OCR of the Document

View the Document >>

USCYBERCOM to CDRUSACYBER, Subj: CYBERCOM FRAGORD 01 to TASKORD 16-0063 To Establish Joint Task Force (JTF)-ARES to Counter the Islamic State of Iraq and the Levant (ISIL) in Cyber Space, May 5, 2016. Secret//Rel to USA, [Redacted].

b s 1 4 a ussc I 0518252 MAY 16 EM USCYBERCOM FT GEORGE MEADE MD TO CDRUSACYBER FT BELVOIR VA MARFORCYBERCOM FT MEADE MD JFHQ CYBER NAVY FT GEORGE MEADE MD FT GEORGE MEADE MD 24AF LACKLAND AFB TX JFHQ DODIN FT GEORGE MEADE MD CNMF FT GEORGE MEADE MD USCYBERCOM FT GEORGE MEADE MD INFO JOINT STAFF WASHINGTON DC HQ USAFRICOM STUTTGART GE HQ USCENTCOM MBCDILL AFB FL HQ USEUCOM VAIHINGEN GE CDR USNORTHCOM PETERSON AFB CO HQ USPACOM HONOLULU HI HQ USSOCOM MACDILL AFB FL HQ USSOUTHCOM MIAMI FL HQ USSTRATCOM OFFUTT AFB NE CDR USTRANSCOM SCOTT AFB IL COGARD CYBERCOM WASHINGTON DC NSACSS FT GEORGE MEADE MD PASS TO JFHQ-CYBER AIR FORCE LACKLAND AFB TX JOINT DC i fbH1 Sect4m USSC I I SUBJ U mm USCYBERCOM ERACORD 01 TO TASKORD 16-0063 TO ESTABLISH JOINT TASK FORCE TO COUNTER THE ISLAMIC STATE OF IRA9 AND THE LEVANT ISIL IN CYBERSPACE TO USA I 01 To TASKORD 16-0063 TO ESTABLISH JOINT TASK FORCE TO COUNTER THE ISLAMIC STATE OE IRAQ AND THE LEVANT 1811 IN TO USA U EXORD To IMPLEMENT UPDATED CYBERSPACE OPERATIONS COMMAND AND CONTROL C2 FRAMEWORK TO USA U OPERATION INHERENT RESOLVE Oct EESFETEEREI I USCYBERCOM OPORD 15-055 IN SUPPORT OF OPERATION INHERENT RESOLVE To USA MAR mm MAY U TRILATERAL MEMORANDUM OF AGREEMENT AMONG THE DEPARTMENT OF DEFENSE DEPARTMENT OF JUSTICE AND THE INTELLIGENCE COMMUNITY REGARDING COMPUTER NETWORK ATTACK AND COMPUTER NETWORK EXPLOITATION MAY 2007 - UMEOUO USCYBERCOM OPORD TO USA JANUARY 2016 - _mm mm COMMAND USCENTCOM OPERATIONS ORDER OPORD J 1 3ec1-4tawssc TO USA Nov YEW-H USCENTCOM FRAGO 24 006 CYBERSPACE OPERATIONS To USA DEC 15 - U OF DEFENSE INSTRUCTION 0 3600 03 TECHNICAL ASSURANCE STANDARD TAS FOR COMPUTER NETWORK ATTACK CNA CAPABILITIES Nov 2010 - ANALYSIS BRIEF CYBER SUPPORT TO COUNTER ISIL VERSION 34 APRIL 2016 - ADD TASKORD 16-0063 TO ESTABLISH JOINT TASK FORCE TO COUNTER THE ISLAMIC STATE OF IRAQ AND THE LEVANT ISIL IN CYBERSPACE TO USA TASKING ORDER TASKORD DIRECTS UNITED STATES CYBER COMMAND USCYBERCOM TO ESTABLISH JOINT TASK FORCE -ARES LED BY COMMANDER ARMY CYBER COMMAND 5E3 T US mm 59 We 559 CDRARCYBER TO COUNTER THE ISLAMIC STATE IN IRAQ AND THE LEVANT ISIL IN CYBERSPACE WITH INITIAL OPERATIONAL CAPABILITY IOC NO LATER THAN AND FULL OPERATIONAL CAPABILITY FCC U NO WA HANGE USCYBERCOM will establish a JTF to C2 cyber forces IOT deny ISIL's use of the bers ace dorLain through a gultipronqed a roach focused mnem1mmusc on I wn$cmmU$c IOT prevent attacks against the US and coalition yartners support the broader effort ntle ISIL and posture for CO with IOC of and FCC of 836 lI'he will be co-located with the National Security Agency washington NSA-W at Ft Meade 3 A U CONCEPT OF OPERATIONS N0 CHANGE 3 3 U TASKS 3 3 1 U USCYBERCOM J1 NO CHANGE 3 3 2 U USCYBERCOM J2 3 3 2 A U NO CHANGE 3 3 2 3 U NO CHANGE 3 3 2 C U NO CHANGE 3 3 2 3 U NO CHANGE 3 3 2 E U NO CHANGE 3 3 2 F U NO CHANGE 3 3 2 C U N0 CHANGE 3 3 2 H U N0 CHANGECHANGE Be prepared to provide personnel to based on manning requirement approved by CDRUSCYBERCOM A will be provided SEPCOR as part of a We 530 I fragmentation order FRAGO to this TASKORD once approved by CDRUSCYBERCOM Select personnel to be identified by the JEFF-ARES Commander must have taken NSA required classes for signals intelligence SIGINT Production Chain spa access um- The date for JEFF-ARES main body personnel is 1000-1100 10 May 2016 Report to address 8605 6th Armored Cavalry Rd Fort Meade MD 20755 - mm ussc _l 3 3 B B 3 based 2 3 3 B 2 CHANGE U N0 CHANGE U NO CHANGE U NO CHANGE U USCYBERCOM J3 CHANGE CHANGE CHANGE CHANGE CHANGE CHANGE CHANGE provide personnel to on manning requirement approved by CDRUSCYBERCOM A will be provided SEPCOR as part of a FRAGO to this TASKORD once approved by CDRUSCYBERCOM Select personnel to be identified by Commander personnel must have taken NSA required classes for SPC access The reporting date for main body personnel is 1000-1100 10 May 2016 Report to address 8605 6th Armored Cavalry Rd r Fort Meade USSC 3 B 3 H 3 B 3 I 3 B 3 J U NO CHANGE U N0 CHANGE U N0 CHANGE 53mm If 3 3 3 K U NO CHANGE 3 3 3 L U NO CHANGE 3 3 3 M U NO CHANGE 3 3 4 U