1. ARCYBER The Next Battlefield UNCLASSIFIED UNCLASSIFIED
10 December 2013

2. Constant presence – evolves at the speed of code!
Cyberspace as a Domain
UNCLASSIFIED
CYBERSPACE: A global domain within the information environment consisting of the interdependent network of information technology infrastructures, including the Internet, telecommunications networks, computer systems, and embedded processors and controllers. (JP 1-02)
Man-made domain – ever changing
Interdependent w/ traditional war-fighting domains.
Not special or separate – part of every unit’s Operating Environment
Physical, logical (virtual), and social characteristics
Instantaneous operational reach – global battlefield.
Constant presence – evolves at the speed of code! 2
UNCLASSIFIED

3. Classical – AirLand Battle Classical–Network Enabled
UNCLASSIFIED
Evolution of the Operational Environment (Emergence of Cyberspace)
Past
Classical – AirLand Battle
Today
Classical–Network Enabled
Future
Land Cyber
CYBER
CYBER
Mass and Velocity of Change in OE
OPTEMPO Increasing
Convergence has taken place between land-human-cyber; so successful Unified Land Operations will require integrated and successful cyberspace operations 3
UNCLASSIFIED

4. Threat…Contested Environment
UNCLASSIFIED
Sophisticated, Growing and Evolving
Exploiting daily, Increasing disruption, Developing destruction capabilities
Current approach is not defendable or affordable
Limited Situation Awareness
Disparate Networks
Reactive Defense (Signature-based)
Compliance is our first line of defense
Threats Developing Faster Than We Can Protect Against Them 4
UNCLASSIFIED

5. U.S. Joint Cyberspace Doctrine is Emerging and Evolving
United States Cyber Strategy
UNCLASSIFIED
U.S. International Strategy for Cyberspace:
“…combine Diplomacy, Defense & Development to enhance prosperity, security & openness…”
Dissuading and Deterring
Strengthening Partnerships
Building Prosperity and Security
Our strategic approach is always grounded by our unshakable commitments to fundamental freedoms of expression, privacy, and the free flow of information
Department of Defense Strategy for Cyberspace
Treat cyberspace as an operational domain
Employ new defense operating concepts
Enable a whole of government cybersecurity strategy
Build relationships with U.S. allies and International partners
Leverage the Nation’s ingenuity
U.S. Joint Cyberspace Doctrine is Emerging and Evolving 5
UNCLASSIFIED

6. U.S. Cyber Command
UNCLASSIFIED
On June 23, 2009, the Secretary of Defense directed the Commander of U.S. Strategic Command (USSTRATCOM) to establish a sub-unified command, United States Cyber Command (USCYBERCOM). Full Operational Capability (FOC) was achieved October 31, The command is located at Fort Meade, MD.
Service elements include: Army Cyber Command (ARCYBER); Air Forces Cyber (AFCYBER); Fleet Cyber Command (FLTCYBERCOM); and Marine Forces Cyber Command (MARFORCYBER). The Command is also standing up dedicated Cyber Mission Teams to accomplish the three elements of our mission. 6
UNCLASSIFIED

7. DoD Information Networks (DODIN)
U.S. Cyber Command
UNCLASSIFIED
USCYBERCOM Mission: plan, coordinate, integrate, synchronize and conduct activities to: direct the operations and defense of specified Department of Defense information networks and; prepare to, and when directed, conduct full spectrum military cyberspace operations in order to enable actions in all domains, ensure US/Allied freedom of action in cyberspace and deny the same to our adversaries.
Defend the Nation
DoD Information Networks (DODIN)
Combatant Command
Support
Mission Areas
Cyber Forces
Cyber National Mission Forces
DISA/Services Cyber Protection Forces
Cyber Combat Mission Forces (CCMD Aligned)
DODIN Operations
Defensive Cyber Operations (DCO)
Offensive Cyber Operations (OCO)
3 Lines of Operations - Running Throughout the Mission Areas
Lines of Operation 7
UNCLASSIFIED

