Mission Resilience with Trey Herr and Simon Handler
Trey Herr and Simon Handler from the Atlantic Council's Cyber Statecraft Initiative joined me on the Acquisition Talk podcast to discuss how the Department of Defense can improve the mission resilience of its systems. The three pillars of resilience are robustness, responsiveness, and adaptability. In that description, resilience is more than about responding to adversity, but capitalizing on opportunity. Oversight agencies should take note that that adherence to plan is nowhere in that definition. During the episode, we discuss:
- How mission resilience metrics differ from CMMC
- The costs of excessive classification to security
- How Netflix uses the chaos monkey to find failure modes
- Comparing CIA's Corona satellite development to that of F-35 ALIS
- How the BattleLab idea can increase recombinatorial innovation
During the episode, we dive into a recent paper Trey and Simon wrote in conjunction with folks from MIT Lincoln Labs and Boston Cybernetics called "How do you fix a flying computer? Seeking resilience in software-intensive mission systems." https://www.atlanticcouncil.org/in-depth-research-reports/report/how-do-you-fix-a-flying-computer-seeking-resilience-in-software-intensive-mission-systems/
They recommend a new Center of Excellence for Mission Resilience in the DoD. The purpose would not be to duplicate cybersecurity initiatives, but rather to create metrics which can be put on contract to better verify that firms are using modern development processes like DevSecOps.
In order to have adequate status, such a Center of Excellence require a Senate-confirmed position, a dedicated budget account, and quick access to the DepSecDef. But ultimately, it shouldn't be a Top Secret project creating DoD-unique rules and processes. Instead, the Center should adopt the thought leadership from the commercial and academic sectors as to what makes organizations resilient.
This podcast was produced by Eric Lofgren. Soundtrack by urmymuse: "reflections of u". You can follow us on Twitter @AcqTalk and find more information at https://AcquisitionTalk.com.
- How mission resilience metrics differ from CMMC
- The costs of excessive classification to security
- How Netflix uses the chaos monkey to find failure modes
- Comparing CIA's Corona satellite development to that of F-35 ALIS
- How the BattleLab idea can increase recombinatorial innovation
During the episode, we dive into a recent paper Trey and Simon wrote in conjunction with folks from MIT Lincoln Labs and Boston Cybernetics called "How do you fix a flying computer? Seeking resilience in software-intensive mission systems." https://www.atlanticcouncil.org/in-depth-research-reports/report/how-do-you-fix-a-flying-computer-seeking-resilience-in-software-intensive-mission-systems/
They recommend a new Center of Excellence for Mission Resilience in the DoD. The purpose would not be to duplicate cybersecurity initiatives, but rather to create metrics which can be put on contract to better verify that firms are using modern development processes like DevSecOps.
In order to have adequate status, such a Center of Excellence require a Senate-confirmed position, a dedicated budget account, and quick access to the DepSecDef. But ultimately, it shouldn't be a Top Secret project creating DoD-unique rules and processes. Instead, the Center should adopt the thought leadership from the commercial and academic sectors as to what makes organizations resilient.
This podcast was produced by Eric Lofgren. Soundtrack by urmymuse: "reflections of u". You can follow us on Twitter @AcqTalk and find more information at https://AcquisitionTalk.com.
The podcast Acquisition Talk is embedded on this page from an open RSS feed. All files, descriptions, artwork and other metadata from the RSS-feed is the property of the podcast owner and not affiliated with or validated by Podplay.