10 September 2014

Cyber CoE Doctrine Brief

Mr. Rick San Miguel

UNCLASSIFIED

Agenda

• Mission

• Doctrine Key Activities

• Establishment of Cyberspace Doctrine

• Cyberspace Operations – Terms

• Leveraging Efficiencies for Transition

• Signal Doctrine to Cyber Doctrine Transition

• FM 3-12, Army Cyberspace Operations

• Doctrine Development

UNCLASSIFIED

Mission: Manages the Cyber CoE Doctrine and Training Literature Program, ensuring current and relevant Army cyber, electronic warfare, and signal doctrine, training publications, Cyber Center of Excellence Regulations, and Cyber Lessons and Best Practices are available to support the Cyber Center of Excellence and cyber, electronic warfare, and signal operations Army-wide.

Current Mission Focus: Consolidate and re-organize cyber, electronic warfare, and signal doctrine into a cohesive Cyber Doctrine Publication Program. Transfer existing signal doctrine and develop new cyber and signal doctrine according to Doctrine 2015. Develop and sustain Cyber Training Literature Publication Program of non-doctrinal training publications for Cyber Center of Excellence.

Doctrine Division

UNCLASSIFIED

Doctrine Key Activities

• Assess, plan, develop, and publish cyber, electronic warfare, and signal doctrine

• Review other proponent doctrine to ensure cyber, electronic warfare, and signal is accurately represented in Army, joint, multi-service, and multinational doctrine publications

• Monitor implementation and incorporation of cyber, electronic warfare, and signal doctrine into operations, training and education

• Manage Cyber CoE and non-doctrinal cyber, electronic warfare, and signal training publication program

• Edit, review, and publish all Cyber CoE Regulations and cyber, electronic warfare, and signal training publications

• Provide Cyber CoE and DOT-D graphic design, photographic, digital media, and printing support as required

• Document and disseminate resolved Lessons and Best Practices from unit training rotations, recent deployments, and key leader interviews for implementation across DOTMLPF

• Host quarterly Cyber Lessons and Best Practices Assessment and Advisory Forums

• Provide Cyber L&BP briefings to all Cyber CoE Training and Education courses

UNCLASSIFIED

Establishment of Cyberspace Doctrine

UNCLASSIFIED

Cyberspace Operations - TERMS

Offensive Cyberspace Operations

Cybersecurity

Deny the Adversary the FREEDOM of Action in the Domain

Cyber Effects

Cyberspace Defense

Computer Network Defense

Cyber Electromagnetic Activities

Cyber Targeting

Cyber Protection Teams

Defensive Cyberspace Operations – Response Actions

Authorities

Defensive Cyberspace Operations – Internal Defensive Measures

UNCLASSIFIED

Leveraging Efficiencies for Transition

Unified Actions – Unified Land Ops

Mission Command – Warfighter Functions

Network Transport & Information

Services, NETOPS, EMSO and VI Cyber, Signal, Electronic Warfare

Unified Land Operations: Seize, retain, and exploit the initiative to gain and maintain a position of relative

advantage in sustained land operations in order to create the conditions for favorable conflict resolution.

Army communications

networks and information

services throughout strategic,

operational, and tactical levels.

The LWN is part of DODIN and

supports the joint

communication system.

Signal COE

EMSO enables and supports all

warfighting functions.

Cyber COE

CEMA integrates and synchronizes cyberspace operations across echelons and warfighting functions.

VI activities acquires and

provide record documentation,

multimedia/VI products, and

services to satisfy official

mission requirements.

Supports

Network operations construct

is an integrated operational

framework consisting of

NM/ESM, IA/CND, IDM/CS

enabling mission command

and operations across

strategic, operational, and

tactical levels.

Cyber, Signal and EW supports ULO by employing unique net-centric capabilities at every echelon.

VI activities acquires and

provide record documentation,

multimedia/VI products, and

services to satisfy official

mission requirements.

