Assessments and Evaluations Cyber Vulnerabilities

The Assessments and Evaluations Cyber Vulnerabilities program is designed to mitigate risks associated with cyber intrusions that could compromise critical Army weapon systems and operational capabilities. This initiative, known as the Cyberspace Operational-Resilience Assessment - Platform (CORA-P), aims to enhance the survivability of Army modernization efforts by addressing cyberspace vulnerabilities as mandated by Section 1647 of the FY16 National Defense Authorization Act (NDAA) and Section 1712 of the FY21 NDAA. The program focuses on identifying and remediating vulnerabilities in critical weapon systems, ensuring that remediation efforts align with the priorities of the National Defense Strategy.

CORA-P emphasizes a shift from system-oriented compliance to a system-of-systems resilience approach, addressing defensive gaps between individual components to prevent adversaries from disrupting critical kill chains. It prioritizes capabilities relevant to Joint Requirements Oversight Council (JROC)-designated and threat-informed capabilities, facilitating the delivery of fixes at mission-relevant speeds. Additionally, CORA-P integrates with the Department of Defense's Strategic Cybersecurity Program to enhance vulnerability data management and initiate remediation efforts for high-priority issues.

The program also supports Red Team enhancements for Combatant Command mission-level cyber vulnerability assessments. This involves developing Threat Counter Artificial Intelligence (TCAI) capabilities to test emerging DoD/Army AI and Machine Learning technologies against realistic threats. The Army Acquisition Red Team plays a crucial role in providing Persistent Cyber Operations (PCO) at the COCOM mission level, developing adversary tactics, techniques, and procedures, and conducting comprehensive assessments of Science and Technology environments.

Looking ahead, the program plans to leverage automation to improve efficiency in cyber vulnerability collection and analysis, thereby enhancing the resilience of weapon systems. The focus will be on developing specific remediation plans for priority findings from ongoing assessments and defensive operations. The increase from FY 2024 to FY 2025 reflects these expanded capabilities, particularly with the addition of Acquisition Red Team functions aimed at supporting Army modernization priorities through enhanced testing against operationally relevant threats.