Department CIO · alignment
The Department already wrote the strategy. You locate on it.
The CIO is principal advisor for IT, cybersecurity, and the information enterprise. Four lines of effort through FY2029. Component plans are the how. Phase Zero puts this mission on that map. It is not a Fulcrum certification.
The office
Four Deputy CIO portfolios. Not one window.
DCIO C3Command, control, communicationsNetworks that move the fight. Spectrum. PNT. The information enterprise that supports C2.Not: Your landing zone. Your mission ATO.
DCIO CSCybersecurityZero Trust Target Level. RMF. cATO policy. The floor the AO still applies to this system.Not: A product you buy. 152 for this mission because a peer occupies Thunderdome.
DCIO IEInformation enterpriseCloud, compute, software modernization. JWCC as the enterprise vehicle. Occupancy patterns the Department already runs.Not: Permission to stand up a snowflake because the mission is different.
DCIO R&AResources and analysisCategory management. FinOps. Buy what the Department already bought. Show the bill to an owner.Not: A unique CLIN that recreates a common service.
Fulcrum
Four lines of effort. Component plans translate. They do not replace.
Base established first. Each overlay is drawn on the same map — not a new assessment.
LOE 01Joint warfighting ITProvide Joint Warfighting IT capabilities — functional, scalable, sustainable, and secure.Phase Zero: Name the workload, the data, and what dies with it. Application and dependency visibility is LOE 1, not a discovery program.
LOE 02Networks and computeModernize information networks and compute — data-centric Zero Trust, faster transfer, lower latency, global resiliency.Phase Zero: Whose landing zone you occupy. JWCC is the vehicle. SCCA is the NIPR path. Thunderdome is how people arrive. The door is named in six weeks.
LOE 03IT governanceOptimize IT governance — efficiencies in delivery, cost avoidance, streamlined policy from governance to acquisition.Phase Zero: Named AO. IATT then ATO then cATO. Inherit in writing. FinOps that can pay the IL this fiscal year. Continuous authorization is Monitor after ATO.
LOE 04Digital workforceCultivate a premier digital workforce ready to deploy emerging technology to the warfighter.Phase Zero: Name the 03:00 owner and residual people. We do not staff the workforce. LOE 4 stays the agency's.
Five holds
What a sponsor must be able to say in a CIO-adjacent room.
1Fulcrum firstDepartment-wide what and why. Army Cloud Plan, DAF CIO strategy, DON ISV 2.0 are the how. Do not write a unique strategy for this agency.Miss: A second strategy deck that never maps to an LOE.
2Occupancy is LOE 2You are choosing whose landing zone you occupy — join, stand up on a known pattern, hybrid — and a vehicle that can pay the IL. A CSP logo is not occupancy.Miss: A bake-off of four primes treated as four landing zones.
3Zero Trust is a dateTarget Level by 30 Sep 2027. Seven pillars. DTM 25-003 (17 Jul 2025) is the implementation hammer, written to convert to instruction. Hosting without identity, device, segmentation, and telemetry is not Zero Trust.Miss: A SASE purchase, or Thunderdome occupancy, treated as 152 on this system.
4cATO is Monitor after ATOIATO is gone. IATT is bounded test. ATO is the AO's risk decision. cATO is ConMon, active defense, and an approved DevSecOps design — after an ATO. A pipeline is not a cATO.Miss: Score 4, or a factory slide, treated as authorization.
5Do not buy unique ITJWCC is the enterprise vehicle the CIO directed components toward. Inherit common services. A local provider builds on a known pattern. Category management and FinOps are LOE 3 cost discipline, not a sidecar.Miss: A snowflake landing zone because 'our mission is different.'
Not this
Alignment is location. It is not endorsement.
- Not A Fulcrum certificationCairn locates the mission on the Department map. It does not endorse, fund, or certify.
- Not A second strategyComponent plans translate Fulcrum. They do not replace it.
- Not One CIO windowC3, cybersecurity, information enterprise, and resources are different desks.
- Not IL6 / SIPR as this kitTarget Level covers NIPR and SIPR. Cairn's ceiling remains IL5.
Phase Zero
Name the LOE. Name the how. Do not occupy.
Leave with the sponsor
Named Fulcrum LOE the door sits under. Component plan named as the how. Five alignment holds the sponsor can say in a CIO-adjacent room.
Awareness, not certification
Phase Zero locates. It does not occupy, authorize, or certify Fulcrum.
Fulcrum is decision framing, not endorsement. Scores locate. The AO still signs this system.