The project is described as a two-year plan to help the agency better address national security threats, especially surrounding its cyber missions. Signals Intelligence, which exploits vulnerabilites to spy on foreign targets, and the Information Assurance Directorate (IAD), which protects the NSA’s own classified networks against spying, will be combined under the new Directorate of Operations, The Washington Post explained earlier week. Five other directorates, in addition to Operations, will be created to realign the agency's interests and investment in its workforce. It also refocuses the NSA on conducting research.

The plan goes completely against a suggestion made three years ago

The IAD relies on private companies disclosing their bugs to the agency and has already faced an uphill battle after Snowden's releases. Government skepticism is high and discourages private companies from disclosing vulnerabilites to the agency. When the severe Heartbleed vulnerability was discovered in 2014, for instance, many people speculated that the NSA had known about it for years. The same goes for the recent controversy about a backdoor in Juniper Network’s VPN suite.

This restructuring backpedals on that report while also confirming that the NSA's offense and defense share the same mission of identifying bugs, and that their coordination could prove fruitful for both missions. However, it likely won't do much to boost the NSA’s broader standing and trustworthiness for companies already hesitant to share vulnerability information.