Cyber readiness reporting shouldn't be treated as a “compliance drill,” but rather a tool the services can use to advocate for resources, Matthew Eisner said.