Information Systems Security Program
Cyber Security & Analytics enables mission operations for global partners and the warfighter by providing communications through the delivery of optimized cyber infrastructure solutions. The intent is to be dominant in providing strategic and innovative cyber infrastructure to support Department of War (DoW) missions. Cyber Security & Analytics ensures enterprise services support a joint information assurance model. The joint information assurance model mitigates risks related to the use, storage, and transmission of information and supports a broad range of information sharing policies across the unclassified and classified communities. Cyber Security & Analytics will: • Test and develop active defensive capabilities. • Test and integrate software defined networking and orchestration closed-loop security, which through analytics, monitors and assesses network activities to improve network performance and mitigate negative network occurrences. • Perform research, development, and engineering of emerging cyber situational awareness technologies. • Improve the network performance by providing architecture support, systems engineering and analytical functions.
FY2027 planned work • Continue migration efforts and associated Test and Evaluation Efforts required to migrate the DoW PKI to a hybrid cloud environment, addressing emerging requirements (like Global Gray and SIPR mobile credentialing) and reducing operational costs. • Conduct targeted cyber assessments of high-priority emerging technologies. • Collaborate with mission partners and industry to validate new automation technologies through operational pilot programs and limited production deployments • Advance the implementation of real-time automation and orchestration technologies to support dynamic cyberspace operations and reduce manual response time across enterprise environments. • Develop and pilot…
FY2026 to FY2027 change The increase of +$0.163 million from FY 2026 and FY 2027 supports expanded research, pilot deployments, and development of AI/ML-enabled automation capabilities. These investments will accelerate real-time automation adoption, support enterprise-wide technical assessments, and drive improved efficiency and effectiveness in cyberspace operations. Increase also supports changes in contract costs.
FY2026 plans — current year Integrate advanced AI/ML-driven automation for proactive threat detection, response, and anomaly mitigation across various enterprise platforms.
FY2025 accomplishments Continue to leverage automation capabilities to demonstrate improved service operations in cyberspace. These capabilities will concurrently mature the associated architecture and technical understanding to support portfolio management and user experience. Focus will be given to the Automation and Integration project.
FY2027 planned work Funding continues to provide Cybersecurity testing activities to maintain accreditation and Authority-To-Operate (ATO) approvals to maintain ZTA Operational Status and Mission Capability Readiness. Additionally, funds provide integration and operational testing of new or updated hardware/software versions to ensure evolution, interoperability, and operational readiness of deployed ZTA capabilities.
FY2026 to FY2027 change The increase of +$0.050 million from FY 2026 and FY 2027 for ZT is attributed to changes in cost contracts.
FY2026 plans — current year Funding provides cybersecurity testing activities to maintain accreditation and Authority-To-Operate (ATO) approvals to maintain ZTA Operational Status and Mission Capability Readiness. Additionally, funds provide integration and operational testing of new or updated hardware/software versions to ensure evolution, interoperability, and operational readiness of deployed ZTA capabilities.
FY2025 accomplishments Continued expansion of ZTAT capabilities to match the changing security scope from initial implementation to a more robust tool and capability set as DISA moves forward in its Zero Trust Journey. ZTAT’s capabilities are also planned to be expanded to support external mission partners.
Public Key Infrastructure: RDT&E funding will continue integration testing of key PKI Technical Capabilities as directed/mandated by the DoW CIO for continued evolution of the DoW PKI Infrastructure Cryptographic Algorithm. Additional funding will continue PKI Modernization Development, Integration, Performance. Funds will also support…
Read the FY2027 plan →FY2025 accomplishments The development of a cloud-based integration environment to test endpoint security solutions in real time against automated security vulnerability toolsets. Integrated cloud lab environments allow for faster test and development of requirements and interactions for existing commercial technologies in the endpoint space. Modernization of the DoDIN is crucial to support ZT initiatives and directives while increasing the DoD’s ability to respond, at speed, to adversarial use of Artificial Intelligence (AI) and Machine Learning (ML) based attacks.