Drunk as a Skunk Flashcards
Line that defines the interior or exterior orientation of the force in relation to the enemy or that connects actions on nodes and/or decisive points related in time and space to an objective(s)
Lines of Operations
LOOs
Operations are actions taken to design, build, secure, operate, maintain, and sustain DoD communications systems and networks in a way that creates and preserves data CIA, as well as user/entity authentication and non-repudiation
DoDIN Operations
Preserve ability to utilize friendly cyberspace capabilities and protect data networks, net-centric capabilities
Outmaneuvering adversaries taking or about to take offensive actions against defended networks, or otherwise responding to internal and external cyberspace threats
DCO
DCO types consist of these 3 things:
Internal defensive measures
DCO Response Actions
Countermeasures
Name 2 properties of OCO
Must be authorized via executive order
and requires deconfliction in accordance with current policies
Name 5 goals of OCO
Deny
Degrade
Disrupt
Destroy
Manipulate
Joint planning identifies ___ ____ the ___ (who) can integrate with other instruments of national power to achieve those national objectives
military capabilities
President
Effective planning provides leadership with :
Options that offer the highest probability for success
7 steps to joint planning process
Planning initiation
Mission analysis
Course of action development
COA analysis and wargaming
COA comparison
COA approval
Plan or order development
In reference to joint planning process-
Analyses of operational environment or developing or immediate crises may result in the __, __, or ___ directing military planning through a plannin directive
Pres, SecDef, or CJCS
Tasks assigned to a subordinate commander in a planning directive
Specified tasks
Additional tasks the commander must accomplish, typically in order to accomplish the specified and essential tasks, support another command or otherwise accomplish relevant to the operation
Implied tasks
Tasks that the command must execute successfully to attain the desired end state defined in the planning directive
Essential tasks
Elements of info the commander identifies as being critical to timely decision making
Commander’s critical information requirement
key component of mission analysis -
A “must do” placed on the command by a higher command that dictates an action
Constraints
key component of mission analysis -
A “cannot do” placed on the command by a higher command that prohibits an action
Restraints
key component of mission analysis -
Info known to be true such as verified locations of friendly and adversary force dispositions
Facts
key component of mission analysis -
Provides a supposition about the current situation or future course of events, presumed to be true in the absence of facts
Assumptions
key component of mission analysis -
Describes the mission in terms of the elements of who, what, when, where, and why
Mission statement
7 types of Special Access Programs
Apportioned
Acknowledged
Acquisition
Operations and support
Unacknowledged
Intelligence
Waived
4 functional combatant commands
USSOCOM
USSTRATCOM
USTRANSCOM
USCYBERCOM
6 geographic combatant commands
USNORTHCOM
USSOUTHCOM
USEUCOM
USCENTCOM
USINDOPACOM
USAFRICOM
Combatant command that conducts global ops to deter strategic attacks against the US
Responsible for command of US nuclear capabilities, space ops, global surveillance and recon, intel, comms, comps, global missile defense and combatting WMDs
USSTRATCOM
Subordinate unified command tree for USCYBERCOM
CNMF
JFHQ-DODIN
AFCYBER
ARCYBER
FLTCYBER
MARFORCYBER
Plus the 133 cyber mission force teams assigned to the above commands
Facilitate development of cyberspace requirements and coordinate, integrate, and deconflict CO into the command’s planning process
Provide CCMDs an interface and reachback capability to USCYBERCOM
Cyber Support Element
4 Authorities under CYBERCOM
Combatant command (COCOM)
Operational Control (OPCON)
Tactical Control (TACON)
Support
Provides full authority for a CCDR to perform those functions of command over assigned forces involving organizing and employing commands and forces, assigning tasks, designating objectives, and giving authoritative direction over all aspects of military operations, joint training (or in the case of USSOCOM) training of assigned forces) and logistics necessary to accomplish the missions assigned to the command
Vested only in the commanders of CCMDs by Title 10, USC, section 164 and cannot be delegated or transferred
Combatant command
Command authority that may be exercised by commands at any echelon at or below the level of CCMD and may be delegated within the command
Does not include authoritative direction for logistics or matters of admin, discipline, internal organization or unit training
Operational control
OPCON
Limited to the detailed direction and control of movements and maneuvers within the operational area necessary to accomplish assigned missions or tasks assigned by the commander
Is able to be delegated from a lesser authority than OPCON and may be delegated to and exercised by commanders at any echelon at or below the level of CCMD.