8. Cyberspace Operations = Build + Operate + Defend + Exploit + Attack
UNCLASSIFIED
Army Cyber Command
Our Mission
Army Cyber Command/2nd Army plans, coordinates, integrates, synchronizes, directs, and conducts network operations and defense of all Army networks; when directed, conducts cyberspace operations in support of full spectrum operations to ensure U.S./Allied freedom of action in cyberspace, and to deny the same to our adversaries.
Serve as Cyber Proponent
Conduct Information Operations
2nd Army /
Army Cyber Command
Cyberspace Operations = Build + Operate + Defend + Exploit + Attack 8
UNCLASSIFIED

9. Command & Control…Evolving
UNCLASSIFIED
Command & Control…Evolving
ARCYBER/ 2nd Army
Army
PROPONENT
Army Cyber Operations and Integration Center (ACOIC)
ARNG
Cyber Units
USAR Cyber Units
NETCOM/9th SC
1ST IO CMD (L)
INSCOM
CYBERCOM
STRATCOM
CYBER BDE
(780th MI)
Organize to Support Combatant Commands
Train, Organize, Equip to Meet Requirements
Army Cyber Center (USMA)
Cyber Center of Excellence (TRADOC)
C2 is evolving
Army Cyber that exist today is not what we activated almost 3 years ago
Will continue to evolve with the operating environment
Unity of Effort for Cyberspace Operations 9
UNCLASSIFIED

10. Army Cyber Command Roles
Event:
YYYY-MM-DDTHH:MM:SSZ
UNCLASSIFIED
Army Cyber Command Roles
Defense of All Army Networks
Serves as Service Component to U.S. Cyber Command
Train, Organize and Equip
Provide Trained & Ready Forces
Build Joint Force Headquarters-Cyber capability
Integrate Cyberspace into Planning and Exercises
Cyber Education, Training and Leader Development
Build Partner Capacity
Conduct Information Ops for the Army
Support to Institutional Cyber Force Development 10
UNCLASSIFIED
Briefer:

11. Defending All Army Networks
UNCLASSIFIED
Collapse to a defendable enterprise network
Provide all-source indications and warnings
Maintain cyber situational awareness
Ensure Intel-Ops-Signal (“2-3-6”) integration
Train and equip all Army HQs, units, and users to defend their networks
Recognize and understand the importance of trusted and disciplined system and network administrators
Monitor and enforce compliance
Conduct forensics of all attacks
Obtain required tools and capabilities
Identify and defend cyber key terrain
Ensure future integration into the Joint Information Environment framework
Army Networks
400+ Network Connections
700+ Circuits
Over 800,000 Workstations
Over 35,000 Servers
Over 90,000 Mobile Devices
Over 1,200,000 Users
A Global footprint
Must Defend to Maintain the Freedom to Operate 11
UNCLASSIFIED

12. Cyber “In Stride” Initiatives
UNCLASSIFIED
Strategic Landpower
LandCyber
White Paper
Cybersecurity
Awareness Week
Education, Training, & Leader Development
Cyber Home Station Training Pilot
FORSCOM
Cyber Summit
Cyber Security Assessment Teams
Commanders Program
on Cyberspace Risk
FY14 FORSCOM Training Guidance
Mission Command Assessment Teams
TRADOC Plan
for Cyber Center of Excellence
Cyber-Electromagnetic Activities (CEMA) Elements
World Class Cyber
Opposing Force
Do What We Can Now While More Develops
UNCLASSIFIED

13. Evolving Doctrine JP 3-12 (Cyberspace Operations):
UNCLASSIFIED
JP 3-12 (Cyberspace Operations):
Cyberspace Operations are the employment of cyberspace capabilities where the primary purpose is to achieve objectives in or through cyberspace
Most aspects of Joint Operations rely in part on cyberspace
Commanders conduct cyberspace ops to retain freedom of maneuver in cyberspace and deny freedom of action to adversaries
FM 3-38 (Cyber-Electromagnetic Activities): Activities leveraged to seize, retain, and exploit an advantage over adversaries and enemies in both cyberspace and the electromagnetic spectrum, while simultaneously denying and degrading adversary and enemy use of the same and protecting mission command systems 13
UNCLASSIFIED

