The Senate Armed Services Committee has approved a provision in its fiscal year 2027 National Defense Authorization Act that would create a new Undersecretary of Defense for Cyber, Information, and Networks — a sweeping reorganization that would pull three of the Pentagon's most influential technology leadership roles under a single authority. DefenseScoop first reported the provision on June 12, 2026, one day after the committee passed its version of the NDAA by an 18-9 bipartisan vote.
Three Offices, One New Leader
Under the SASC proposal, the new undersecretary position would consolidate the DoD Chief Information Officer, the Principal Cyber Advisor, and oversight of the Chief Digital and AI Office — commonly known as the CDAO — into a unified leadership structure. The consolidation would effectively dissolve the separate reporting lines that have long defined how the Pentagon manages its IT infrastructure, cybersecurity posture, and digital transformation agenda.
A SASC staffer explained the rationale directly: "As the evolution of cyber started to mature, we realized that there were some frictions and gaps between protect-and-defend activities of the CIO and the principal cyber advisor." That friction, according to the committee, has created accountability blind spots and slowed decision-making at a moment when adversaries are actively exploiting seams in the department's digital defenses.
The CDAO, stood up in 2022 to accelerate AI and data adoption across the services, has operated with a mandate that increasingly overlapped with both the CIO's network and systems responsibilities and the Principal Cyber Advisor's cross-department security coordination role. By bringing all three under one undersecretary, the committee's intent is to close those overlaps administratively rather than rely on memoranda of understanding and inter-office working groups that critics say have fallen short.
The full SASC NDAA authorizes $1.14 trillion in national security spending — $1 trillion for the Department of Defense and $41 billion for Energy Department defense activities. That scale of investment makes the governance question not merely bureaucratic: how the Pentagon organizes its cyber and digital leadership directly affects how tens of billions of dollars in technology contracts are awarded, overseen, and executed.
House Version Tracks the Same Concerns
The SASC provision does not exist in a vacuum. The House of Representatives approved its own FY2027 NDAA on June 5, 2026 — six days before the Senate committee vote — and while the House bill does not go as far as creating a new undersecretary, it separately directed the Department of Defense to conduct a comprehensive review of its cybersecurity and IT operations in order to "establish clear accountability, reduce duplication and fragmentation" across Pentagon organizations.
The parallel language in both chambers reflects a bipartisan consensus that fragmented IT and cyber leadership at the Pentagon has become a strategic liability. Lawmakers on both sides of the aisle have grown increasingly impatient with a command-and-control structure that assigns network defense, cyber operations, and data modernization to offices that, in practice, compete for budget and influence rather than coordinate seamlessly.
The two versions will need to be reconciled in conference before a final NDAA reaches the president's desk. Whether the Senate's more aggressive structural solution or the House's review-first approach ultimately prevails will depend heavily on negotiations expected to intensify through the summer and fall.
What It Means for Contractors
Defense contractors with active or pending work in cybersecurity, IT modernization, and AI programs should treat this reorganization as a material risk factor — regardless of which chamber's approach survives conference.
If the new undersecretary position is enacted as written in the SASC bill, the organizational churn that accompanies any major leadership realignment will ripple through acquisition pipelines. Programs currently owned by the CIO's office, the Principal Cyber Advisor's staff, or the CDAO could see contracting officers rotate, program managers reassigned, and requirements documents reopened as the new office establishes its priorities. Vendors with relationships concentrated in any one of the three merging offices should begin mapping their portfolios against the full set of programs across all three to identify where continuity risk is highest.
For companies competing on new awards in the zero-trust architecture, cloud migration, AI enablement, and defensive cyber markets, the consolidation could ultimately be a positive development. A single undersecretary with authority over all three domains would be positioned to issue unified acquisition strategies and reduce the fragmented contract vehicles that currently force contractors to navigate overlapping and sometimes contradictory program offices to win work in adjacent technology areas.
The Aerospace Industries Association has already signaled concern about the SASC bill's broader industrial implications. In a statement responding to the committee's markup, the AIA warned that industrial-base provisions in the legislation could "put at risk" the growth of the industrial base. While that warning was not directed specifically at the cyber reorganization, it underscores the degree to which the overall bill creates a complex and sometimes contradictory mix of signals for the defense industry — even as it sets the stage for significant structural change at the top of Pentagon technology leadership.
Contractors should also watch the House-Senate conference process carefully. The House's direction to DoD to review IT and cyber operations for accountability and duplication could, if it survives, generate a formal study that influences how follow-on contracts are structured even before a new undersecretary is confirmed. Either outcome will likely accelerate consolidation of contract vehicles in the cyber and IT modernization space — a trend that favors large integrators with broad cleared workforces and established past performance across multiple domains.
The bottom line for industry: the structural debate in Congress over Pentagon cyber and IT leadership is no longer a background policy conversation. With both chambers moving provisions in the same direction on a bipartisan basis, the question for contractors is not whether a reorganization is coming, but how much disruption the eventual model will introduce — and whether their pipeline, their relationships, and their past performance are positioned to survive the transition.
