Army Global Network Operations

1
Army Global Network Operations Security Center
(A-GNOSC)
UNCLASSIFIED
Army Cyberspace Operations
THE OVERALL CLASSIFICATION OF THIS BRIEF IS
UNCLASSIFIED
2
Cyberspace Operations
UNCLASSIFIED
CNO EXORD 96-08 NETCOM executes, plans,
integrates, and synchronizes Army network defense
to include CND and CND-RA
NetOps
Enterprise Management
Content Management
GIG Network Defense
IA
CIP
Computer Network Defense
NetOps Incident Management Problem
Management Change Management Release
Management Configuration Management Security
Management Capacity Management Availability
Management Service Level Management Continuity
Management Financial Management
Computer Network Exploitation
Computer Network Attack
CNO
UNCLASSIFIED
3
9th Sig Cmd (Army) Vision
UNCLASSIFIED
Vision The Armys single Information Technology
Service Provider. Achieving Joint, Interagency
and Multi-national Network Enterprise. Executing
Cyber Operations and attaining information
superiority.
Operating Forces
Generating Forces
Enterprise Activities
Network Operations
UNCLASSIFIED
4
A-GNOSC Mission Statement
UNCLASSIFIED

• A-GNOSC directs the operations, management,
  and defense of the LandWarNet in order to provide
  secure and available information across the
  Joint Strategic, Operational, and Tactical
  Domains to enable WarFighter Decision Dominance.
• METL Tasks
• Direct, monitor, and support Enterprise
  Management across the LandWarNet
• Plan, Direct, and support Network Defense across
  the LandWarNet
• Execute technical control and enforce Compliance
  across the LandWarNet
• Operate, maintain, manage, and defend Army
  Global Enterprise Services
• Support and maintain A-GNOSC Operational
  capabilities
• Monitor and enable Content Management across the
  LandWarNet

UNCLASSIFIED
5
A-GNOSC Authorities
UNCLASSIFIED
DODI )-8530 DODD 8500 DODI 8410 IA Campaign Plan
CYBERCOM I-Plan Cyber Ops Concepts OPORDS/FRAGOs
CYBERCOM
DOD
JOINT
ARMY
CNO Concept Plan CNO EXORD AR 25-1 AR 25-2 FM/FMI
6 Series 9th SC(A) Campaign Plan
CJCSM 6510 CJCSI 6211 CJCSI 6250 GIG 2.0 JTF GNO
OPORD 05-01
UNCLASSIFIED
6
A-GNOSC Authorities
UNCLASSIFIED
DODI -8530 DODD 8500 DODI 8410 IA Campaign Plan
CYBERCOM I-Plan Cyber Ops Concepts OPORDS/FRAGOs
CYBERCOM
DOD
In Flux
JOINT
ARMY
CNO Concept Plan CNO EXORD AR 25-1 AR 25-2 FM/FMI
6 Series 9th SC(A) Campaign Plan
CJCSM 6510 CJCSI 6211 CJCSI 6250 GIG 2.0 JTF GNO
OPORD 05-01
UNCLASSIFIED
7
Command Global Relationships and Presence
7
8
NetOps Task Organization
UNCLASSIFIED
STRATCOM
G3
INSCOM
CIO / G6
G3 ODI
JTF-GNO
JFCC-NW
OPCON
ADCON
CIO/G6 OPS Cell
1st IO CMD
OPCON (THRU)
DCO
NETCOM
ARSTRAT
2d IO Bn
Direct Support
ADCON
A-GNOSC
Coord
ACERT (TACON)
A2TOC
TECHON
SWA
Europe
CONUS
TNOSC RCERT
TNOSC RCERT
TNOSC RCERT
South
Korea
TNOSC RCERT
TNOSC RCERT
Functional NOCs
PEO / POR NOCs
UNCLASSIFIED
9
Standardization of Network Operations
UNCLASSIFIED
UNCLASSIFIED
10
Approved CIO/G6 16 May 2008
UNCLASSIFIED
11
64 CND
Approved CIO/G6 16 May 2008
12
UNCLASSIFIED
GIG Network Defense
CNO EXORD NETCOM responsible for Operating and
Defending (CND/CND-RA) the Army LANDWARNET Ist IO
Cmd is responsible for CNO synchronization
DoD 8500.2 5.3. The Commander, United States
Strategic Command shall coordinate and direct
DoD-wide Computer nNtwork Defense (CND)
operations responsibilities (operational component
of IA) in accordance with DoD Instruction
O-8530.2.
Network Operations Information
Operations Information Assurance Critical
Infrastructure Protection Law Enforcement Counteri
ntelligence
Computer Network Defense Operations and Services
PROTECT MONITOR,
ANALYZE, DETECT RESPOND