14. Army Cyber Training Making the US Army “Second to None” in Cyberspace…
UNCLASSIFIED
Army Cyber Training
Vision: A team of elite, trusted and disciplined cyber warriors trained to operate and defend Army networks
Individual Level
Increase individual cyber awareness (passwords, software updates, suspicious attachments); Begin with Initial Military Training
Certification is a first step…Every user has training requirements
Ensure leaders understand and are capable of planning Cyber ops
Unit Level
Train units for a degraded cyber environment
Seek opportunities to integrate and evaluate Cyber ops into planning, training, and exercises at all levels
Synchronization of Cyber ops with all other operations
is imperative
Establish cyber OPFOR capability
Service/Joint
Establish and meet Joint cyber training standards
Making the US Army “Second to None” in Cyberspace…
Training and Leader Development is the Key 14
UNCLASSIFIED

15. Establish New Systems Engineering FA26
DRAFT
Establish New Systems Engineering FA26
4/15/2017
LTC
COL
MAJ
LT/CPT
Operations
This slide illustrates the proposed professional development and utilization of officers for both Branch 25 and Functional Area 26 officers.
Both branch and functional area officers will continue to be recruited, accessed and trained objectively through the Signal Captains Career Course—some fundamentals of cyberspace operations will be incorporated into the SBOLC and SCCC.
AOC 25 officers will serve as platoon leaders, operations officers, XO, commanders, etc at LT to LTC level. Selected officers may attend 25G training in conjunction with the SCCC or TDY enroute to assignment as a BCT/MfSB NetOps officer or S6, division or corps NetOps officer or G6, Signal battalion or brigade NetOps officer, etc. 25G training will be assignment driven and it will include advanced leadership and technical training. Goal will be for all Signal officers to attend 25G training as a CPT, MAJ or LTC and develop in both AOC via alternating assignments. After completing a 25G assignment, officers will serve in a 25A assignment and vice-versa.
After SCCC, all FA 26 designated officers will attend either the 26A or 26B AOC qualification training. All must possess Science, Technical, Engineering or Math (STEM) undergraduate degrees and TS-SCI clearance. All will attend common core consisting of systems engineering, best business planning, and intermediate cyberspace principles; and then, track into their respective areas of specialization, and follow-on assignment. AOC 26A and B officers will continue to develop in thir sp[ecific AOC CPT through LTC with limited migration between AOC.
AOC 26C will be smallest AOC. Officers will be competitively selected out of AOC 25G, AOC 26A and AOC 26B for 26C based upon training, education, experience, certifications and preference. Officers with experience or MS/PhD degrees may access directly into AOC 26C by exception. Officers may migrate in or out of 26C but this would be exception rather than the norm.
Again, at the executive level—COL—officers will be hand-managed. As we mature the MOCS action, we may establish selected 26Z positions at the LTC level to broad opportunity and enhance assignment flexibility.
DRAFT

16. 25D - Cyber Network Defender
HQDA Approved 25D MOS Nov 2013
Five CND Specialties
JAN 2014: Recruiting Target
MOS 25B predominate pool
Qualifying Scores. A minimum score of 105 in aptitude areas GT and ST on
Armed Services Vocational Aptitude Battery (ASVAB) tests administered on
and after 1 July 2004
Possess a security clearance of TOP SECRET (TS) sensitive compartmented
information (SCI)
U.S. citizen
Meet service remaining requirement per AR (36 months)
A physical demands rating of medium
A physical profile of
Normal color vision
Candidates for MOS, as follows:
MOS Immaterial
A SSG ALC graduate with at least 8 years TIS
At least 4 years of experience in IA and IT. This experience must be verified
IA Certification: Must hold a current certification under either IAT Level II or
IAM Level I IAW DoD M
811

