United States Cyber Command

Mission Statement

-- It is important that the mission statement text is left unmodified to correspond to the command's emblem. -- PLEASE do not edit it! Thanks!

According to the US DoD:

The text "9ec4c12949a4f31474f299058ce2b22a", located in the command's emblem, is the MD5 hash of their mission statement.

The Command is charged with pulling together existing cyberspace resources, creating synergies and synchronizing war-fighting effects to defend the information security environment. USCYBERCOM is tasked with centralizing command of cyberspace operations, strengthening DoD cyberspace capabilities, and integrating and bolstering DoD's cyber expertise.

Organizational Structure

Cyber Teams

Since 2015, USCYBERCOM added 133 new cyber teams. The breakdown was:

• Thirteen National Mission Teams to defend against broad cyberattacks
• Sixty-eight Cyber Protection Teams to defend priority DoD networks and systems against priority threats
• Twenty-seven Combat Mission Teams to provide integrated cyberspace attacks in support of operational plans and contingency operations
• Twenty-five Cyber Support Teams to provide analytic and planning support to the national mission and combat mission teams.

Component Commands

Cyber National Mission Force (CNMF)

CNMF was activated on 27 January 2014, as an element of USCYBERCOM. At inception, CNMF consisted of 21 teams, broken down into 13 National Mission Teams (NMT) and 8 National Support Teams (NST). Today, CNMF has expanded to 39 joint cyber teams consisting of over 2,000 service members and civilian members across the U.S. Armed Forces On 25 October 2022, SECDEF Lloyd Austin authorized CNMF to become a subordinate unified command underneath USCYBERCOM. Following this, on 19 December 2022, then-USCYBERCOM Commander (CDRUSCYBERCOM) General Paul Nakasone presided over a ceremony to establish the CNMF with the new "sub-unified" command status.

MajGen Lorna M. Mahlock has served as CNMF Commander since January 2024.

CNMF is one of three USCYBERCOM forces that would react to a cyber attack on the United States. The other two forces are the Cyber Combat Mission Force assigned to the operational control of individual U.S. combatant commanders, and the Cyber Protection Force that helps operate and defend the DODIN.

CNMF is composed of cyber mission force teams across services that support the CNMF mission through their specific respective assignments:

• National Mission Teams (NMT) defend the nation by identifying adversary activity, blocking attacked and maneuvering to defeat them.
• Combat Mission Teams (CMT) conduct military cyberspace operations in support of combatant commander priorities and missions.
• Cyber Protection Teams (CPT) defend DoD's information network, protect priority missions and prepare cyber forces for combat.
• National Support Teams (NST) provide analytic and planning support to national mission and combat mission teams.

CNMF operates in both defensive and offensive cyber operations to carry out its missions of: U.S. election defense, counter-ransomware operations, global hunt operations, combating foreign malicious cyber actors, and providing support to national security operations.

Global hunt operations began in 2018 as part of the "persistent engagement" strategy with the goal of looking for malicious cyber activity and vulnerabilities on significant networks. Since its inception, the hunt operations have been requested and conducted in 18 countries and over 50 foreign networks.

Standing joint task forces

Background

An intention by the U.S. Air Force to create a 'cyber command' was announced in October 2006.{{cite web

On 23 June 2009, the SECDEF directed the USSTRATCOM Commander to establish USCYBERCOM. In May 2010, General Keith B. Alexander outlined his views in a report for the United States House Committee on Armed Services subcommittee:

Initial Operational Capability (IOC) was attained on 21 May 2010. General Alexander was promoted to General, becoming one of 38 four-star military officers of the United States, and took charge of USCYBERCOM in a ceremony at Fort Meade that was attended by General David Petraeus, then-Commander of U.S. Central Command, and SECDEF Robert M. Gates. USCYBERCOM reached full operational capability on 31 October 2010.

USCYBERCOM assumed responsibility for several existing organizations. The Joint Task Force for Global Network Operations (JTF-GNO) and the Joint Functional Component Command for Network Warfare (JFCC-NW) were absorbed by the command. The Defense Information Systems Agency, where JTF-GNO operated, provides technical assistance for network and information assurance to USCYBERCOM, and is moving its headquarters to Fort Meade.

