10 September 2014

Cyber CoE Doctrine Brief

Mr. Rick San Miguel

UNCLASSIFIED

Agenda

• Welcome

• Background

• Establishment of Army Cyberspace Doctrine

• Leveraging Efficiencies for Transition

• Signal Doctrine to Cyber Doctrine Transition

• FM 3-12, Army Cyberspace Operations

UNCLASSIFIED

Mission: Manages the Cyber CoE Doctrine and Training Literature Program, ensuring current and relevant Army cyber, electronic warfare, and signal doctrine, training publications, Cyber Center of Excellence Regulations, and Cyber Lessons and Best Practices are available to support the Cyber Center of Excellence and cyber, electronic warfare, and signal operations Army-wide.

Current Mission Focus: Consolidate and re-organize cyber, electronic warfare, and signal doctrine into a cohesive Cyber Doctrine Publication Program. Transfer existing signal doctrine and develop new cyber and signal doctrine according to Doctrine 2015. Develop and sustain Cyber Training Literature Publication Program of non-doctrinal training publications for Cyber Center of Excellence.

Doctrine Division

UNCLASSIFIED

Doctrine Key Activities

• Assess, plan, develop, and publish cyber, electronic warfare, and signal doctrine

• Review other proponent doctrine to ensure cyber, electronic warfare, and signal is accurately represented in Army, joint, multi-service, and multinational doctrine publications

• Monitor implementation and incorporation of cyber, electronic warfare, and signal doctrine into operations, training and education

• Manage Cyber CoE and non-doctrinal cyber, electronic warfare, and signal training publication program

• Edit, review, and publish all Cyber CoE Regulations and cyber, electronic warfare, and signal training publications

• Provide Cyber CoE and DOT-D graphic design, photographic, digital media, and printing support as required

• Document and disseminate resolved L&BPs from unit training rotations, recent deployments, and key leader interviews for implementation across DOTMLPF

• Host quarterly Cyber L&BP Advisory Forums

• Provide Cyber L&BP briefings to all Cyber CoE Training and Education courses

UNCLASSIFIED

Cyberspace Operations

Offensive Cyberspace Operations

Defensive Cyberspace Operations

Defensive Cyberspace Operations – Response Actions

Cybersecurity

Deny the Adversary the FREEDOM of Action in the Domain

Cyber Effects

Cyberspace Defense

Computer Network Defense

Cyber Electromagnetic Activities

Cyber Targeting

Cyber Protection Teams

CYBERSPACE

CYBERSPACE

CYBERSPACE

AIR – LAND - MARITIME

UNCLASSIFIED

Background

6

THREAT

JUNE 2009: UNITED STATES CYBER COMMAND ESTABLISHED

OCTOBER 2010: US ARMY CYBER COMMAND ESTABLISHED

FEBRUARY 2013: JOINT PUBLICATION 3-12 PUBLISHED

FEBRUARY 2013: CYBER CAPABILITIES BASED ANALYSIS PUBLISHED

MAY 2013: CSA CONCURRED WITH TRADOC PROPOSAL TO ESTABLISH A CYBER CoE

OCTOBER 2013: SECARMY APPROVED COST-BENEFITS ANALYSIS

DECEMBER 2013: SECARMY APPROVED CYBER CoE ESTABLISHMENT AT FT GORDON

JANUARY 2014: HQDA PUBLISHED EXORD TO ESTABLISH A CYBER CoE BY OCT 15

APPROVED FOR PUBLIC RELEASE

UNCLASSIFIED

Establishment of Cyberspace Doctrine

UNCLASSIFIED

Leveraging Efficiencies for Transition

UNCLASSIFIED

Cyber CoE Doctrine

Signal/Communications Networks & Information Services

FM 6-02, Signal support to Operations

• CC - Network Operations

ATP 6-02.71, Techniques for LandWarNet Network Ops

• CC - Network Transport and Information Services

ATP 6-02.43, Techniques for Signal Soldiers

ATP 6-02.45, Techniques for Signal Support

ATP 6-02.53, Techniques for Tactical Radio Ops

ATP 6-02.54, Techniques for Satellite Communications

ATP 6-02.60, Techniques for the WIN-T

ATP 6-02.75, Techniques for COMSEC Operations

• CC - Visual Information Operations

ATP 6-02.40, Techniques for Visual Information Ops

Cyberspace Operations FM 3-12, Cyberspace Operations

FM 3-38, Cyber Electromagnetic Activities (CEMA)

