Operation Buckshot Yankee OBY Perspective

1
Operation Buckshot Yankee (OBY) Perspective
AFNETOPS Hand-off to AFSPC
Brig Gen Ronnie Hawkins, SAF/XCI 16 Apr 09
2
Cyber Strategic Perspective (1 of 2)

• Originally Comm / Cyber was a commodity
• Provided a service
• Independent user base
• Could jam comm but most of cyber was almost a
  given

Independent User
Traditional Cyber
Independent User
Comm Community as a service provider
Independent User
Independent User
The strategic picture has changed dramatically.
3
Cyber Strategic Perspective (2 of 2)
Cyber - Todays reality

• Cyber is a contested inter-dependent battlespace
• We cannot assume cyber-superiority
• Cyber community must fight for it, other
  operators must fight through it
• One users actions can impact all other users

Cyber Community conducting, enabling and
defending ops
Adversary Ops
Operation Buckshot Yankee was the Tipping Point
4
Who Was Affected?
Business Ops
Improve C2 and SA of Space, Airborne and
Terrestrial Assets
Return Functional CSAs to Mission
Combat Ops
Improve Support to Joint Operations
Improve Decision Superiority
Info Ops
Network Enable Weapons Systems
Intel Ops
Knowledge Enable our Workforce
Mission Effects
Disrupt Cyber Enabled Capabilities of our
Adversaries
Fuse Intel and Other Sensors
Reduce C4 Costs to Support Fleet Recapitalization
and other Modernization Initiatives
Improve Airman and Family Well Being
Provide Agile and Dynamic Networks for
Contingency Ops
Provide Real Time Collaboration and Knowledge
Sharing
Provide Secure, Reliable Voice, Video, and Data
Connectivity
Provide Data Transparency Across Multiple Domains
Enable Proactive C2 and SA of Network Assets
Enable Network Information and Knowledge
Exploitation
Provide Cyber Threat Targeting Capabilities
Employ Knowledge Based Operations
Provide More Efficient C4 Services and Processes
Improve Unity of Command of All C4 Activities
AFNETOPS Capabilities
THE ENTIRE AIR FORCE, and
5
OBY Lessons Observed

• Tactical / Operational
• No clear chain of command

Operational Competing plans not integrated
Strategic Force not prepared for the new battle
domain
?
?
Comm Chain of Cmd
?
Ops Msn
Comm Msn
Sys Admin Airman
Sys Admin Airman
Operator
The solution is called Operationalizing Cyber
6
What Went Wrong?

• Culture (AFRC A6)
• Varied Sense of Urgency
• Poor Ops Rigor Discipline

• Compliance/Accountability (ACC/A6)
• Guidance Not Followed (TTP, AFIs, NTOs)
• Inconsistent Configurations

• Training Education (AETC A6)
• Unstructured Immature Crew Training
• Inconsistent Management Tracking

• Enablers (NGB A6)
• Lack of Configuration Control
• Ineffective Evaluation/Inspection Programs

• Leadership (AFSPC A6)
• Limited top-to-bottom Enforcement
  (accountability/discipline)
• Duplicative/flawed C2

7
What Were Doing About It

• Sent Initial OBY Report To CSAF,
• A3/A6 (Lt Gen Darnell/Lt Gen Shelton) released
  report
• Held initial 3-star VTC with MAJCOM CVs
• Root Cause Workshop
• Primarily Attended By A6 Personnel
• Inconsistent Configurations
• ORB Tasks List
• Report/Results Briefed on 28 Apr
• Coordinate Results
• 3-star GOSG o/a 15 May
• Brief CSAF o/a 1 Jun

8
AFNETOPS Hand-off

• Vectors From Gen Kehler
• 100-Day Plan
• PPLAN/Other Documents
• SAF/XC Meeting With Gen Kehler
• Presented Governance Model, SMI-ELS, AFNETOPS
• Go-Do To Meet With AFSPC Staff
• SAF/XC Meeting With AFSPC Staff
• Mr. Tillotson, Brig Gen Hawkins, Mr. Werner
• Col Williamson Col Jordan
• Follow-on Meetings At O-6s Level
• Determine time lines for successful hand-off
• Includes funding, resources, IMS, relationships
  with other organizations (ESC, AFCA, etc.)

9
AFNetOps Fielding Strategy

• Provide Foundational Efforts for Mgt/Control of
  AF Enterprise
• AD Migration to Single AF Forest
• Cross-Forest Trust
• Standardize Processes such as Trouble Ticketing
  Change Management
• Boundary migration contract
• Enable transfer of base workload
• Enterprise Service Unit (ESU) capabilities to
  manage core services in place
• Enterprise IT Service Desk (ESD) capabilities to
  provide help desk support
• Centralize storage information access
• Leverage existing MAJCOM consolidated data
  centers and DISA DECCs
• Consolidate into existing Area Processing Centers
  (Scott AFB and Andrews AFB)