DEPARTMENT OF DEFENSE UNITED STATES CYBER COMMAND ssoo SAVAGE ROAD SUITE 6171 war GEORGE GA MEADE MARYLAND 20755 Michael Martelle NOV 1 1 Z l The National Security Archive Gelman Library Suite 7'01 2130 Street NW Washington DC 20037 Dear Mr Martelle Thank you for your September 21 2013 Freedom of Information Act F 01A request for materials related to the Cyber Components Commander Conference on October 22 2013 As the initial denial authority I am partially denying portions of the document under 5 U S C 552 b l and The denied portions include classi ed national security information under the criteria of Executive Order 13526 labeled as and personally identifying information regarding personnel assigned to a sensitive unit exempt from disclosure under 10 U S C l30b labeled as U S Cyber Command is a sensitive unit If you are not satis ed with our action on this request you may le an administrative appeal within 90 calendar days from the date of this letter by US mail or email If you submit your appeal in writing please address it to ODCMO Director of Oversight and Compliance 4800 Mark Center Drive FOIA Appeals Mailbox #24 Alexandria VA 223 50- 1200 If you submit your appeal by email please send it to All correspondence should reference U S Cyber Command case tracking number 19-R021 Additionally you may contact the Of ce of Government Information Services OGIS which provides mediation services to help resolve disputes between requesters and Federal agencies Contact information is 8601 Adelphi Road OGIS College Park MD 20740-6001 0618 may also be reached at 202-241-5770 and 1-877-684-6448 Wm ROSS A MYERS Rear Admiral US vy Chief of Staff AGENDA Cyber Component Commanders Meeting 22 October 2013 1300-1630 Protocol 33 3 30 969-295 ls or 130 969-25403 CAG Rep as I 2H it l I3 UNIFORM MILITARY DUTY UNIFOR CWILIAN BUSINESS Time Presentation Title and Presenter Location 1300-1315 UWEICDHIC and Opening Remarks DSCR GEN Keith B Alexander USA CDR I3 I 5-1345 U m yberspace Operations and Planning Update DSCR USCYBERCOM 13 1345-1400 Um CMF Training and Exercises Update DSCR pom 13Gb USCYBERCOM J7 400-1410 UWBreak 1410-1530 UMomponent Commander Updates on DSCR Builds and Service-Speci c Issues 1530s1615 UMComponent Commander Discussions DSCR Topics Include than See 1 7 2 -lmpact of Shutdown on Operations and CMF Builds Joint Cyber Warrior Education Program JCWEP Feedback WIS-1630 UMClosing Remarks DSCR GEN Keith B Alexander USA CDR 630 Depart Iron Cyber Mission Force Training Cyber Flag Update 22 October 2013 mm 130 Director ofJoint Exercises and Training J7 USCYBERCOM The overall classification of this briefing is UNCLASSIFIEW UNCLASSIFIED Shutdown Impact on CMF Training Furlough Impact on 1St FY14 CMF Training Schedule 17x FY13 funded courses delayed minimum or 21 days impacts 323 students 219 640hrs lost - Re starts beginning 21 classes will retain original rosters Courses CYBR3800 NETO4012 CYBR1010 CYBR3100 NETA2008 8x FY13-funded courses require additional funding to be rescheduled impacts 166 students 53 120hrs - Earliest can resume 28 Oct if original students are available to attend training otherwise minimum of 28 day delay to restart Still verifying original student availability - Contracting Officer working with Vendors to assess specific contract penalties costs for rescheduling Courses ETW3006 ETO4000 ETO4000 44x FY14 funded courses now delayed until FY14 funds received impacts 913 students 5 384hrs JCWEP was delayed 5 days and the CYBR2005 Advanced Security Essentials 5 days block postponed 25x students delayed Joint Network Attack Course JNAC by 2 weeks Rescheduling 15 Oct class with 28 Oct start 25 CMF attendees forces 19 Nov class to require swing shift and will run second shift through 22 Nov--goes back to normal day shift 25 Nov 19x students for one full Mission Commanders Course lost opportunity 2 week course 8 1 520hrs clue to shift in schedule and conflicting instructor commitments Shutdown potentially impacting FY14 Battle Rostered names -currently only 66 names against FY14 teams and minimal training requirements scheduled UNCLASSIFIED 2 UNCLASSIFIED Cyber Flag 14-1 Update - BLUF Reduced Scope Exercise-40% redux in attendees and DV Day 6 Nov - Changes to footprint 72an of 490 Focused on keeping Blue 8 OPFOR intact - Keep of teams as planned no cuts to on keyboard blue players just some overhead trimming - Cut White Cell by 50 reduction - Cut Assessors by 12 - Cut Support staff by 10 - Timeline Cutting 4 days off the front end of schedule Execution now 1-7 Nov 13 Oct Advanced Team Prep depart 14 Oct - Projected equipment arrival date 14 29 Oct Local Network Snapshots - 29 Oct - Main Body Travel 30 Oct - Registration Academics 31 Oct - Range Familiarization Dress Rehearsal - 1 7 Nov Execution Vulnerability windows no intermission mission planning at halfway point - 8 Nov - Hotwash SVTC TBD As of 22 Oct 29 Personnel Advanced Team on site performing setup test - Equipment successfully awaiting ZGB TACLANEs from JIOR Norfolk ETA Wednesday 23 Oct Local Network Exercise build 90% complete external connectivity testing begins 23 Oct - Showstoppers None UNCLASSIFIED 3 Questions Discussion Back Up Slides Training Pipeline and Training Status Templates UNCLASSIFIEW POC and Reference Links -J7POCs CST5 13 CMTs lawman Other refrences on mcsnavb - Go for pre-requisites CPTS bntamob ADET Scheduling POCS hi 3 130b meme Wm - J7 Portal Standards workrole pipelines Cyber Development Plans JQRs Training Training Form - ADET Portal Training Schedule Service Requirements Spreadsheet UNCLASW - Course Reouirements Scheduling 8 Throughput - Training Pipeline Stabilization - Grandfathering experience training - Intermediate Cyber Core ICC for CPT JACWC CMF leadership training - Red Blue Hunt Methodologies Training for non-National CPTs - Workrole Functional Job Qualification Requirements 0st - Mission Assignment Alignment Training impacts - - Collective training standards - - Tasks Conditions 8t Standards identified - Team Certification JF HQ Certification - CNMF HQ Certification - Career planning and retention - Funding - Projected RMD funding estimate - - TDY Funding on UNCLASSIFIED CMF Training Challenges Mitigations Training products locked 17 Jul and posted to CMF Training Portal Individual Training Equivalency Board and Course Equivalency processes easing demands on training pipeline Alternate ICC ALTICC and ALTICC Cohorts built offered along with Service course equivalency process 24th INWT Approved PACWC variant pilot and priority for CMF in Oct FY14 classes Working with 134 5 to identify specific methodology requirements training development effort will follow JQR team completed writing staffing of all 28 CMF JQR TASKORD 19 Sep for remainder of CMF non-CPT positions Developed ICC and Auditor JQRs for staffing to alleviate sponsorship Working in concert with on Mission Alignment Board process to ensure ability to attend sponsorship-required training Build of Training 8 Readiness Manual captures CMF-specific training standards for individual thru collective training--est Feb 14 Cyber Knight Guard Flag w Svc Cyber Components inform Manual task conditions and standards CFIST developing Joint Mission Essential Tasks JMETs for JF HQ Expanding Cyber series of events in FY14 to inform Service presentation of forces Work force development working group working with services on identifying critical work roles for retention RMD funded but fragile based on fiscal environment Mitigated by leveraging 4 National System NCS centers-- USCYBERCOM TDY funding provided by exception for non-NCS courses UNCLASSIFIEW CMF Training to glideslope JACWC Eg%0000 0000 00000000000 Collectivefa ca 8 at ca cm ca Training I I I ITEB 81 Course 3 I Equiv process Indr'w-dual FY13 Battle- 14 Tral ll'lg Tramrng I Rostered Teams I Requirements 1 DMAG Needed DEG-300 Effort i nd i 03 000 I I I 6000 5000 4000 3000 2000 1000 Personnel CMF Training Build Phases Oloint Advanced Cyber Warfare Course JACWC 9 UNCUISSIFIEDW CMF Training Template - Training Template is a Leadership Tool to help track each individual teams training progress Will help forecast future training requirements people S schedule - Aggregated data will answer the glide slope question mm 130a UNCLASSIFIEW 10 I JAN FEB '5 yEer Rn'ig i- 1-3 1 8 13-2- 18 22 - AR #1 025 29 - FLT Element #1 1213 MP0 i ADET HQP yEer' it ara 13-1 23 25 sec Andrews AFB ADET USCYBERCOM 2013 Exercises 8 Wargame 3-6 FPC i Smart OCT DEC -13 Execution Ft Meade AUG Execution Ft Meade 10-13 g 30 Mini-Guards AARicoc 15-18 IPC Service VM Reqs Ft Meade TBD Network Range Ft Meade Min-serene 0 Conference ISA release date Execution CG Mini Guards Spin-Ups 4-6 Meade a ist- ISA retease 8 rl Ct rna 25-27 MPG i Ft Meade 20-22 FPC i F1 Meade 23 MSEL i Ft Meade 23 3 - 'i Execution 2 4-17 DISH AFCYBER MAE I