The Pentagon-commissioned study recommends boosting the federal government’s cybersecurity capabilities with private-sector professionals, under certain conditions.