I wholeheartedly agree that DoD isn't running the show on anything infosec related. There's a reason General Alexander is DIRNSA AND COMUSCYBERCOM. That's als

I wholeheartedly agree that DoD isn't running the show on anything infosec related. There's a reason General Alexander is DIRNSA AND COMUSCYBERCOM. That's also the same reason LTG Pollett (head of the Defense Information Systems Agency) isn't COMUSCYBERCOM. With that said, until USCC realizes that you can't buy security, and that operational units need to be held responsible for their security on the network to the same level that they are in the kinetic space, this is going to just continue to be a money-burning cluster. There are SMART, talented people working in information security for the government - they're (in general) NOT the ones running the show, or even advising the ones running the show. Most of the ones I've met are working for intelligence agencies - and there is a large amount of rice-bowling and animosity between the services and agencies (such as DISA, NSA and now USCC). Until someone upstairs (STRATCOM, CYBERCOM, Joint Chiefs, etc.) starts firing people, I don't think anything is going to change though.