USCYBERCOM J4 3 3 4 A CHANGE ICW NSA Installation and Logistics and office of primary responsibility OPR space managers determine viable solutions for facilities seating and logistics support for JTF-ARES personnel to reside within applicable NSA Enterprise locations within NBA-W Provide cost estimates to USCYBERCOM J8 NIT 10 May 2016 3 3 5 U USCYBERCOM J5 NO CHANGE 3 3 6 U USCYBERCOM J6 NO CHANGE 3 3 7 U USCYBERCOM J8 N0 CHANGE 3 3 8 U USCYBERCOM J9 N0 CHANGE 3 3 9 U STAFF JUDGE ADVOCATE SJA NO CHANGE 3 3 10 U PUBLIC AFFAIRS OFFICE PAO N0 CHANGE 3 3 11 JTF-ARES 3 3 11 A U CHANGE Conduct Commander's estimate to determine requirements and operational approach to accomplish CDRUSCYBERCOM approved Lines of Effort LOEs and objectives as described in Ref with execution level details and timelines Include a refinement of previously developed Mission Analysis Ref J Provide Commander s estimate to CDRUSCYBERCOM NLT 7 June 2016 3 3 11 3 U N0 CHANGE 3 3 11 C U N0 CHANGE 3 3 11 D CHANGE Achieve IOC and report status to CDRUSCYBERCOM NLT wn m mwm IOC is defined as having teams established for each of the five LOEs and the capacity to perform the following functions 1 Conduct planning in preparation for directing 2 Participate in USCYBERCOM and b 1 s 14 ussc USCENTCOM targeting boards and processes 3 Provide and coordinate intelligence support for each of the LOEs 3 B 11 E CHANGE Achieve FCC and report status to CDRUSCYBERCOM NLT FOC is reached when JTF-ARES demonstrates the ability to perform the following Mission Essential I Sec 14 3 ussc WW an an direct 4 Coordinate integrate and deoonflict 5 Transition Phase I C-ISIL planning and CO from USCYBERCOM Headquarters HQ Service Cyber Components SCCs and Joint Force Headquarters - Cyber JFHQ-C and conduct all Phase II planning and C0 3 B ll F U NO CHANGE 3 B ll G U NO CHANGE 3 3 11 H U NO CHANGE 3 3 11 I U NO CHANGE 3 3 11 J U NO CHANGE 3 3 11 K U NO CHANGE 3 B ll L U NO CHANGE 3 3 11 M U NO CHANGE 3 3 12 U JFHQ-C ARMY ARCYBER 3 3 12 A U NO CHANGE 3 3 12 3 U NO CHANGE 3 3 12 C U NO CHANGE 3 3 12 D U NO CHANGE 3 B 12 E CHANGE Establish a Plan of Action and Milestones POAEM for the integration of all personnel to include identified work location s with IOC NLT into the and FCC NLT USSC rbm Sec 1 4m ussc I for the JTF muummg uuemeime W mwm I 3W 3 B 12 F CHANGE Generate the requirements for a JMD and BPT provide personnel to JTF-ARES based on manning requirement approved by CDRUSCYBERCOM A JMD will be provided SEPCOR as part of a FRAGO to this TASKORD once approved by CDRUSCYBERCOM Select personnel to be identified by the JTF-ARES Commander personnel must have taken NSA required classes for SPC access M The reporting date for main body personnel is 1000-1100 10 May 2016 Report to address 8605 6th Armored Cavalry Rd Fort Meade MD 20755 bx3 ussc 3 3 12 6 U NO CHANGE 3 B 12 H U NO CHANGE 3 3 12 1 U NO CHANGE 3 3 12 J U NO CHANGE 3 B 12 K CHANGE Develop estimate of funding required to establish and maintain JTF- ARES broken down into a funding schedule based on the following temporary duty TDY costs and NSA information technology IT shortfalls Provide estimate to Services and USCYBERCOM J8 NLT 10 May 2016 3 3 12 L U NO CHANGE 3 3 13 U CYBER NATIONAL MISSION FORCE 3 B 13 A CHANGE Provide personnel to JTF-ARES based on manning requirement approved by CDRUSCYBERCOM A 3141 will be provided SEPCOR as part of a FRAGO to this TASKORD once approved by CDRUSCYBERCOM Select personnel to be identified by the JTF- ARES Commander personnel must have taken NSA required classes for SPC access The reporting date for main body personnel is 1000-1100 10 May 2016 Report to address 8605 6th Armored Cavalry Rd Fort Meade MD 20755 lbxawssc I USSC 3 3 13 3 U NO CHANGE 3 3 13 C U NO CHANGE 3 3 13 D U NO CHANGE 52cm I mu35ecL4m ussc SEW 3 B 13 E CHANGE Provide risk assessment to existing missions based upon force reallocation to JTF-ARES Risk assessment is due to the USCYBERCOM J3 NLT 22 May 2016 3 3 14 U JFHQ-C MARINES MARINE CORPS FORCES CYBER COMMAND MARFORCYBER 3 3 14 A CHANGE BPT provide personnel to JTF-ARES based on manning requirement approved by CDRUSCYBERCOM A JMD will be provided SEPCOR as part of a FRAGO to this TASKORD once approved by CDRUSCYBERCOM Select personnel to be identified by the JTF-ARES Commander personnel have taken NSA required classes for SPC access The reporting