Cyber Mission Force (CMF): Structure, Roles, and Operations (copy)

What is the purpose of the Cyber Combat Mission Force (CCMF)?

To conduct offensive cyberspace operations in support of Combatant Commands.

What does the Cyber National Mission Force (CNMF) focus on?

Defending the nation against strategic cyber threats.

Who has overall responsibility for the Cyber Mission Force (CMF)?

The United States Cyber Command (USCYBERCOM).

What are the three types of operations conducted by the CMF?

Offensive Cyberspace Operations (OCO), Defensive Cyberspace Operations (DCO), and Department of Defense Information Network Operations (DODIN Ops).

What is the mission of the Cyber Protection Force (CPF)?

To defend DoD networks and systems through defensive cyberspace operations.

What is the role of Combat Mission Teams (CMTs)?

To execute cyberspace attacks against adversary targets.

What do Cyber Protection Teams (CPTs) do?

Conduct vulnerability assessments, incident response, and network hardening.

What is the focus of Offensive Cyberspace Operations (OCO)?

To project power by degrading, disrupting, denying, or destroying adversary systems.

What are Defensive Cyberspace Operations (DCO) designed to do?

Protect, detect, and respond to threats against DoD networks and systems.

What is the purpose of Department of Defense Information Network Operations (DODIN Ops)?

To design, build, configure, secure, operate, and maintain DoD networks.

What is required for cyber operations with significant effects?

Coordination across the National Security Council (NSC) and relevant departments.

What must all operations comply with?

U.S. law, international law, and established rules of engagement.

What is the role of National Mission Teams (NMTs)?

To conduct cyberspace operations to detect, deter, and defeat high-end threats.

What do National Support Teams (NSTs) provide?

Intelligence, planning, and capability development support to NMTs.

What is the purpose of the Deployable Mission Support System-Navy (DMSS-N)?

To provide a portable, scalable platform for cyber operations.

What capabilities does the PURPLESAFARI 2.X provide?

Network mapping, vulnerability scanning, log aggregation, incident response coordination, and customizable dashboards.

What is the significance of legal advisors in cyber operations?

They ensure compliance with legal and policy requirements throughout planning and execution.

What is the relationship between JFHQ and AOR assignments within the CMF?

JFHQ-C aligns with specific Combatant Commands (CCMDs) to support regional or functional Areas of Responsibility (AORs).

What do Combat Support Teams (CSTs) provide?

Analytic and planning support to Combat Mission Teams (CMTs).

What is the role of planners in the CMF?

To develop mission plans and coordinate execution with supported commands.

What is the focus of the Cyber National Mission Force (CNMF)?

To conduct national-level cyberspace operations against adversary cyber actors.

What type of operations do Cyber Protection Teams (CPTs) conduct?

Defensive cyberspace operations to protect DoD networks.

What are the work roles associated with Combat Mission Teams (CMTs)?

Operators, planners, targeteers, and analysts.

What is the mission of the Cyber Combat Mission Force (CCMF)?

To execute cyberspace attacks aligned with operational objectives of supported Combatant Commands.

What is the purpose of the Cyber Protection Force (CPF)?

To defend DoD networks and systems through defensive cyberspace operations.

What is the mission of Cyber Protection Teams (CPTs)?

To conduct defensive cyberspace operations (DCO) to protect and defend Department of Defense (DoD) networks, systems, and data.

What are the four categories of commands to which CPTs are aligned?

National, DODIN, Combatant Command, and Service.

What is the purpose of the National command alignment for CPTs?

Support strategic-level missions to defend national interests.

What is the purpose of the DODIN command alignment for CPTs?

Protect and defend the DoD's global information network.

What are the core functions performed by CPTs?

Hunting, clearing, hardening, and assessing networks.

What is the purpose of a Hunt Forward Operation (HFO)?

A proactive, collaborative cyberspace mission conducted by CPTs in partnership with allied or partner nations.

What is the purpose of the Cyber Threat Emulation capability of a CPT?

Simulate adversary tactics to assess network defenses.

What does the Assess capability of a CPT evaluate?

Cybersecurity posture and identifies vulnerabilities.

What is the purpose of the Threat Mitigation capability of a CPT?

Reduce risk and restore network integrity after cyber incidents.

What is the purpose of the Enable Hardening function of a CPT?

Strengthen systems to prevent future exploitation.

What activities are involved in the Discovery and Counter-Infiltration function?

Identify unauthorized access and adversary presence within networks.

What is the mission of Defend the Nation?

Detect, deter, and defeat strategic cyber threats to the United States and its interests.

What is the purpose of the Service command alignment for CPTs?

Support the cyber defense needs of individual military services.

What does the Cyber Protection Teams' toolkit enable them to do?

Perform core functions such as hunting, clearing, hardening, and assessing networks.

What is the purpose of the operational de-confliction process between NSA/CSS and USCC?

Ensure intelligence activities do not interfere with operational missions and vice versa.

Who must an NMT/NST seek approval from for reporting outside approved missions?

USCYBERCOM J3 (Operations Directorate).

What is the focus of the Hunt function of CPTs?

Actively search for advanced threats within networks.

What activities are involved in the Clear function of CPTs?

Conduct containment, eradication, and recovery operations.

What is the alignment of CPTs with Combatant Commands?

Integrated with JFHQ-C elements aligned to specific CCMDs.

What is the focus of the Service function of CPTs?

Enhancing cybersecurity posture and readiness of service-specific networks and platforms.

What is the purpose of the strategic coordination of cyber operations?

Ensure alignment with national objectives.

What is the role of the National Security Council (NSC) in cyber operations?

Review and synchronize cyber operations.

What are the activities involved in the Threat Mitigation function?

Implement defensive measures and security controls, support recovery operations.

What is the purpose of the Log Aggregation and Analysis Platforms in CPT operations?

Enable detection of anomalies and malicious activity.

What is the focus of the CPT mission overview?

Identify and mitigate vulnerabilities in DoD information networks.

What is the purpose of the Incident Responder role in CPTs?

Investigates and responds to cyber incidents.

What does the Forensic Analyst do in CPTs?

Collects and analyzes digital evidence post-incident.

What is the focus of the Threat Analyst role?

Monitors threat intelligence and advises on emerging risks.

What activities does the Malware Analyst perform?

Examines malicious code and develops mitigation strategies.

What is the role of the System Administrator in CPTs?

Implements security configurations and maintains system integrity.