The Defense Department is working on a new rule to establish a cyber regime focused on advanced persistent threats that is expected to add new regulations around levels four and five of the Pentagon's Cybersecurity Maturity Model Certification program.