Executive assistant director for cybersecurity says the current model "does not account for the capability and the acceleration of the adversaries who we're up against."