Back to news

July 14, 2020 | International, C4ISR, Security

Cyber Command’s measure of success? Outcomes

A U.S. Cyber Command official said that when they examine whether any given operation or even when a strategy has been successful, they're not looking at metrics, but rather outcomes.

“It's really about: have we enabled the collective defense of the nation,” Maj. Gen. John Morrison, Cyber Command's outgoing chief of staff, told C4ISRNET in a July interview.

Roughly two years ago, Cyber Command and the Department of Defense started a paradigm shift for cyber policy and operations. The 2018 DoD cyber strategy tasked Cyber Command to “defend forward,” which is best described as operators working on foreign networks to prevent attacks before they happen. The way Cyber Command meets those goals is through persistent engagement, which means challenging adversary activities wherever they operate.

Part of the need for a change was that adversaries were achieving their objectives but doing so below the threshold of armed conflict – in the so-called gray zone – through cyberspace. DoD wanted to stop that from happening through more assertive cyberspace action.

Some in the academic community have wanted to see some way in which the command can measure the success of these new approaches. But Morrison explained that these outcomes, or intended effects during operations, could be enabling other partners – foreign or other agencies within the U.S. government – to take action in defense of the nation.

For example, he said that when Cyber Command teams encounter malware they haven't seen before, they share it with partners in government, such as FBI or DHS, which can lead to the greater national collective defense.

He also noted that building partnerships enables a sense of collective defense in cyberspace and can help significantly in the future against sophisticated adversaries.

Morrison will be replaced at Cyber Command by Maj. Gen. David Isaacson. It is unclear where Morrison is headed next.

The need for flexibility

As Cyber Command has gained more authorities in recent years, it has been able to conduct significantly more operations and different types of operations as well, Morrison said.

Throughout these missions, leaders have learned they must be flexible, be it in tactics, structure of teams, or the capabilities they need or develop.

“We have thinking adversaries that we go against every single day. That drives us to change how we operate,” Morrison said. “You change your tactics, techniques and procedures but that's also going to drive changes in how we train and what we train ... It drives how we do capability development and development of capabilities and the employment of those capabilities, which again ties back to training at a much faster pace in this space.”

Morrison noted that this includes how teams are organized. He explained the way defensive cyber protection teams were first envisioned when they were created in 2012-2013 is not at all how they fight now.

To keep up with dynamic adversaries, Cyber Command is keeping closer watch on readiness metrics developed by the command for its cyber teams. This is a framework that details standards for how teams are equipped, manned and supplied. Cyber protection teams were detailed first and now Cyber Command has readiness metrics for combat mission teams, the offensive teams that support combatant commands, and intelligence/support teams. Officials are still working through metrics for what are called national teams that are charged with defending the nation.

The command also needs to improve the way it feeds operational requirements into capabilities cyber warriors can use, Morrison said. This includes improving acquisition practices for both of the programs of record Cyber Command is executing through its Joint Cyber Warfighting Architecture — which guides capability development priorities and includes the Unified Platform and Persistent Cyber Training Environment — and the more rapidly developed tools needed on the fly.

“That's where you've got the ability inside the command now to rapidly produce that capability through a variety of means and get it into the hands of our operators as quick as possible,” he said.

In fact, the Army has begun to embed tool developers and coders alongside operators through the Rapid Cyber Development Network to more quickly meet urgent needs. This allows them in almost in near real time to develop or change tools to meet requirements.

“How do we do capability development in a much smoother fashion than we sometimes do today where we're able to rapidly assess, prioritize, resource operational requirements to produce a capability that we can then get back into the hands of our operators as quickly as possible,” Morrison said.

From these capabilities that are developed for shorter term needs, he said the key will be deciding if they want to move them into a program of record. Will it be a longer term capability, will it adjust tactics, techniques and procedures or training?

“We've got to work those pieces,” he explained.

On the longer term, program of record capabilities, he noted officials still want the iterative development associated with more software-centric systems as opposed to more traditional military hardware.

Integration with combatant commands

Cyber is much more ingrained in military planning and operations than it was in years prior, Morrison said, however, work remains.

There is now a closer link between the combatant commands and Cyber Command elements that plan, coordinate, synchronize and conduct cyber operations on their behalf, Morrison said, noting that they are still maturing.

These include the Joint Force Headquarters-Cybers‚ which are commanded by each of the service cyber component commanders, and plan, synchronize and conduct operations for combatant commands they're assigned to, and new entities being created called cyber operations-integrated planning elements. These are forward extensions of the Joint Force Headquarters resident within the combatant commands to better coordinate cyber planning with other operations for the combatant commander.

These entities all enable a greater central connective tissue from a Cyber Command perspective as they can feed from the theater level back to the command providing a global cyberspace picture.

