The Pentagon is standing up a new command structure designed to defend the nation's most critical systems, power grids, water treatment, transportation networks, from cyberattacks, with China squarely in the crosshairs. The reorganization centers on the Defense Cyber Defense Command, one of the newest agencies in the Department of War, which was elevated to a sub-unified command under U.S. Cyber Command just over a year ago.

Col. Adolph Rodriguez, director of Defense Critical Infrastructure at the DCDC, laid out the stakes during the TechNet Cyber conference last week. His task, as he described it to Breaking Defense, is nothing less than building the organizational spine for America's digital defense from the ground up.

The effort comes against a backdrop of well-documented Chinese intrusions into U.S. infrastructure, intrusions that federal agencies warned about more than two years ago and that, by the government's own admission, remain embedded in American systems today. The question Rodriguez posed is the one that should keep every taxpayer awake: "How do we continue to operate before, during, and after the attack?"

A command built for a threat that already arrived

The DCDC is not a brand-new invention. It was formerly known as the Joint Force Headquarters, Department of Defense Information Network. But in May 2025, it was elevated to a new sub-unified structure under U.S. Cyber Command, a move initially authorized by the 2025 National Defense Authorization Act. The reorganization gave the command a sharper mission: to protect America from all digital threats that could undermine national security, the Daily Caller reported.

Rodriguez told Breaking Defense he is currently assigned to build out a framework and command-and-control footprint across agencies. The challenge is jurisdictional as much as technical.

"I'm currently assigned there to build out a... framework and command and control footprint, because the most important thing, besides understanding the technology, the people, the processes, is who's in control, who's executing, what's the common rail amongst all the authorizations that we have between CISA (Cybersecurity and Infrastructure Security Agency), FBI, Coast Guard, Department of War writ large."

That list of agencies, CISA, FBI, Coast Guard, the Department of War, hints at the sprawl of the problem. Cyber defense in the United States has long been fractured across civilian and military agencies with overlapping mandates and competing authorities. Rodriguez's proposed solution borrows from an unlikely model: FEMA.

He suggested building an enduring cyber campaign plan that combines NORTHCOM authorities with Cyber Command's authorities, organized into sectors "very similar to FEMA," so existing infrastructure does not need to change. The goal is to create "muscle memory of training, assessments, and then identify where the key infrastructure is."

China is already inside the walls

The urgency behind this restructuring is not theoretical. On Feb. 7, 2024, both CISA and the National Security Agency issued reports identifying a Chinese state-sponsored hacker group known as Volt Typhoon that had been targeting U.S. power, water, and transportation systems.

CISA's advisory was blunt: "People's Republic of China (PRC) state-sponsored cyber actors are seeking to pre-position themselves on IT networks for disruptive or destructive cyberattacks against U.S. critical infrastructure in the event of a major crisis or conflict with the United States."

The NSA went further, stating flatly: "The PRC has already compromised these systems." Some of these cyber actors, the NSA reported, had been living inside American networks for years, waiting for the right moment to strike.

That is not a warning about a future possibility. It is a description of a present condition. And it raises an uncomfortable question about why the federal government took until May 2025 to elevate the command responsible for defending against it.

Secretary of War Pete Hegseth has overseen a period of significant leadership changes at the Pentagon, and the DCDC reorganization fits within a broader effort to restructure how the department operates. Whether the cyber command buildout receives the sustained attention it requires amid those personnel shifts remains an open question.

Experts say preparation must be constant

Steven Bucci, a Heritage Foundation visiting fellow and former Pentagon official, told the Daily Caller News Foundation that the effort is welcome but warned against complacency. He framed the challenge as perpetual rather than solvable.

"If we get to the point that we think we have 'solved' this challenge, we will be [in] grave danger. So, are we prepared? Yes. Do we need to be constantly endeavoring to become more prepared? Absolutely."

Bucci also noted the economic dimension. A major Chinese cyberattack on American infrastructure would not occur in a vacuum. "Such an attack could also trigger disruptions of the wider global economy that would ultimately do irreparable damage to China given our [economic] interconnectivity," he said.

