Department of War Champions 'Brilliant at the Basics' for Cybersecurity Awareness Month

Oct. 1, 2026 |

Arming warfighters, workforce, and industry partners with actionable cyber defense practices to strengthen security posture and safeguard the mission.

The Office of the Chief Information Officer today launched the Department of War's "Brilliant at the Basics" campaign for Cybersecurity Awareness Month. The monthlong initiative reinforces core cybersecurity fundamentals across both Information Technology (IT) and Operational Technology (OT) environments to provide best practices for navigating an evolving threat landscape while maintaining a decisive digital edge.

"Cybersecurity starts with the basics," said Honorable Kirsten Davies, Department of War chief information officer. "This Cybersecurity Awareness Month, we are sharing foundational, actionable steps for our warfighters, civilian workforce, and defense industrial base partners to protect our technology ecosystem, both IT and OT. As we pursue innovative technologies, and reintegrate our industrial base, we must also maintain strong cyber fundamentals that protect our people, systems, and mission. Being 'Brilliant at the Basics' is not just a slogan; it is a mission imperative."

The campaign will deliver daily posts, actionable tips, and practical resources structured across four weekly themes:

• Be Aware: Understand digital environments and identify vulnerabilities across connected IT networks, OT infrastructure, and government-furnished equipment.
• Be Vigilant: Practice proactive security measures including strong authentication, credential hygiene, and anti-phishing tactics to reduce cyber risk.
• Be Secure: Protect mission-critical data and systems by reducing internet-facing systems, encrypting connections, patching, and ensuring only authorized equipment connects to defense networks. 
• Be Connected: Champion a culture of collective defense by promptly reporting suspicious cyber activity and promptly responding to cyber tasking orders.

Recognizing that small, medium, and nontraditional businesses drive critical innovation for our warfighters, the campaign provides tailored guidance and accessible resources directly to DIB partners. The initiative will also spotlight low-cost and no-cost cybersecurity support programs that align with the IT and OT best practices issued by the Department in July 2026 to support the hardening of the Department's broader industrial base.

For more information, daily campaign updates and event schedules, follow the official DoW CIO social media channels and the CIO's website at dowcio.war.gov.

Large-Scale Cybersecurity Exercise Focuses on Operational Technology

July 21, 2026 | By Matthew Olay, Pentagon News |

This year's iteration of the War Department's longest-running unclassified cyber defense exercise is largely focused on operational technology, military cyber professionals said today during a virtual media roundtable.

Hosted by the National Guard Bureau, the roundtable was part of Cyber Shield 2026 — a training event that brings together more than 1,000 participants from 44 states and territories, as well as 23 countries, in Little Rock, Arkansas, July 12-25. It's designed to develop, train and exercise cyber forces in the areas of computer network internal defense measures and cyber incident response. 

Whereas information technology focuses on the management of data, networks and software, operational technology refers to the control and monitoring of physical machinery, industrial equipment and operational processes. 

One reason operational technology security has become increasingly important this year, and in recent years, is that remote work has become much more prevalent since the 2020 COVID-19 pandemic, said Army Brig. Gen. Russell E. McGuire, National Guard Bureau vice director of cyber operations. 

"Pre-pandemic, most of our workforce went to office buildings. … As we transitioned to remote work, it created tremendous vulnerabilities," he said.  

Beyond IT professionals working remotely during the pandemic, McGuire said some critical infrastructure employees wanted remote access, which forced companies to connect IT systems to operational technology, thereby creating a new security risk. 

Each year, the exercise focuses on different areas of critical infrastructure, which often relies on operational technology; this year's focus is the electric grid. 

"As you look to sectors of target, there is a need to continue to come back to the electric sector, as attacks on the electric sector impact all sectors instantaneously," said Tim Conway, a fellow and technical director at the SANS Institute, which provides cybersecurity training, certifications and research to the War Department.   

One way the exercise combats threats to operational technology is by simulating real-world cyberattacks with SANS NetWars — a series of hands-on interactive learning exercises. 

Roughly 400 participants are taking part in this year's NetWars, contributing their own time during the weekends and in the evenings, McGuire said. 

"This is time they could be hanging out, catching a movie [or] relaxing, but the knowledge that they build just being in that room with these other experts, competing with each other is what makes this such a great exercise for them to take back to their units [and] their jobs, and that's why they keep coming back and growing each year," he added. 

Members of the Army and Air National Guard have participated in Cyber Shield annually since the event's inception in 2013.