Pentagon Embraces AI to Revolutionize Cybersecurity Protocols

AI in defense cybersecurity matters when it removes real bottlenecks without weakening assurance. Security review and approval processes can delay a system long before it is technically ready to fail. The question is whether AI can speed up evidence review, triage and documentation without turning trust into guesswork.

That makes the Pentagon’s experiments with AI more than an automation headline. If defense teams can shorten approval cycles while keeping reliability, oversight and accountability, the change could spread well beyond one project and alter how secure systems move from review into use.

Why the ATO process needs fixing

Large authorization processes can hold up technology that is otherwise ready to deploy. Speed matters. If the Pentagon can use AI to speed up assurance work without lowering standards, secure systems could be approved and fielded in weeks instead of the many months an ATO can take today.

AI and the Authorization to Operate

The need for speed

The Authorization to Operate (ATO) has long been slow and labor-intensive. In 2025 the Defense Department’s acting chief information officer, Katie Arrington, launched the Software Fast Track (SWFT) initiative to replace static, paperwork-heavy approvals with continuous, AI-assisted security assessment. The goal is faster approvals without weaker security.

Early trials

Under SWFT, vendors submit material such as software bills of materials and third-party risk data, and AI tools analyze it to support approval decisions. The department collected industry input as it built the framework. Officials expect AI to cut the time systems wait for authorization, and they have said the approach could expand to more programs if it works.

Making AI reliable

Security first

AI’s potential is large, but the Pentagon also stresses that the AI it deploys must be secure and reliable. The Defense Department plans strict checks so AI tools don’t weaken existing systems, and its cybersecurity leaders say AI must pass demanding tests before wider use.

The hard parts

A key challenge is making sure AI does more than automate existing tasks. It has to cope with new threats too.

AI across defense operations

Beyond cybersecurity

The ATO work is part of a wider Pentagon push to use AI across its operations, from logistics to battlefield decision support, with better decisions as the goal.

Working with partners

The Pentagon works with tech companies and allies on cyber defense.

What to watch

Using AI for cybersecurity approvals could change how the Defense Department fields technology. If faster ATOs hold up under scrutiny, the approach could set standards for other agencies and allies. The test is whether speed comes without new security gaps.

Fred Templeton, CISA, CASP, SEC+

Fred Templeton is a practicing Information Systems Auditor in the Washington DC area. Fred works as a government contractor and uses his skills in cyber security to make our country's information systems safer from cyber threats. Fred holds a master's degree in cybersecurity and is currently working on his PHD in Information Systems.