GAO’s latest look at DHS modernization points to a familiar truth in government cyber: resilience improves only when acquisition, workforce, and governance can keep pace with the mission.