Interesting document; summarizes several issues, but like all strategies does not provide a depth of detail. For example, does the fact that breaches in the Federal government have decreased since 2010 mean (1) the government is doing a much better job at stopping attacks, or (2) the government has failed to detect more advanced attacks? And is the decrease in the number of attacks sufficient - after all when speaking of government data, what is the "acceptable level" for successful attacks. The direction is now in place; let's see how the tactical approach to addressing issues progresses.