SECR E'f Department of Defense DIRECTIVE December 9 ∙1996 Number S3600 1 ASD C31 SUBJECT Information Operations 10 U References a ∙DoD Directive TS3600 1 Information Warfare U December 21 1992 hereby canceled b DoD Instruction S3600 2 Infonnation Warfare Security Classification Guidance U February 6 1996 A REISSUANCE AND PURPOSE U This Directive reissues reference a to update IO and Infonnation Warfare IW policy defmition and responsibilities within the Department o Defense B APPLICABILITY U This Directive applies to the Office of the Secretary of Defense the Military Departments ∙ the Chainnan of the Jqint Chiefs of Staff the Combatant Commands the Inspector General of the Department of Defense the Defense∙ Agencies and the DoD Field Activities hereafter referred to collectively as the DoD Components C DEFINITIONS U Terms used in this Directive are defmed in the enclosure D POLICY 1 U The Department of Defense must be prepared for missions from peace to warto include military operations other than war M001W such as peacekeeping and humanitarian operations opposed by a wide range of adversaries including State and nonState actors ∙ To meet this challenge DoD activities shall be organized trained equipped and supported to plan and execute IO The goal of 10 is to secure peacetime national security objectives deter SECREiif SEC E't' conflict protect DoD information and infonnation systems and to shape the information environment If deterrence fails 10 seek to achieve U S information superiority to attain specific objectives against potentiat adversaries in time of crisis and or conflict The goal of 10 is to promote freedom of action for U S forces while hindering adversary efforts a U IO exploit the opportunities and vulnerabilities inherent in_dependence on information to support military activities 10 include actions taken in the infonnation environment any potential adversary 10 are by the Department of Defense to achieve specific objectives over conducted across the full range of military operations The focus of 10 is on decisionmaking and informationdependent systems including weapons infrastructure command and control computer and associated network systems These involve not only hardware and software but also associated personnel in tbe air and b U 10 impact and are impacted by military activities on the land at sea in space in the areas that influence information and infonnation systems This policy establishes the requirement that 10 activities support and are supported by other military activities and are considered in all appropriate contexts b l d U Across the full range of military operations 10 are controlled thiough an approval process appropriate to the sensitivity of tlie specific activity in question Certain 10 activities inherent and granted to the Secretary of Defense including some SIO may require coordination outside of the Department of Defense Such coordination will be conducted when customary or deemed necessary and approved during the operations plan review and approval process when developing policy defining 2 U 10 considerations shall be carefully evaluated and validating requirements conducting research and development acquiring systems and planning and executing operations SECitE't' 2 Dec 9 96 S3600 1 3 U Public Affairs during 10 planning must not focus on directing or manipulating public actions or opinions but rather seek a timely flow of information to both external and internal audiences Coordination of PA A initiatives and 10 plans is required to ensure that P support the commander's ove all objectives PA and 10 efforts will be integrated consistent with policy or statutory limitation 4 U Civil Affairs activities are important to 10 because oftheir ability to interface with key organizations and individuals in the information environment Civil Affairs can support and assist 10 objectives by coordinating with influencing developing or controlling indigenous infrastructures in foreign operational areas ∙ 5 U Intelligence must be readily accessible timely accurate and sufficiently detailed to support an array of DoD 10 requirements to include research development and acquisition and operational support Detailed intelligence on the information systems and the 10 doctrine likely to be employed by a wide range of adversaries must be provided of IO the DoD Components shall share 7 U ∙ To achieve the fullest possible integration tactics techniques procedures and technologies to the maximum extent practicable pursue lA activities to prevent adversarial effects 8 U The Department shall vigorously on our information and information systems The DoD Components shall work toward a multi ∙ ∙ layered information systems defense that incorporates protection detection reaction and reconstitution using riskbased management principles DoD information systems critical to e transmission and use of minimumessential information for command and control of forces shall minimizes or prevents exploitation be designed employed and exercised in a manner that degradation or denial of service from a multiple variety of attacks to include CNA Command and control of forces shall be planned and exercised to