Section 1652 of the fiscal year 2020 National Defense Authorization Act tasks the U.S. Department of Defense (DoD) to perform a zero-based review (ZBR)--a detailed review rather than a simple comparison with previous size or budget--of its cybersecurity and information technology workforces. The ZBR process described in this report constitutes a transparent, repeatable process with which DoD can conduct ZBRs across the DoD cyber enterprise.