This is the first in a monthly series of blog posts I will write on strategic digital security. My goal is to introduce, or reinforce, concepts that are not often emphasized in the field of computer network defense. Our community is dominated by discussions of tools and tactics – such as software and how to use it to counter our adversaries. These are important elements of digital defense, but they should not constitute one’s entire security program.

I studied history and political science at the United States Air Force Academy (USAFA). At USAFA, the instructors were mostly officers; some of whom had fought in the first Gulf War. As a freshman cadet, I learned that prior to the Gulf War, Air Force planners concentrated on quickly deploying assets to conflict zones and fighting tactical engagements (often close air support or combat air patrols) once directed to do so. They seldom adopted a more strategic view of their contribution to national goals because they focused on one-on-one tactical engagements, relying on their individual skills and technical superiority to prevail.

Several officers contributed substantially to a change in the Air Force’s approach to warfighting just in time to prevail during the first Gulf War. These officers included John Boyd, John Warden, David Deptula, and others who sought to employ airpower as a strategic asset. They didn’t think solely in terms of tactics and tools; they planned for airpower to conduct campaigns and operations in support of strategy that ultimately realized national goals. By linking national policy and goals with strategy, operations, tactics and tools, they created a much more effective Air Force and changed the way the service postured itself in future conflicts.

I share this story because I see the same need for change in the digital security community. Yes, we need to have the best tactics and tools, but we must employ them to conduct campaigns and operations that embody strategy and contribute to organizational goals. In the coming months, I will write more about this topic, and I look forward to your questions.

Please leave a comment below on topics you would like me to discuss.