‐
Provides the authority to give direction for military operations and the control of designated forces.
Tactical Control (TACON)
Relationship is established by a common superior commander between subordinate commanders when one organization should aid, protect, complement, or sustain another force.
‐
may be exercised by commanders at any echelon at or below the CCMD level.
‐
The designation of supporting relationships is important as it conveys priorities to commanders and staffs that are planning or executing joint operations.
Support
3 levels of warfare
Strategic
Operational
Tactical
Prudent idea or set of ideas for employing the instruments of national power in a synchronized and integrated fashion to achieve theater and multinational objectives.
A nation often determines the national guidance that addresses strategic objectives in support of strategic end states and develops and uses national resources to achieve them.
Strategic
Links strategy and tactics by establishing operational objectives needed to achieve the military end states and strategic objectives.
Focused on planning and execution using operational art.
Operational
The employment and ordered arrangement of forces in relation to each other.
Battles and engagements are planned and executed to achieve military objectives.
generally employ various tactics to achieve their military objectives.
Tactical
Name the 6 joint staff sections
J-1. Manpower and Personnel
J-2. Intelligence
J-3. Operations
J-4. Logistics
J-5. Plans
J-6. Communications
Issued by the CJCS and/or commander.
Is a planning directive that initiates the development and evaluation of military Course of Action (COA).
If the order contains the deployment of forces, SecDef’s authorization is required.
WARNO
Is a directive that provides essential guidance and directs the initiation of plan development before the directing authority approves a military COA.
PLANORD (planning order)
Is a directive to implement an approved military CONOPS
Only the President and SecDefhave the authority to approve and direct the initiation of military operations.
The CJCS, by the authority of and at the direction of the President or SecDef, may subsequently issue an EXORD to initiate military operations.
Execution Order (EXORD)
Provides overarching guidance and outlines associated objectives, desired effects necessary for mission completion.
Task Order (TASKORD)
Is a directive issued by a commander to subordinate commanders for the purpose of effecting the coordinated execution of an operation.
Operation Order (OPORD)
OPORD format
5 items
SMEAC
Situation
Mission
Execution
Admin & logistics
Command & communication
Published semiannually.
Overarching document addressing CDR AFCYBER’s foundational strategy.
Guides the employment of full-spectrum cyber capabilities.
Cyberspace Operations Plan (CyOP)
Published weekly.
Provides overarching guidance for planning, execution, and assessment of cyberspace operations
Cyberspace Operations directive (CyOD)
Published Daily.
Operational type orders issued to perform specific actions at specific time frames in support of AF and Joint requirements.
Provides mission identification number, mission priority, tasked unit(s), time over target/terrain, AO information and any additional mission comments.
Used for tactical planning
Air Force cyber tasking order (AFCTO)
Published as required.
Codify procedures and processes for operations directed in the CTO.
Detail special considerations and/or special items of interest.
624 OC publishes standing versions of these, weekly versions of these, and exercise and operation-specific versions of these
Special instructions (SPINS)
A window of opportunity and direction for a tactical commander to conduct tactical operations.
Time bounded (start by/finish by) to give a tactical commander the authorized and suspended timing available to plan and execute missions.
Must be approved by the 624 OC.
Vulnerability window
The exact timing directed by the tasking authority specified in the tasking order to execute a mission.
Based on the available vulnerability window (can be an enduring or time-sensitive requirement) and must be planned and tasked within the vulnerability window
Time over target/terrain (TOT)
Constitutes the actions individual cyberspace forces take to accomplish a tasked mission.
The base unit for a mission is a single tactical mission conducted by a single tasked cyberspace force.
Cyberspace forces begin a single mission when they come on station and complete a single mission when the operators come off station.
Sortie
Telecommunications networks, computer systems, embedded processors and controllers, Internet Protocol (IP) address(es), associated subnet, domain, or transport space within the tasked AO.
Terrain
Responsible for issuing cyber orders as directed by 24 AF/AFCYBER/CC.
