For defense organizations, enterprise IT modernization is no longer solely a technical matter; it has become intrinsically linked to mission readiness. As new capabilities are layered onto already complex environments, the attack surface expands, cybersecurity teams face mounting strain, and mission success can hinge on whether users can securely access what they need without friction. The modernization challenge spans everything from cybersecurity and IT service management to application improvement and, of course, the potential of artificial intelligence (AI).
The key to success lies in integrating human-centered design, organizational change management, and user adoption planning from the start, alongside cybersecurity measures. This approach ensures smooth transitions, strong system adoption, and sustained capabilities over time.
The Digital Jungle: Growing Threats and Internal Challenges
The pace of technological change is accelerating, with innovations arriving at a faster clip. Many defense organizations are receptive to adopting cutting-edge technologies, presenting exciting opportunities for progress. However, they are already grappling with a „jungle” of existing tools—some underutilized, others redundant, and some introducing unknown security risks.
When these already complex environments attempt to inject new technology in a „bolt-on” fashion, new threat vectors are created, and existing challenges are compounded. This rapid pace of change leaves little room to adequately address security concerns, pushing cybersecurity teams to their limit as they struggle to keep up with routine vulnerabilities in an increasingly complex and dynamic landscape. Innovative methods are needed to effectively track and mitigate vulnerabilities as new technology is integrated.
Resistance to Change: A Human, Not Technical, Hurdle
From the customer experience and organizational change management perspective, one of the primary friction points is resistance to change. This resistance, particularly in the federal environment, is often attributed to fears of high costs or a potential loss of resources. To address this reluctance, clarity and expectation-setting are vital from the outset of any modernization effort.
Clarity means transparently communicating what users will gain, what they might lose, what’s in it for them, and what their new roles and responsibilities will be after modernization. Following a structured organizational change management approach reduces uncertainty and minimizes resistance, promoting a smooth transition, strong adoption, and lasting sustainment.
Beyond the Budget: Mission and Total Cost of Ownership
The mission remains paramount. Effective execution is essential to support the objectives of each agency or program, especially in the context of modernization efforts. This means that even in the face of budget cuts, agencies must find innovative ways to deliver on their mandated outcomes.
Ideally, there should be a shift towards considering the total cost of ownership rather than solely focusing on short-term budgets. Integrating transformative technologies like AI and automation might require a higher upfront investment but can significantly reduce long-term costs. A strategic, long-term vision is crucial to avoid short-term solutions that could compromise value.
Human-Centered Design: Security Through Intuition
From a security perspective, human-centered design is crucial. When systems are designed with the user’s day-to-day experience in mind, accidental vulnerabilities arising from human interactions with technology are minimized. Addressing challenges like difficult-to-memorize passwords and replacing them with solutions such as single sign-on (SSO), biometrics, or passwordless authentication not only simplifies the user experience but also reduces the likelihood of human error—a major contributor to cyber threats. Building systems with security in mind, at all times, is imperative.
As agentic AI and other emerging technologies rapidly explode, one cannot simply „pour” AI onto problems and hope it works. Maximum transparency and observability are needed to understand how AI agents are interacting, what they are doing, and to have logs ready for quick analysis and reaction.
Zero Trust: A Comprehensive Defense Philosophy
The „Zero Trust” security concept is often mistakenly reduced to a mere product purchase. In reality, Zero Trust represents a constant synchronization of people, processes, and technology—a system of checks and balances. Culturally understanding this concept and implementing human practices that support the technology is the only way to achieve truly successful and comprehensive Zero Trust implementation.
When people are not committed and do not change their behaviors to adopt the new system or process, an implementation can fail, even if a solution is effectively designed from a technical or security perspective. Ignoring the human factor can lead to costly redesigns, re-scoping, retraining, or even project abandonment.
„Delight by Design”: Transforming Government Experience
A guiding principle is „delight by design.” It is believed that government employees and constituents have a right to a successful, if not delightful, experience in achieving their desired outcomes. Intentional and disciplined design of interactions transforms customer experience from a mere differentiator into a valuable component of mission success. By intentionally shaping these interactions, confidence, loyalty, and long-term impact with government customers are inspired.
Recent administrations have issued executive orders concerning customer and user experience, and the most recent, the „America By Design” executive order, established a national design studio for every branch to take this aspect seriously. We are in a learning phase, and efforts are focused on ensuring that best practices are ingrained and executed in a similar manner across agencies. Essentially, putting people first is the foundation of significant progress in defense modernization.
