DEPARTMENT OF DEFENSE UNITED STATES CYBER COMMAND 9800 SAVAGE ROAD SUITE 6171 FORT GEORGE G MEADE MARYLAND 20755 FEB 2 5 2019 Michael Martelle The National Security Archive Gelman Library Suite 701 2130 H Street N W Washington D C 20037 Dear Mr Martelle Thank you for your September 21 2018 Freedom oflnformation Act FOIA request for TASKORD 14-0061 U S Cyber Command Operational Processes As the initial denial authority I am partially denying portions of the document under 5 U S C § 552 b 3 The denied portions include defense critical infrastructure security information exempt from disclosure under 10 U S C § 130e and personally identifying information regarding personnel assigned to a sensitive unit exempt from disclosure under 10 U S C § 130b U S Cyber Command is a sensitive unit If you are not satisfied with our action on this request you may file an administrative appeal within 90 calendar days from the date of this letter by U S mail or email If you submit your appeal in writing please address it to ODCMO Director of Oversight and Compliance 4800 Mark Center Drive ATTN DPCLTD FOIA Appeals Mailbox #24 Alexandria VA 223501700 If you submit your appeal by email please send it to OSD FOIA-APPEAL@mail mil All correspondence should reference U S Cyber Command case tracking number 19-R018 Additionally you may contact the Office of Government Information Services OGIS which provides mediation services to help resolve disputes between FOIA requesters and Federal agencies Contact information is 8601 Adelphi Road - OGIS College Park MD 20740-6001 OGIS may also be reached at ogis@nara gov 202-741-5770 and 1-877-684-6448 Rear Admiral U Chief of Staff l 1 ll 11 I I on OI I 1 '1 l l l ' Y R 131033Z MAR 14 FM USCYBERCOM FT GEORGE G MEADE MD TO MARFORCYBERCOM FT MEADE MD CDRUSACYBER G3 FT BELVOIR VA COMFLTCYBERCOM FT GEORGE G MEADE MD 24AF LACKLAND AFB TX CDRUSACYBER FT BELVOIR VA CDRUSACYBER G33 FT BELVOIR VA DISA FT GEORGE G MEADE MD INFO USCYBERCOM FT GEORGE G MEADE MD COMDT COGARD WASHINGTON DC COGARD CYBERCOM WASHINGTON DC CDR USSTRATCOM OFFUTT AFB NE USSTRATCOM COMMAND CENTER OFFUTT AFB NE CDR USAFRICOM STUTTGART GE CDR USCENTCOM MACDILL AFB FL CDR USEUCOM VAIHINGEN GE CDR USNORTHCOM PETERSON AFB co CDR USPACOM HONOLULU HI CDR USSOCOM MACDILL AFB FL CDR USSOUT HCOM MIAMI FL CDR USTRANSCOM SCOTT AFB IL DARPA ARLINGTON VA DECA FT LEE VA DCMA HQ ALEXANDRIA VA DFAS CLEVELAND