Jason Kumar

Cybersecurity professionals are faced with the dilemma of selecting from a large set of cybersecurity defensive measures while operating with a limited set of resources with which to employ the measures. This report explains the menu of actions for defending an organization against cyberattack and recommends an approach for organizing the range of actions and evaluating cybersecurity defensive activities.

Acquisition data underpin the management and oversight of the U.S. defense acquisition portfolio. However, balancing security and transparency has been an ongoing challenge. This report identifies the problems and challenges associated with sharing unclassified information within the U.S. Department of Defense and investigates the role of policies and practices associated with such sharing.