Ch. 3 Orgs and C2

Army Cyberspace Operations Organizational Structure

• Army maneuver commanders leverage cyberspace operations and EW for situational understanding, decision support, and affecting adversaries
• Commanders at brigade combat team level and above utilize CEMA sections to integrate Army and joint cyberspace and EW capabilities
• During joint operations, a corps or division acting as a JTF headquarters combines its spectrum management chief with its CEMA section to form an electromagnetic spectrum operations (EMSO) cell to support the joint electromagnetic spectrum operations cell (JEMSOC)
• Corps and below commanders should understand the roles and responsibilities of these organizations and their interaction with CEMA sections

United States Army Cyber Command (ARCYBER)

• ARCYBER operates and defends Army networks and delivers cyberspace effects against adversaries to defend the nation
• ARCYBER rapidly develops and deploys cyberspace capabilities to equip forces for future conflicts against resilient, adaptive adversaries
• ARCYBER integrates various functions (intelligence, fires, space, psychological operations, etc.) to provide Army commanders with a decisional advantage during competition and conflict
• ARCYBER protects DODIN-A through DCO-IDM and DODIN operations
• Commander, ARCYBER, also serves as the commander of joint force headquarters-cyber (JFHQ-C [Army]) with the authority to conduct offensive cyber operations (OCO) upon authorization from USCYBERCOM
• ARCYBER is the Army's point of contact for reporting and assessing cyber incidents and events involving suspected adversary activity
• NETCOM and regional cyber centers, delegated operational control by ARCYBER, are the chief action arms for DODIN operations over Army networks
• ARCYBER acts as the Army's primary cybersecurity service provider, overseeing programs executed by NETCOM and regional cyber centers
• Units assigned to ARCYBER include NETCOM and 1st Information Operations Command (Land)

Subordinate Units of ARCYBER

• 780th Military Intelligence Brigade
• Cyber protection brigade
• 915th Cyber Warfare Battalion

Army Information Warfare Operations Center

• The Army Information Warfare Operations Center acts as ARCYBER's hub for coordinating, integrating, synchronizing, and tracking cyberspace operations, EW, IO, and answering intelligence requirements supporting national, regional, and Army directives
• Maintains situational awareness while executing mission command of assigned Army cyber and IO forces
• Composed of personnel with information-related capabilities expertise, including representatives from staff functions and partner organizations
• Responsible for integrating information-related capabilities across the staff into command operations and plans

Functions performed at the Army Information Warfare Operations Center.

• Receiving reports from subordinate commands
• Preparing reports for higher headquarters
• Processing requests for support (RFS)
• Publishing operation orders (OPORDs) and cyber tasking orders (CTOs)
• Consolidating commander's critical information requirements
• Answering requests for information from higher HQs, CCMDs, other Services and agencies
• Assessing the overall progress of ongoing operations

United States Army Network Enterprise Technology Command (NETCOM)

• NETCOM leads global operations for the Army's managed portion of DODIN, ensuring freedom of action in cyberspace while denying it to adversaries
• NETCOM secures, configures, operates, extends, maintains, and sustains DODIN-A, supporting DCO-IDM maneuver and preserving confidentiality, availability, and integrity
• The core mission includes all aspects of unclassified and classified network transporting, sharing, and storing
• NETCOM's Army DODIN Operations Center executes command and control, oversees operational synchronization, provides real-time monitoring, and ensures timely delivery of DODIN operational effects

Regional Cyber Centers

• Continuously conduct DODIN Operations which enables DCO-IDM on DODIN-A, ensuring Army and joint forces' freedom of action in cyberspace, while denying it to adversaries
• Globally postured with presence in United States, Europe, Korea, Pacific, and Southwest Asia
• Serves as the point of contact for Army forces to report cyber incidents and exercises overall responsibility for protecting DODIN-A

United States Army Cyber Protection Brigade

• Defends key terrain in cyberspace to deter threats and ensure freedom of action for friendly forces while denying it to adversaries
• Organizes, trains, equips, directs, and deploys cyber protection teams worldwide to support organic network defenders
• The cyber protection brigade commander is authorized to conduct DCO-IDM missions, including cyberspace defense actions, to reconfirm and reestablish the security

