Former National Security Agency Director Paul Nakasone stated that a reported comprehensive reorganization of the agency is likely necessary to address rapidly evolving cyber threats and the competitive landscape in artificial intelligence (AI). Nakasone, who led the NSA and U.S. Cyber Command from 2018 to 2024, made these remarks on Tuesday at VulnCheck's ThreatCon1 conference.
Nakasone referenced a September report that detailed the NSA's restructuring, which is said to involve the creation of five new mission organizations. These organizations will reportedly focus on AI, China, cybersecurity, combat support, and global intelligence, with each led by a newly appointed mission director. He expressed encouragement that the agency's leadership recognized the imperative for adaptation given the dramatic changes in the global environment.
However, Nakasone cautioned that the success of such a large-scale institutional change would hinge on its execution. He highlighted the inherent challenges in implementing significant shifts within a large bureaucracy with broad intelligence, cyber, and military responsibilities.
The former director's comments underscore the pressure on intelligence agencies to reorganize around emerging technologies, particularly AI. This involves balancing the need for the United States to maintain leadership in AI development while simultaneously defending against adversaries, such as China, who seek to leverage the technology for their own strategic objectives.
Nakasone specifically pointed to how AI has drastically reduced the "dwell time"—the period between an initial intrusion and an adversary's lateral movement within a system. He noted that in 2018, this dwell time was measured in hours, but by 2025, CrowdStrike data indicated it had fallen to an average of 29 minutes. He emphasized that the traditional defensive mantra of "one minute to recognize, 10 minutes to figure out, and 60 minutes to enact" is no longer sufficient.
Despite the accelerating threat landscape, Nakasone, who serves on the board of OpenAI, suggested that defenders currently possess a "defender's window" in AI. He believes adversaries have not yet fully exploited AI's capabilities against critical infrastructure and sensitive organizations, presenting a temporary advantage for defense.
The ability to adapt also depends significantly on personnel, Nakasone added, noting the competition between government agencies and private companies for technical talent. He cited statistics for the national security workforce, indicating an average age of 47, with half the workforce over 50, only 10% under 30, and 13.5% eligible for immediate retirement. He stressed the importance of valuing government service to attract and retain skilled individuals.
