The unclassified networks of defense industrial base firms have become an attractive entrance for adversaries seeking access to cutting-edge technologies and research and development efforts. This report describes a way for the U.S. Department of Defense to better secure such networks through the establishment of a cybersecurity program designed to strengthen their protections.