Offensive Cyber

Operations

Defensive Cyber

Operations

LWN NetOps

Spectrum Management

Operations

Network Transport /

Information Services

Electronic Warfare

C

E

M

A

Cyberspace Operations Present

UNCLASSIFIED

Cyber CoE Doctrine

Signal/Communications Networks & Information Services

FM 6-02, Signal support to Operations

• CC - Network Operations

ATP 6-02.71, Techniques for LandWarNet Network Ops

• CC - Network Transport and Information Services

ATP 6-02.43, Techniques for Signal Soldiers

ATP 6-02.45, Techniques for Signal Support

ATP 6-02.53, Techniques for Tactical Radio Ops

ATP 6-02.54, Techniques for Satellite Communications

ATP 6-02.60, Techniques for the WIN-T

ATP 6-02.75, Techniques for COMSEC Operations

• CC - Visual Information Operations

ATP 6-02.40, Techniques for Visual Information Ops

Cyberspace Operations FM 3-12, Cyberspace Operations

FM 3-38, Cyber Electromagnetic Activities (CEMA)

• CC - Offensive Cyber Operations

ATP X-XX.XX, Techniques for Offensive Cyberspace Ops

• CC - Defensive Cyber Operations

ATP X-XX.XX, Techniques for Defensive Cyberspace Ops

Electronic Warfare • CC - Electronic Warfare

ATP 3-36, Electronic Warfare

• CC - Spectrum Management Operations

ATP 6-02.70, Techniques for Spectrum Management Ops

(Published)

(Final Draft)

(In Progress)

CC – Core Competency

Signal Doctrine Signal

• Network Transport & Information Systems

FM 6-02, Signal Support to Operations

ATP 6-02.43, Techniques for Signal Soldiers

ATP 6-02.45, Techniques for Signal Support

ATP 6-02.53, Techniques for Tactical Radio Ops

ATP 6-02.54, Techniques for Satellite Communications

ATP 6-02.60, Techniques for the WIN-T

ATP 6-02.75, Techniques for COMSEC Operations

• Network Operations

ATP 6-02.71, Techniques for LandWarNet Network Ops

• Spectrum Management Operations

ATP 6-02.70, Techniques for Spectrum Management Ops

• Visual Information

ATP 6-02.40, Techniques for Visual Information Ops

Transition To Cyber Doctrine

Signal Doctrine to Cyber Doctrine Transition

UNCLASSIFIED

Lead: Cyber CoE Doctrine Division Planning Meeting Participants: ARCYBER Support Element Doctrine, EW Doctrine, ICoE Doctrine, Cyber CoE Doctrine Stakeholders: Cyber CoE, ICoE, FCoE, ARCYBER, FORSCOM

Way Ahead • Adjudicate comments from world-wide staffing • Prepare final draft • Internal Center of Excellence review • Editor review • Worldwide staffing final draft 22 September

Milestones Jun 14: Initial draft staffing Sep 14: Final draft staffing Dec 14: Cyber CoE approval Jan 15: CAC approval Mar 15: Submit to CADD for publication Apr 15: Projected publication

As of: 1 Jul 14

FM 3-12 Description: FM 3-12, Army Cyberspace Operations, provides tactics and procedures for the implementation and integration of cyberspace operations by commanders and staff in support of unified land operations. Status: Adjudicating comments from initial draft and preparing for worldwide staffing of final draft on 22 September 2014.

FM 3-12 Status

UNCLASSIFIED

Chapter One includes the fundamentals, basic definitions, relation to joint cyberspace operations, and is focused on explaining cyberspace operations significance to the Army. Changes include correct definitions, clarification and alignment of information. Chapter Two includes the authorities and the key organizations above the Army Service level. There is an inseparable relation, that is not always direct or apparent are explained. Changes include clarification of information. Chapter Three explains the tactics of Army units ASCC and below, responsibilities, roles, relationships based on authorities, the commanders role, and other components. Changes include expanding the echelon information and clarification of information, responsibilities, authorities based capabilities. Chapter Four explains the cyberspace operations contribution to the MDMP process and targeting. MDMP changes focus on building the contributions based on including capability differences to the existing process. Changes include verifying the information in the tables, ensuring the explanatory paragraphs identify the step of the MDMP process succinctly, the targeting process explains how cyberspace operations fit within the current targeting processes, and overall cyberspace considerations in the operations process. Appendices will include the CERF

FM 3-12 Final Draft

UNCLASSIFIED

Doctrine Development Timeline

New Pub New Publication Title Publication Status PD Staffing ID Staffing FD Staffing Date to APD

FM 6-02 Signal Support to Operations Published – JAN 14

FM 3-12 Army Cyberspace Operations FD Dev – SEP 14 JUL 13 JUN 14 SEP14 MAR 15

FM 3-38 Cyber Electromagnetic Activities Published – FEB 14

ATP 3-12.1 Techniques for Offensive Cyberspace Operations (Classified)

