The official account of the U.S. Department of War Office of the Chief Information Officer. Linking, replying/following does not = endorsement.

Pentagon, Arlington, VA
Joined September 2016
Transforming and securing the @DeptofWar digital ecosystem is an active, ongoing mission that requires continuous innovation. Today, @DoWCIODavies officially opened nominations for the 26th Annual CIO Awards to spotlight those who drive cybersecurity and empower our warfighters with data supremacy and decision dominance on the battlefields of today and tomorrow. Leaders are encouraged to nominate champion performers by October 30, 2026, 12:00 pm EST. Nominate here: dowcio.war.gov/About/Awards/ Read more at: dowcio.war.gov/In-the-News/A…
2
7
20
1,703
@DoW_CIO retweeted
🚨 Organizations should immediately patch critical PHP vulnerabilities CVE-2026-109618 and CVE-2026-109619. These vulnerabilities enable unauthenticated #RCE and affect PHP installations serving web requests. Learn more: 🔗 go.dhs.gov/5Hi
47
634
51
1,899
165,010
@DoW_CIO retweeted
We recommend Cisco users disable the Smart Install (SMI) auto-loading feature on all NSS and DIB network devices to mitigate exploitation by remote attackers. Have you taken this action? Read more: media.defense.gov/2019/Jul/1… #CybersecurityAwarenessMonth
36
719
81
2,781
149,803
@DoW_CIO retweeted
Effective Immediately, all organizations using PHP for their systems are advised to be prepared for an update addressing two critical vulnerabilities. PHP is widely used for web applications. These vulnerabilities often provide a direct path to the server's file system or database. If an immediate update is not feasible, it is recommend that organizations take the system offline until it can be fully mitigated. NSA will follow up shortly with more specific guidance.
1,181
9,901
2,568
65,039
10,680,512
If you’re a Defense Industrial Base partner looking for practical, no cost or low-cost cybersecurity resources, you don’t have to look far. In our latest Brilliant at the Basics Cybersecurity Awareness Month reel @DeptofWar CISO Aaron Bishop shares how our IT and OT Top 10 lists can help your organization strengthen resilience, manage cyber risk, and protect critical systems. Watch the reel and explore the whole collection. dowcio.war.gov/BrilliantBasi…
1
11
26
720
The portal for the 26th Annual CIO Awards closes October 30, 2026, at 12:00 PM EST. Across @DeptofWar teams are hardening networks, pushing mission software to the edge, and out-innovating adversaries in real time. Component Commands, Services, Departments and Agencies, and inter-governmental defense partners – don’t miss this chance to ensure your highest-performing cyber and IT personnel receive the recognition they earned. Details and submission portal: dowcio.war.gov/About-DoW-CIO…
4
12
629
Be Secure. Cybersecurity does not stop at the screen. Physical security helps protect personnel, facilities, our technology ecosystem, and data from actions that can create serious risk. A misplaced badge, unlocked workstation, unattended device, or unsecured document can create an opening for unauthorized access. You should always secure devices, badges, and sensitive materials before stepping away from your workstation or leaving a facility. Do not prop doors open or allow others to follow you into controlled spaces without using their own authorized credential. Whether you are a warfighter, member of the @DeptofWar workforce, or Defense Industrial Base, strong physical security is a key part of being Brilliant at the Basics.
11
25
738
DoW CIO commends the collaborative effort of @NSACyber, @NIST, and @CISAgov in delivering practical guidance for managing the risks associated with super intelligence control incidents. We are in an unprecedented period of technological advancement, and these practices offer a strong opportunity to strengthen resilience, improve incident readiness, and better protect the systems that support national security. We encourage all network defenders and those safeguarding National Security Systems across the @DeptofWar and Defense Industrial Base to read the report. media.defense.gov/2026/Oct/1… xitter.cf/NSACyber/status/211251…
NSA joined @NIST and @CISACyber in releasing guidelines for managing SI control incidents. Organizations utilizing SI are encouraged to adopt these practices. Read the joint report: media.defense.gov/2026/Oct/1…
2
15
1
36
1,547
A flat network is a vulnerable network. Logically separating business IT networks from critical operational technology (OT) systems helps limit lateral movement and contain a potential intrusion before it disrupts core operations. Eligible small DIB businesses can also explore @NSACyber's Continuous Autonomous Penetration Testing (CAPT), an AI-powered capability that enables internal-network penetration testing at no cost and without prior expertise. NSA’s CAPT is designed to help eligible small businesses assess internal networks and validate remediation. Learn more at nsa.gov/About/Cybersecurity-…
1
9
31
1,006
This week’s @DeptofWar Brilliant at the Basics Cybersecurity Awareness Month campaign theme is Be Secure. In our latest reel, Deputy CIO for Operations Christine Condon shares a simple, yet important tip regarding government-furnished equipment. Watch the whole reel to learn more.