date for main body personnel is 1000-1100 10 May 2016 Report to address 8605 6 Armored Cavalry Rd Fort Meade MD 20755 3 3 14 3 U NO CHANGE 3 3 14 C U NO CHANGE 3 3 14 D U NO CHANGE 3 3 14 E CHANGE Provide risk assessment to existing MARFORCYBER JFHQ-C Marines missions based upon force reallocation to JTF-ARES Risk assessment is due to the USCYBERCOM J3 NLT 22 May 2016 3 3 15 U JFHQ-C AIR FORCE AIR FORCE CYBER COMMAND AFCYBER 3 3 15 A CHANGE BPT provide personnel to JTF-ARES based on manning requirement approved by CDRUSCYBERCOM A JMD will be provided SEPCOR as part of a FRAGO to this TASKORD once approved by CDRUSCYBERCOM Select personnel to be identified by the JTF-ARES Commander personnel must have taken NSA required classes for SPC access _ The reporting date for JTF-ARES main body personnel is 1000-1100 10 May 2016 Repor th tar- 9 v nus USSC 3 3 15 3 U NO CHANGE 3 3 15 C U NO CHANGE Emmi 1045A 330 3 3 15 D U N0 CHANGE 3 B 15 E CHANGE Provide risk assessment to existing AFCYBER JFHQ-C Air Force missions based upon force reallocation to JTF-ARES Risk assessment is due to the USCYBERCOM J3 NLT 22 May 2016 3 3 16 U JFHQ-C NAVY FLEET CYBER COMMAND 3 B 16 A CHANGE BPT provide personnel to JTF-ARES based on manning requirement approved by CDRUSCYBERCGM A JMD will be provided SEPCOR as part of a FRAGO to this TASKORD once approved by CDRUSCYBERCOM Select personnel to be identified by the JTF-ARES Commander personnel must have taken NSA required classes for SPC access The reporting date for JTF-ARES main body personnel is 1000-1100 10 May 2016 Report to address 8605 6th Armored Cavalry Fort Meade MD 20755 ussc 3 B 16 B U NO CHANGE 3 B 16 C U NO CHANGE -3 B 16 D U NO CHANGE 3 3 16 E CHANGE Provide risk assessment to existing JFHQ-C Navy missions based upon force reallocation to the JTF-ARES Risk assessment is due to the USCYBERCOM J3 NLT 22 May 2016 3 3 17 U REQUESTED SUPPORT FROM USCENTCOM AND UNITED STATES SPECIAL OPERATIONS COMMAND USSOCOM NO CHANGE mm Sec 1 4 a ussc SC Sec N0 CHANGE 3 C U COORDINATING INSTRUCTIONS 3 C 1 U N0 CHANGE 3 C 2 U NO CHANGE 3 C 3 U N0 CHANGE 3 C 4 U NO CHANGE I 39 We 330 3 C 5 U NO CHANGE 3 C 6 U NO CHANGE 3 C 7 CHANGE The reporting date for main body personnel is 1000-1100 10 May 2016 Report to address 8605 6'th Armored Cavalry Rd Fort Meade MD 130 3 USS 3 C 8 U N0 CHANGE 3 C 9 U NO CHANGE 3 C 10 U NO CHANGE 3 C 11 U NO AND N0 COMMAND AND 5 5 A USCYBERCOM will retain operational control OPCON of JTF-ARES All tactical forces allocated to JTF-ARES will be OPCON to the JTF Commander 5 3 The Cyberspace Operations Teams COTs are general support to JTF-ARES 5 c museum s general support to JTF-ARES 5 D U All DOD components will acknowledge receipt and understanding of this TASKORD within 24 hours via official message traffic or email to 5 E U POINTS OF CONTACT POCS 5 E 1 Primary POC for this order is IFuture Operations OPT Deputy NSTS WSSC COMM SIPR Alternate POC I SEW I OPT Lead rb 3 u sc -- I - mmussc I 5 E 3 Alternate POC OPT 5 E 4 After Hours POC USCYBERCOM JOC Duty Officer JDO NSTS 969-1645 COMM 443-654-4804 NIPR CYBERCOM MIL SI PR CYBERCOM SMIL MIL IC GOV 5 F U Request for information regarding execution of this order amplifying guidance and or additional details are to be submitted at this link asEx 5 ROGERS ADM USN USCYBERCOM Chasm Derived From USCYBERCOM SCG Dated 20160503 Declass On 20410503 930 1321222 JUN 16 FM USCYBERCOM FT GEORGE MEADE MD TO CDRUSACYBER FT BELVOIR VA MARFORCYBERCOM FT MEADE MD FT GEORGE MEADE MD 24AF LACKLAND AFB TX JFHQ DODIN FT GEORGE MEADE MD USCYBERCOM FT GEORGE MEADE MD JFHQ CYBER NAVY FT GEORGE MEADE MD CNMF FT GEORGE MEADE MD INFO JOINT STAFF WASHINGTON DC HQ USAFRICOM STUTTGART GE HQ USCENTCOM MACDILL AFB FL HQ USEUCOM VAIHINGEN GE HQ USPACOM HONOLULU HI HQ USSOCOM MACDILL AFB FL HQ USSOUTHCOM MIAMI FL HQ USSTRATCOM OFFUTT AFB NE CDR SCOTT AFB IL NSACSS FT GEORGE MEADE MD CDR USNORTHCOM PETERSON AFB CO COGARD CYBERCOM WASHINGTON DC USCYBERCOM FT GEORGE MEADE MD mum TO I PASS TO JFHQ-CYBER AIR FORCE LACKLAND AFB TX PASS TO JOINT DC SUBJECT USCYBERCOM FRAGORD 02 TO TASKORD 16-0063 TO ESTABLISH JOINT TASK FORCE TO COUNTER THE ISLAMIC STATE OF AND THE LEVANT ISIL IN CYBERSPACE TO usA 02 TO TASKORD 16-0063 TO ESTABLISH JOINT TASK FORCE T0 COUNTER THE ISLAMIC STATE OF IRAQ AND THE LEVANT ISIL IN TO USA WSWWE OPERATION INHERENT EXORD TO