OH DISA WASHINGTON DC DIA WASHINGTON DC DLA FT BELVOIR VA DSS WASHINGTON DC DTRA OPSCENTER WAS HINGTON DC NGA WASHINGTON DC NRO WASHINGTON DC NSACSS FT GEORGE G MEADE MD DIRNSA FT GEORGE G MEADE MD DODDS WASHINGTON DC WASH HQS SVCS WASHINGTON DC UN CLAS QQQQ SUBJECT UNITED STATES CYBER COMMAND USCYBERCOM TASKING ORDER TASKORD 14-0061 USCYBERCOM OPERATIONAL PROCESSES OPER GLADIATOR SHIELD MSGID ORDER USCYBERCOM 14-0061 USCYBERCOM OPERATIONAL PROCESSES TASKORD U FOUO REF A EXORD CYBERSPACE OPERATIONS COMMAND AND CONTROL C2 FRAMEWORK CJCS 212105ZJUN13 - REF B DOC CDR USCYBERCOM E-MAIL JOINT FORCE HEADQUARTERS JFHQ-C IOC FOC CRITERIA USCYBERCOM 28 AUG 13 - CYBER REF C DOC DEPUTY COMMANDER USCYBERCOM MEMO IOC DESIGNATION OF JFHQ-C USCYBERCOM 03 OCT 13 REF D DOC DCOM USCYBERCOM MEMO IOC DESIGNATION OF JFHQ-C ATTACHMENT 1 l 1 CI 11 11 D I Oll O I I 1CI I l SI 0 ' JI Y l ' I '- If II I I O lt OI 11 I I l S I O' I Y - JFHQ-C CERTIFICATION USCYBERCOM 03 OCT 13 REF E OPORD OPERATION GLADIATOR SHIELD USCYBERCOM 231800MAY 11 11-002 REF F DOC DRAFT CYBER FORCE CONCEPT OF OPERATIONS AND EMPLOYMENT CFCOE VERSION 3 3 USCYBERCOM 20 NOV 13 - REF G DOC JOINT INFORMATION ENVIRONMENT JIE OPERATIONS CONCEPT OF OPERATIONS USCYBERCOM 24 JAN 13 - REF H DOC CURRENT OPERATIONS STANDARD OPERATING PROCEDURE SOP ATTACHMENT 2 USCYBERCOM 14 FEB 14 - REF I DOC DRAFT JOINT FORCE HEADQUARTERS DOD INFORMATION NETWORK JFHQ-DODIN CONCEPT OF OPERATIONS CONOPS VERSION 48 S REL TO USA FVEY USCYBERCOM 3 JAN 14 - REF J PUB CYBERSPACE OPERATIONS JOINT PUBLICATION 5 FEB 13 3 - 12 ORDTYP TASKORD USCYBERCOM TIMEZONE Z NARR U THIS TASKORD DIRECTS THE CYBER MISSION FORCE CMF WHICH INCLUDES THE CYBER NATIONAL MISSION FORCE CNMF THE CYBER COMBAT MISSION FORCE CCMF CYBER PROTECTION FORCE CPF NATIONAL MISSION FORCE HEADQUARTERS NMF- HQ JOINT FORCE HEADQUARTERS CYBER JFHQ- C AND THE PROPOSED JOINT FORCE HEADQUARTERS DEPARTMENT OF DEFENSE INFORMATION NETWORKS JFHQ- DODIN TO FOLLOW THE PHASED APPROACH OUTLINED IN THIS ORDER TO INTEGRATE WITH THE SEVEN USCYBERCOM OPERATIONAL PROCESSES THIS ORDER ALSO PROVIDES INSIGHT INTO USCYBERCOM OPERATIONAL PROCESSES FOR THE CC S A FA GENTEXT SITUATION 1 1 A U IN ACCORDANCE WITH AW REFS C AND D IN ORDER TO EFFECTIVELY SYNCHRONIZE AND DECONFLICT THE CMF AND TO FACILITATE JFHQ-C AND THE PROPOSED JFHQ-DODIN COMMAND AND CONTROL C2 OF THEIR ASSIGNED FORCES CDR USCYBERCOM INSTITUTED