The authoritative source for status, control, and defense of AF networks.
Exercises direct tasking authority over all AF cyberspace forces to ensure DCO actions are synchronized across the globe.
Serves as the de-confliction focal point for the application of low-density/high demand 24 AF cyberspace resources.
Charged to plan, direct, coordinate, assess, and command and control (C2)
624 Operations Center
4 operational divisions of the 624 Ops Center:
Strategy (SRD)
Combat plans (CPD)
Combat operations (COD)
Intelligence, surveillance and recon division (ISRD)
624 OPs center division:
Supports theater objectives by developing, refining, disseminating, and assessing the AFCYBER cyberspace strategy.
Establishes the AFCYBER foundational strategy for executing along three lines of an operation (posture, protect and project) and publishes long-range, contingency plans to integrate full-spectrum cyberspace operations
Strategy division (SRD)
624 Ops center division:
Using guidance provided by SRD, Airmen participate in the development of detailed plans for the application of cyberspace resources.
Plans full spectrum cyberspace operations, including Cyberspace operational COAs, for the next CTO cycle.
CPD coordinates activities with 24 AF subordinate units, COD, and other planning component subject matter experts to support development of the CTO, CCO, and SPINS
Combat plans (CPD)
624 Ops Center division:
Comprised of three branches: OCO, DCO and DoDINOperations.
Responsible for monitoring and adjusting execution of the current CTO, CCO and monitoring AOC cyber tasking on the ATO.
Monitors the execution of the CTO/ATO and CCO while simultaneously maintaining up-to-date AFIN defensive posture, SA and performing DoDINOperations functions.
Combat operations (COD)
Provide predictive and actionable intelligence and analytical support for the planning and C2 of all 624 OC operations, leveraging information gleaned from AF sensors, sister services and national agencies
Maintain global situational awareness on adversary threat actor actions in relationship to the DODIN in order to assess threats
Can garner access to critical intelligence sources.
Intel, Surveillance and recon division (ISRD)
The process of determining the quantity of a specific type of lethal or nonlethal means required to create a desired effect on a given target.
What tools or methods do we need to use, how do we plan to use them to achieve our desired effect, and what will be the enemies response to the use of these tools or methods
Weaponeering
The efficient coordination of mission partners in order to complete the required mission.
The pace of CO requires significant pre-operational collaboration, as well as constant vigilance upon initiation, to ensure that activities in cyberspace and throughout the OE are coordinated and deconflictedin advance.
It is important to maintain cyberspace SA and assess the potential impacts to the joint force of any planned CO
Synchronization
Uncoordinated actions could expose or interfere with the actions of other USG entities.
Cyberspace Support Elements (CSEs).
Personnel facilitate development of cyberspace requirements and coordinate, integrate, and deconflict CO into the command’s planning process
Deconfliction
A process that measures progress toward mission accomplishment.
Measures progress toward the end state and delivers that feedback into the planning process.
Helps the commander determine progress toward attaining the desired end state, achieving objectives, or performing tasks
Operational assessments
Criteria for measuring task performance or accomplishment.
Generally quantitative, and used in most aspects of combat assessment.
Use quantitative data or direct observation of event to determine success.
Used in most aspects of combat assessment to determine the results of an engagement.
Measure of performance
Used to assess changes in system behavior, capability.
Measure the attainment of an end state, achievement of an objective, or creation of an effect.
May be harder to derive than MOPs for a discrete task.
Measure of effectiveness
Composed of physical damage, functional damage, and target system assessment.
Begin with micro-level examination of effects to ultimately arrive at a macro-level conclusion of the outcomes created in the target system.
First-order effects are often subtle, so it may be difficult to determine second and third-order effects
Battle damage assessments (BDA)
The official record of events that occur during a crew shift or sortie (live or simulated)
Maintains an accurate and detailed record of all significant events, including any deviations from guidance in this Instruction pertaining to operations occurring during each crew shift.
At a minimum, this will include identification of on-duty personnel, major operational activities, significant communications, major system degradations and other abnormal system responses
Crew logs
Provides information essential to the conduct of normal operations and response to emergency conditions.
Centralizes significant, time-sensitive issues and ensures procedures are disseminated to operations personnel.