17. DRAFT
4/15/2017
Ongoing Initiatives
Science, Technology, Engineer, Math (STEM) 50% SC Accession Targets
Additional Point on OML for STEM Cadets
Voluntary Transfer Incentive Program (VTIP) for FA and BR
MOCS Action approved requiring STEM and TS-SCI for FA53
Increased Throughput FA53 ISMC
Submitted request to document Civilian Certifications on ORB
Cyberspace Operations and Security Training With Industry (TWI)
Zero-based update of all ACS/TWI Requirements
Documented CPT officer positions as Cyber related ACS utilization assignments
CMF KD positions in DA Pam for AOC 24A, 25A, 53A & Signal WO
40 Seats USAF Cyber 200 Course and 45 at 300 Course for FY 14 (CW4 instructor AFIT)
8 annual ACS seats for AFIT Cyber related MS Degree Programs (PhD instructor AFIT)
Implemented TS-SCI Cyber Threat briefing for all Signal PCC
Piloting ECOPS for all Signal PCC
Signal Regimental Officer Transformation MOCS Action (AOC 25G and FA 26)
Increased SC WO accessions to meet CMF build requirements
HQDA approved 25D MOCS Action / 25D Pilot course
25D In-Service Screening Test (ISST)
CIO/G6 provided DoDD 8570 annual IA/Cybersecurity recertification vouchers
DRAFT

18. Developing Initiatives
DRAFT
4/15/2017
Developing Initiatives
Incorporate SANS MS Degree into FA 26 education program
Organic ACOPC instructor capability in the Cyber Leader College
Cyberspace Technological Enrichment Program (CTEP) (HIA)
Non-MEL4 NCCIC and FCC for field grade and warrant officers
USCC/NSA CMF equivalency for SC AOC/MOS qualification training course
SIGCoE Course Emphasis on Blended Education vice Training
Army Career Tracker Pilot for all Signal Regiment Officers, WO, Enlisted
Select SC 2LT to USAF Undergraduate Cyber Keesler AFB
Army Cyber Assessment (ACA) transfer of responsibility from ARCYBER
DRAFT

19. Strong partnerships are critical to success
What We Must Do
UNCLASSIFIED
Embrace cyberspace as a contested domain
Know the threat….It is not random
Treat the Network as a weapon system
Enforce Compliance with Basic Standards and Discipline
Cyber security is not a given and remediation is expensive
This is leader’s business
Conduct Training and Leader Development
Make people the Centerpiece, not Technology
Strong partnerships are critical to success 19
UNCLASSIFIED

20. The Key to Cyberspace Operations is People, not Technology
Cyber Warriors
UNCLASSIFIED
Vision: Professional team
Elite, trusted, precise, disciplined warriors
Culture of trust, respect, and dignity
Who
Defend and operate all military networks
Provide dominant effects in cyberspace
Ensure Mission Command
Enable Unified Land Operations
Ensure a decisive advantage—Land and Cyber
The Key to Cyberspace Operations is People, not Technology
UNCLASSIFIED

21. “Transforming Cyberspace While at War…
Questions
UNCLASSIFIED
“Transforming Cyberspace While at War…
Can’t Afford Not To!” 21
UNCLASSIFIED

22. The Cyber-Enabled Commander Expects
UNCLASSIFIED
Freedom to Operate
Defend and Secure Critical Information
Understand Operational Impact, Risk and Mitigation
Common Operational Picture
See Yourself, the Threat & the Cyberspace Terrain
Integrated Cyber Planning and Execution
Cyber Effects tied to Commander’s Objectives
Synchronize Lethal & Non-Lethal
Network as an Operational Platform
Single, Secure Network
Enable Cyberspace Operations
Trained and Ready Forces
Leader Development, Training, and Education is Key 22
UNCLASSIFIED