SEVEN PROCESSES TO FACILITATE OPERATIONS THESE PROCESSES ARE THE CYBERSPACE TASKING CYCLE THE CYBERSPACE EFFECTS REQUEST FORM CERF b 3 10 u s c § 130e b 3 10 U S C § 130e j PLANNING TEAMS OPERATIONAL PRIORITIES AND INTELLIGENCE COLLECTION PRIORITIES THE JOINT TARGETING CYCLE AND OPERATIONS SYNCHRONIZATION I I 1 8 U THE PROCESSES IN THIS ORDER APPLY TO USCYBERCOM AND THE CMF GENTEXT MI SSION 2 2 A MISSION U UPON RECEIPT USCYBERCOM AND THE CMF WILL PARTICIPATE IN AND INTEGRATE WITH THE SEVEN ESTABLISHED USCYBERCOM OPERATIONAL PROCESSES GENTEXT EXECUTION 3 l 11 CI AS II 11 D I Oil OI I ICI I l 1o 1 O'JI Y l ' l I II II 3 A U I I OH 011 ICI I l 1 O' I ' CONCEPT OF OPERATIONS 3 A l U COMMANDER'S INTENT TO REINFORCE THE USCYBERCOM OPERATIONAL PROCESSES ESTABLISHED TO SYNCHRONIZE DECONFLICT AND COORDINATE CMF ACTIONS IN CYBERSPACE ADDITIONALLY TO PROVIDE THE CC S A FA VISIBILITY INTO USCYBERCOM PLANNING AND OPERATIONAL PROCESSES 3 A 1 A U PURPOSE TO ESTABLISH THE FRAMEWORK TO OPERATIONALIZE THE CMF AND FAMILIARIZE THE CC S A FA ABOUT USCYBERCOM PROCESSES 3 A 1 B U METHOD UPON DECLARATION OF IOC FOC USCYBERCOM COMPONENTS AND ASSIGNED TEAMS WILL INTEGRATE WITH USCYBERCOM'S OPERATIONAL PROCESSES JFHQ-C AND THE PROPOSED JFHQ-DODIN WILL COORDINATE OPERATIONAL SUPPORT THROUGH THEIR MISSION ALIGNED CCMD JOINT CYBER CENTERS JCC CYBER SUPPORT ELEMENTS CSES 3 A 1 C U END STATE THE CMF INTEGRATES WITH THE SEVEN USCYBERCOM OPERATIONAL PROCESSES IOT SYNCHRONIZE DECONFLICT AND COORDINATE ACTIONS IN CYBERSPACE 3 A 2 U GENERAL THE CMF INTEGRATION WITH USCYBERCOM OPERATIONAL PROCESSES IS CONDUCTED IN THREE PHASES FAMILIARIZATION TRANSITION AND IMPLEMENTATION IN PHASE I FAMILIARIZATION THE CMF IS DIRECTED TO BECOME FAMILIAR WITH USCYBERCOMS SEVEN OPERATIONAL PROCESSES IN PHASE II TRANSITION THE CMF IS DIRECTED TO DEVELOP AND REFINE THEIR OPERATIONAL PROCESSES TO INTEGRATE WITH USCYBERCOM OPERATIONAL PROCESSES THIS INCLUDES THE ABILITY TO SYNCHRONIZE DECONFLICT AND COORDINATE OPERATIONS AND MISS IONS VIA THE GLOBAL IT0 3 10 U S C § 13jIN PHASE III IMPLEMENTATION CYBERSPACE OPERATIONS ARE SYNCHRONIZED DECONFLICTED AND COORDINATED AT THE CMF- LEVEL THEN GLOBALLY AT THE USCYBERCOM LEVEL COMMAND AND CONTROL OCCURS PRIMARILY VIA THE INTEGRATED TASKING ORDER ITO THE CMF IS FULLY INTEGRATED WITH THE SEVEN USCYBERCOM OPERATIONAL PROCESSES 3 A 2 A U PHASE I FAMILIARIZATION THE INTENT OF PHASE 1 