That does describe what is expected of military members in combat operations, so it isn't like the military shouldn't be able to apply that philosophy to this area.
I would think the issue is that the "cyberwarfare" group is new and so is being run like an ordinary technical unit, which means procedures and process out the ears and limited flexibility. The military could easily free them of that and let the unit run itself like a special operations unit.