Coalition 2 Eths Each 4- 34r Working-Seminaris Andrews Smart Center 19-23 Execution i' Ar irews Sma Persistent XNET Dev Cyber Component Commanders Meeting 22 October 2013 The overall classification of this briefing is Classified By mm 13Gb Derived From USCYBERC Dated 20111011 AND Derived From 1-52 Dated 20070108 Declassifv 0n 20380901 Cyber Component Commanders Meeting 22 October 2013 Cyberspace Operations USCYBERCOM 13 The overall classification of this briefing is Classified Bv bll3l130b Derived From USCYBERC WI bu Dated 20111011 AND Derived From 1-52 Dated 20070108 Declassifv On 20380901 UNCLASSIFIEW U Operations Planning Update bH l Sec 1 4 a sch dul a met STRATCOM on 280CT Cyber Mission Force FY13 - FY14 Build him See 1 4 ai National Mission Teams National Support Teams National Eyber Protection Teams vaer Protection Teams b 1 Sec 1 4 3 Combat Mission Teams Combat Support Teams CCMD Cyber Protection Teams Service Cyber Protection Teams Sec 1 41 3 lie-z Current State Intelligence Centric Platform 3 xi We-l Operamr l Databases Test Labs r Development 0' and More Databases 15 Ill Planners bl l SEC 134 3 Targeteers Linguists Developers Testers Fires Support Personnel Etc e it i a '53 2 Planners v 9' r r g I Tim ll l- - future Strategy_ etc Targeteers Linguists TDPIs Developers Testers Fires Support Personnel Etc Databases Test Labs Development Labs mm Sec 1 4 a3 Sec 1 4 3 Cyber Component Commanders Meeting 22 October 2013 Cyber Mission Force Training and yber Flag Update USCYBERCOM 17 The overall classification of this briefing is Classified 3w Derived From USCYBERCO Dated 20111011 AND Derived From 1 52 Dated 20070108 Deciassifv On 20380901 7 UNCLASSIFIED Shutdown Impact on CMF Training Furlough Impact on 1st FY14 CMF Training Schedule 17x FY13 funded courses delayed minimum or 21 days impacts 323 students 219 640hrs lost Re starts beginning 21 classes will retain original rosters Courses CYBR3800 NET04012 ETA103O CYBR3100 NETAZOOB 8x FY13 funded courses require additional funding to be rescheduled impacts 166 students 53 120hrs - Earliest can resume 28 Oct if original students are available to attend training otherwise minimum of 28 day delay to restart Still verifying original student availability - Contracting Officer working with Vendors to assess specific contract penalties costs for rescheduling Courses ETO4000 ETO4000 44x FY14 funded courses now delayed until FY14 funds received impacts 913 students 1 506 880 hrs JCWEP was delayed 5 days and the Advanced Security Essentials 5 days block postponed 25x students delayed Joint Network Attack Course JNAC by 2 weeks Rescheduling 15 Oct class with 28 Oct start 25 CMF attendees forces 19 Nov class to require swing shift and will run second shift through 22 Nov goes back to normal day shift 25 Nov 19x students for one full Mission Commanders Course lost opportunity 2 week course 8L 1 520hrs due to shift in schedule and conflicting instructor commitments Shutdown potentially impacting FY14 Battle Rostered names--currently only 66 names against FY14 teams and minimal training requirements scheduled UNCLASSIFIED 3 UNCLASSIFIED Cyber Flag 14-1 Update - BLUF Reduced Scope Exercise-40% redux in attendees and DV Day 6 Nov - Changes to footprint '72an of 490 Focused on keeping Blue 8 OPFOR intact Keep of teams as planned no cuts to on keyboard blue players just some overhead trimming - Cut White Cell by 50 reduction Cut Assessors by 12 Cut Support staff by 10 Timeline Cutting 4 days off the front end of schedule Execution now 1 7 Nov - 13 Oct Advanced Team Prep depart - 14 Oct - Projected equipment arrival date 14-29 Oct - Local Network Snapshots - 29 Oct - Main Body Travel 30 Oct Registration Academics - 31 Oct Range Familiarization Dress Rehearsal 1 7 Nov Execution Vulnerability windows no intermission mission planning at halfway point - 8 Nov - Hotwash SVTC TBD As of 22 Oct - 29 Personnel Advanced Team on site performing setup test Equipment successfully awaiting ZGB TACLANEs from JIOR Norfolk ETA Wednesday 23 Oct Local Network Exercise build 90% complete external connectivity testing begins 23 Oct Showstoppers None UNCLASSIFIED 9 Questions Discussion Cyber Component Commanders Meeting 1 22 October 2013 Next Meeting 22 November 2013 0830- 1300 The overall classification of this briefing Is Classified Bye Derived From USCYBERCOM Dated 20111011 AND Derived From 1-52 Dated 20070108 Declassifv 0n 20380901 11