President Obama signed into law, on 23 December 2016, the National Defense Authorization Act (NDAA) for fiscal year (FY) 2017, which elevated USCYBERCOM to a unified combatant command. The FY 2017 NDAA also specified that the dual-hatted arrangement of CDRUSCYBERCOM as DIRNSA will not be terminated until the SECDEF and Chairman of the Joint Chiefs of Staff jointly certify that ending this arrangement will not pose risks to the military effectiveness of USCYBERCOM that are unacceptable to the national security interests of the United States.

Concerns

There are concerns that the Pentagon and NSA will overshadow any civilian cyber defense efforts. There are also concerns on whether the command will assist in civilian cyber defense efforts. According to then-Deputy SECDEF William J. Lynn, USCYBERCOM "will lead day-to-day defense and protection of all DoD networks. It will be responsible for DoD's networks – the dot-mil world. Responsibility for federal civilian networks – dot-gov – stays with the Department of Homeland Security, and that's exactly how it should be." Alexander notes, however, that if faced with cyber hostilities an executive order could expand USCYBERCOM's spectrum of operations to include, for instance, assisting the Department of Homeland Security in defense of their networks.

Some military leaders claim that the existing cultures of the Army, Navy, and Air Force are fundamentally incompatible with that of cyber warfare. Major Robert Costa (USAF) even suggested a sixth branch of the military, an Information (Cyber) Service with Title 10 responsibilities analogous to its sister services in 2002 noting:

Others have also discussed the creation of a cyber-warfare branch. Lieutenant Colonel Gregory ContiAt the time, Lieutenant Colonel Gregory Conti was a United States Military Academy Professor and Director of West Point's Cyber Security Research Center. and Colonel John "Buck" Surdu (chief of staff of the United States Army Research, Development and Engineering Command) stated that the three major services are "properly positioned to fight kinetic wars, and they value skills such as marksmanship, physical strength, the ability to leap out of airplanes and lead combat units under enemy fire."

Conti and Surdu reasoned, "Adding an efficient and effective cyber branch alongside the Army, Navy and Air Force would provide our nation with the capability to defend our technological infrastructure and conduct offensive operations. Perhaps more important, the existence of this capability would serve as a strong deterrent for our nation's enemies."

In response to concerns about the military's right to respond to cyber attacks, General Alexander stated "The U.S. must fire back against cyber attacks swiftly and strongly and should act to counter or disable a threat even when the identity of the attacker is unknown" prior to his confirmation hearings before the United States Congress. This came in response to incidents such as a 2008 operation to take down a government-run extremist honeypot in Saudi Arabia. "Elite U.S. military computer specialists, over the objections of the CIA, mounted a cyberattack that dismantled the online forum".

"The new U.S. Cyber Command needs to strike a balance between protecting military assets and personal privacy." stated Alexander, in a Defense Department release. If confirmed, Alexander said, his main focus will be on building capacity and capability to secure the networks and educating the public on the command's intent.

"This command is not about an effort to militarize cyber space," he said. "Rather, it's about safeguarding our military assets."

In July 2011, Deputy SECDEF William Lynn announced in a conference that "We have, within Cyber Command, a full spectrum of capabilities, but the thrust of the strategy is defensive." "The strategy rests on five pillars, he said: treat cyber as a domain; employ more active defenses; support the Department of Homeland Security in protecting critical infrastructure networks; practice collective defense with allies and international partners; and reduce the advantages attackers have on the Internet."

In 2013, USCYBERCOM held a classified exercise in which reserve officers (with extensive experience in their civilian cyber-security work) easily defeated active duty cyber warriors. In 2015 Eric Rosenbach, the principal cyber adviser to SECDEF Ash Carter, said DoD was looking at alternatives to staffing with just active-duty military. Beginning that year, USCYBERCOM added 133 teams (staffing out at 6,000 people), with the intent that at least 15% of the personnel would be reserve cyber operations airmen. These new teams had achieved IOC as of 21 October 2016. Officials noted that IOC is not the same as combat readiness, but is the first step in that direction.

President Barack Obama's Commission on Enhancing National Cybersecurity was formed to develop a plan for protecting cyberspace. The commission released a report in December 2016. The report made 16 major recommendations regarding the intertwining roles of the military, government administration and the private sector in providing cyber security.

President Trump indicated that he wanted a full review of USCYBERCOM during his bid for presidency. During his presidency, the Trump administration made USCYBERCOM a unified combatant command, and took other measures attempting to deter cyber attacks. However, the FBI reported that they logged a record number of complaints and economic losses in 2019, as cybercrime continued to grow.

