United States Cyber Command

According to the US Department of Defense (DoD):

USCYBERCOM plans, coordinates, integrates, synchronizes and conducts activities to: direct the operations and defense of specified Department of Defense information networks and; prepare to, and when directed, conduct full spectrum military cyberspace operations in order to enable actions in all domains, ensure US/Allied freedom of action in cyberspace and deny the same to our adversaries.[10][11]

The text "9ec4c12949a4f31474f299058ce2b22a", located in the command's emblem, is the MD5 hash of their mission statement.[11]

The command is charged with pulling together existing cyberspace resources, creating synergies and synchronizing war-fighting effects to defend the information security environment. USCYBERCOM is tasked with centralizing command of cyberspace operations, strengthening DoD cyberspace capabilities, and integrating and bolstering DoD's cyber expertise.[12][13]

An intention by the U.S. Air Force to create a 'cyber command' was announced in October 2006.[27] An Air Force Cyber Command was created in a provisional status in November 2006. However, in October 2008, it was announced the command would not be brought into permanent activation.

On 23 June 2009, the Secretary of Defense directed the Commander of U.S. Strategic Command (USSTRATCOM) to establish USCYBERCOM. In May 2010, General Keith Alexander outlined his views in a report for the United States House Committee on Armed Services subcommittee:[28][29][30][31][32]

My own view is that the only way to counteract both criminal and espionage activity online is to be proactive. If the U.S. is taking a formal approach to this, then that has to be a good thing. The Chinese are viewed as the source of a great many attacks on western infrastructure and just recently, the U.S. electrical grid. If that is determined to be an organized attack, I would want to go and take down the source of those attacks. The only problem is that the Internet, by its very nature, has no borders and if the U.S. takes on the mantle of the world's police; that might not go down so well.

Initial operational capability was attained on 21 May 2010. General Alexander was promoted to four-star rank, becoming one of United States's 38 four-star officers, and took charge of U.S. Cyber Command in a ceremony at Fort Meade that was attended by Commander of U.S. Central Command GEN David Petraeus, and Secretary of Defense Robert M. Gates.[33][34][35][36] USCYBERCOM reached full operational capability on 31 October 2010.[37]

The command assumed responsibility for several existing organizations. The Joint Task Force for Global Network Operations (JTF-GNO) and the Joint Functional Component Command for Network Warfare (JFCC-NW) were absorbed by the command. The Defense Information Systems Agency, where JTF-GNO operated, provides technical assistance for network and information assurance to USCYBERCOM, and is moving its headquarters to Fort Meade.[38]

President Obama signed into law, on 23 December 2016, the National Defense Authorization Act (NDAA) for fiscal year (FY) 2017, which elevated USCYBERCOM to a unified combatant command. The FY 2017 NDAA also specified that the dual-hatted arrangement of the commander of USCYBERCOM will not be terminated until the Secretary of Defense and Chairman of the Joint Chiefs of Staff jointly certify that ending this arrangement will not pose risks to the military effectiveness of CYBERCOM that are unacceptable to the national security interests of the United States.[39]

There are concerns that the Pentagon and NSA will overshadow any civilian cyber defense efforts.[40] There are also concerns on whether the command will assist in civilian cyber defense efforts.[41] According to Deputy Secretary of Defense William J. Lynn, the command "will lead day-to-day defense and protection of all DoD networks. It will be responsible for DoD's networks – the dot-mil world. Responsibility for federal civilian networks – dot-gov – stays with the Department of Homeland Security, and that's exactly how it should be."[42] Alexander notes, however, that if faced with cyber hostilities an executive order could expand Cyber Command's spectrum of operations to include, for instance, assisting the Department of Homeland Security in defense of their networks.[43]

Some military leaders claim that the existing cultures of the Army, Navy, and Air Force are fundamentally incompatible with that of cyber warfare.[44] Major Robert Costa (USAF) even suggested a sixth branch of the military, an Information (Cyber) Service with Title 10 responsibilities analogous to its sister services in 2002 noting:

While no one [IOP, Instrument of National Power] operates in a vacuum... Information increasingly underpins the other three [Diplomatic, Economic and Military], yet has proven to be the most vulnerable, even as US society becomes more dependent on it in peace, conflict, and war. To attack these centers of gravity, an adversary will use the weakest decisive point, ... the Information IOP. In addition, the other IOPs benefit from Unity of Effort--Constitutional balances of power ensure the Diplomatic and Military IOPs exercised by the President in concert with Congress are focused, while the Economic IOP achieves Unity of Action through international market controls and an international body of law. [In 2002], [t]he Information IOP however, [was] rudderless, lacking both Unity of Action and Unity of Command.[45]

Others have also discussed the creation of a cyber-warfare branch.[46][47] Lieutenant Colonel Gregory Conti[48] and Colonel John "Buck" Surdu (chief of staff of the United States Army Research, Development and Engineering Command) stated that the three major services are properly positioned to fight kinetic wars, and they value skills such as marksmanship, physical strength, the ability to leap out of airplanes and lead combat units under enemy fire.[47]

Conti and Surdu reasoned, "Adding an efficient and effective cyber branch alongside the Army, Navy and Air Force would provide our nation with the capability to defend our technological infrastructure and conduct offensive operations. Perhaps more important, the existence of this capability would serve as a strong deterrent for our nation's enemies."[49]

In response to concerns about the military's right to respond to cyber attacks, General Alexander stated "The U.S. must fire back against cyber attacks swiftly and strongly and should act to counter or disable a threat even when the identity of the attacker is unknown" prior to his confirmation hearings before the United States Congress. This came in response to incidents such as a 2008 operation to take down a government-run extremist honeypot in Saudi Arabia. "Elite U.S. military computer specialists, over the objections of the CIA, mounted a cyberattack that dismantled the online forum".[50]

"The new U.S. Cyber Command needs to strike a balance between protecting military assets and personal privacy." stated Alexander, in a Defense Department release. If confirmed, Alexander said, his main focus will be on building capacity and capability to secure the networks and educating the public on the command's intent.

