JFHQ-DODIN launched its new Cyber Operational Readiness Assessment Program

Joint Force Headquarters — Department of Defense Information Network launched its Cyber Operational Readiness Assessment program

Over the past four years, JFHQ-DODIN has undertaken significant revisions to the Defense Department Command Cyber Readiness Inspection program, shifting its focus from mere inspection compliance to operational readiness, which is fundamental to ensuring mission assurance. As a manifestation of this notable transition, the program has been rebranded as the Cyber Operational Readiness Assessment (CORA). According to Air Force Lt. Gen. Robert Skinner, the commander of JFHQ-DODIN, CORA stands as a pivotal element within the DOD's cybersecurity strategy, serving as a cornerstone to facilitate continuous, comprehensive assessments. The revamped processes aim to bolster the resilience and posture of the DODIN by supporting commanders and directors in fortifying their information systems, minimizing the cyber terrain's attack surface, and fostering a proactive defense approach.

John Porter, the acting director of DODIN readiness and security inspections at JFHQ-DODIN, noted that CORA presents an integrated perspective on threat, vulnerability, and impact, aimed at furnishing DAO commanders and directors with pertinent insights for decision-making regarding cyber terrain, forces, and resource allocation. CORA prioritizes MITRE ATT&CK mitigations to mitigate adversarial risk to the DODINs through risk-based metrics developed by JFHQ-DODIN. These metrics, informed by MITRE ATT&CK tactics, techniques, and procedures, allow for targeted remediation efforts, ensuring alignment with cybersecurity priorities and focusing on critical areas.