That mutual vulnerability is real, but it has not stopped Beijing from building the capability. Bucci acknowledged as much: "Our adversaries (China clearly prominent among them) are constantly working to overcome our defenses, so we need to work to stay ahead. Most of the time we are, occasionally an adversary will get a step on us, and we must work to regain the lead."

The Pentagon has also faced scrutiny over how it handles internal institutional matters. Recent decisions, including the removal of the Army's top general, have drawn attention. But the cyber threat is one area where even critics of Pentagon leadership changes should want the department to move faster, not slower.

The real fight over who leads

Piero Tozzi, senior director of China policy at the America First Policy Institute, offered a sharper critique of the current bureaucratic arrangement. He told the DCNF that the People's Liberation Army treats civilian infrastructure as a battlespace, and that the U.S. response should reflect that reality.

"Infrastructure, cyberspace, and civilian systems are treated by the PLA as an asymmetric battlespace that can escalate up to and including kinetic warfare. As these are war plans, NorthCom and Cybercommand should be the lead, not CISA."

That is a pointed argument. CISA, a civilian agency under the Department of Homeland Security, has been the public face of critical-infrastructure cybersecurity for years. But if China's military views American power grids and water systems as legitimate targets in a potential conflict, the argument for military-led defense carries real weight.

Tozzi also pointed to a deeper structural problem, one that predates the current administration by decades. "Our preparation has been hampered by limited threat perception and reliance on integrated Chinese-origin technology and components, including cellular modules and the Internet of Things, creating structural vulnerabilities dating back to the 1990s that are only now being fully recognized and belatedly addressed," he said.

That admission, vulnerabilities dating to the 1990s, "only now being fully recognized", is a damning indictment of three decades of bipartisan negligence. Administrations of both parties welcomed Chinese technology into American systems without adequate safeguards, and the bill is now coming due.

The broader question of institutional focus at the Pentagon is not limited to cyber. Decisions like the retirement of Army Chief of Staff Gen. Randy George have generated debate about whether personnel changes strengthen or distract from operational readiness. The cyber domain, where the threat is constant and the adversary is already embedded, is where that debate matters most.

The Pentagon's silence

Neither the Pentagon nor U.S. Cyber Command responded to the Daily Caller News Foundation's request for comment. The White House referred the inquiry to the Pentagon.

That silence is not unusual for military matters, but it leaves significant questions unanswered. What is the full implementation timeline for the new command structure? What specific authorities are being consolidated? What systems has China already compromised, and what has been done to remediate them?

Rodriguez's remarks at TechNet Cyber offered a window into the thinking, but the public still lacks a clear picture of how far along the buildout actually is. The DCDC's own history page confirms the organizational elevation, but the operational details remain sparse.

Meanwhile, internal debates over Pentagon leadership continue to generate headlines. The removal of the Stars and Stripes ombudsman and other personnel decisions have consumed attention that might otherwise be directed at the cyber threat. None of that changes the fact that Chinese hackers are inside American infrastructure right now, and the command responsible for stopping them is still being built.

A race against an embedded adversary

The DCDC reorganization is the right structural move. Consolidating cyber defense under a military command with clear authority, rather than leaving it scattered across civilian agencies, reflects the reality that China treats American infrastructure as a military target. Rodriguez's FEMA-style sector approach could bring the kind of organizational clarity that has been missing for years.

But structure alone does not win a cyber conflict. The NSA said in February 2024 that China had already compromised U.S. systems. That was more than two years ago. The DCDC was elevated a year later. Rodriguez is still building the framework today.

The timeline tells its own story. For decades, Washington let Chinese-origin technology burrow into the backbone of American life. Now the Pentagon is racing to build defenses around systems the adversary already occupies. That is not a comfortable position. It is the consequence of years of inattention, and the reason this command cannot afford to be one more bureaucratic reshuffling that looks good on an org chart but moves too slowly to matter.

When the enemy is already inside the wire, the time for planning meetings ended a long time ago.