Innovation at the missile defense agency: Embedding security for operational excellence

Innovation at the missile defense agency: Embedding security for operational excellence

Don Blersch

|

March 18, 2025

Back
BACK

An example of innovation I observed and later led as the Director of Intelligence while serving at the Missile Defense Agency (MDA) highlights the potential for optimizing performance across government. To that end, the MDA has earned long-standing recognition from the Office of the Secretary of Defense (OSD) as a model for how proactive supply chain risk management can enhance both security and operational efficiency. What sets MDA apart is not only its commitment to safeguarding sensitive information but also its strategic innovation in integrating intelligence, counterintelligence, and security measures directly into the engineering and acquisition process, thus minimizing waste and optimizing performance.

Integrating Security with Engineering: A Game-Changer for MDA

One of MDA’s key historic innovations was the alignment of critical security functions—Intelligence, Counterintelligence, Information, and Industrial Security—under the Chief Engineer. This integration of security expertise within the engineering workflow was a significant shift in how MDA approached risk management. Rather than treating security as a separate, external “bolt-on” after-thought, it became an inherent embedded part of all phases of the MDA system's life-cycle from initial research, development, test, and evaluation (RDT&E); production; deployment (inventory); operations and support (O&S); through disposal. This strategic systems innovation empowered security functions to work together, in close partnership, with engineers and program managers, making security risk management a continuous process that evolves and is integrated within each individual MDA system and as part of the overall MDA enterprise architecture. By embedding these components early on, MDA ensured that both security and operational requirements are addressed simultaneously, creating more resilient systems with fewer vulnerabilities and silos throughout the agency, empowering stakeholders to more seamlessly work together.

Proactive Cybersecurity: MDA’s Hunt Teams Lead the Way

Another significant innovation came with the creation of Cyber Assistance Hunt Teams. These specialized teams are deployed to the networks of MDA’s industrial partners to proactively identify and neutralize advanced persistent threats (APTs) that target corporate networks holding critical MDA intellectual property and data.

The Hunt Teams act as a proactive defense measure, representing a key shift from reactive to preventive cybersecurity. By actively seeking out vulnerabilities and breaches before they can be exploited, MDA has taken an aggressive stance in partnering with industry in protecting its supply chain and intellectual assets from cyberattacks. This is especially vital given the increasingly sophisticated and pervasive cyber threats targeting government contractors and defense infrastructure.

The creation of Hunt Teams further addresses security weaknesses before they can disrupt operations or cause damage, protecting not only sensitive information but also reducing the risk of costly delays, breaches, or system failures. This is also helpful from a resourcing perspective, allowing the necessary employees to be deployed across focus areas versus having to reactively allocate their time when a crisis hits.

Lessons for Other Agencies: MDA as an Exemplar

The MDA’s integration of security functions within the engineering process and its proactive cyber defense strategies have made it a benchmark for other Department of Defense (DoD) agencies. MDA has demonstrated how security, operational efficiency, and weapon system effectiveness are not mutually exclusive but can be enhanced together through smart integration and proactive management.

Other agencies can learn from MDA’s example by embedding critical functions—such as risk management and cybersecurity—directly into core engineering operations rather than treating these as separate entities. This not only strengthens overall security but also streamlines processes and ensures that risks are managed in real-time, during system development and procurement stages, deployment, and eventual system upgrade, replacement, and/or disposal, rather than after vulnerabilities have been exposed.

By taking these innovative steps, the Missile Defense Agency has created a robust framework that improves operational efficiency and effectiveness while safeguarding sensitive information and associated missile defense systems—a model that continues to be recognized as a leading example for the Department of Defense and beyond.

This article is the third in a series about innovation in government agencies, drawing on real examples from my lived experience of transformative change management. Read my first article here, and parts one and two of my second article as well.

This article was originally published on LinkedIn.