IS TO ENSURE THE CMF IS CAPABLE OF EXECUTING THE TASKS FUNCTIONS AND PROCESSES DETAILED IN REF F THIS PHASE CONSISTS OF THREE OBJECTIVES 3 A 2 A l U PHASE I OBJECTIVE 1 THE CMF UNDERSTANDS THE SEVEN USCYBERCOM OPERATIONAL PROCESSES AS IDENTIFIED IN REF D 3 A 2 A 2 U PHASE I OBJECTIVE 2 THE CMF ACQUIRES THE ACCOUNTS AND ACCESSES REQUIRED TO PARTICIPATE IN AND INTEGRATE WITH THE USCYBERCOM OPERATIONAL PROCESSES 3 A 2 A 3 U Faae PHASE I OBJECTIVE 3 THE CMF ATTENDS OR DEVELOPS THE MINIMUM TRAINING REQUIRED TO PARTICIPATE IN AND INTEGRATE WITH THE USCYBERCOM OPERATIONAL PROCESSES 3 A 2 A 4 U PHASE I END STATE THE CMF HAS THE ACCESSES ACCOUNTS AND REQUIRED TRAINING TO PARTICIPATE IN AND INTEGRATE WITH THE USCYBERCOM OPERATIONAL PROCESSES AS IDENTIFIED IN REF D l ' I 1111 ·1 'I OH OI I ICI I l ' I 0' I Y l I S II II I I OH 0 11 ICI I l O' I Y 3 A 2 B U E eYe PHASE II TRANSITION THE INTENT OF PHASE II IS TO DIRECT THE CMF TO CONTINUE TO DEVELOP REFINE AND UTILIZE OPERATIONAL PROCESSES TO SYNCHRONIZE DECONFLICT AND COORDINATE CYBERSPACE ACTIONS IN THEIR DESIGNATED MISSION AREAS AND INTEGRATE WITH ESTABLISHED USCYBERCOM OPERATIONAL PROCESSES TO SYNCHRONIZE DECONFLICT AND COORDINATE CYBERSPACE ACTIONS GLOBALLY THIS PHASE CONSISTS OF TWO OBJECTIVES 3 A 2 B l U E eYe PHASE II OBJECTIVE 1 THE CMF DEVELOPS OR REFINES THEIR OPERATIONAL PROCEDURES TO SYNCHRONIZE DECONFLICT AND COORDINATE CYBERSPACE ACTIONS IN THEIR DESIGNATED MISSION AREAS 3 A 2 B 2 U PHASE II OBJECTIVE 2 THE CMF PARTICIPATES IN AND I NTEGRATES WITH ESTABLISHED USCYBERCOM OPERATIONAL PROCESSES TO SYNCHRONIZE DECONFLICT AND COORDINATE CYBERSPACE ACTIONS THIS INCLUDES BUT IS NOT LIMITED TO UTILIZING b 3 10U S C § 130e b 3 10 u s c § 130 - I 3 A 2 B 3 U PHASE II END STATE OPERATIONAL PROCESSES ARE DEVELOPED REFINED AND UTILIZED TO SYNCHRONIZE DECONFLICT AND COORDINATE CYBERSPACE ACTIONS BETWEEN USCYBERCOM AND THE CMF 3 A 2 C U PHASE III IMPLEMENTATION INTENT OF PHASE III IS TO ENSURE CYBERSPACE ACTIONS ARE SYNCHRONIZED DECONFLICTED AND COORDINATED BETWEEN USCYBERCOM AND THE CMF THOUGH INTEGRATION WITH AND UTILIZATION OF USCYBERCOM OPERATIONAL PROCESSES AW REF C AND D AND H ADDITIONALLY THE CC S A FA UNDERSTAND THE USCYBERCOM OPERATIONAL PROCESSES THIS PHASE CONSISTS OF THREE OBJECTIVES 3 A 2 C l U PHASE III OBJECTIVE 1 THE CMF DEMONSTRATES THE ABILITY TO SYNCHRONIZE DECONFLICT AND COORDINATE CYBERSPACE ACTIONS WITHIN