915th Cyber Warfare Battalion

• Scalable expeditionary battalion consisting of expeditionary CEMA teams (ECT), including cyberspace forces, EW CEMA operators, IO officers, a targeting cell, and intelligence personnel
• Intelligence personnel supporting internal CEMA and conducting intelligence analysis to support and ECT CEMA operations
• ARCYBER deploys ECTs to provide cyberspace OCO, DCO, IO, and EW support to Army commands, with the capability to employ them
• Certain CEMA operations require authorization and authorities delegated from USCYBERCOM, geographic combatant commanders, or commanders with electronic warfare control authority
• Exclusively an Army, Service-retained unit, not part of the DOD cyber mission force; however, all OCO missions are validated and authorized by USCYBERCOM

1st Information Operations Command (IO) Command

• Army's only Active Component Information Operations organization, a multi-component, brigade-level organization
• Provides information operations and cyberspace operations support to the Army and other services through teams, reach back planning and analysis, and specialized training

780th Military Intelligence Brigade (Cyber)

• Conducts cyberspace operations to deliver effects in support of Army and joint requirements
• Its primary objective is to enable and execute cyberspace operations
• Elements use SIGINT operational tasking authority delegated through Commander, ARCYBER, open source intelligence authority delegated through Commander, United States Army Intelligence and Security Command, and multiple cyberspace collection authorities delegated through Commander, USCYBERCOM to conduct reconnaissance and Intelligence to enable cyberspace operations
• The headquarters serves as a force provider for ARCYBER and cyber national mission force (CNMF)

Electromagnetic Warefare Organizations

• This outlines organizations available to corps and below units during joint and Army operations and describes electromagnetic warfare platoons assigned to Army BCTs, and overviews the Intelligence, Information, Cyber, EW, and Space (I2CEWS) detachment

Electromagnetic Warfare Platoon (Brigade Combat Team)

• EW platoons are within the military intelligence company of a brigade combat team's brigade engineer battalion, consisting of three EW teams that provide EW support during close operations
• The CEMA section aligns EW and cyberspace operations with the operations process, needing the BCT's S-2's collaboration to task the company for deploying EW platoon assets in support of EW missions
• Performs electromagnetic reconnaissance using sensors to identify and locate enemy emitters and spectrum-dependent devices within assigned AO
• This gives data for critical combat information and supports electromagnetic battle management by providing situational awareness to develop and update the common operational picture of the EMOE
• Can also conduct EA to degrade and neutralize adversarial spectrum-dependent devices

Electromagnetic Attack Authority

• When given from the JTF headquarters, the JFLCC may give electromagnetic attack control authority to subordinate Army commanders
• It's a broader evolution which enables commanders able to send or cease electromanetic energy transmissions
• Commanders must be aware of their EMOE, operational control of EW capabilities, and the ability to monitor and estimate EW transmission activities to determine corrective actions
• EW missions must be deconflicted with friendly spectrum dependent devices and the G-6 is responsible for performing battle management for the unit

Intelligence, INformation, Cyber, Electromagnetic Warfare, and Space Detachment

• The I2CEWS detachment refers to a battalion-sized unit that is assigned to a multi-domain task force and includes an enhanced CEMA section
• The detatchment provides cyberspace and EW support to an Army Service Component Command, theater army, or the JTF that are long-range precision joint strikes during multi-domain operations
• Four comprised companies consist of cyberspace forces perform Service-level DCO-IDM and EW operators capable of delivering EA effects throughout the MDTFs' assigned AO

I2CEWS functions

• Organic capabilities of sensing and intelligence is a key function
• Organic information is another key function of I2CEWS
• Organic space operations as well
• Integration with DCO-IDM and EW allows Army to defend their portion of the DODIN-A while disrupting EMS capabilties
• Structured to meet changing OE of joint operations collaboratively/simultaneously in multiple domains

Cyberspace Electromagnetic Activities at Corps and Below

• CEMA sections are assigned to the G-3 or S-3 within corps, divisions, BCTs, and combat aviation brigades
• Commanders must ensure CEMA integrates cyberspace operations/EW into their scheme of operations
• CEMA section involves staff in CEMA working group for integration and synchronization of cyberspace/EW

Commander's Role

• Commanders integrate cyberspace operations and EW within the operations process at all times
• Using cyberspace operations and EW as a combined arms approach commanders can act and asses faster than the adversary and achieve advantage in domains

Commander actions regarding cyberspace operations and EW are:

• Include cyberspace operations inside the operations process
• Enforce security standards and management of configuration.
• Account for cyberspace/EW capabilities, effects, constraints and limitations
• Know operational/legal authorities to effect on portions of cyberspace/EMS.
• Understand the implications of cyberspace, and EW operations on the scheme of maneuver and the mission.
• Understand how the COA influences the prioritization of resources to the portion of DODIN-A.
• Use effects in cyberspace/EMS to support operations concept.
• Give intent and guidance to actions/effects inside and outside of DODIN–A
• Determine critical tasks to enable identification of key areas in cyberspace
• Ensure partnership between the staff, higher headquarters subunits, and action partners to have a strong mutual understanding of both cyberspace and EMS
• Prioritize mitigation measures, nominates targets approve risk, and collection efforts
• Synchronize cyberspace operations and EW with other lethal and non-lethals to operations
• Oversee development of cyberspace operations and related training concerning EW

