The public record does not show that U.S. cyber strategy ignores the civilian ports, rail lines, fuel systems, power grids and logistics networks that move military forces. It also does not show how fully those dependencies are covered. What the Department of Defense (DoD) has published establishes a narrower point: it treats cyber resilience of U.S. critical infrastructure as linked to military readiness, and it commits to working with interagency partners on that resilience. Whether that commitment reaches the specific assets a deployment depends on is a question the unclassified material cannot settle. So the honest form of the claim is a question about coverage, not a finding of omission.
What the public strategy document says
DoD describes the 2023 DOD Cyber Strategy as the baseline for putting three higher-level documents into practice: the 2022 National Security Strategy, the 2022 National Defense Strategy and the 2023 National Cybersecurity Strategy. Its September 2023 release, “DOD Releases 2023 Cyber Strategy Summary,” states that the strategy, transmitted to Congress in May 2023, “is the baseline document for how the Department is operationalizing the priorities” of those three documents.
As an Amazon Associate I earn from qualifying purchases.
The unclassified summary names three areas of focus: DoD’s own networks and infrastructure, support to non-DoD agencies in related roles, and the defense industrial base. The defense industrial base is the closest the public summary comes to private-sector supply chains, but it refers to the companies that build and sustain military equipment. It does not name the carriers, port operators, pipeline companies or utilities that physically move forces and fuel them.
Why the classified strategy limits what can be said
The full 2023 strategy is classified. The public version is a summary, so any judgment about its complete contents is provisional. A missing mention in the summary is evidence about the summary, not proof that a dependency is absent from the classified plan. Readers should weigh the claim accordingly: the public record can show what DoD chose to say publicly, but it cannot show what the department planned internally.
#1 Best Overall
What DoD says about infrastructure and readiness
The most direct public link appears in DoD’s 2023 Cyber Strategy Fact Sheet. It says the department “will work with our interagency partners to leverage all available authorities to enable the cyber resilience of U.S. critical infrastructure and to counter threats to military readiness.”
That sentence establishes the connection between civilian infrastructure and readiness as a stated premise. It does not name transport, energy or logistics systems, identify which agency leads for each sector, specify which authorities are being used, or describe any resilience standard. The commitment is real; its mechanics are not visible in the public material.
What the GAO evidence shows about implementation
The U.S. Government Accountability Office (GAO) provides the most concrete public evidence on how these commitments are carried out, although it is older than the strategy itself. Its January 2023 review examined 14 federal agencies. Those agencies relied on 11 methods to share cyber threat information with critical-infrastructure owners and operators. Four agencies used more than half of the methods, and ten used fewer than half.
Do these 3 things before closing this tab:
1Scan for outdated or missing drivers - takes under a minute2Clear out junk files and repair common Windows errors3Fix the driver behind crashes, sound loss and screen glitchesThat finding describes uneven use of information-sharing channels in 2023. It does not measure how secure infrastructure is or how ready logistics networks would be in a crisis. Information sharing is an input to resilience, not evidence of it.
GAO also examined DoD’s management of information and communications technology (ICT) supply-chain risk. It concluded that DoD needed to fully implement foundational ICT supply-chain risk-management practices, and it recommended a timeframe for a department-wide strategy covering assessment, response and monitoring through product and service life cycles. DoD’s planned implementation date was March 2025. The status of that recommendation after that date could not be confirmed for this article, so readers should check GAO’s current reporting before treating it as either open or closed. This recommendation concerns digital product supply chains, not ports, rail or fuel.
Which infrastructure is in question
The claim that the strategy overlooks military-movement infrastructure depends on which systems are meant. Four categories matter, and the public record addresses each one differently.
Rank #3
Transport nodes and networks
Ports, rail corridors, roads, airfields and commercial shipping and air services carry much of the movement of forces. The public DoD summary does not name these assets. Whether they fall under the strategy’s “support to non-DoD agencies” or under sector-level resilience work cannot be determined from the unclassified text.
Quick wins for a faster PC:
Clear out junk files and repair common Windows errorsFree Scan →Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →Repair Windows errors before they cause bigger problemsFix Now →Fuel and power systems
Bases, ports and deployment hubs draw on commercial fuel pipelines, terminals and the electric grid. The public material does not identify any of these as dependencies of military movement. Their protection would depend on the energy sector’s own regulators and operators, which is where the coordination question becomes hardest to verify from outside government.
Communications and logistics systems
Commercial telecommunications, shipping-tracking software and logistics scheduling systems are plausible points of failure for moving forces. The GAO evidence on ICT supply chains is the nearest public material, but it addresses DoD’s own supply chains rather than the commercial systems that move cargo.
Privately operated infrastructure
Most of the assets above are owned and run by private companies or by state and local governments. That means the accountability chain between DoD and the operator is central. The public summary does not describe how DoD would reach those operators, share threat information with them, or require resilience measures from them.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.What adequate coverage would look like
Coverage of these dependencies would be shown by specific, checkable features, not by general statements of intent. The table below sets out the features to look for and what the public record reviewed here shows for each.
| Evidence of coverage | What the public record reviewed shows |
|---|---|
| Named accountable agencies and operators for transport, fuel and power dependencies | Not stated in the September 2023 public summary |
| Information-sharing arrangements with infrastructure owners and operators | Partly documented: GAO’s January 2023 review found 14 agencies using 11 methods, with uneven use |
| Resilience standards or plans covering transport, energy and logistics assets | Not stated in the public material reviewed |
| Exercises that test cross-sector dependencies for moving forces | Not stated in the public material reviewed |
| Public reporting on remediation of identified dependencies | Not stated in the public material reviewed |
The absence of these items from the public material does not prove they do not exist. It means a reader cannot verify them from the unclassified record.
Best Value
How to weigh the claim
The claim becomes clearer when three distinctions are kept apart. First, a strategic commitment is not the same as implementation evidence. DoD’s statement that it will work to enable infrastructure resilience is a commitment; the GAO findings are the only public implementation evidence reviewed, and they are from 2023. Second, DoD-owned networks are not the same as privately operated infrastructure. The strategy’s public focus leans toward the first. Third, information-sharing activity is not the same as measured resilience. A count of methods used does not show whether a port or grid would keep working under attack.
What would change the answer
- A public release of the strategy’s unclassified text or a later unclassified implementation plan that names transport, fuel, power or logistics dependencies.
- GAO or DoD inspector general reports on cross-sector dependencies for military movement.
- Public reporting on exercises that include commercial transport, energy or logistics operators.
- An updated status on the ICT supply-chain recommendation after its March 2025 target date.
The sources reviewed here are from 2023, and this article does not assess any later strategy, plan or report. Within that scope, the public record supports a question about how far the stated commitment extends, and it does not support a finding that the strategy overlooks military-movement infrastructure.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