International effects and reactions

The creation of USCYBERCOM appears to have motivated other countries in this arena. In December 2009, South Korea announced the creation of a cyber warfare command. Reportedly, this was in response to North Korea's creation of a cyber warfare unit. In addition, the British GCHQ has begun preparing a cyber force. Furthermore, a shift in military interest in cyber warfare has motivated the creation of the first U.S. Cyber Warfare Intelligence Center. In 2010, China introduced a department dedicated to defensive cyber war and information security in response to the creation of USCYBERCOM.

Operations

In June 2019, Russia has conceded that it is "possible" its electrical grid was under cyberattack by the U.S. The New York Times reported that hackers from USCYBERCOM planted malware potentially capable of disrupting the Russian electrical grid.

Pause on Offensive Cyber Operations

The U.S. government has formally paused offensive cyber operations against Russia. This decision was part of new guidance provided to USCYBERCOM in February 2025.

List of commanders

CDRUSCYBERCOM is a statutory office () held either by a four-star general or a four-star admiral. Main article: Leadership of the United States Cyber Command

References

Notes

Further reading

• Smeets, Max (4 July 2022). "A US history of not conducting cyber attacks". Bulletin of the Atomic Scientists 78 (4): 208–213.

References

1. (2025-04-04). "National Security Agency and Cyber Command chief Gen. Timothy Haugh ousted". The Washington Post.
2. https://www.cybercom.mil/About/Leadership/Bio-Display/Article/1335069/acting-deputy-commander-uscybercom/
3. "Executive Director, USCYBERCOM".
4. https://www.cybercom.mil/About/Leadership/Bio-Display/Article/1876045/acting-chief-of-staff-uscybercom/
5. "CMSGT Kenneth M. Bruce, Jr., USAF".
6. (7 November 2012). "What is U.S. Cyber Command (USCYBERCOM)? - Definition from Techopedia".
7. Nakashima, Ellen. (13 September 2016). "Obama to be urged to split cyberwar command from NSA". [[The Washington Post]].
8. "Statement by President Donald J. Trump on the Elevation of Cyber Command". [[whitehouse.gov]].
9. (21 May 2010). "Cyber Command Fact Sheet". U.S. Department of Defense.
10. Jelinek, Pauline. (8 July 2010). "A code you can hack: On CYBERCOM's logo". [[Marine Corps Times]].
11. U.S. Department of Defense, Cyber Command Fact Sheet, 21 May 2010
12. (12 March 2013). "Security Chief Says Computer Attacks Will Be Met". The New York Times.
13. (October 2016). "The Department of Defense Cyber Strategy". United States Department of Defense.
14. "ARCYBER Organization".
15. "MARFORCYBER Units".
16. "Joint Force Headquarters Cyber".
17. "Vice Admiral Heidi K. Berg".
18. "16th Air Force Units".
19. Pomerleau, Mark. (20 December 2022). "Cyber National Mission Force Declared Sub-Unified Command".
20. (November 2025). "The Evolution of Cyber: Newest Subordinate Unified Command is Nation's Joint Cyber Force".
21. (2022-12-19). "Cyber National Mission Force elevated in fight against foreign hackers".
22. [http://www.arcyber.army.mil/Resources/Fact-Sheets/Article/2079661/cyber-mission-force/ DOD Fact Sheet: Cyber Mission Force] ''U.S. Army Cyber Command.'' Retrieved 23 July 2022. {{PD-notice
23. [https://www.war.gov/News/News-Stories/Article/Article/1524747/cyber-mission-force-achieves-full-operational-capability/ Cyber Mission Force Achieves Full Operational Capability] ''United States Department of Defense.'' Retrieved 23 July 2022. {{PD-notice
24. [https://www.c4isrnet.com/workforce/career/2017/07/25/heres-how-dod-organizes-its-cyber-warriors/ Here's How DOD Organizes its Cyber Warriors] ''C4ISRNet.'' Retrieved 23 July 2022.
25. "The Cyber National Mission Force Is the Newest Military Command".
26. (2022-08-18). "U.S. Cyber Command completes defensive cyber mission in Croatia".
27. https://www.dcdc.mil/
28. https://www.c4isrnet.com/dod/cybercom/2018/11/30/cyber-commands-anti-isis-offensive-undergoes-a-change/
29. (5 May 2009). "US needs 'digital warfare force'". BBC News.