IMPLEMENT UPDATED CYBERSPACE OPERATIONS COMMAND AND CONTROL C2 FRAMEWORK To I OPERATION INHERENT RESOLVE Oct USCYBERCOM OPORD 15 055 IN SUPPORT OF OPERATION INHERENT RESOLVE TO USA MAR SEW b 1 seci4 a SC MAY U TRILATERAL MEMORANDUM OF AGREEMENT AMONG THE DEPARTMENT OF DEFENSE DEPARTMENT OF JUSTICE AND THE INTELLIGENCE COMMUNITY REGARDING COMPUTER NETWORK ATTACK AND COMPUTER NETWORK EXPLOITATION MAY 2007 - USCYBERCOM OPORD 16-0001 OPERATION YOUNG APOLLO OYA TO USA JAN 2016 - UNITED STATES CENTRAL COMMAND USCENTCOM OPERATIONS ORDER OPORD ' Sec1-4 a ussc To Nov USCENTCOM FRAGO 24-006 CYBERSPACE OPERATIONS TO DEC U DEPARTMENT OF DEFENSE INSTRUCTION 0 3600 03 TECHNICAL ASSURANCE STANDARD TAS FOR COMPUTER NETWORK ATTACK CNA CAPABILITIES NOV 2010 - MISSION ANALYSIS BRIEF CYBER SUPPORT TO COUNTER ISIL VERSION APRIL 2016 - TO ESTABLISH JOINT TASK FORCE JTFJ-ARES T0 COUNTER THE ISLAMIC STATE OF IRAQ AND THE LEVANT ISIL IN CYBERSPACE REL To USA 0420452 MAY 16 16 0063 FRAGORD TO TASKORD 16 0063 TO ESTABLISH JOINT TASK FORCE TO COUNTER THE ISLAMIC STATE OF IRAQ AND THE LEVANT ISIL IN CYBERSPACE REL To USA _ 0518252 MAY 16 16 0063 l THIS PRAGMENTARY ORDER FRAGORD DIRECTS UNITED STATES CYBER COMMAND USCYBERCOM TO ESTABLISH JOINT TASK FORCE LED BY COMMANDER ARMY CYBER COMMAND CDRARCYBER TO COUNTER THE ISLAMIC STATE IN IRAQ AND THE LEVANT ISIL IN CYBERSPACE WITH OPERATIONAL CAPABILITY IOC NO NLT AND FULL OPERATIONAL CAPABILITY FOC NLT DITI IT U NO U NO 890 SEGR-EFMR-EHIO-USA 530 3 A U CONCEPT OF OPERATIONS NO CHANGE U INTENT NO CHANGE PURPOSE N0 CHANGE 3 A 1 B U METHOD NO CHANGE 3 A 1 B 1 Commanders of Joint Force Headquarters-Cybers JFHQ-Cs and Cyber Nation Headquarters CNMF HQ are authorized to align I I crew positions per Combat Mission Teams Mission Teams NMTs against CDRUSCYBERCOM authorized USSC Sec 1 4 amsst Personnel r08 tered i U' scn V mm SecL4m ussc raining requirements and will instead be re ired to satisfy the training requirements -they are rostered against This authorization is limited to rostering personnel against the requirements of existing and subsequently authorized 530 land does not constitute an authorization to conduct I I shall be an orize OM established procedures This allocation will be reviewed and be updated based on the demand signal from JFHQ-Cs and CNMF HQ 3 A 1 B 2 Wim ADD As per Ref J has established lines of effort LOEs to meet the Commander's_objectives to counter ISIL in cyberspace LOE 5 Posture for I has been established to coordinate and standardize processes for cyberspace operations CO IJTF-ARES coordinate with JFHQ-Cs to align objectives with near-term Combatant Command CCMD C-ISIL requirements until JTF-ARES is postured to assume efforts 3 A 1 C U END STATE NO CHANGE 3 3 U TASKS 3 3 1 U USCYBERCOM J1 NO CHANGE 3 3 2 U USCYBERCOM J2 NO CHANGE 3 3 3 U USCYBERCOM J3 3 3 3 A U NO CHANGE 3 3 3 3 U NO CHANGE gem USA SSC 3 3 10 3 3 11 3 3 11 3 3 11 3 3 11 3 3 11 3 3 11 3 3 11 3 3 11 3 3 11CHANGE CHANGE CHANGE CHANGE CHANGE CHANGE CHANGE CHANGE CHANGE CHANGE CHANGE ADD 5 2mm SSC Coordinate and deconflict any requests for USCYBERCOM J4 NO CHANGE USCYBERCOM J5 USCYBERCGM J6 USCYBERCOM J8 USCYBERCOM J9 NO CHANGE NO CHANGE N0 CHANGE NO CHANGE STAFF JUDGE ADVOCATE SJA N0 CHANGE U PUBLIC AFFAIRS OFFICE PAD NO CHANGE JTF-ARESCHANGE CHANGE CHANGE CHANGE CHANGE CHANGE CHANGE CHANGE SSC seem us 3 B 11 I U NO CHANGE 3 B 11 J U NO CHANGE 3 B 11 K U NO CHANGE 3 B 11 L U N0 CHANGE 3 B 11 M U NO CHANGE 3 B 11 N ADD Accept operational control OPCON of forces transferred under this order and report receipt to the USCYBERCOM Joint Operations Center JOC 3 B 11 0 b 1 Sec14 a U580 ADD Determine requirements in support of ISO approved 0- required coordinate request rece Lve and roster additional from adjacent CMF components 1 Sec1A a 3 3 11 9 SW for CO mm 5ec14eyussc 3 B 11 Q ADD Coordinate with as needed to communicate plan coordinate and execute operations aligned with global priorities 3 B 11 R ADD Generate and publish a transition plan for JTF-ARES to assume OPCON of forces following the JTF-ARES Commander's decision to assume the global mission 3 3 12 U JFHQ-C ARMY ARCYBER 3 B 12 A U NO CHANGE 3 B 12 E U N0 CHANGE 3 B 12 C U NO CHANGE 3 B 12 D U N0 CHANGE 3 B 12 E U NO CHANGE 3 B 12 F U N0 CHANGE 3 B 12 G U NO CHANGE 3 B 12 H U NO CHANGE 3 3 12 1 U N0 CHANGE 3 B 12 J U N0 CHANGE 3 B 12 K U