Cyber Support to CJOC / CAF Operations

Brief to AFCEA3 March 2015

LCol Nick Torrington-SmithTeam Lead

Joint Cyber Operations Team

CAF Cyber Operations

• Cyber Operations: – The application of coordinated cyber

capabilities to achieve an objective

• A clear objective: Defending our networks!

Security vs DefenceSecurity is primarily concerned with protection from attacks that may occur

proactive and sets conditions for Defence

practices, policies, and guidelines that describe ideal operating conditions for a network

may additionally prescribe technical controls to enforce these conditions

Defence is the deliberate response to an attack that has occurred or is ongoing

exists to address a Security condition that has been overcome

aim is to return to the operating condition prescribed by Security

Defence takes over where Security has been overcome!

Where does the JCOT fit in?

JCOT C2 Relationships

JCOT Team LeadLCol Torrington-Smith

CJOC COS OpsBGen Brennan

CFIOGCol Moritsugu

D Cyber FDCol Sabourin

Positions belong to DG Cyber

Works across all functional areas (CJOC Cyber Champion)

OPCONAdministrative support

Operationally responsive To Comd CJOC

Champion for CFIOGmission set within CJOC

JCOT work informs FD efforts

JCOT PlansMaj Deschenes

JCOT OperationsCapt Amberley

JCOT IntPO1 Spenst

CSD CJOCSIGINT Analysts Team

JCOT Deputy Team LeadMaj Caron

• In coordination with key functional staffs, participate in various planning groups to provide cyber inputs into the Operational Planning Process within the CJOC– Ensure CAF cyber capabilities are represented in the mission planning process– Assist in identifying current and future cyber capability gaps in support of CAF operations

• Provide situational awareness on EW, SIGINT and CNO developments and impacts on CAF operations and CJOC priorities

Cyber Planning

OP LADON• Mission

DND/CAF will develop a comprehensive operational framework for the conduct of DCO to maintain DND/CAF freedom of manoeuvre in the cyber domain.

• CDS Intent. My intent is to maintain freedom of manoeuvre across all domains including the cyber domain. This will be achieved by operationalizing the conduct of DCO to defend , on a continuous basis, DND/CAF CIS, data, and associated infrastructure critical to the deployment, conduct and sustainment of DND/CAF missions, and to the command and control of military forces at home and abroad.

OP LADON• MA brief to Comd CJOC:  9 Mar 2015• COA development: Feb – Apr 2015.  • Decision brief to Comd CJOC early May 2015 • BB to CDS NLT end May 2015 (implies prior

socialization with other L1 stakeholders by this date)

• Plan development Jun – Jul 2015.• Approval of plan by Comd CJOC NLT Sept 2015• Execution order signed by CDS NLT Nov 2015.

In Greek mythology, LADON was the serpent-like dragon that twined and twisted around the tree in the Garden of the Hesperides and guarded the golden apples.

• Maintain awareness of developments in current CAF operations that have a cyber nexus or which could be better supported by existing cyber capabilities, and inform and advise appropriate CJOC staff and external agencies as appropriate

• Provide cyber situational awareness to Comd CJOC and key staff

• Evaluate lessons learned from CAF operations which have a cyber relevance to ensure capability development efforts are initiated as appropriate

Cyber Operations

• Link into CFINTCOM intelligence capability supporting cyber operations from strategic to tactical• Provide SA on adversarial cyber activities• Coordinate cyber related CCIRs• Propose cyber intelligence collection tasks to satisfy CJOC operational requirements (cyber IPB)• Advise on potential cyber threat / risks for CAF operations

Cyber Intelligence

Intelligence Assessments

CompleteIn progressContribution to other products

Summary - Current Activities• Operations

– CJOC CUB – Situational Awareness Products– OP CHAMPION (Improved defensive posture)– Support to Allies / Collaborative efforts

• Intelligence– Threat Assessments– Support to planning

• Planning– OP LADON – Deliberate planning effort for DCO– Cyber inputs to CONPLANS / OPLANS / SOODOs

• Other support– Cyber play in exercises and joint training events– Other CJOC committees and boards

Questions / Discussion