6
1
15
989
Don't fall for Harry The Hamster's tricks. Social engineering is one of the most effective tools used by our adversaries. AI has increased the sophistication of the attacks and the data available to the attackers. Every member of the @DeptofWar team must be constantly vigilant to counter these tactics. Indicators of a social engineering attempt include: •Unsolicited requests for personal or financial information. •A sense of urgency or pressure to act quickly. •Suspicious email addresses or unusual grammar. •Promises that seem too good to be true. Verify before you trust to be Brilliant at the Basics!
5
19
854
Congratulations to Farah Pathan, the DoW CIO’s program analysis and IT asset management lead, on receiving the Leading for IMPACT Women in Leadership Award! The award recognizes women whose leadership, mentorship, and mission focus make a meaningful difference across the federal community. Farah’s recognition reflects the expertise and commitment she brings to the @DeptofWar CIO team every day. We’re proud to have her on our team.
3
5
13
769
Insider threats are among our most complex and hard to recognize risks because they are deliberately designed to avoid detection. During Cybersecurity Awareness Month, and every month, all @DeptofWar personnel and industry partners must be vigilant every day. Spotting the subtle indicators of recruitment or network exploitation protects our Information and Operational Technology. Know the signs: changes in behavior, unexplained affluence, accessing information not needed for their job, and more. If you See Something, Say Something. Be Brilliant at the Basics!
12
1
35
1,051
Today, Honorable Kirsten Davies also welcomes Mr. Kenneth Nienhuser to his new role as the Deputy Chief of Staff. He assumes this position after serving as the lead for the office’s industry outreach, coordinating executive-level engagement processes, strategic communications, and decision-support materials. A Marine Corps veteran, Mr. Nienhuser brings a wealth of experience supporting senior @DeptofWar leaders to the position.
1
5
18
995
Today, I am signing The Vice President’s Pledge to Protect Americans from Fraud to reaffirm a shared commitment to protect Americans from fraud. Cyber fraud threatens individuals, families, and organizations alike. The @DeptofWar OCIO remains focused on strengthening cybersecurity to protect the ecosystem that powers our warfighters. During Cybersecurity Awareness Month, the @DoW_CIO’s Brilliant at the Basics campaign reinforces practical habits that can reduce fraud risk—from protecting credentials and verifying requests to recognizing suspicious messages. I encourage everyone to stay vigilant and apply these simple safeguards to help protect personal information, the Department, and the mission.
1
2
1
7
525
Today, Honorable Kirsten Davies welcomed Mr. Jon Steinbach as Strategic Technical Advisor. Mr. Steinbach brings more than three decades of experience developing creative solutions for complex problems at the strategic, operational, and tactical level across the public and private sectors. His background includes a variety of positions with the CIA, U.S. Special Operations Command and U.S. Marine Corps. His experience at the intersection of national security, cybersecurity, technical innovation, and business growth will help inform the @DeptofWar CIO’s efforts to deliver secure, resilient technology capabilities in support of the warfighter. dowcio.war.gov/In-the-News/A…
2
4
22
1,019
Comprehensive asset awareness and management is foundational to dismantling cyber threats and protecting the @DeptofWar mission. Our #2 Best Practice emphasizes that a complete, rigorous, “as-operated” inventory of all assets is a foundational requirement for robust IT and OT cybersecurity. You cannot defend what you cannot see. We encourage our industry partners to leverage available resources to strengthen their security posture. Valuable tools include: - @NSAGov's Attack Surface Management (ASM) for Cleared Defense Contractors): nsa.gov/Portals/75/documents… - @CISAgov's Cyber Hygiene Services, available at: cisa.gov/cyber-hygiene-servi… - CISA's Cybersecurity Evaluation Tool (CSET®), available at: cisa.gov/resources-tools/ser… Partner with us to build a more secure industrial base. Be Brilliant at the Basics!
2
8
1
17
861
Cyber-attacks frequently target weak authentication mechanisms. To counter this threat, the @DeptofWar CIO highlights Phishing-Resistant Multi-Factor Authentication (MFA) as the #1 recommended best practice on our Brilliant at the Basics IT Top-10 Best Practices list. Protect your sensitive corporate assets and DoW information. The resources below can help you implement phishing resistant MFA across your networks. Learn more at: fidoalliance.org/specificati… fidoalliance.org/passkeys/ cisa.gov/resources-tools/ser…
3
7
12
468
As DoW CIO Hon. Davies stressed, using strong, unique passwords remains as one of the simplest, yet most effective frontline practices that help protect your accounts and the @DeptofWar. Reusing passwords opens a security risk that can put all of your accounts at risk, and malicious actors know this. Stay alert for unexpected password-reset messages, account alerts, or login prompts. These messages may be attempts to get you to share credentials or click a malicious link. Adopting just a few of these habits can make you Brilliant at the Basics.
3
18
845
Be Vigilant. In today’s Brilliant at the Basics reel @DeptofWar Chief Information Officer Hon. @DoWCIODavies shares how protecting PINs, using strong passwords, enabling multifactor authentication, and safeguarding your Common Access Card is fundamental in securing your personal information and the DoW.
1
7
19
944