NO CHANGE 3 B 12 L U N0 CHANGE SEW-USA 5 539m 3-3-12-M Transfer OPCON of anemia I rb 1 Sec 1 4 a ussc to JTF-ARES IIso I mm Sec 1 4 a ussc Planning effOrt-n priorities in alignment with 3 B 12 N b 1 Sec 1 4 a USSC Sec 1 4 a USSC requirements Coordinate all planning efforts with JTF-ARES 9 Planning af x other Department of Defense elements planning and executing a to the greatest extent possible us 3 3 12 3 Wm ADD On order support 90 lannin efforts a ainst ISIL branches in response to FL q j bxn Sec 143 ussc i requirements 3 12 Wm ADD Placel WWIin direct support of JFHQ-C MARFORCYBER in support requirements I Direct support is defined as support to planning - operational preparation of the environment OPE and 3 3 12 3 Be prepared to 331' transfer OPCON of to 3 B 13 U CNMF 3 B 13 A U NO CHANGE 3 3 13 3 U N0 CHANGE 3 3 13 0 U NO CHANGE 3 B 13 D U N0 CHANGE 3 3 13 3 U N0 CHANGE 3 3 13 3 ADD Transfer OPCON to JTF-ARES 3 B l4 U JFHQ-C MARINES MARINE CORPS FORCES CYBER COMMAND MARFORCYBER U NO CHANGE 3 3 14 3 U NO CHANGE 3 E 14 C U NO CHANGE 3 3 14 D U NO CHANGE enemas us b1111Sec1- 181 3 3 14 E U NO CHANGE ADD Transfer OPCON of 11131159111113 SC F a4 uses to JTF-ARE S mm 5ec14m ADD Lead I-lannin- efforts 13-13-144 - ISO JTF-ARES priorities requirements and coordinate all planning efforts With 3 B 14 H ADD BPT conduct and OPE ISO JTF-ARES priorities m a planning efforts with other elements planning and executing C-ISIL Got to the greatest extent possible muyssa14e ussc 3 3 14 J On order support co planning efforts against IS branches in response to SOCOM requirements 3-B-14 K WA 1111159 114181 ADD BPT transfer OPCON of JTF-ARES 3 3 15 U AIR FORCE AIR FORCE CYBER COMMAND AFCYBER 3 B 15 A U N0 CHANGE 3 3 15 3 U N0 CHANGE 3 B 15 C U NO CHANGE U NO CHANGE 3 B 15 E U NO CHANGE 3 3 15 F WA ADD Coordinate and provide points of contacts POCs supporting CO planning efforts against ISIL branches in response to United States European Command USEUCOM requirements 3 3 16 U JFHQ-C NAVY FLEET CYBER COMMAND 3 3 16 A U NO CHANGE 3 3 16 3 U NO CHANGE 3 3 16 C U NO CHANGE 3 3 16 D U NO CHANGE 3 3 16 E U NO CHANGE 3 3 16 F ADD Coordinate and provide POCs supporting CO planning efforts against ISIL branches in response to United States Pacific Command USPACOM and United States Southern 1 4 WM b s tse Command USSOUTHCOM requirements 3 3 17 U NO CHANGE 3 3 18 U NO CHANGE 3 3 19 U ADD REQUESTED SUPPORT FROM DEFENSE INTELLIGENCE AGENCY DIARequest one collection manager one target analyst and one intelligence planner to report to JTF-ARES located at Ft Meade MD NLT 15 JUN 2016 3 0 U COORDINATING INSTRUCTIONS 3 C l U NO CHANGE 3 C 2 U NO CHANGE 3 C 2 A ADD All forces supporting this operation will coordinate with JTF-ARES on the alignment of ION crew positions 3 0 3 CHANGE USCYBERCOM JOC will use the USCYBERCOM Standing Operating Procedures SOP and watch checklist to manage deconfliction procedures USCYBERCOM J38 Fires and Effects Division is the primary point of contact for any questions or updates related to IONs 3 C 4 U NO CHANGE 3 C 5 U NO CHANGE 3 C 6 U NO CHANGE 3 C 7 U N0 CHANGE 3 C 8 U N0 CHANGE 3 0 9 U NO CHANGE 3 0 10 U OPERATIONS SECURITY OPSEC NO CHANGE 3 C 11 U PUBLIC AFEAIRS GUIDANCE NO CHANGE 3 C 12 Sm ADD All pending or proposed mission packages and all approved mission packages and CONOPs developed under lframework will be transferred to JTF-ARES immediately Additionally all C-ISIL cyber intelligence surveillance and reconnaissance and CONOPs will be transferred to JTF-ARES immediately 3 c 13 ADD is the supported command for planning and_ operations conducted under this order All Cs and the will provide direct support to as defined by the following 1 1 4 SEGR-EFHLREFFO-USA 3 c 13 A ADD Provide and coordinate capabilities requirements wit JTF-ARHS to support global operations 3 c 13 B ADD Provide weekly updates to on global cyberspace planning and operations 3 c 13 c ADD When requested by and subject to and concurrence provide up to two IONs to support ongoing CMF C-ISIL operations AND NO AND 5 A CHANGE USCYBERCOM will retain OPCON of All Cyber Mission Forces CMF previously identified in this FRAGORD as allocated to will be OPCON to the JTF-ARES Commander 5 A 1 ADD CNMF is granted direct liaison authority DIRLAUTH of other aligned ION Operators CNMF will coordinate all IONs ISO C-ISIL operations with JTF-ARES 