NSA people should be competent enough to not have to rely on “anti-virus” B.S. If they can’t predict how their systems would be attacked, then they need to be replaced with some competent people who are more than just bureaucrats with management degrees. The military OTOH might have to look outside of its ranks if its culture doesn’t create enough of the appropriate experts. Granted, they depend on the private sector for a lot of things, that could easily be the weak link in the chain too.