PD Dev

ATP 3-12.2 TBD PD Dev

ATP 3-36 Electronic Warfare Techniques FEF Prep – JAN 14 JUN 14

ATP 6-02.40 Techniques for Visual Information Operations

FAD Prep - APR 14 APR 13 FEB 14 SEP 14

ATP 6-02.43 Techniques for Signal Soldiers in Support of Operations

ID Dev – AUG 13 APR 13 OCT14 MAR15 NOV 15

ATP 6-02.45 Techniques for Signal Support ID Dev – AUG 13 APR 13 DEC 14 MAY15 NOV 15

ATP 6-02.53 Techniques for Tactical Radio Operations ID Dev – AUG 13 APR 13 JUL14 DEC 14 JUL 15

ATP 6-02.54 Techniques for Satellite Communications ID Dev – AUG 13 APR 13 JAN15 JAN15 AUG 15

ATP 6-02.60 Techniques for the Warfighter Information Network - Tactical

ID Staffing – MAY 14 AUG 13 MAY 14 DEC14 JUL 15

ATP 6-02.70 Techniques for Spectrum Management Operations

FD Dev – DEC 13 APR 13 OCT 13 AUG14 APR 15

ATP 6-02.71 Techniques for LandWarNet Network Operations

FD Dev – DEC 13 APR 13 OCT 13 AUG 14 MAR 15

ATP 6-02.75 Techniques for Communications Security Operations

FD Dev– APR 14 APR 13 MAR 14 SEP 14 MAR 15

TC 6-02.20 Wire and Cable FD Dev – FEB 14 APR 13 NOV 14

UNCLASSIFIED

Cyber CoE Doctrine Website

https://lwn.army.mil/doctrine

Published Doctrine

Doctrine Highlights

POCs

Doctrine Under Development

External Documents Under

Review

https://lwn.army.mil/doctrine

UNCLASSIFIED

Questions

10 September 2014

Cyber CoE

Lessons & Best Practices Briefing

Mr. Rick San Miguel

UNCLASSIFIED

Agenda

• Mission

• Lessons Learned

• Benefits of Lessons Learned

• Coordination – Collaboration – Communication

• Cyber CoE Lessons Learned Process

• Observations

• Way Ahead

• Website

OBJECTIVE:

Document lessons and best business practices (BBPs) based on the Cyber

CoE’s proponencies of Signal, Cyber and Electronic Warfare across

doctrine, organization, training, materiel, leadership and education,

personnel, facilities (DOTMLPF).

MISSION: Collect, analyze and disseminate approved lessons and best practices to the Cyber Center of Excellence to enable continuous improvement of Soldier training and the Cyber community (cyber, electronic warfare and signal) to sustain and enhance the Army's preparedness to conduct current and future Cyber/Signal operations.

COORDINATE – COLLABORATE – COMMUNICATE

Mission

Lessons and Best Practices DO NOT constitute a lessons learned without changing individual, unit, or Army behavior, which is accomplished through the application of the Lessons Learned process.

AR 11-33, Army Lesson Learned Program

COORDINATE – COLLABORATE – COMMUNICATE

Lessons Learned

• Enables continuous improvement of cyber, electronic warfare, and signal forces. • Sustains, enhances, and increases the Army’s preparedness to conduct current

and future operations. • Documented lessons and best practices are analyzed and approve solutions are

provided by Cyber CoE SMEs.

• Solutions/recommendations to lessons and best practices are posted on the Cyber CoE Lessons and Best Practices website.

• Identifies trends within units.

• The lessons learned process does not end until the problem is resolved.

• Invaluable insight to units who will deploy forces under similar conditions in the future.

Benefits of Lessons Learned

UNCLASSIFIED

Coordination, Collaboration, Communication

Leadership and Education

Doctrine

Army Forums

Initial Entry Training

Collection of Lessons & Best Practices

Training Development

Critical Task/Site Selection Board

Advisory Forum

Assessment Forum

Army Enterprise Accreditation Standards

COORDINATE – COLLABORATE – COMMUNICATE

Provides current and relevant information

for critical tasks assessment.

Brief all incoming IET students on

the Concept of Lessons Learned.

Read and understand all Cyber / Signal

Doctrine to identify and assess observations.

Participate in the Army Forum

representing the Cyber CoE.

Assess, validate, categorize and

recommend L&BPs based on

DOTMLPF-P

Present and discuss L&BP with CoE, SMEs,

Instructors, and Training Developers.

POC for TD to assist in obtaining current and

relevant information to update POIs and LPs

CTCs, OP EXs, Home Station Training

UWs, other COEs, Forums, Submissions

AEAS 21 (LL) Applied in AEAS 1 – QAO; AEAS 7 – OE; AEAS 10 – ALM;

AEAS 14 – KM; AEAS 17 – S&F; and AEAS 18 – Education.