5 A 2 ADD Kodiak ber erations Team will F-ARES WHSELqmumm products or to support approvedpm 3 1 U m as directed IAN KCOT's mission 5 3 U NO CHANGE 5 C U NO CHANGE 5 D U NO CHANGE All components will acknowledge receipt and understanding of this TASKORD within 24 hours via official message traffic or email to 5 E U POINTS OF CONTACT POCS 5 E 1 U NO CHANGE 5 E 2 U NO CHANGE 5 E 3 U NO CHANGE 5 E 4 CHANGE After Hours POC USCYBERCOM Offensive Cyber Operations 0C0 Mission Lead NSTS 969-1643 COMM 443-654-3952 NIPR SIPR JOCoco@nsa ic gov 5 E 5 MEL mom ADD PRIMARY POC FOR IONS J38 FIRES AND EFFECTS DIVIS SEGRWREHO-USA 53 380 so nxa ussc 5 F U N0 CHANGE Request for information regarding execution of this order amplifying guidance and or additional details are to be submitted at this link GENTEXT FOR THE CDR me U330 IUSN USCYBERCOM DIRECTOR OF Classified By Derived From USCYBERCOM SCG Dated 20160503 Declass 0n 20410503 am 0420452 MAY 16 FM USCYBERCOM FT GEORGE MEADE MD TO CDRUSACYBER FT BELVOIR VA MARFORCYBERCOM FT MEADE MD JFHQ CYBER NAVY FT GEORGE MEADE MD FT GEORGE MEADE MD 24AF LACKLAND AFB TX DODIN FT GEORGE MEADE MD CNMF FT GEORGE MEADE MD USCYBERCOM FT GEORGE MEADE MD INFO USCYBERCOM FT GEORGE MEADE MD JOINT STAFF WASHINGTON DC JOINT WASHINGTON DC HQ USAFRICOM STUTTGART GE HQ USCENTCOM MACDILL AEB FL HQ USEUCOM VAIHINGEN GE CDR USNORTHCOM PETERSON AFB CO HQ USPACOM HONOLULU HI HQ AFB FL HQ USSOUTHCOM MIAMI FL HQ USSTRATCOM OFFUTT AER NE CDR USTRANSCOM SCOTT AFB IL COGARD CYBERCOM WASHINGTON DC NSACSS FT GEORGE MEADE MD PASS TO AIR FORCE LACKLAND AFB TX mm SUBJ USCYBERCOM TASKORD 16-0063 TO ESTABLISH JOINT TASK FORCE JTF -ARES TO COUNTER THE ISLAMIC STATE OF IRAQ AND THE LEVANT ISIL IN CYBERSPACE 16 0063 To ESTABLISH JOINT TASK FORCE To COUNTER THE ISLAMIC STATE OF IRAQ AND THE LEVANT ISIL IN TO USA- U EXORD MLEMENT UPDATED CYBERSPACE OPERATIONS COMMAND AND CONTROL C2 FRAMEWORK TO USA- CJcs 01161zz OPERATION INHERENT RESOLVE Oct 11 550 USCYBERCOM OPORD 15 055 IN SUPPORT OF OPERATION INHERENT RESOLVE To USA MAR TQ USA mxn5m14mumsc MAY TRILATERAL MEMORANDUM OF AGREEMENT AMONG THE DEPARTMENT OF DEFENSE DEPARTMENT OF JUSTICE AND THE INTELLIGENCE COMMUNITY REGARDING COMPUTER NETWORK ATTACK AND COMPUTER NETWORK EXPLOITATION 2007 - U lm USCYBERCOM OPORD Wasataawssc To USA JANUARY 2016 UNITED STATES CENTRAL COMMAND USCENTCOM OPERATIONS ORDER OPORD TO USA NOV USCENTCOM FRAGO 24 006 CYBERSPACE OPERATIONS To USA DEC 15 OF DEFENSE INSTRUCTION 0-3600 03 TECHNICAL ASSURANCE STANDARD TAS FOR COMPUTER NETWORK ATTACK CNA CAPABILITIES U Nov 2010 MISSION ANALYSIS BRIEF CYBER SUPPORT TO COUNTER ISIL VERSION 34 APRIL 2016 - TASKORD THIS TASKING ORDER TASKORD DIRECTS UNITED STATES CYBER COMMAND USCYBERCOM TO ESTABLISH JOINT TASK FORCE LED BY COMMANDER ARMY CYBER COMMAND CDRARCYBER TO COUNTER THE ISLAMIC STATE IN IRAQ AND THE LEVANT ISIL IN CYBERSPACE WITH INITIAL OPERATIONAL CAPABILITY IOC NO LATER THAN NLT FULL OPERATIONAL CAPABILITY FOC NLT mm 38 Wm ISIL continues to leverage cyberspace to conduct command and control C2 facilitate logistics and finance produce disseminate and distribute media attract recruits and plan and conduct external attacks In turn USCYBERCOM continues to plan and conduct cyberspace operations CO to counter ISIL in accordance with IHW Ref based on Secretary of Defense SecDef -directed guidance and in coordination with ICW appropriate Through the establishment of a JTF focused on countering ISIL in cyberspace USCYBERCOM will continue to create cyberspace conditions to support the dismantling of I in support of ISO United States Central Command USCENTCOM and to disrupt ISIL's ability to plan and execute attacks against the United States US and coalition partners while posturing for follow-on global C0 Commander United States Cyber Command CDRUSCYBERCOM provided guidance on 7 APR 2016 to establish a JTF in order to IOT C2 USCYBERCOM forces countering ISIL in cyberspace Wm_ USCYBERCOM will establish a JTF to C2 cyber forces IOT deny ISIL's use of the cyberspace dcmain through a multipronged approach focused on Pom Sec 1 4 a ussc I IOT prevent attacks against the US and coalition partners support the broader effort to dismantle and posture for follow-on-CO with IOC of and FCC of will be co-located with the National Security Agency washington NSA-W at Ft Meade EXECUTION 3 3 A U CONCEPT OF OPERATIONS 