The Human and Institutional Barrier in the New Race for Security
Governments increasingly understand the security environment. They recognize the return of strategic competition; the vulnerability of supply chains and critical infrastructure; the importance of industrial capacity and the growing role of AI, autonomy, cyber, space, and information operations. Yet identifying the problem is not the same as changing the state’s ability to respond. As history shows us, strategies can be rewritten in months; institutions, incentives, authorities, and organizational cultures take much longer to change. The greatest obstacle toward strategic implementation is therefore often not a lack of policy, technology, or funding. It is the persistence of an operating culture built for a separate era.
Governments are not short of security strategies.
Across Europe, North America, the Indo-Pacific, and the Middle East, recent national-security documents reach broadly similar conclusions. Nations need stronger defense industries, more resilient supply chains, faster procurement, protected infrastructure, improved national readiness, deeper partnerships, and better use of emerging technology.
Investment is also increasing. The European Union’s defense spending reached €343 billion in 2024 and was projected to rise further in 2025 and 2026. Australia’s 2026 Integrated Investment Program allocates approximately AUD 425 billion over the coming decade to build an integrated, focused force. NATO has expanded its efforts to aggregate demand, increase production, improve standardization, and accelerate capability adoption.
The strategic diagnosis is becoming clearer, and the resources are beginning to follow. Nevertheless, implementation remains uneven.
The reason is uncomfortable but increasingly difficult to ignore: strategy is moving faster than the country responsible for carrying it out.
Old Institutions in a New Security Environment
Most defense and national-security institutions were designed for a more predictable operating environment. Responsibilities were divided into defined organizations, decisions moved through the hierarchical approval processes, procurement followed long planning cycles, and governments could reasonably assume that major strategic alterations would develop over years.
That model is increasingly disconnected from the current reality.
Today, a maritime incident can become an economic crisis, an influence campaign, a cyber event, and a military confrontation at the same time. A commercial technology can acquire operational relevance before a formal requirement has been written. A supply-chain disruption thousands of miles away can affect national readiness at home. Civilian telecommunications, energy networks, ports, satellite services, data centers, and transportation systems have become components of national defense.
The threat is integrated, but the institutional response remains divided.
Defense ministries manage military capabilities. Interior ministries address domestic preparedness. Intelligence organizations hold different parts of the threat picture. Finance ministries control long-term resources. Economic ministries oversee industry. Transportation, energy, communications, and health authorities manage critical systems. Procurement agencies control acquisition, while operational organizations define requirements.
Every organization may be performing its assigned role, yet the state as a whole can still fail to produce the required outcome.
Fragmentation Without Ownership
Coordination structures are often created to overcome fragmentation. Governments establish interagency committees, task forces, working groups, steering boards, and joint strategies. These mechanisms are necessary, but they do not automatically produce implementation.
The problem begins when participation is mistaken for ownership.
A committee can compare positions, exchange information, and propose a common policy. It cannot substitute for an accountable leader who has the authority, resources, and institutional standing to make decisions across organizational boundaries.
When responsibility is distributed too widely, each participant retains the ability to delay action, but no participant is fully responsible for delivering the result. Problems move between organizations. Decisions are elevated. Meetings multiply. The appearance of activity can conceal the absence of progress.
Authority can be delegated, but responsibility cannot.
Every major strategic objective therefore requires a clearly identified owner. That owner must have authority over the implementation plan, access to senior leadership, visibility into the relevant budgets, and the ability to resolve conflicts among participating institutions.
Otherwise, “whole-of-government” risks becoming a description of who attends the meeting rather than how the government acts.
Culture Is More Powerful Than Structure
Governments frequently respond to implementation failures by changing organizational charts. They establish a new directorate, combine two offices, appoint a coordinator, or create a delivery agency.
Structural reform may be necessary, but a new box on an organizational chart does not automatically change how people behave.
Organizational culture is expressed through the decisions that institutions reward and punish. It determines whether officials are motivated to act with incomplete information or expected to eliminate uncertainty before moving. It determines whether reporting a problem is viewed as responsible leadership or institutional disloyalty. It shapes whether organizations share data, protect their authorities, accept external expertise, and learn from unsuccessful programs.
In many bureaucracies, delay is safer than decision.
An official who approves an unconventional solution may be held personally responsible if it fails. An official who requests another study, adds requirements, or refers the decision to another committee rarely faces the same scrutiny. The predictable response is another assessment, a longer evaluation, and one more approval.
This behavior is rational within the existing incentive system. It is also strategically dangerous.
