
What if the Cavalry Isn’t Coming?
The United States is not prepared for how modern conflict will reach its shores.
For decades, we have treated national security as something managed in Washington and executed overseas. That model no longer reflects reality. Adversaries are not waiting for a battlefield. They are probing, testing, and building capacity to disrupt the systems Americans rely on every day, systems run not by the federal government, but by cities, counties, states, and local institutions.
While China, Russia, Iran, and North Korea deepen cooperation and refine their ability to operate in the grey zone, below the threshold of war, most of the officials responsible for keeping our communities running have never been briefed on what that means in practice.
It means this: not a single system failing, but many, at the same time, across multiple states.
Imagine waking up to find internet service disrupted across several regions. Power is unstable. Water systems have shifted to manual operations, and in some places have stopped functioning altogether. Hospitals are operating without core systems, reverting to paper. Emergency call centers are degraded. Traffic signals are unreliable. Law enforcement and first responders are operating, but without full visibility or coordination.
None of it is total collapse. All of it is compromised.
It happens across seven, ten, or more states at once. Not a single point of failure, but thousands or even tens of thousands of points of pressure applied simultaneously across systems that were never designed to fail together.
This is not a slow erosion. It is a compression of the problem into a single day. Not a “Black Swan” in the traditional sense, but something more dangerous: a series of known vulnerabilities exploited all at once.
In that moment, the question is no longer what was hit. The question is who understands what is happening, who can coordinate a response, and how quickly trust in basic systems begins to break down.
The federal government will not be the first to respond. It cannot be. It does not operate the systems that are failing, nor does it sit inside the decision loops required to manage them in real time.
Those responsibilities sit at the state and local level, fragmented across jurisdictions and agencies that were never designed to coordinate under this kind of pressure.
Federal support will come, but not immediately, and not with perfect clarity. It will arrive into an environment already defined by incomplete information and urgent decisions that cannot wait.
This is not a failure of capability. It is a mismatch between how our security system is structured and where the problem is now emerging.
This may sound hypothetical. It is not.
The warning signs are already here. The ransomware attack on the Colonial Pipeline disrupted fuel supply across the East Coast. A cyber operation linked to Iran targeted Stryker, affecting systems that underpin hospital care. Foreign-attributed actors have probed election-related systems, testing processes fundamental to democratic governance.
Individually, these incidents were contained. Coordinated, they would not be.
This is the gap we have built.
And it is one we can close.
This week, Tampa will host a two-day, closed-door Forum to brief state, local, and tribal leaders operating at the front lines of these risks. Convened at the University of South Florida’s Center for Advanced Medical Learning and Simulation, it will bring together senior policymakers, law enforcement leaders, and international counterparts to examine how geopolitical competition is now playing out inside the systems that keep American communities functioning.
The premise is simple: the officials responsible for critical infrastructure, public safety, and continuity of government are being asked to manage national security consequences without being meaningfully included in the national security system.
For decades, the United States concentrated its most serious security thinking in Washington. That made sense when threats were distant. That is no longer the environment we are operating in.
Today, the front lines run through local systems, energy, water, healthcare, communications, and transportation. The officials responsible for them have become, in practice, the first line of defense.
When systems falter and fail at scale, there is no time to build trust from scratch.
We should not assume that the systems we rely on will hold simply because they have not yet been tested at scale.
They have.
Just not all at once.
The question is not whether this kind of disruption is possible. It is whether we are prepared to manage it when it happens.
Right now, we are not.
That can change. But only if we begin treating the local officials responsible for keeping our communities running as part of the national security system, not adjacent to it.
Because if the cavalry isn’t coming, the front line is already here.
Joshua M. Burgin is founder of the Alliance for Global Security.
This article was originally published by RealClearDefense and made available via RealClearWire.