"This command is not about an effort to militarize cyber space," he said. "Rather, it's about safeguarding our military assets."[51]

In July 2011, Deputy Defense Secretary William Lynn announced in a conference that "We have, within Cyber Command, a full spectrum of capabilities, but the thrust of the strategy is defensive." "The strategy rests on five pillars, he said: treat cyber as a domain; employ more active defenses; support the Department of Homeland Security in protecting critical infrastructure networks; practice collective defense with allies and international partners; and reduce the advantages attackers have on the Internet."[52]

In 2013, USCYBERCOM held a classified exercise in which reserve officers (with extensive experience in their civilian cyber-security work) easily defeated active duty cyber warriors.[53] In 2015 Eric Rosenbach, the principal cyber adviser to Defense Secretary Ash Carter, said DoD was looking at alternatives to staffing with just active-duty military.[54] Beginning that year, USCYBERCOM added 133 teams (staffing out at 6,000 people), with the intent that at least 15% of the personnel would be reserve cyber operations airmen.[55] These new teams had achieved "initial operating capability" (IOC) as of 21 October 2016. Officials noted that IOC is not the same as combat readiness, but is the first step in that direction.[56]

President Barack Obama's Commission on Enhancing National Cybersecurity was formed to develop a plan for protecting cyberspace. The commission released a report in December 2016. The report made 16 major recommendations regarding the intertwining roles of the military, government administration and the private sector in providing cyber security.[57]

President Trump indicated that he wanted a full review of Cyber Command during his bid for presidency.[58] During his presidency, the Trump administration made Cyber Command a unified combatant command, and took other measures attempting to deter cyber attacks. However, the FBI reported that they logged a record number of complaints and economic losses in 2019, as cybercrime continued to grow.[59]

The creation of U.S. Cyber Command appears to have motivated other countries in this arena. In December 2009, South Korea announced the creation of a cyber warfare command. Reportedly, this was in response to North Korea's creation of a cyber warfare unit.[60] In addition, the British GCHQ has begun preparing a cyber force.[61] Furthermore, a shift in military interest in cyber warfare has motivated the creation of the first U.S. Cyber Warfare Intelligence Center.[62] In 2010, China introduced a department dedicated to defensive cyber war and information security in response to the creation of USCYBERCOM.[63]

In June 2019, Russia has conceded that it is "possible" its electrical grid was under cyberattack by the United States.[64] The New York Times reported that hackers from the U.S. Cyber Command planted malware potentially capable of disrupting the Russian electrical grid.[65]

Cyber command is using its 2021 exercise Cyber Flag 21–2 to improve its teams' tactics.[66][67]

The commander of U.S. Cyber Command is a statutory office (10 U.S.C. § 167b), and is held by a four-star general, or if the commander is a Navy officer, a four-star admiral.

No.	Commander		Term			Service branch
	Portrait	Name	Took office	Left office	Term length
1		Alexander, Keith B.General Keith B. Alexander (born 1951)	21 May 2010	28 March 2014	3 years, 311 days	U.S. Army
-		Davis, Jon M.Lieutenant General Jon M. Davis Acting	29 March 2014	2 April 2014	4 days	U.S. Marine Corps
2		Rogers, Michael S.Admiral Michael S. Rogers (born 1959)	3 April 2014	4 May 2018	4 years, 31 days	U.S. Navy
3		Nakasone Paul M.General Paul M. Nakasone (born 1963)	4 May 2018	Incumbent	5 years, 170 days	U.S. Army

• List of cyber warfare forces
• United States Strategic Command
• Joint Task Force-Global Network Operations
• United States National Security Agency (NSA)
• United States Department of Homeland Security
• U.S. Department of Defense Strategy for Operating in Cyberspace
• Information assurance vulnerability alert
• Cooperative Cyber Defence Centre of Excellence (NATO)
• National Cyberdefence Centre (Germany)
• Cyberwarfare
• Cyberwarfare in the United States
• Defense Information Systems Agency
• 2008 cyberattack on United States
• 2020 United States federal government data breach

• Smeets, Max (4 July 2022). "A US history of not conducting cyber attacks". Bulletin of the Atomic Scientists 78 (4): 208–213.

Wikimedia Commons has media related to United States Cyber Command.

• U.S. Cyber Command website
• "NSA Chief may lose US Cyber Command role". Retrieved 4 November 2013.
• "But NSA & Cyber Command are to stay under one chief". 13 December 2013. Retrieved 14 December 2013.
• US Cyber Command Fact Sheet
• US Cyber Command Fact Sheet PowerPoint
• FACT SHEET: Imposing Costs for Harmful Foreign Activities by the Russian Government, White House. Retrieved 16 September 2023.