ensure critical information is adequately protected from adversary IW effects and U S forces can operate successfully in degraded information and communications environments ∙ 9 U To prepare for crisis and conflict the Department of Defense shall be organized trained equipped and supported to plan and execute IW against∙specific adversaries IW is an integral part of modem military operations f hus enhancing the capability of U S Armed Forces to with minimum losses and collateral effec ∙ win quickly and decisively 10 U SUfficient training including realistic exercises that simulate peacetime and wartime stresses shall be conducted to ensure that commanders of U S Armed Forces are wellinformed about tradeoffs among affecting exploiting and destroying adversary inforination systems as well as the varying capabilities and vulnerabilities of DoD infonnation systems The training shall also include an understanding of the interrelationship between the two Also the DoD UNCLASSIFIED Components shall create realistic 10 ∙environments for planning training and acquisition purposes to include models and simulations E RESPONSIBILITIES shall 1 U The Deputy Secretary of Defense a U Oversee the DoD role in the interagency process concerning 10 b U Review and obtain Secretary of Defense approval for SIO c U At the direction of the Secretary of Defense assist in the exercise of National Command Authorities NCA control over SIO 2 U The Assistant Secretarv of Defense for Command Control Communications and Intelligence shall a U Serve as the principal staff assistant and advisor to the Secretary of Defense and Deputy Secretary of Defense for DoD 10 b U Act as the central point of contact for the Department of Defense on 10 consistent with other identified responsibilities c t J Review DoD 10 plans programs and requirements to monitor and evaluate program responsiveness to validated requirements d U Deconflict DoD 10 programs e U Coordinate and deconflict dual use techniques procedures and technologies and decentralized f U Exercise oversight for centralized planning and coordination execution ofiO matters to include broad strategy program and budget review technol agy development security guidance see and education and DoD Instruction S3600 2 reference b training g U Develop 10 assessment methodologies and metrics h U Oversee applicable training and career development policy to ensure that trained personnel are available to support and participate in 10 i U Coordinate with the Under Secretary of Defense for Acquisition and Technology USD A T when 10 matters pertain to USD A T responsibilities EW and Space ControL UNCLASSIFIED 4 UNCLASSIFIED Dec 9 96 ∙s3600 1 j U Coordinate with the Under Secretary of Defense for Policy USD P when 10 matters pertain to USD P responsibilities psychological operations and deception k U Working with the the Secretaries of the Military Departments Defense Intelligence Agency DIA and the Defense Information Systems Agency DISA through the Joint Staff assist Combatant Commands with the development of command C4ISR architecture planning and programs that fully integrate 10 support requirements I U Require the Director DISA to 1 U Serve as∙the DoD focal point to oversee the application of information protection for the Defense Information Infrastructure 2 U Plan develop coordinate and support the automated information systems including the command control communications and cOmputer systems that serve the needs of the NCA under all conditions of peace and war Ensure that such systems respond to and incorporate IA requirements ∙ m U Require the Director DIA to 1 U Manage Defense intelligence community production to support the∙ full range of DoD 10 2 U Oversee DoD requirements and serve as the DefenSe intelligence community focal point for the development management ' and maintenance of infonnation systems and databases that facilitate timely collection processing and dissemination of allsource finished intelligence for DoD 10 3 U As DoD human intelligence HUMINT manager provide oversight idance and direction to the Defense HUMINT service consistent with DoD 10 objectives 4 U Coordinate with the DoD Components to share 10 techniques and related intelligence 5 U Serve as the focal point for DoD IW indications and warning activities Provide the Chainnan of the Joint Chiefs of Staff and the Combatant Commands with the timely intelligence required for effective IW target selection and poststrike analysis 3 U The Under Secretary of Defense for Acquisition and Technology shall a U Develop policy in coordination with the Assistant Secretary of Defense for Command Control Communications and Intelligence ASD C31 when IO matters pertain to USD A T responsibilities EW and Space Control UNCLASSIFIED 5 ∙ sr cttr b U Review and approve infonnation systems technology and tactical 10 system to support 10 acquisition programs ensure that adeguate science and technology programs exist systems provide oversight for the development and acquisition of systems that supportiO and ensure protection detection and reaction measures are considered during systems development 4 U The Und r Secretaty of Defense for Policy shall