NCDOC and CTF 1020: Navy Cyber Defense and Operations (copy)

When did NCDOC become an official command?

2006

What was established in 1995 related to NCDOC?

The Navy's Computer Incident Response Team (NAVCIRT)

What significant operation occurred in 2003 involving China?

Operation QUIET STORM / TITAN RAIN

What was NCDOC's first operation under U.S. Cyber Command?

BUCKSHOT YANKEE in 2007

What was the first major operation by NCDOC to counter cyber activity?

Operation ROLLING TIIDE (2013-2014)

What was the significance of Operation ATLAS KRYPTON in 2015?

It marked the first tactical use of an assigned CPT for cyber operation.

What are the primary responsibilities of NCDOC?

Coordinate, monitor, and oversee the defense of Navy computer networks and systems.

What does DCO stand for in the context of NCDOC?

Defensive Cyberspace Operations

What is the role of NCDOC as CTF 1020?

To maintain the DCO posture for the Navy within the DoDIN.

Who tasks NCDOC to execute DCO?

USCYBERCOM

What is the mission of CTG 1020.1?

Conduct 24/7 watch floor, continuous monitoring of Department of the Navy Networks.

Who is the DIVO of CTG 1020.1?

LCDR Akers

What is the mission of CTG 1020.2?

Provide Afloat DCO capabilities.

Who leads the Navy Hunt Team (CTG 1020.2)?

LCDR French

What does CTG 1020.3 focus on?

Conducting Red Team exercises and evaluation against Navy Networks.

What is the role of CTG 1020.4?

NCDOC West; COOP Site for CTF 1020.

What does CTG 1020.5 stand for?

Crisis Action Team (CAT)

What networks does NCDOC fully cover?

IT21, XNET, ONENET

What networks does NCDOC partially cover?

DREN, MWR, EDU, NMCI, Cloud, BUMED

What is the role of the Battle Watch Captain at NCDOC?

Overall in charge of NCDOC watch floor, acts on behalf of the CO.

What is the purpose of Attack Sensing and Warning at NCDOC?

Provide in-depth awareness of alert sensor and warning operations.

What is the responsibility of the Endpoint function at NCDOC?

Investigation of host-based analytics.

What does NCDOC do for incident handling?

Provides detection, analysis, and response to any event or incident.

Which Cyber Protection Teams (CPTs) does NCDOC have ADCON over?

550 & 552

What type of intelligence support does NCDOC provide for cyberspace operations?

Tactical, operational, and strategic cyber threat intelligence.

What is the mission of the Navy Cyberspace Defense Team?

Support Carrier Strike Group and Amphibious Readiness Group Commanders by proactively searching for IOCs.

What capabilities does the Computer Network Defense Toolkit (CDT) have?

Collect, store, and analyze 'full' network traffic in a non-intrusive manner.

Who certifies the Navy Red Team for operations?

NSA

What are the areas of capability for the Navy Red Team?

Tier 1 and Tier 2 Cyber Operations, Phishing, Close Access, Wireless Operations.