UNCLASSIFIED FOUO Cyber Flag 12-1 The overall classification of this brief is UNCLASSIFIED 1 UNCLASSIFIED UNCLASSIFIED Cyber Flag Mission Cyber Flag is a joint cyberspace training exercise fusing attack and defense across the full spectrum of operations against a realistic and thinking enemy in a virtual environment Objectives o Provide a dynamic joint cyber training environment o Integrate offensive and defensive cyberspace operations o Exercise USCYBERCOM C2 construct o Leverage and operationalize ongoing planning efforts 2 UNCLASSIFIED UNCLASSIFIED Cyber Flag - Attributes o Tactically focused training exercise with operational C2 utilizing realistic virtual environments - Assumes necessary authorities inter-agency coordination deconfliction o Allows for force-on-force offensive and defensive maneuvers o Allows for dynamic OPFOR utilizing adversary TTP - Aggressors - moving beyond Red Teams o Conducted on a cyber range with Face-to-Face Mass In-Brief and Debrief - - - Secure repeatable controllable and measurable environment Focused on debriefs to capture lessons learned and adjust TTPs and CONOPs Face-to-Face in order to build esprit de corps and unity of effort for cyber forces o Unencumbered by real-world Service COCOM training constraints safety restrictions - No exercise network is off-limits 3 UNCLASSIFIED UNCLASSIFIED Cyber Flag - Schedule Travel Academics Planning Day 1 Day 2 Day 3 0600 Day 4 Security In-Processing Mission Prep Mission Prep Mission Prep Mission Prep 0800 Opening Remarks Mass Brief Mass Brief Mass Brief Mass Brief 1000 1100 1200 1300 Travel DV Day 0700 0900 Wrap up T r a v e l Security Brief Local Area Brief Event Key Security Out-Brief Closing Remarks Academics Mission Academics Mission Mission Mission Cyber Seniors Hotwash Mission Planning Academics Range Fam Admin Lessons Learned Cyber Flag Staff Wrap-Up T r a v e l Academics Planning Brief Mission 1400 1500 1600 1700 D a y Facility White Tours Cell Coord Post-Mission Analysis Post-Mission Analysis Post-Mission Analysis Post-Mission Analysis Mass Debrief Mass Debrief Mass Debrief Mass Debrief OIC Interviews OIC Interviews Cyber Flag Mixer Mission Planning Mission Planning D a y Mission Planning 1800 1900 UNCLASSIFIED DV Day 4 UNCLASSIFIED Cyber Flag - Future Cyber Flag will become an annual joint cyber training event continually striving to sharpen the skills of Cyber Forces Blue Forces o Service specific Flag-like events in preparation for Joint Cyber Flag o Explore whole of government approaches to cyber challenges through integration of other government agency equities NSA DHS etc and allies o Evaluate cyber role in OPLANs and conduct mission rehearsals Cyber Ranges o Leverage new technologies and expand existing range architecture to create an easily configurable Joint training and experimentation environment o Enable virtual secure enclave operations to be executed during future Cyber Flag events as well as Service and COCOM major exercises o Optimize and normalize range prioritization and scheduling 5 UNCLASSIFIED UNCLASSIFIED FOUO Cyber Flag 12-1 Questions The overall classification of this brief is UNCLASSIFIED 6 UNCLASSIFIED UNCLASSIFIED Cyber Flag C2 Construct White Cell USSTRATCOM Combatant Command Blue Players USCYBERCOM National Cyber Ops ARCYBER FLTCYBER MARFORCYBER 24 AF AFCYBER UNCLASSIFIED Joint Cyber Component Command Joint Components DISA TNOSC Attached USCYBERCOM Forces Base Station Garrison COCOM OPCON TACON ADCON Supporting Supported 7 National Security Archive Suite 701 Gelman Library The George Washington University 2130 H Street NW Washington D C 20037 Phone 202 994‐7000 Fax 202 994‐7005 nsarchiv@gwu edu