Capt Healey AF XOIWD 697-8701 12 Mar 99 TALKING PAPER ON JOINT TASK FORCE-COMPUTER NETWORK DEFENSE Purpose To provide XOII with an update on the Joint Task Force-Computer Network Defense JTF-CND in preparation for HAC-D skull session Background The JCS decided in August 1998 to stand up a strong JTF-CND to coordinate and direct DoD defenses against a computer network attack The JTF-CND reached IOC on 30 December 1998 with a mix of PCS and TDY personnel developing the JTF's tactics techniques and procedures The JTF should be FOC by June 1999 Discussion The JTF-CND's primary jurisdiction will be against strategic computer attacks those attacks that cross CINC Service Agency boundaries or have widespread or critical effects Per AF insistence the JTF will have a full-time staff judge advocate and fulltime law enforcement counterintelligence personnel The AFFOR-CND will be the AF Computer Emergency Response Team AFCERT with the Commander AF Information Warfare Center AFIWC CC as COMAFFOR-CND On 28 Jan 99 XOI released a message to the field announcing this and tasking COMAFFOR-CND to develop a CONOP NLT 16 Apr 99 for how AF will conduct CND The CONOP must be coordinated with Air Staff and MAJCOMs The JTF-CND is located at DISA and currently reports to SECDEF However CJCS has released a personal message for CINCs and Service Chiefs assigning the JTF-CND to USSPACE effective 1 Oct 99 In Oct 00 the JTF-CND will expand to include computer network attack and will be known as JTF-Information Support JTF-IS USSPACE must submit a JTF-IS implementation plan to CJCS for approval NLT 14 May 99 It is still undecided if the JTF will physically move from DISA when USSPACE takes control The JTF-CND Commander is Maj Gen Campbell who is dual-hatted as Deputy Director for DISA Additionally there are four AF O-4 billets in the JTF-CND with two currently filled AFCIC SYNI is working to find the correct person to fill the 33XX position on the JTF JTF-CND is small approximately 25 billets and is expecting augmentation from DISA and Guard Reserve forces to be effective against large-scale computer network attacks According to the JTF J2 AIA's CYBERWATCH office is providing excellent intelligence support Air Staff Views The JTF-CND's first steps have been effective beginning the long process of coordinated tactics techniques and procedures TTPs for CND The procedures to work CND between JTF-CND and Services and Commands may be rough and acrimonious at first but should work out given time Air Force supports the transfer of the JTF-CND to USSPACE Other Service Views Army Navy and Marines are supporting JTF-CND DEPSECDEF Hamre heavily supports the JTF Recommendation None for information only This document is from the holdings of The National Security Archive Suite 701 Gelman Library The George Washington University 2130 H Street NW Washington D C 20037 Phone 202 994-7000 Fax 202 994-7005 nsarchiv@gwu edu