a U Develop policy in coordination with the ASD C31 when 10 matters pertain to USD P responsibilities psychological operations and deception b U Review IO and IW plans to ensure integration of DoD plans with overall national security objectives c U Lead interagency discussions on 10 policy SIO d U Coordinate the interagency approval process for applicable 5 U The General Counsel of the Department of Defense shall review all proposed SIO and provide legal advice and assistance to the Secretary of Defense and the_Deputy Secretary of Defense and all other responsible Department of Defense officials ∙ 6 U The Secretaries of the Military Departments shall a U Develop 10 doctrine and tactics and organize train and equip to ensure that 10 become effective elements of and integral to U S military capabilities b U Defme 10 requirements Program and budget resources or validated requirements Develop modify or acquire systems in response to validated service requirements Ensure systems meet DoD standards and joint interoperability requirements be planned so c U Ensure that command and control and sustainment of forces shall that critical information is identified and adequately protected from adversary effects _d U Review related Serviee classified programs annually for applicability to IO and advise the ASD C31 of results l b l 7 U The Chairman of the Joint Chiefs of Staff shall a U Serve as the principal military advisor to the Secretary of Defense on 10 sr ettr 6 ∙ b U Validate 10 requirements through the Joint Requirements Oversight Council c U Establish doctrine to facilitate the integration of 10 concepts into 'joint operations are cons stent with 10 policy strategy and d U Ensure plans and operations include and doctrine e U Coordinate with the commanders∙ of the Combatant Commands to ensure effective planning and execution of 10 f U Ensure that exercises routinely test and refme 10 capabilities including the application of realistic wartime stress to information systems is sufficiently robust to support continued g U Ensure joint command and control operations should U S infonnation systems be degraded h U Incorporate 10 into the joint military education curricula 8 U The Director National Security Agency shall a U Provide Signals Intelligence and technology assessments in support of IO planning and operations In addition provide telligence Gain Loss Assessments I GILA to support proposed 10 b U In conjunction with appropriate Agencies assess and provide infomiation systems security threat and vulnerability information to support 10 requirements Manager for National Security Telecommunications and Information c U As the Nation Systems Security develop information security technology and techniques required to pr_otect information and infonnation systems against adversary effects Assist in their implementation by conducting evaluations of their effectiveness ∙ l b l ∙of the Military Departments e U Coordinate IO support activities with Se retaries Chainnan of ioint Chiefs of Staff and the HeadS of the DoD Components the 9 U The Heads of the DoD Components shall assign responsibilities and establish procedures∙within their organizations to implement the policies in tion D above The Component heads shall appriSe the Director NSA of developmental efforts consistent with subsection B S above BECRE f' 7 UNCLASSIFIED F EFFECTIVEDA1E U This Directive is effective immediately Deputy Secretary of Defense Enclosure Defmitions UNCLASSIFIED 8 Dec 9 96 SECR E'P • S3600 1 Encl I DEFINITIONS 1 U Computer Network Attack CNAl Operations to disrupt deny degrade or destroy information resident in computers and computer networks or the computers and networks themselves l b l 3 u Information Facts data or instructions in any medium or form OA 10 that protect and defend information 4 U Information Assurance and infonnation systems by ensuring their availability integrity authentication confidentiality and non This includes providing for restoration of inforination systems repudh1tion by incorporating protection detection and reaction capabilities 5 U Infmmation Environment The aggregate of individuals organizations or systems that collect process or disseminate information also included is the information itself 6 U Information Operations IQ Actions taken to affect adversary information and infonnation systems while defending one's own information and information systems 7 U Information Superiority The capability to collect process and disseminate an uninterrupted flow of information while exploiting or denying _ adversary's ability to do the same and components 8 U Information System The entire infrastructure organization personnel that ollect process store transmit display disseminate and act on information IW 10 conducted dwing time of crisis or conflict 9 U Information Warfare to achieve or promote specific objectives over a specific adversary or ad ersaries 10 ∙ U Special Information Operations SIO 10 that by the1r sensitive nature due to their potential effect r impact security requirements or risk to the national security of the U S require a special revie and approval process 11
35+ YEARS OF FREEDOM OF INFORMATION ACTION