Cyberspace Electromagnetic Activities Section

• CEMA section supports the plan of the commander
• CEMA supports cyberspace activities, coordinates them, and integrates them
• Collaborates with staff
• The CEMA section attains understanding of neutral, enemy, and friendly actors
• Communicated updates to superiors and subordinates related to operations
• CEMA integrates processes and synchronizes cyberspace operations related to the section

Cyber Electromagnetic Warfare Officer

• Designated staff officer, CEMA is responsible to integrating, coordinating, as well as synchronizing actions that take place in the EMS
• Understands spectrum and cyber related policies to supports with the operations plan
• Delegated from subordinates commander CEWO may get electromagnetic attack control authority
• Tasks for CEWO responsibilities are advising impacts of cyber to commander, advising vulnerabilities and risks from adversaries

Cyber Warefare Officer Tasks

• Assists CEWO in integrating processes coordination, operations and EW with Operations
• Gives CEWO data on impacts of cyber operations, and their constraints
• Helps CEWO in developing the matrix for synchronization of cyberspace target
• Assists CEWO in assessing the effectiveness of aspects
• Coordinates and requests support of OCO, integrating mission forces received to operations
• Develops unified partnerships for capabilties that complement cyberspace posture.
• Coordinates cyberspace process with those 2 other main assets.
• Develops aspects to home related station training

The Elctromagnetic Warefare Technician

• Critical asset that helps CEMA and EW
• Assists in mission objectives
• Coordinates and synchronizes CEMA so that they can exploit over adversaries in cyberspace and EMS at the same time
• Act as the CEWO and platoon leader

EWT duties include

• Serve as a validator for those training in EW within the specific organization
• Assists the management, and development of the estimates of state that the CEMA provides
• Manages threat level data within the EM order of battle
• Helps tactical employment of Joint teams, advise the coordination between intelligence personnel
• Recommends those assets that are suitable, assists the spectrum manager assist the spectrum manager regarding the integration of EP

Electromagnetic Warfare Sergeant Major

• EW senior enlisted advisor
• Helps officer in coordinating for cyberspace operations and cyberspace as well as EW
• Manager assists the EW updating technicians and the EMO of the battle
• Helps cyber warfare officers
• Specifically assists and inputs regarding the commander approval.
• Provides input on influence of the EMOE

Electromagnetic Warfare Non-Commissioned Officer

• Maintains and supports assets for assets assigned to unit of EW
• Coordinator with with the S-2, G-2 officer
• Develops what needed training, assets acquisition, production related targeting assets,
• Manages the electromagnetic environment

Staff Judge Advocate

• CEMA also advises this group concerning what is operational law, and the legality of what concerns both the EW tasks and cyberspace operations particularly with those that may effect noncombatants
• The said expert assists CEMA with the staff concerning plans , the operations, and directives of the commanders

Aspects that staff judge advocate assists CEMA with:

• Make sure they are meeting law and code properly.
• Review those operations whether according to laws of war
• Advise what should be put towards, and into said training.
• In coordination will other members the judge ensures the attack method is lawful

Cyberspace Electromagnetic Activities Spectrum Management Functions

• Assists in implementing, and coordination through the management of frequency
• CEWO, with the spectrum also defines CEMA manager
• Responsible For aspects:
• The manager forwards every single report related to the EMI to the management of the spectrum
• Synchronizes the frequencies used for cyberspace during ops especially in conjunction with the manager.
• Reports the incidents, and manages charts that may impact the said mission

Key Groups

• Not a working group that requires members
• Assists to synchronize, integrate operations into the said concept
• CEMA works with stakeholders also during the rhythm of the said battle

During the Operations Process Staff & Support are:

• Requires synchronize cooperation
• G-6:
• Manages all of the Operations related to DONDIN
• G-6:
• Collaborates to sync operations with the correct partners.
• G-2:
• Manages all Integrations related that relate IPB

Explore the responsibilities of spectrum managers and commanders. Learn about EW equipment effectiveness, I2CEWS detachment support, and ARCYBER's role. Understand CEMA sections and actions to prevent interference. See how ARCYBER provides a decisional advantage.