• CC - Offensive Cyber Operations

ATP X-XX.XX, Techniques for Offensive Cyberspace Ops

• CC - Defensive Cyber Operations

ATP X-XX.XX, Techniques for Defensive Cyberspace Ops

Electronic Warfare • CC - Electronic Warfare

ATP 3-36, Electronic Warfare

• CC - Spectrum Management Operations

ATP 6-02.70, Techniques for Spectrum Management Ops

(Published)

(Final Draft)

(In Progress)

CC – Core Competency

Signal Doctrine Signal

• Network Transport & Information Systems

FM 6-02, Signal Support to Operations

ATP 6-02.43, Techniques for Signal Soldiers

ATP 6-02.45, Techniques for Signal Support

ATP 6-02.53, Techniques for Tactical Radio Ops

ATP 6-02.54, Techniques for Satellite Communications

ATP 6-02.60, Techniques for the WIN-T

ATP 6-02.75, Techniques for COMSEC Operations

• Network Operations

ATP 6-02.71, Techniques for LandWarNet Network Ops

• Spectrum Management Operations

ATP 6-02.70, Techniques for Spectrum Management Ops

• Visual Information

ATP 6-02.40, Techniques for Visual Information Ops

Transition To Cyber Doctrine

Signal Doctrine to Cyber Doctrine Transition

UNCLASSIFIED

10 APPROVED FOR PUBLIC RELEASE

• A Commanders Role in Cyberspace Operations

• Offensive Cyberspace Operations (OCO)

• Defensive Cyberspace Operations – Responsive Action (DCO-RA)

• Defensive Cyberspace Operations (DCO)

• Computer Network Defense (CND)

• Cybersecurity (IA)

• Cyber Protection Teams (CPT)

• Cyber Electromagnetic Activities (CEMA)

• Cyber Targeting

• Authorities (Title 10 and Title 50)

FM 3-12, Army Cyberspace Operations

Milestones

Jun 14: Initial draft staffing (sus: 28 Jul)

Sep 14: Final draft staffing

Dec 14: Cyber CoE approval

Jan 15: CAC approval

Mar 15: Submit to CADD for publication

Apr 15: Projected publication

FM 3-12, Army Cyberspace Operations

UNCLASSIFIED

Cyber Doctrine Development Update

New Pub New Publication Title Publication Status PD Staffing ID Staffing FD Staffing Date to APD

FM 6-02 Signal Support to Operations Published – JAN 14

FM 3-12 Army Cyberspace Operations ID Dev – AUG 13 JUL 13 JUN 14 DEC 14 JUN 15

FM 3-38 Cyber Electromagnetic Activities Published – FEB 14

ATP 3-12.1 Techniques for Offensive Cyberspace Operations (Classified)

PD Dev

ATP 3-12.2 TBD PD Dev

ATP 3-36 Electronic Warfare Techniques FEF Prep – JAN 14 JUN 14

ATP 6-02.40 Techniques for Visual Information Operations

FAD Prep - APR 14 APR 13 FEB 14 SEP 14

ATP 6-02.43 Techniques for Signal Soldiers in Support of Operations

ID Dev – AUG 13 APR 13 JUL14 DEC 14 MAY 15

ATP 6-02.45 Techniques for Signal Support ID Dev – AUG 13 APR 13 JUL 14 DEC 14 JUN 15

ATP 6-02.53 Techniques for Tactical Radio Operations ID Dev – AUG 13 APR 13 AUG 14 DEC 14 MAY 15

ATP 6-02.54 Techniques for Satellite Communications ID Dev – AUG 13 APR 13 JUL 14 OCT 14 MAY 15

