The U.S. Navy responded to all the executive orders and mandates and met its zero-trust goals years ahead of schedule.

Judged as of 2024-11-19. True: official US Navy or DoD statements or credible reporting show that the Navy (or the Navy unit Nadella was referring to) met its zero-trust goals, meaning the DoD zero-trust target-level requirements set for FY2027, at least about one year before the deadline, and had addressed the relevant executive orders and mandates such as EO 14028. Mostly true: it met the goals ahead of schedule, but by less than 'years', or the claim refers to a specific Navy program instead of the whole Navy. Mixed: some zero-trust milestones were met early but others were not. Mostly false: the Navy had only made progress or announced early pilots, or only certain systems reached the target, and its goals were not met. False: evidence shows the Navy was behind schedule or had not met its zero-trust goals.

Set before the research began.

1. E1 Department of the Navy's Flank Speed service sets new standard for Zero Trust in DOD Naval Information Warfare Center (NIWC) Atlantic, official .mil site (article from Darren Turner, Department of the Navy Chief Technology Office) · 22 October 2024

   “achieved full compliance with all 91 Target ZT activities — a significant milestone completed three years ahead of the DOD Chief Information Officer’s (CIO) fiscal year 2027 deadline”

2. E2 Top Priorities for DoD CISO: CM, Zero Trust, DIB Cybersecurity MeriTalk · 24 October 2024

   “On Tuesday the Department of the Navy’s Flank Speed cloud service became the first to achieve full compliance with the DoD’s zero trust goal by meeting all 91 targeted zero trust capabilities, hitting a major milestone about three years ahead of deadline.”

3. E3 Navy hits DOD’s zero-trust targets years ahead of schedule, CTO says DefenseScoop · 17 November 2023

   “According to the Department of the Navy’s Acting Chief Technology Officer Justin Fanelli, the Navy recently met all 91 of those outputs to fulfill DOD’s “target level” zero trust on its Non-classified Internet Protocol Router Network (NIPRNet) — which underpins many of its most innovative pursuits.”

4. E4 Navy Platforms Achieves Zero Trust Compliance Goals ExecutiveGov · 23 October 2024

   “This accomplishment comes three years ahead of the DOD’s scheduled 2027 deadline for zero trust adoption.”

I rated this mostly true. A Navy technology office article and trade press report that the Navy's Flank Speed cloud service met all 91 DoD target-level zero trust activities in October 2024, three years before the DoD CIO's FY2027 deadline (E1, E2, E4). Earlier reporting quotes the Navy's acting CTO saying the Navy had met the 91 target-level outputs on its NIPRNet network (E3). However, the evidence describes these goals as met for specific Navy systems (Flank Speed and NIPRNet) and does not directly show the Navy as a whole meeting them [E1][E3]. It also does not show directly that the Navy had addressed every executive order and mandate, such as EO 14028. Under the criteria, a claim that rests on a specific Navy program rather than the whole Navy is mostly true.