All crew members are required to review this and acknowledge completion prior to beginning crew duties.
Crew information file
Crew members will strictly adhere to all checklists in a technical order (TO), all unit generated checklists or other higher headquarters (HHQ) directives.
Crew members may develop local crew aids such as charts, question banks, guides or other visual aids and processes to bolster proficiency, enhance changeover briefings and to ensure comprehensive tasks are completed correctly.
Checklists, local procedures, and crew aids
Crew duty period should not exceed ___ hours
12
Prescribes mandatory __ and maximum duty periods (DP) for all personnel who operate AF cyberspace weapon systems.
__ period is a 10-hour non-duty period before the DP begins.
Purpose is to ensure the crew member is adequately rested before performing a cyberspace mission or mission-related duties.
Crew rest
Will be accomplished in accordance with crew rest limitations provided in this guidance.
Units should attempt to provide all crewmembers a stable schedule using a standard rotation for 24/7 crews to the maximum extent possible.
Operations schedulers will publish, post and monitor schedules for the crew force and initiate changes to the schedules based on tracking of qualifications, certifications, restrictions and other factors as required to meet mission objectives.
crew scheduling
MAJCOMs/NAFs will establish a process for conducting investigations to determine the cause of any mission failures or significant events, including abnormal system responses or trends.
A significant, abnormal system response may include major hardware or software anomalies, safety violations, or security deficiencies.
Operations review board
Ensures all crew members obtain and maintain the certification/qualification and proficiency needed to effectively perform their unit’s mission.
Cybercrew training program (CTP)
Defines cybercrew operational status and specifies minimum training requirements for Initial Qualification Training (IQT) and Mission Qualification Training (MQT)
Qualification training
Focuses on filling training requirements not met at IQT, mastering local procedures, and increasing proficiency as needed.
Comprised of training at a Formal Training Unit (FTU), if applicable, and local training at the unit.
Mission qualification training (MQT)
A crewmember who has satisfactorily completed IQT.
Basic cyber qualified
A cybercrew member is considered unqualified upon loss of currency exceeding 6 months, expiration of his or her qualification evaluation, or completion of a qualification evaluation in a different weapon system
Requalification training
Crew training - Loss of currency:
Time for completion of training for all delinquent items
Time for recompletion of MQT and a requalification evaluation IAW AFI 10-1703 Vol. 2
6-12 months
12+ months
Multiple qualification ___ be delegated below the MAJCOM level, except for the lead MAJCOM, which may further delegate within its command
Cannot
MAJCOMS may authorize qualification in more than one weapon system
Establish, monitor, and maintain the unit Individual Qualification Folders (IQF) program.
‐
Establish procedures for review and quality control of evaluation documentation.
‐
Establish and maintain a trend analysis program.
‐
Establish unit no-notice program and goals
Design evaluation criteria and submit to NAF for review and approval.
‐
Design Master Question Files (MQFs) for all CWSs assigned to the group and submit to NAF for review and approval.
‐
At least quarterly, advise unit leadership on unit cybercrewqualification status, requisite completion, and upcoming expiration dates.
Standardization and evaluation
Provides commanders a sampling of daily cybercrew performance and an assessment of unit training effectiveness.
No-notice evaluation
Qualification levels:
The member demonstrated desired performance and knowledge of safety, procedures, equipment and directives within tolerances specified in the grading criteria.
Q1
Qualification levels:
The member generally demonstrated desired performance and knowledge of safety, procedures, equipment and directives within tolerances specified in the grading criteria
Q2
Qualification levels:
The member demonstrated an unacceptable level of safety, performance or knowledge.
Q3
Qualification levels:
Demonstrate exceptional skill and knowledge in all portions of the evaluation.
Do not fail any part.
Received a Q1 grade with no discrepancies on all areas/subareas.
Pass the written exam with a score of 95-100
Exceptionally qualified designation
Standarization and evluation term:
Place cybercrewmembers receiving a failing score on a QUAL on supervised status.
Status downgrade
Records the results of cybercrew evaluations.
AF form 4418
An index providing pertinent information extracted from all the AF Forms 4418 accomplished for the member.