ATP 6-02.60 Techniques for the Warfighter Information Network - Tactical

ID Staffing – MAY 14 AUG 13 MAY 14 OCT 14 MAY 15

ATP 6-02.70 Techniques for Spectrum Management Operations

FD Dev – DEC 13 APR 13 OCT 13 JUL 14 JAN 15

ATP 6-02.71 Techniques for LandWarNet Network Operations

FD Dev – DEC 13 APR 13 OCT 13 JUL 14 JAN 15

ATP 6-02.75 Techniques for Communications Security Operations

FD Dev– APR 14 APR 13 MAR 14 AUG 14 MAR 15

TC 6-02.20 Wire and Cable FD Dev – FEB 14 APR 13 AUG 14

UNCLASSIFIED

Cyber CoE Doctrine Website

Published Doctrine

Doctrine Highlights

Doctrine Menu

https://lwn.army.mil/doctrine

POCs and Subordinate

Sections

Doctrine Under Development

External Documents Under

Review

UNCLASSIFIED

Questions

10 September 2014

Cyber CoE

Lessons & Best Practices Briefing

Mr. Rick San Miguel

UNCLASSIFIED

Agenda

• Mission

• Lessons Learned

• Benefits of Lessons Learned

• Cyber CoE Lessons Learned Process

• Observations and Documentations

• Website

OBJECTIVE:

Document lessons and best business practices (BBPs) based on the Cyber

CoE’s core competencies of network operations (NetOps), network transport

and information services (to include mission command systems integration),

electromagnetic spectrum operations and visual information operations

across doctrine, organization, training, materiel, leadership and education,

personnel, facilities (DOTMLPF).

MISSION: Collect, analyze and disseminate approved lessons and best practices to the Cyber Center of Excellence to enable continuous improvement of Soldier training and the Cyber community (cyber, electronic warfare and signal) to sustain and enhance the Army's preparedness to conduct current and future Cyber/Signal operations.

COORDINATE – COLLABORATE – COMMUNICATE

Mission

Lessons and Best Practices DO NOT constitute a lessons learned without changing individual, unit, or Army behavior, which is accomplished through the application of the Lessons Learned process.

AR 11-33, Army Lesson Learned Program

COORDINATE – COLLABORATE – COMMUNICATE

Lessons Learned

• Enables continuous improvement of cyber, electronic warfare, and signal forces. • Sustains, enhances, and increases the Army’s preparedness to conduct current

and future operations. • Documented lessons and best practices are analyzed and approve solutions are

provided by Cyber CoE SMEs.

• Solutions/recommendations to lessons and best practices are posted on the Cyber CoE Lessons and Best Practices website.

• Identifies trends within units.

• The lessons learned process does not end until the problem is resolved.

• Invaluable insight to units who will deploy forces under similar conditions in the future.

Benefits of Lessons Learned

Cyber CoE Lessons Learned Process

orums

COTS

MTOE TPE

POR

25 Series MOS

Information & Knowledge Management

SPECTRUM

COMSEC

CYBER, EW & NETOPS

255A

25A

53A

255N

255S

LESSONS & BEST PRACTICES

Cyber Competencies: NETOPS, NT&IS, VI, OCO, DCO, EW, SMO

Doctrine Organization Training Materiel L Personnel Facilities leadership education

Unit Umbrella Weeks

Key Leader Interview

SIGNAL FORUMS

DCO

VI OPS

254A

S6 COP

PCLL SBCT 24A

FORSCOM

Military Intelligence

Cyber Lessons Learned Process (Identify – Assess – Recommend)

L&BPs

COORDINATE – COLLABORATE – COMMUNICATE

290A

29E

Observations and Documentation

• Enable Continuous Improvement of Army Forces.

• Sustain, Enhance, and Increase the Army’s

preparedness to conduct current and future operations.

• Document L&BPs, analyze and

approve by Cyber CoE SMEs.

• Solutions/recommendations to L&BPs are posted on the Cyber CoE L&BP website.

• The Lessons Learned Process does not end until the problem is resolved.

https://lwn.army.mil/web/slls/home

COORDINATE – COLLABORATE – COMMUNICATE

Scheduled TDY

Training Developers Corner

RFI / Inquires / Submit L&BP

L&BPs by MOS

SOPs, CS 13, Training Insight of the week

Cyber CoE Lessons Learned Website

Questions