Commercial Practices Might Aid USAF

The preceding chapters described commercial practices found in companies that we selected for study based on their similarity to USAF; these practices were further supported by the literature. Several USAF practices are already similar to commercial practice—namely, standardization of IT processes; a large in-house IT workforce performing a critical core function; consolidated management of InfoSec; small, empowered InfoSec teams; and a move toward preferring officers with STEM degrees. We will not further belabor those topics. Instead, we consider whether the remaining commercial practices are applicable to USAF. When assessing which commercial practices are likely to be applicable to USAF,