THEIR DESIGNATED MISSION AREAS 3 A 2 C 2 U PHASE III OBJECTIVE 2 THE CMF AND USCYBERCOM DEMONSTRATE THE ABILITY TO DECONFLICT SYNCHRONIZE AND COORDINATE CYBERSPACE ACTIONS UTILIZING THE SEVEN USCYBERCOM OPERATIONAL PROCESSES AS LISTED IN REF D 3 A 2 C 3 U PHASE III OBJECTIVE 3 CC S A FA HAS INSIGHT INTO THE SEVEN USCYBERCOM OPERATIONAL PROCESSES 3 A 2 C 4 U PHASE III END STATE OPERATIONAL PROCESSES ARE REAFFIRMED TO ENSURE USCYBERCOM AND CMF ACTIONS IN CYBERSPACE ARE SYNCHRONIZED DECONFLICTED AND COORDINATED 3 B U TASKS 3 8 1 U CMF HQS 3 8 1 A U PER USCYBERCOM CURRENT OPS SOP ANNEX G REF H J DESIGNATE PERSONNEL TO ESTABLISH ACCOUNTS FOR UTILIZATION '3 10 U S C i 11 BASED ON MISSION REQUIREMENTS IDENTIFY PERSONNEL TO BE CERTIFIED PROVIDE IDENTIFIED PERSONNEL TO POC IN PARAGRAPH c l 1Ass 11 11 · D 'I cm o 1 1 1 1 1 l 1 o ' H x l l I 'ill II I I Hit 01 ·1 I I I p 1 O' I Y 3 8 1 A 2 U FeYa§ DESIGNATE AND IDENTIFY PERSONNEL TO BE CERTIFIED AS b 3 10 u s c _ 130e THESE PERSONNEL WILL BE RESPONSIBLE FOR VETTING JFHQ PERSONNEL FOR THE APPROPRIATE SYSTEM ROLES AND PROVIDING THEM WITH THAT ACCESS PROVIDE IDENTIFIED PERSONNEL TO POC IN PARAGRAPH 5 C 3 I 3 8 l A 3 U FeYa ALL PERSONNEL IDENTIFIED IAW WITH PARA 3 8 1 A l AND 3 8 1 A 2 WILL BE REQUIRED TO ATTEND THE USCYBERCOM LED b 3 10 U S C § 130 COURSE PRIOR TO BEING PROVIDED ELEVATED LEVELS OF SYSTEM ACCESS 3 B 1 B U FeYa IDENTIFY TRAINING REQUIREMENTS OR SHORTFALLS HINDERING COMPLIANCE WITH THIS ORDER TO USCYBERCOM J337 READINESS EXERCISES AND TRAINING BRANCH SIPR EMAIL USCC_J37@CYBERCOM SMIL MIL TS EMAIL USCC_J37 @NSA IC GOV 3 8 1 C U FeYa NLT 17 MARCH 14 BEGIN I NTEGRATION OF USCYBERCOM OPERATIONAL PROCESSES AND PARTICIPATE IN USCYBERCOM B2C2WG EVENTS REF H 3 8 2 U USCYBERCOM 3 8 2 A U FeYa DEFINE AND ESTABLISH A REQUEST FOR SUPPORT RFS AND REQUEST FOR FORCES RFF PROCESS TO BE EXECUTED INDEPENDENT OF THE CERF PROCESS 3 B 2 B U FeYa COORDINATE WI TH THE CMF TO IDENTIFY GAPS IN EXISTING TRAINING OPPORTUNITIES TO FACILITATE THIS ORDER SCHEDULE AT A MINIMUM b 3 10 u s c § 130e PER MONTH l 3 C U COORDINATI NG INSTRUCTIONS b 3 C 1 U FeYa ALL PROSPECTIVE 10 U S C § 1 MUST HAVE AN INTEL INK SIPRNET AND JWICS PASSPORT ACCOUNT TO REQUEST ACCESS FROM b10 U S C § I b 3 10 U S C § 130 3 C 1 A U FeYa INTELINK SIPRNET PASSPORT ACCOUNT REQUESTS ARE AVAILABLE AT THIS LINK HTTPS PASSPORT CSP SGOV GOV PASSPORT WELCOME 3 C 1 B U FeYa