3 A 1 INTENT Establish a JTF that provides unity of command and unity of effort for the conduct of co ISO and Icw I 14 3 USSC I 3 A 1 A PURPOSE Create the cyberspace conditions to support the effort to dismantle 1811 - USCENTCOM and disrupt ISIL's ability to plan and execute attacks against the US and coalition partners while rum Sec 1 4 a USSC SW 3 A 1 B Wm moms USCYBERCOM will employ cyber forces from throughout the Cyber Mission Force CMF and inte rate and deconflict with the Ito deliver effects against ISIL JTF-ARES will C2 cyber forces aligned to the C-ISIL Mission 3 A 1 C W- END STATE and supporting elements are positioned and equipped to execute C0 without undue delay ISIL is denied use of the crberspace domain to enable their critical capabilities mserA H USSC Ifor internal and external operations to include attacks on US and coalition partners mm Sec 1 4 a 1E5 3 3 U TASKS 3 3 1 U USCYBERCOM J1 3 B 1 A U Leads the resourcing validates Joint Manning Document requirements and maintains the JMD approved by CDRUSCYBERCOM 3 3 2 U USCYBERCOM J2 3 3 2 3 Provide intelligence reach back support to JTF-ARES 3 B 2 A 1 Coordinate with the Intelligence Community IC and IA to develop intelligence ISO JTF-ARES 3 B 2 A 2 Conduct analysis of global ISIL cyberspace and cyberspace enabled capabilities and activitiesProvide intelligence support ISO C-ISIL operations and planning 3 B 2 C U Provide global cyberspace collection management support 3 B 2 C 1 Provide collection management reach back support to JTF-ARES 3 B 2 C 2 U Develop and issue collection guidance SSC 330mm 3 B 2 C 3 U Review prioritize de-conflict and validate multi-INT collection requirements Host and manage a Joint Collection working Group JCWG and Joint Collection Management Board JCMB 3 B Z C 4 Advocate for unfulfilled JTF-ARES requirements across the IC 3 3 2 C 5 U Manage and provide collection exploitation and reporting guidance based on standing and ad hoc collection requirements 3 3 2 13 Mam Provide intelligence policy support for intelligence surveillance and reconnaissance ISR activities performed by JTF-ARES 3 B 2 E U Provide reach back support to target development mission strike package development and battle damage assessment EDA 3 3 2 112 plannin and execution of Sec 1 4 a Facilitate the coordinationlsupport to operations and planning 3 B 2 G Provide Staff Security Officer 880 oversight to Sponsor and coordinate facilities access for all personnel assigned to JTF-ARES at Sponsor JTF- ARES personnel for priority with indoctrination through NSA and facilitate account access 3 3 2 H Provide Foreign Disclosure Officer FDO oversight to JTF-ARES Also ensure JTF-ARES personnel are given priority for Foreign Disclosure Representative FDR training 3 3 2 I Be prepared to BPT provide personnel to JTF-ARES based on manning requirement approved by CDRUSCYBERCOM A JMD will be provided SEPCOR as part of a fragmentation order FRAGO to this TASKORD once approved by CDRUSCYBERCOM Select personnel to be identified by the JTF-ARES Commander must have taken NSA required classes for signals intelligence SIGINT Production Chain SPC access MT The reporting date for JTF-ARES main body personnel is 1000-1100 28 April 2016 Report to address 8605 6th Armored Cavalry Rd Fort Meade MD USSC smears Mm 3 B 2 J lProvide support from the Ito JEFF-ARES 3 3 2 K U Manage intelligence requirements ISO plans 3 B 2 K 1 U Integrate Joint Intelligence Preparation of the Environment JIPOE into Strategic and Theater level planning 3 B Z L Provide Intelligence Oversight Program Management IOPM for JTF-ARES The JTF will train Intelligence Oversight Officers and Auditors IAW USCYBERCOM IOPM 3 3 3 U USCYBERCOM J3 3 B 3 A 4314333404153 hm Sec 1 4 a USSC m SC and Combat Support Agencies b 1 Sec 1 4 a ussc Coordinate with_ to leverage individual agency authorities and capabilities Ensure all agency- specific actions are with all other participating agency actions and USSC 1 1 4 USSC 1 1 4 USSC 3 3 3 3 War Natl-f3 mac 1 I L4 U350 of lanned executions 1 4 9 8 and consolidate any written submitted concerns 3 3 3 c mfb mwalwsc Coordinate with the greatest extent possible ensure operationsg are coordinated deconflicted and with otherrl macmmUSSC rb 1 Sec1 4 a ussc Execute cyber global and integration functions to ensure JTF-ARES actions are tracked and deconflicted with all