Operation StormBreaker aligns with the principle of scaling value without adding complexity by emphasizing modular, platform-driven solutions over custom-built systems. By leveraging reusable components and streamlined infrastructure, StormBreaker enables faster delivery of mission capabilities while reducing operational overhead and risk.

Explore how organizations can move beyond bolt‑on security and instead embed protection, resilience, and continuous assurance directly into the development lifecycle

Federal agencies are under increasing pressure to modernize IT systems that must deliver speed, security and mission impact, and traditional acquisition and authorization models struggle to keep pace. IT officials are shifting toward outcome-driven modernization through new frameworks for technology adoption, observability and software delivery at scale.

Operation StormBreaker updated MCCS’ overall development strategies by shifting from traditional waterfall processes to more modern DevSecOps and agile methodologies. The project also introduced a software factory built in a Marine Corps-authorized AWS landing zone with a cloud-native access point. The factory is certified through the Navy’s Rapid Assess and Incorporate Software Engineering (RAISE) framework and built upon an advanced zero trust foundation.

Marine Corps’ Operation Stormbreaker is a new initiative to overhaul slow cybersecurity approval processes by using modern development practices like DevSecOps and automation to dramatically speed up “Authority to Operate” (ATO) decisions, which used to take many months. By embedding security earlier and using continuous monitoring and agile pipelines, the program aims to get cyber approvals in days or weeks instead of months, helping deliver secure software faster.

By combining a cloud-native AWS environment with the RAISE framework, StormBreaker lets teams deploy fully authorized workloads in minutes rather than months — offering a real alternative to the old, slow “authorize first, code later” mindset.

Getting an Authorization to Operate (ATO) can be a slow and expensive hurdle for developers trying to deploy software for the government. In this episode, Dave Raley, Digital Program Manager at Marine Corps Community Services (MCCS), explains how he’s revolutionizing this process with Operation StormBreaker.

The Marine Corps’ MCCS (Marine Corps Community Services) was struggling with long delays, costly bottlenecks, and rigid “waterfall” development practices in its IT operations. To overcome this, they launched Operation StormBreaker, adopting DevOps, agile methods, and automation to integrate security earlier (DevSecOps) and shrink approval cycles. The shift allowed them to get authorizations in days instead of months, eliminate millions in delay-related costs, and deliver more user-friendly, secure digital services more rapidly. The success also highlights how cultural change and cross-team trust are key when modernizing IT in bureaucratic environments.

The Pentagon is exploring ways to use AI to streamline its slow and cumbersome “Authority to Operate” (ATO) process for cybersecurity approvals. This effort, which ties into initiatives like Operation Stormbreaker, aims to cut down months-long review cycles and move toward faster, more security-focused outcomes rather than compliance checklists.

Operation StormBreaker, led by Marine Corps Community Services, is transforming DoD software delivery by cutting deployment timelines from 12–18 months to just 15 minutes. Built on a secure AWS Impact Level 4 cloud with zero-trust architecture, it offers Platform-as-a-Service to mission owners, eliminating repetitive compliance hurdles. Using sprint-based contracting, StormBreaker delivers continuous capabilities while reinvesting revenue into Marine quality-of-life programs.

Accelerating ATO Through DevSecOps and AI.

Operation StormBreaker, the only Marine Corps certified DevSecOps pipeline, has allowed MCCS to deploy software updates at the speed of mission operations, rather than months later.

A new MCCS-led program, Operation StormBreaker, is revolutionizing DoD software delivery by cutting traditional multi-year timelines to just weeks. By integrating a FedRAMP‑High AWS landing zone, RAISE‑certified DevSecOps pipelines, and continuous authorization, it now delivers mission-critical tools at the "speed of relevance"—up to 17 times faster—while enhancing cybersecurity posture .

This feature from GovCIO Media & Research highlights how the Department of Defense (DoD) is streamlining IT delivery through cross-agency collaboration and cutting-edge innovation. Leaders from entities such as the Defense Information Systems Agency (DISA) and the Air Force discussed how shared services, agile development, and zero trust security frameworks are transforming mission readiness. The article captures key insights into how the DoD is aligning technology with operational needs to improve speed, security, and scalability across the defense enterprise.

