Cyber Vulnerabilities Assessments and Evaluations
This funding line reduces the Army's risk to adversarial cyber intrusions or attacks that could compromise critical weapon systems and kill chains. Cyberspace Operational-Resilience Assessment - Platform (CORA-P) is the Army program to improve survivability across Army modernization efforts and maintain readiness of operational capabilities. CORA-P addresses the requirements of Section 1502 of the FY24 NDAA, which directed the Services to harmonize the identification and mitigation cyberspace vulnerabilities in critical weapon systems. Headquarters, Department of the Army initially established CORA-P to continue Section 1647 assessments, while expanding to include supply chain risk analysis and electromagnetic spectrum vulnerabilities. CORA-P has since shifted from executing new assessments to harmonizing defensive efforts across existing Army and DoW assessment programs (including the Strategic Cybersecurity Program). CORA-P now focuses on developing and delivering vulnerability remediations that result from these assessments as well as from sensitive threat intelligence and other potential indicators of compromise. Activities include improving the structure and visibility of vulnerability data to improve portfolio risk management, initiating remediation efforts for high-priority, crosscutting issues, and avoiding future risks by driving improvements earlier in materiel development for modernization programs. As part of CORA-P, the Army identifies and prioritizes capabilities most-relevant to National Defense Strategy priorities based on input from mission planning, JROC guidance, and sensitive threat intelligence. This also includes coordinating Army Cyber Command lead Crisis Action Teams, where specific vulnerabilities affect the Army weapon/business systems. A key aspect is integrating efforts across both HQDA and Army Commands to understand total risk exposure while avoiding duplication. The Army then reviews the security posture of these critical components, develops remediation strategies, and facilitates delivery of fixes at mission-relevant speed. This includes working with program offices, capability managers, and resource managers to develop realistic plans of action for manage risk across outyears, and then gaining Army Senior Leader approval as needed.
FY2027 planned work ASA(ALT) will continue to address cyber vulnerability trends and crosscutting remediations to deliver resilient and survivable weapon systems. This includes continued oversight of ongoing and development of new strategies for recent and ongoing Strategic Cybersecurity Program evaluations. Additionally, CORA-P will synergize findings and remediation actions from multiple Army and DoW sensitive initiatives to Mitigate Critical Vulnerabilities across critical capabilities. The Army will complete multiple efforts to improve software readiness by improving the electronic and automated delivery of software updates to deployed weapon systems, as well as improving accountability by integrating…
FY2026 to FY2027 change Increase due to economic assumption.
FY2026 plans — current year ASA(ALT) will continue to address cyber vulnerability trends and crosscutting remediations to deliver resilient and survivable weapon systems. This includes continued oversight of ongoing and development of new strategies for recent and ongoing Strategic Cybersecurity Program evaluations. Additionally, CORA-P will synergize findings and remediation actions from multiple Army and DoW sensitive initiatives to Mitigate Critical Vulnerabilities across critical capabilities. The Army will complete multiple efforts to improve software readiness by improving the electronic and automated delivery of software updates to deployed weapon systems, as well as improving accountability by integrating…
FY2025 accomplishments The funding provides the Army the opportunity to assure its digital transformation through automation to improve efficiency and effectiveness of cyber vulnerability collection, analysis, and reporting to deliver resilient and survivable weapon systems. Improved automation will enable the analysis of products from engineering, Test & Evaluation, and other assessments to proactively identify areas of risk (e.g. compromised software, unsecure configurations, supply chain vulnerabilities, etc). Enhancements will be leveraged to develop specific remediation plans/actions for priority findings from the DoD Security Cooperation Program and other defensive cyberspace operations in order to deliver…
FY2025 accomplishments The funding provides the Army the ability to further develop the TCAI capability to test emerging and evolving DoD/Army AI and ML capabilities against operationally relevant and realistic threats critical to testing Army modernization priorities. The Army Acquisition Red Team will also provide PCO at the Combatant Command (COCOM) mission level, develop adversary Tactics Techniques and Procedures (TTPs), conduct broad assessments of S&T and acquisition office environments and industrial base assets. The Army Acquisition Red Team will support CORA-P providing PCO, Close Access Assessments, and Adversarial Assessments. The Army Acquisition Red Team supports multiple goals of the Army Campaign…