Reform must therefore change the balance between the risk of acting and the risk of waiting. Leaders should ask not only what could go wrong if a decision is made, but what capability, readiness, or strategic opportunity will be lost if it is delayed.
Leadership Shifts Reset Implementation
Strategic transformation usually takes longer than the tenure of the leaders responsible for beginning it.
Ministers change. Military officers rotate. Senior civil servants move to new positions. Political priorities shift. Incoming leaders often review existing programs before taking ownership of them. Even when the strategy remains formally unchanged, its implementation can lose momentum.
This creates an institutional tendency to favor initiatives capable of producing visible results during a leader’s tenure. More difficult reforms like data architecture, industrial capacity, workforce development, acquisition modernization, and cross-government integration may be acknowledged as important but repeatedly postponed.
Successful implementation needs continuity beyond past individual leaders.
Major reforms need durable governance, protected funding, measurable milestones, and a professional implementation team capable of maintaining direction through political and organizational transitions. New leaders must retain the ability to make changes, but they should not have to reconstruct the purpose, evidence, and history of every strategic decision.
Institutional memory is not an administrative convenience. It is part of national capability.
Shifting Resources Means Shifting Power
Every serious strategy creates winners and losers.
Prioritizing long-range deterrence may reduce funding for legacy platforms. Building a national data infrastructure may move authority away from individual organizations. Joint procurement may limit national or service-specific preferences. Strengthening civilian resilience may transfer resources beyond traditional defense institutions. Expanding the role of technology companies can threaten established relationships with prime contractors.
Resistance should therefore be expected.
It may appear as a technical objection, a request for further analysis, an additional security concern, or an argument that the organization is not yet ready. Some objections will be valid. Others will reflect an understandable effort to preserve budget, authority, workforce, or institutional identity.
Leadership must distinguish between real operational risk and organizational resistance presented in operational language.
This requires clarity about trade-offs. Governments should explain what will receive priority, what will no longer receive the same support, and how the new allocation of authority and resources connects to the strategy. Attempting to protect every legacy interest usually produces a strategy layered on top of the old system rather than a transformation of it.
Industry Must Be Treated as Part of Execution
Modern strategies depend heavily on capabilities developed and maintained outside government.
Cloud services, artificial intelligence, commercial satellite imagery, communications, data infrastructure, cyber tools, autonomous systems, advanced manufacturing, and much of the innovation ecosystem reside in the private sector.
Yet relations between government and industry are still frequently transactional. Governments ask industry to invest in production capacity without providing dependable demand. Companies are expected to retain specialized workforces while receiving short contracts and uncertain procurement timelines. New suppliers are encouraged to demonstrate technology but may find no funded path from demonstration to sustained deployment.
NATO’s updated Defense Production Action Plan recognizes the need to aggregate demand and provide greater predictability to industry. Its 2026 strategy for industry cooperation similarly points out the sustained effort required to expand production and deliver capabilities on time.
The cultural change is to stop treating industry engagement as something that begins after the government has completed its planning. Industrial capacity, technology availability, supply-chain exposure, exportability, workforce, and supply-chain timelines must shape strategy from the beginning.
Industry cannot deliver capacity on demand if government communicates demand only after the crisis has started.
Measuring Decisions, Not Activity
Implementation is regularly measured through activity: meetings held, strategies published, agreements signed, funds announced, exercises conducted, and pilot projects launched.
These indicators are easy to report but do not necessarily show that national capability has improved.
Governments need measures tied to operational outcomes:
- How long does it take to move an identified requirement into a funded program?
- How quickly can a new capability reach operational users?
- Has production capacity increased?
- Are allied systems becoming more interoperable?
- Can relevant organizations access and use the same data?
- Are critical supply chains more resilient?
- Can the state make and execute decisions faster during a crisis?
- Which legacy activities were stopped to free resources for new priorities?
The objective is not to eliminate process. It is to make process serve outcomes.
The Real Test of Strategy
The next phase of the global security competition will not be decided by which government publishes the most ambitious strategy. Many states already understand the threats they face and the capabilities they need.
The advantage will belong to governments capable of changing how their institutions behave.
That means assigning ownership, protecting continuity, accepting calculated risk, confronting institutional interests, integrating industry earlier, and measuring real capability instead of administrative activity. It also requires leaders who understand that transformation produces uncertainty and institutional discomfort.
Execution is not the administrative stage that follows strategy. Execution is part of strategy.
In the new race for security, understanding the problem is only the beginning. Strategic advantage will belong to those who can act on what they already know.
Omer Haim is a Distinguished Fellow at the Gold Institute for International Strategy, a Washington D.C. based foreign policy and defense think tank.
