UNCLASSIFIED US EUROPEAN COMMAND AFTER ACTION REPORT Directorate Branch Date of Event CJ64 - JCC Event Name coo MMM VY 11-1 2 April 2017 BALTIC GHOST 20 I7 - FPC Background U BALTIC GHOST BG is a USEUCOM-supported series of workshops culminating in a Cyber Defense Table Top Exercise TTX between Estonia Latvia and Lithuania US DOD participation includes USEUCOM DISA USCYBERCOM and National Guard units from Maryland Michigan and Pennsylvania participating as part of the National Guard State Partnership Program SPP International observers will include Denmark Sweden Finland and the United Kingdom Baltic Ghost 2017 BG17 the fourth of the Baltic Ghost series will focus on crisis action collaboration mechanisms between military national and commercial cyber security organizations to develop TTPs for and execute rapid critical communication sharing The scenario will exercise the coordination gaps within each Baltic nation NATO and USEUCOM Baltic Ghost BG directly supports two USEUCOM lines of effort Deter Russia and Support NATO BG17 FPC objectives • • • • • U Finalize participating nation objectives and team makeup U Finalize scenario and inject possibilities U Confirm academic topics and speakers for TTX U Validate individual crisis action playbooks to be exercised during TTX U Finalize logistics and schedule for the TTX Discussion Points • • • • • U Nations briefed on current status of playbook and scenario inject updates U The BG17 scenario will focus on the Baltic nations' civilian military energy and logistics sector with a focus on those impacting U S military forces which might affect troop or equipment movement Estonia will include injects covering the Maryland National Guard A 10 unit on rotation in Estonia U All three nations and EUCOM agreed to develop one common message to be approved through each nation's Public Affairs Office This message will be published once all participants agree U Teams will consist of small cells travelling to Stuttgart and training audience remaining in country Exercise cell will consist of organizational representatives and technical subject matter experts U Academics will include Road to Crisis and country organizational briefs Other topics decided were Cyber Intel and Incident Response USEUCOM Takeaways • U Distribution Signature and Report Date ECJ3 ECJ6 ECJ6 JCC ECJ2X ECJS 14 Apr 2017 Coordination D Concur D Nonconcur 0 Concur D Nonconcur UNCLASSIFIED O Concur D Nonconcur D Concur D Nonconcur