The CX Exchange 2025, hosted by Federal News Network and presented by Maximus, brought together federal and industry leaders to discuss advancements in customer experience (CX) within government services. Key topics included the integration of emerging technologies, strategies for personalized service delivery, and the cultivation of customer journeys. Notable sessions featured insights from agencies such as Customs and Border Protection, the Marine Corps Community Services, and the Department of State. All sessions are now accessible on-demand for those interested in enhancing CX in the public sector.

In this episode of the Doing Tech Better in Government podcast, David Raley, Digital Program Manager for U.S. Marine Corps Community Services (MCCS), discusses the organization's pivotal role in supporting the warfighter. The conversation delves into how MCCS provides essential services—ranging from food and retail to recreation—while leading modernization and cloud transformation initiatives. Raley shares insights into enhancing customer experience capabilities and how these efforts bolster the morale, welfare, and recreation (MWR) and Exchange services, ultimately strengthening mission readiness and quality of life for Marines.

FedScoop features a collection of articles and podcast episodes highlighting the work of Dave Raley, CX Digital Program Manager at Marine Corps Community Services (MCCS). Notably, Raley discusses the implementation of Agile Authorization to Operate (ATO) processes, which have significantly reduced the time required for security approvals in software development—from traditional cycles of 12–18 months down to under 30 days for certain components. This streamlined approach enables the U.S. Marine Corps to deploy mission-critical capabilities more swiftly and efficiently. The coverage provides valuable insights into how agile methodologies and risk management frameworks can enhance software delivery within federal agencies.

In this insightful LinkedIn article, David Raley, CX Digital Program Manager at Marine Corps Community Services (MCCS), details the transformative journey of overhauling the traditional Authorization to Operate (ATO) process within the U.S. Marine Corps. By collaborating with Raven Solutions and leveraging Amazon Web Services (AWS), MCCS established the GovCloud Enclave, enabling a secure and efficient cloud environment. This initiative significantly reduced ATO timelines from two years to as little as 30 days, resulting in over $10 million in cost savings within 18 months. The article underscores the importance of Agile methodologies and DevSecOps in modernizing government IT infrastructure and enhancing mission readiness.

In this insightful video, Dave Raley, CX Digital Program Manager at Marine Corps Community Services (MCCS), discusses the transformative journey of implementing Agile Authorization to Operate (ATO) processes within the U.S. Marine Corps. By collaborating with industry partners and leveraging cloud technologies, MCCS significantly reduced ATO timelines from traditional cycles of 12–18 months to under 30 days for certain components. This streamlined approach has enabled the rapid deployment of mission-critical capabilities, resulting in substantial cost savings and enhanced mission readiness. The video provides valuable insights into how agile methodologies and risk management frameworks can revolutionize software delivery within federal agencies.

In this LinkedIn post, Dave Raley, CX Digital Program Manager at Marine Corps Community Services (MCCS), highlights the successful implementation of Agile Authorization to Operate (ATO) processes within the U.S. Marine Corps. By adopting agile methodologies and leveraging DevSecOps practices, MCCS significantly reduced ATO timelines, enabling faster deployment of mission-critical applications. This transformation not only enhanced operational efficiency but also resulted in substantial cost savings, underscoring the value of agile approaches in federal IT modernization efforts.

Hosted by the AFCEA Quantico-Potomac chapter, the 15th Annual USMC IT Day brought together Marine Corps leadership, government IT professionals, and industry partners for a full day of briefings, panels, and collaboration. Held at the Fredericksburg Convention Center, the 2025 event spotlighted emerging priorities across Marine Corps Systems Command (MCSC), C4, and DC,I—focusing on innovation, modernization, and multi-domain digital capabilities. Attendees explored themes including cloud adoption, cybersecurity, and accelerated software delivery in support of warfighter readiness.

Sicura, RegScale and USMC hosted a live session where attendees discovered how to automate the full compliance lifecycle - dramatically reducing ATO timelines while strengthening security and audit-readiness across even the most complex environments.