Randy Resnick, director of the Zero Trust Portfolio Management Office within the Department of Defense’s Office of the Chief Information Officer, said the CIO office is set to review in the next few weeks 43 zero trust implementation plans that will serve as roadmaps for military services and defense agencies to address gaps in their cyber capabilities, Federal News Network reported Tuesday.
“We’re expecting to get these plans and whether or not they exceed our expectations will meet our expectations, that’s to be determined. We are confident that probably 80% to 90% will, but there will be some that we’re going to have to go back and forth,” Resnick told FNN in an interview.
According to Resnick, the CIO office developed from February through July a set of metrics that will be used to review each implementation plan, which he said will be analyzed by the different architectures, such as on-premise, all cloud or hybrid infrastructure.
He offered details on how the CIO office will look into each zero trust implementation plan.
“Our plan is that we’ve assembled probably the equivalent of maybe 17 or 18 full-time equivalents (FTEs), probably about 25 people, if you count them all, to spend the next four to six weeks analyzing every one of those plans and measuring the success of those plans, and whether or not they’re giving us the information,” Resnick said.
“We want to know how every single component is going to be hitting target level zero trust or higher by fiscal 2027 or earlier, and a layer on top of that is how are they going to achieve it,” he added.
Resnick said DOD will submit a report to Congress in December after conducting the internal review and then brief lawmakers on its assessment by January.