AF form 4420
Contains the source documents that constitute the history of certification for each member.
The AF Form 4418 is the source document used to record certification of a member.
Individual qualification folder (IQF)
A tool to train members on training deficiencies, new systems/procedures, or trends.
May be issued by AFSPC, NAF, or units to address incidents, trends, deployed area operations, or potential problems with equipment/procedures.
Stan/eval command interest items (CII)
Contain information temporary in nature, directly pertinent to the safe conduct of operations, and must be read by all cybercrew members before operations
Current read file
Individual crews, unit operations, and intelligence functions jointly share responsibility for mission planning.
All crew members must be present during shift change or sortie briefing unless specifically excused by the squadron operations officer or higher authority.
Weapons and Tactics personnel will support the employment of current/effective TTPs.
Crews will receive a current intelligence briefing which will include detailed briefings on current adversary activity, threat type and capabilities.
Operational procedures
PBED:
Plan
Brief
Execute
Debrief
Used within the cycle of tactical operations
Uses wing/squadron standards, crew aids/inflight guides, a clear understanding of crew member responsibilities and expectations during each phase.
Implies quantifiable phases of a standard mission day, beginning when crew members arrive at the squadron and ending when post-mission administrative events are complete.
PBED
Individual crews, unit operations, and intelligence functions jointly share responsibility for mission planning.
‐
Mission lead is ultimately responsible for all aspects of tactical mission planning.
‐
Effective mission accomplishment requires thorough tactical mission planning and preparation.
‐
Failures in execution are often indicative of poor mission preparation.
‐
You will use ME3C-(PC)² here.
Planning
Conveys the various elements of the mission and the plan to accomplish the objectives.
‐
Derived from tactical mission planning.
‐
Ensures all participants understand mission objectives and expectations.
‐
Mission leads are responsible for ensuring subordinate elements and decision authorities understand the tactical plan.
Briefing
Purpose is to execute the planned mission IAW SPINS, ROEs, etc.
‐
Action phase, carrying out assigned tasks and mission.
execution
Designated mission lead is responsible for leading a debrief after every mission.
‐
Will cover all aspects of the mission (planning, briefing and execution).
‐
Will ensure all participants receive feedback through the development of Lessons Learned (LL) and Learning Points (LP).
‐
Should occur at multiple levels i.e. mass debrief, package debrief, element debrief.
Debriefing
ME3C-(PC)² :
Mission
Environment
Enemy
Effects
Capabilities
Plan
Phasing
Contracts
Contingencies
Teams at the tactical level use the mission planning template to ensure crew members understand mission objectives, ROE, SPINS, etc.
Mission planning considerations include an analysis of the environment, both physical (terrain) and political/military in order to align mission effects with the commander’s intent.
ME3C-(PC)²
What is the commander’s intent? (AFCTO, CyOD, etc.)
‐
What are the actual mission tasks required to accomplish the mission?
Specified tasks? Implied tasks?
Additional mission tasks required?
‐
What are the facts and assumptions for this mission?
‐
Each assumption must be validated via a request for information (RFI) or an information need (IN) which generates a request for intelligence.
Mission
Terrain / target owner (e.g., Program Management Office)
‐
What is the Political Military (POL / MIL) situation?
‐
What do the most current governing directives say?
●
Constraints and restraints, ROE, SPINS, PAA, etc
‐
Physical environment
‐
Logical/Network environment
●
Topology
●
Network migrations / network upgrades / authorized service interruptions (ASI) / Period-of-nondisruption(POND)
●
Are systems running at max capacity?
Environment
What are the enemy’s goals / objectives (broad or narrow)?
‐
What are the enemy’s strategies / methods of operation?
●
What / how do they target?
‐
What are the adversary’s strengths / weaknesses?
‐
What does the enemy’s order-of-battle look like?
‐
Has the enemy targeted the terrain before?
●
What method was used in the past?
‐
What is the most likely course-of-action?
‐
What is the most dangerous course-of-action?
Enemy
What are the effects that the commander intends to achieve?
‐
MoE/ MoPthat can be set to assess the plan
‐
Collection plan to support the assessment plan
‐
Intelligence Gain / Loss (IGL) considerations
Effects
What forces are assigned?