Brief all Officer, Warrant, RNCOA and

Pre-Command Course Students on the

Concept of Lessons Learned.

UNCLASSIFIED

Cyber CoE LL Process

UNCLASSIFIED

Phase I - Documentation

orums

COTS

MTOE TPE

POR

25 Series MOS

Information & Knowledge Management

NETOPS

SPECTRUM

COMSEC

CYBER

255A

25A

53A

255N

255S

LESSONS and BEST PRACTICES Cyber CoE Proponency: Cyber, Signal and Electronic Warfare

Doctrine Organization Training Materiel L Personnel Facilities leadership education

Unit Umbrella Weeks

Key Leader Interview

SIGNAL FORUMS

DCO

VI OPS

254A

S6 COP

PCLL SBCT 24A

FORSCOM

Military Intelligence

Lessons Learned Process (Identify – Assess – Recommend)

Phase II

OILs

COORDINATE – COLLABORATE – COMMUNICATE

UNCLASSIFIED

Phase II – Assessment Forum

Purpose: Coordination, collaboration and communication with all CoEs to identify trends, observations

and recommendations captured from operational units at CTCs or from deployments in order to

dominate current and future operations in support of ULO.

• Cybersecurity (phishing attacks)

• The use of Passwords/default password configurations

• Social media (Facebook, rally point)

• Standard Operating Procedures (SOPs)

• S-6 Management (25E Battalion)

• Retransmission (RETRANS)

• Internal/External Sync Meetings (S-6)

• Communications SOP / PACE

• COMSEC SOP

Assessment Forum - 19 August 2014

COORDINATE – COLLABORATE – COMMUNICATE

UNCLASSIFIED

Phase III – Advisory Forum

• Cyber Coe Lessons and Best Practices (L&BP) presents documented OILs from unit

training rotations or recent deployments.

• Facilitates discussion on L&BPs with Cyber CoE Subject Matter Experts.

• Recommends L&BPS if applicable to Council of Colonels (Phase III) for discussion/or

decision.

An opportunity to discuss –

TRADOC TASKORD IN120131 – Support To Decisive Action Rotations at the CTCs

CTC Observations documented during CTC rotations (DA, Cyber and CS 13/14)

Guest Speakers

CS13 Operational observations during Afghanistan Deployment

Discussion on 25D, Roles and Responsibilities

Discussion on 255S, Roles and Responsibilities

Advisory Forum 2 September 2014

COORDINATE – COLLABORATE – COMMUNICATE

UNCLASSIFIED

COORDINATE – COLLABORATE – COMMUNICATE COORDINATE – COLLABORATE – COMMUNICATE

• Command Post Displacement

• COMSEC Dissemination / Changeover

• COMSEC Compromise Plan

• Service Desk Operations

• Lower Tactical Internet (unit training)

• Mission Command Systems (unit training)

• RETRANS

• Power Distribution Planning

• Maintenance (Win-T systems)

• Cyberspace Security Training

• BDE S6 and Signal Company Relationship

• S6 Synchronization Meetings

• Security + Certification

• Communications SOP

• PACE Planning

• Signal Support Systems Chief

• Spectrum Management (25E)

Decisive Action Observations

TRADOC TASKORD IN133383 – Support To Decisive Action Rotations at the Combat Training Centers - NTC Rotations: 14-03, 14-06 and 14-09

UNCLASSIFIED

Way Ahead

Assessment Forum 11 December 2014

Secure DCO 1330 – 1500, Moran Hall 1st Floor, SIPR Room

Advisory Forum 13 January 2015

“A Commanders Role in Cyberspace Operations”

Nelson Hall Studio B and by DCO 1330 – 1530

An opportunity to discuss –

• Cyberspace Operations

• Cyber Threats

• Cyber Electromagnetic Activities (CEMA)

- CEMA Cell

Guest Speakers

To Be Determined

COORDINATE – COLLABORATE – COMMUNICATE

• Enable Continuous Improvement of Army Forces.

• Sustain, Enhance, and Increase the Army’s

preparedness to conduct current and future operations.

• Document L&BPs, analyze and

approve by Cyber CoE SMEs.

• Solutions/recommendations to L&BPs are posted on the Cyber CoE L&BP website.

• The Lessons Learned Process does not end until the problem is resolved.

https://lwn.army.mil/web/slls/home

COORDINATE – COLLABORATE – COMMUNICATE

Scheduled TDY

Training Developers Corner

RFI / Inquires / Submit L&BP

L&BPs by MOS

SOPs, CS 13, Training Insight of the week

Cyber CoE Lessons Learned Website

Questions