecurity activities; and integrating cybersecurity standards across the DoW.