30. (2009-11-18). "preparedness and security news - DC Summit Convenes Military 'Cyber Warriors'". Homeland Security Today.
31. (2009-03-12). "News Release: Flag and General Officer Announcements". Department of Defense.
32. (15 April 2010). "Cyberwar Commander Survives Senate Hearing, Threat Level". Wired.com.
33. "U.S. Senate: Legislation & Records Home > Nominations Confirmed (Non-Civilian)". U.S. Senate.
34. (2010-05-21). "Photos : News Photo". United States Department of Defense.
35. "DoD Cyber Command is officially online, 21 May 2010, Army Times".
36. "Military Mulls Joint Cyber Defense". Govinfosecurity.com.
37. "Fort Meade cyber security center sought (www.HometownGlenBurnie.com - The Maryland Gazette)". HometownGlenBurnie.com.
38. "Release".
39. Jackson, William. (2009-06-24). "DoD creates Cyber Command as U.S. Strategic Command subunit - Federal Computer Week". Fcw.com.
40. "S. 2943; National Defense Authorization Act for Fiscal Year 2017".
41. Monroe, John S.. (2 July 2009). "Cyber Command: So much still to know". 1105 Media, Inc..
42. (1 October 2009). "U.S Cyber Command Goes Online". Democracy Arsenal.
43. Lynn, William J.. (12 November 2009). "Remarks at the Defense Information Technology Acquisition Summit". United States Department of Defense.
44. Shachtman, Noah. (23 September 2010). "Military's Cyber Commander Swears: "No Role" in Civilian Networks"". The [[Brookings Institution]].
45. (29 July 2010). "Recruiting, Development, and Retention of Cyber Warriors Despite an Inhospitable Culture". Small Wars Journal.
46. Costa, Robert. (April 2002). "Supporting the Information-Centric 2001 Quadrennial Defense Review: The Case for an Information Service". Air Command and Staff College, Air University.
47. Chabrow, Eric. (22 April 2009). "Report: Cybersecurity Military Command Coming". GovInfoSecurity (Information Security Media Group).
48. (2009). "Army, Navy, Air Force, Cyber: Is it Time for a Cyberwarfare Branch of the Military".
49. Chabrow, Eric. (25 March 2009). "New Cyber Warfare Branch Proposed: Time Ripe to Create Fourth Branch of Military". GovInfoSecurity (Information Security Media Group).
50. Nakashima, Ellen. (19 March 2010). "Dismantling of Saudi-CIA Web site illustrates need for clearer cyberwar policies". The Washington Post.
51. Daniel, Lisa. (15 April 2010). "Nominee Urges Government, Private Sector Cooperation". United States Department of Defense.
52. Parrish, Karen. (14 July 2011). "News Article: Lynn: Cyber Strategy's Thrust is Defensive". United States Department of Defense.
53. (4 August 2014). "In supersecret cyberwar game, civilian-sector techies pummel active-duty cyberwarriors". Gannett Government Media.
54. (14 April 2015). "Pentagon eyes recruiting cyber talent through National Guard". Military Times.
55. (3 January 2015). "Calling up the Reserves: Cyber mission is recruiting". Sightline Media Group.
56. (24 October 2016). "All Cyber Mission Force Teams Achieve Initial Operating Capability". United States Cyber Command, United States Department of Defense.
57. Rockwell, Mark. (21 November 2016). "Cyber panel closes in on final recommendations". 1105 Media, Inc..
58. Costello, John. (10 November 2016). "Overview of President-Elect Donald Trump's Cyber Policy". Flashpoint.
59. Fidler, David. (2 December 2020). "President Trump's Legacy on Cyberspace Policy". CFR.
60. (December 2009). "Cyber Warfare Command to Be Launched in January". Koreatimes.co.kr.
61. Clark, Colin. (2009-06-29). "StratCom Plows Ahead on Cyber". DoD Buzz.
62. "Construction begins on first cyber warfare intelligence center". Af.mil.
63. Branigan, Tania. (2010-07-22). "Chinese army to target cyber war threat". The Guardian.
64. (18 June 2019). "US and Russia clash over power grid 'hack attacks". BBC News.
65. (18 June 2019). "How Not To Prevent a Cyberwar With Russia".
66. "MSN".
67. "The Geopolitical Fallout of a Potential US Cyber Stand-Down".
68. Ikeda, Scott. (2025-03-07). "US Halts Cyber Operations Against Russia After Ukraine Flap".
69. Nakashima, Ellen. "As Trump warms to Putin, U.S. halts offensive cyber operations against Moscow". Washington Post.