“You have to take not only a regional view of anything that you're doing, but, when you can bring the power of a global enterprise behind it, that's a pretty powerful capability for our nation,” Morrison said. “We are in the process of building every one of our CO-IPEs but I definitely think that we are heading in the right direction, especially as [the CO-IPEs] get built and they integrate closer and closer with their supported combatant commands.”

https://www.c4isrnet.com/cyber/2020/07/10/cyber-commands-measure-of-success-outcomes/

On the same subject

  • Maxar wins more work on Army’s One World Terrain virtual training tool

    February 28, 2023 | International, C4ISR

    Maxar wins more work on Army’s One World Terrain virtual training tool

    All phases and options of the One World Terrain prototype project were previously said to be worth nearly $95 million.

  • Italy’s new defense minister commits to F-35, butts heads with France

    July 3, 2018 | International, Aerospace

    Italy’s new defense minister commits to F-35, butts heads with France

    By: Tom Kington ROME ― Italy's new populist government may slow down but not reduce its order of F-35 fighter jets, while trimming its manpower in Afghanistan, Defence Minister Elisabetta Trenta has told Defense News. In one of her first interviews since taking office at the start of June, Trenta said Italy remained a faithful ally of the U.S., but added she was skeptical about sanctions imposed on Russia by the West. A former defense academic at the Link University in Rome and a veteran of the Italian Army's civil reserve unit, Trenta was named defense minister by a coalition government formed in June, which groups the anti-migrant League party and the anti-establishment Five Star Movement. Five Star officials promised last year to scrap Italy's purchase of 90 F-35 fighters, but Trenta said the new government would not cut orders, even if it might stretch out its purchase plan. “It's a program we inherited and we have lots of questions; that is why we will evaluate the program considering the industrial and technology benefits for national interest, as we are the new government,” she said. “What I would like to do is lighten the load since we have other spending commitments in Europe. We will try to stretch out deliveries instead of cutting the order, which would reduce offsets and mean penalties,” she said. Foreign military invovlement Trenta met U.S. national security adviser John Bolton on June 26 as he visited Rome, and she confirmed the new government's strong ties with the U.S. “The U.S. is our historic ally, we have never doubted that,” she said. Trenta said she told Bolton that Italy aims to reach NATO's defense spending target of 2 percent of gross domestic product. “But we would also like our strong presence in military missions recognized as an added value,” she said. She said that presence would still be substantial despite the government's plan to trim its headcount in Afghanistan from 900 to 700, if and when replacements could be found to step in from other nations. “We don't want to undercut stability or reduce support for Afghans. We want to start a change of pace, as established by the previous government, keeping at the same time the mission operative,” she said. “We don't want to weaken the mission, so we will look for other partners to take over tasks like logistics.” The minister said she asked Bolton for help launching a planned Italian military mission to Niger in Africa to help combat people smugglers who send migrants across the Sahara to Libya, where they embark on boats heading for Europe. The mission was announced last year but has been blocked by the Niger government, she said. She said she also asked Bolton to help Italy take a “leadership” role in bringing peace to lawless Libya, noting she would visit the country next month in hopes of meeting Gen. Khalifa Haftar, the military commander hostile to the United Nations-backed Tripoli government that is supported by Italy. Italy has been irked by French diplomacy in Libya, including backing for Haftar and support for elections by year-end. The election plan, Trenta said, was “not the best thing to do — the U.S. has seen in Iraq what happens when you rush things.” Butting heads France and Italy have meanwhile bickered this month over differing plans to deal with migrants arriving in Europe, but Trenta said no amount of political arguing would derail a planned merger between the naval operations of Italian shipyard Fincantieri and France's Naval Group. “Both countries are planning on the deal going ahead — there has been no impact from the migration discussion,” she said. The new government in Rome has not yet signed up to a French plan for a multinational rapid intervention force, which would contain fellow European Union members, but also the U.K., which is planning to leave the EU. France said it wants the initiative to exist separately to the EU's Permanent Structured Cooperation initiative for security and defense. Trenta said Italy would probably sign. “As a new government, we wanted to study it and make sure it does not weaken the EU PESCO initiative,” she said. Italy's new government rattled its European allies earlier this month when Prime Minister Giuseppe Conte said he would like to end sanctions that were imposed on Moscow after Russia's 2014 annexation of Ukraine's Crimean Peninsula. Trenta shares his view. “We have to consider Italy's strategic interests — sanctions have damaged Italian exports, and it would be a good idea to evaluate alternative instruments,” she said. “We see the U.S. as an ally, but we don't see Russia as a threat — we see it as an economic partner,” she said. https://www.defensenews.com/global/europe/2018/06/29/italys-new-defense-minister-commits-to-f-35-butts-heads-with-france/

  • Four ways US Army’s Pacific chief plans to boost regional land forces

    May 16, 2024 | International, Land

    Four ways US Army’s Pacific chief plans to boost regional land forces

    More countries are joining multilateral exercises and training events to strengthen a network to deter aggression in the Pacific.

All news