• Forensic Malware Analysis

CND Architect CND-SP Certification and
Accreditation Process CND Research Technology
Program Manager CND Systems Integration CND
Policies and Procedures
SUSTAIN
NETCOM (orange) 1st IO CMD (blue) Combined
tasks (black)
Based on DoDi-O 8530.2 (CND) Clinger-Cohen and
OMB Circular A-130 DoD 8570.01
UNCLASSIFIED
13
UNCLASSIFIED
GIG Operations and Defense
CNO EXORD NETCOM responsible for Operating and
Defending (CND/CND-RA) the Army LANDWARNET Ist
IO Cmd is responsible for CNO synchronization
Network Operations Information
Operations Information Assurance Critical
Infrastructure Protection Law Enforcement Counteri
ntelligence
DoD 8500.2 5.3. The Commander, United States
Strategic Command shall coordinate and direct
DoD-wide computer network defense (CND)
operations responsibilities (operational component
of IA) in accordance with DoD Instruction
O-8530.2.
Computer Network Operations and Defense Services
OPERATE
PROTECT MONITOR, ANALYZE, DETECT
RESPOND

• INFOCON
• Situational Awareness
• Configuration Management
• Course of Action Development
• Incident Reporting
• Incident Response Action
• Incident Response Analysis
• Global NetOps Directives
• Trends Analysis

CND Architect CND-SP Certification and
Accreditation Process CND Research Technology
Program Manager CND Systems Integration CND
Policies and Procedures
SUSTAIN
NETCOM (orange) 1st IO CMD (blue) Combined
tasks (black)
Based on DoDi-O 8530.2 (CND) Clinger-Cohen and
OMB Circular A-130 DoD 8570.01
UNCLASSIFIED
14
UNCLASSIFIED
CNDSP Responsibilities
Legend
Core
Supporting
BCT?
UNCLASSIFIED
15
UNCLASSIFIED
JTF-GNO Products Received
UNCLASSIFIED
16
Recommended Army Cyberspace Priorities
UNCLASSIFIED
Material
Doctrine

• Stronger emphasis on cyberspace operations in
  Army doctrine
• Future development and resourcing of Cyber OPLAN
  / EXORD

• Immediately invest in critical cyber
• capabilities
• Develop and field complete (Perimeter
• to / Host) WarFighting capabilities (PM)

Organization
Leadership/Culture

• Assess, realign, and improve Army Cyber C2
• Evaluate the need for a consolidated Cyberspace
  proponent (NetWar, NetOps, IA, CNO)
• Assess our framework for Cyber Combat
  Development emphasizing the need for Quick
  Reaction Capability Development / Rapid Equipping
  to counter the dynamic, flexible threat
• Establish an Army PM for Cyberspace (NetOps,
  NetWar, CNO, IA)

• Command emphasis on securing and defending the
  network (NetOps Readiness Report) Fight the
  Network
• Develop an Army culture which embraces
  accountability and enforces compliance with
  established cyberspace standards and directives

Resources/Personnel
Training

• Evaluate the need for a Cyberspace MDEP (NetOps,
  CNO, NOSC, CERT, etc..)
• Increase and secure funding for critical cyber
  capacity across the force (A-GNOSC alone has a
  recurring 40M GWOT UFR reqt for critical
  personnel)

• Enhance Cyber education, skill identification,
  retention, recruitment, and career path
  development
• Embrace the Train As You Fight principle
  (threat simulations, exercises, battle labs,
  Cyber NTC environment etc..)

UNCLASSIFIED
17
Army Global Network Operations Security Center
(A-GNOSC)
UNCLASSIFIED
Army Cyberspace Operations
THE OVERALL CLASSIFICATION OF THIS BRIEF IS
UNCLASSIFIED