‐
Capability pairings for assigned target / terrain
‐
Are assigned assets sufficient?
●
Are additional forces required? [Request-for-forces (RFF)]
●
What is the minimum force (MINFORCE) requirement?
‐
Outside coordination as required (e.g., AFOSI and DISA)
●
Is this a joint mission?
●
What Army / DISA/ JIE / JRE / Navy / USMC assets do I have?
●
What planning must take place to account for these assets?
Capabilities
Scoped adequately and satisfies the tasking. ‐ Will the plan accomplish the mission? ‐ What is the Commanders/Supported Commanders Acceptable Level of Risk (ALR)? ● What are the Technological Gain / Loss (TGL) considerations? ‐ What is the GO / NO-GO criteria? ‐ Are MINFORCE requirements met? ‐ Terrain / target deconfliction. ‐ Target deliverables ● How to collect and what format
Plan
Phase
●
A definitive stage of an operation or campaign during which a large portion of the forces and capabilities are involved in similar or mutually supporting activities for a common purpose.
‐
Trigger
●
An event, condition or specified time in which an operation or campaign transitions focus.
‐
Will triggers be time based or event based (or both)?
‐
Identify timeline constraints.
Phasing
An agreement between two or more parties for the doing or not doing of something specified.
‐
Ensure that these encompass:
●
Marshalling, ingress, deconfliction, communications, egress / recovery, phase transitions, on-call missions, etc.
‐
Triggers / contracts for transitioning between primary and backup communication methods.
‐
Brevity is key to communicating in stressful situations .
‐
Use code words for “in the clear” communication.
‐
Use the ‘CACA’ format.
Contracts
CACA:
Criteria
Authority
Communication
Action
How will the plan account for changes with respect to Mission, environment, enemy, effects and capabilities?
‐
What if the timeline changes?
●
Compressed time-on-target (TOT) or extended vulnerability window?
●
How will each asset be affected?
‐
What are the triggers and / or decision points that lead to contingencies?
‐
Abort criteria? Knock-it-Off (KIO) criteria? Rollback criteria?
●
What are their respective plans?
Contingencies
Occurs at the conclusion of every mission, operation, exercise, sortie, and training event
‐
Uses root-cause analysis to identify reasons for mission failure or success.
‐
The purpose is to replicate successes and avoid repeat mistakes.
‐
Provides immediate reinforcement, seeks and identifies root cause, and solidifies short term gains.
‐
Facilitates evolving processes and TTP changes and proves effectiveness within current TTPs and processes.
Debrief process
Actual events that occurred and any factual piece of information resulting from operator performance or event inputs.
Observation
Process of looking at the mission and determining the facts
Reconstruction
Areas or aspects of the event that impeded achievement of the desired outcome or mission accomplishment.
‐
Focus is on overall mission accomplishment, not individual actions
‐
Always in the form of an externally focused question
Debrief focus point
Stimuli (normally external) that may have contributed to the conditions of the event.
Contributing factors
The “what” and “how” to address the Root cause
‐
Must be measurable & repeatable.
‐
Should also include “who” and maybe the “when.”
Instructional fix
When the event doesn’t negatively impact the accomplishment of a mission objective OR when something positive of note occurred.
Learning point
Determining the common threads throughout the mission
Trends
Planning developed in noncrisis situations in support of future events.
Several COAs are created, each containing an initial CONOPS that identifies, at a minimum, major capabilities required and task organization, major operational tasks to be accomplished by components, a concept of employment, and assessment of risk for each COA.
Planning has six or more months to be accomplished.
Deliberate planning
Driven by an incident or situation that typically develops rapidly and occurs with little or no warning
In time-sensitive cases, activities and functions may be accomplished simultaneously
A crisis could be so time critical, or a single COA so obvious, that the first written directive might be a DEPORD or an EXORD.
Planning has less than six months to be accomplished
Crisis action plan
OCO, DCO, and DoDIN Operations comprises ___
624 Ops Center
A crewmember who has satisfactorily completed IQT and MQT, but who is not fully-certified MR/CMR
Basic mission capable
A crewmember who has satisfactorily completed IQT and MQT, and maintains their certification, current, and proficiency in their mission
Mission ready/combat mission ready