INTELINK JWICS PASSPORT ACCOUNT REQUESTS ARE AVAILABLE AT THIS LINK HTTPS PASSPORT CSP IC GOV PASSPORT WELCOME 3 C 1 C U FeYa SIPRNET b 3 10U S C §13 REQUESTS ARE AVAILABLE AT THIS LINK HTTP INTELSHARE INTELINK SGOV GOV SITES l b 3 10 u s c § 13oeVL OGIN ASPX 3 C 1 D U FeYa TS 3 10 U S C § 130 REQUESTS ARE AVAILABLE AT THIS LINK WHEN PROMPTED REQUEST ACCESS HTTPS SECUREINTELSHARE INTELINK IC GOV SITES CYBERWAR DEFAULT ASPX 3 C 2 U FeYa lJ 10U S C §1 GUIDE TRAINING COURSE SCHEDULES AND TRAINING MATERIAL ARE AVAILABLE ON THE SIPNET 10 U S C § 1 UNDER THE TRAINING LINK UNDER THE TRAINING MENU HTTPS SECUREINTELSHARE INTELINK IC GOV SITES CYBERWAR DEFAULT ASPX PJ I ' Cl S II 11 · 1 I Oil 011 ICI I l ' SI ONI Y l l I 'i ll 11 I I Oil 011 I I I l I O' I Y 3 C 3 U R le ALL ADDRESSEES WILL ACKNOWLEDGE RECEIPT OF THIS ORDER WITHIN 48 HOURS OF RECEIPT AND REPORT COMPLIANCE AND PROGRESS WITH THE OBJECTIVES LISTED IN THIS ORDER EVERY FRIDAY BY 200oz UNTIL COMPLETION WITH PHASE III AT HTTP INTELSHARE INTELINK SGOV GOV SITES USCYBERCOM JOC ORDERS SITEP AGES HOME ASPX GENTEXT ADMINISTRATION AND LOGISTICS 4 4 A U R le USCYBERCOM WILL NOT PROVIDE FUNDING FOR THE TASKS OUTLINED WITHIN THIS ORDER GENTEXT COMMAND AND CONTROL 5 5 A U R le USCYBERCOM IS THE SUPPORTED COMMAND FOR THIS ORDER ALL OTHERS ARE SUPPORTING 5 B U R le CMF HQ WILL UTILIZE I b 3 10U S C §130e jcMF TEAMS 5 C U R le POINTS OF CONTACT 5 C l U R le FOR ACKNOWLEDGEMENT COMPLIANCE AND ASSESSMENT QUESTIONS ISSUES CONTACT USCYBERCOM J331 CURRENT ACTIONS BRANCH SIPR EMAIL USCC_J33_CAB@CYBERCOM SMIL MIL TS EMAIL USCC_J33_CAB@NSA IC GOV 5 C 2 U R le FOR OPERATIONAL QUESTIONS ISSUES CONTACT USCYBERCOM J332 CURRENT OPERATIONS BRANCH SIPR EMAIL USCC J33 COB@CYBERCOM SMIL MIL TS EMAIL USCC_J33_COB@NSA IC GOV 5 C 3 U FOR TRAINING QUESTIONS ISSUES CONTACT USCYBERCOM J337 READINESS EXERCISES AND TRAINING BRANCH SIPR EMAIL USCC_J37 @CYBERCOM SMIL MIL TS EMAIL USCC_J37 @NSA IC GOV 5 C 4 U FOR AFTER HOURS OR 24 7 SUPPORT QUESTIONS ISSUES CONTACT USCYBERCOM J333 JOC JOINT DUTY OFFICER JDO SIPR EMAIL JOCOPS@CYBERCOM SMIL MIL TS EMAIL JOCOPS@NSA IC GOV UNCLASS VOICE 3 10 U S C § 13Q SECURE VOICE 969-1645 GENTEXT AUTHENTICATION FOR THE CDR b 3 10 u s c 130b b 3 10 u s c 130b I AKNLDG YES M R UNCLAS DRAFT USCYBERCOM JOC Duty Officer FlCD 966-8730 REL USCYBERCOM JOC Duty Officer FlCD 966-8730 l l - JCI S Ii ii I I Oft 01 1 ICI I l SI O f Y