In this brief, the authors explore a defense approach they have labeled the Progressive Values Strategy. The strategy is grounded in a view that the military instrument is not well suited to meeting many of the security challenges facing the United States. It focuses on achieving a level of military sufficiency that deters adventurism by others—as well as itself.
We recognize that the magnitude of the threats posed by malicious cyber activity leads people to look for a big, bold, visible sign of change. Creating a U.S. Department of Cybersecurity is not the answer. We cannot stovepipe thinking about cybersecurity into one centralized place or approach. The threat is so pervasive and so severe that it requires a recognition that a change in thinking is necessary for everyone operating an enterprise.