other CO and actions D18 14 USSC 3 3 3 E Wimp Ensure all-_capabilities used ISO CO are in compliance wit Ref I 18 1 4 3 3 3 3 3 4333% SSC Coordinate With for receipt of situation reports activity summaries mission updates etc of individual agency-specific actions that will support the operational picture 3 3 3 6 BPT provide personnel to JTF-ARES based on manning requirement approved by CDRUSCYBERCOM A JMD will be provided SEPCOR as part of a FRAGO to this TASKORD once approved by CDRUSCYBERCOM Select personnel to be identified by JTF-ARES Commander personnel must have taken NSA required classes for SPC access lThe reporting date for main body personnel is 1000-1100 28 April 2016 Report to address 8605 6 Armored Cavalry Rd Fort Meade MD I bxayussc 3 3 3 11 mm provide a Focal Point Program Control Officer FPPCO Integrated Joint Special Technical Operations IJSTO Chief and Special Access Program Coordination Office SAPCO IOT address and manage administrative requirements to include but not limited to billet management resourcing crisis contingency billets read- ons security requirements and other required briefing 3 B B I U Identify requirement for and provide enclave access and work space ISO planning and IA collaboration 3 B 3 J lConduct planning and coordinate with bxma m m USSC for potential cyberspace m Ito counter ISIL 3 B 3 K Conduct Phase planning ISO the C-ISIL effort 3 B 3 L Coordinate with SID Cyber on all SIGINT administrative requirements Mission Correlation Tables MCTs SPC access CMF alignment etc 3 B 3 M Establish transition criteria and execute transition of C-ISIL planning to JTF-ARES for assumption of the mission to counter ISIL in cyberspace 3 3 4 U USCYBERCOM J4 3 3 4 A ICW NSA Installation and Logistics IEL and office of primary responsibility OPR space managers determine viable solutions for facilities seating and logistics support for JTF-ARES personnel to reside within applicable NSA Enterprise locations within NSA-W Provide cost estimates to USCYBERCOM J8 NLT 25 April 2016 3 3 5 U USCYBERCOM J5 snowman um IE mu 3ac14m ussc 3 3 5 A Provide recommendations to strategy and policy that may assist JTF-ARES in achieving current and future C-ISIL cyberspace objectives 3 13 5 3 Maxim usa Support the facilitation of _coordination planning and operations with by ensuring appropriate authorities and policies are in place IOT support JTF-ARES and associated USCYBERCOM J3 activities SS 3 13 5 c Complete I W mwm Plan to guide USCYBERCOM efforts to posture for USSC cyberspace Operations Sec 1 4 8 USSC 3 3 5 D BPT provide personnel to for a future plans billet 3 3 6 U USCYBERCOM J6 3 3 6 A As requested by JTF-ARES provide support to the following 1 Develop a knowledge management site for collaboration within JTF-ARES and for organizations involved in this effort 2 Create individual and organization e-mail accounts 3 Create e-mail distribution lists 4 Create active directory groups 5 Provide POLYCOM and Video Teleconferencing VTC capabilities and support 3 3 7 U USCYBERCOM J8 3 3 7 A Collect and document funding expended by each Service quarterly ISO JTF-ARES 3 3 7 3 Continue existing capability and infrastructure development efforts ISO this effort and coordinate new resource requirements with the Services Service Cyber Components and JTF-ARES 3 3 8 U USCYBERCOM J9 3 3 8 A Identify existing and or planned technical capabilities to JTF-ARES that may support operational objectives 3 3 9 U STAFF JUDGE ADVOCATE SJA 3 3 9 A Provide legal opinion and services to JTF- ARES ISO mission requirements 5 Sec 1 4m USSC 3 3 10 U PUBLIC AFFAIRS OFFICE PAC BPT produce and disseminate appropriate strategic communications messages and talking points ISO JTF- ARES and its operations 3 3 11 JTF-ARES 3 B ll A U Conduct Commander's estimate to determine requirements and operational approach to accomplish CDRUSCYBERCOM approved Lines of Effort LOEs and objectives as described in Ref with execution level details and timelines Include a refinement of previously developed Mission Analysis Ref J Provide Commander's estimate to CDRUSCYBERCOM NLT 31 May 2016 3 B ll E Upon completion of task identified in 3 B ll A define requirements for General Support and how JTF-ARES will receive validate and prioritize Combatant Command CCMD operational requirements 3 B ll C Ensure seamless feedback mechanism is implemented to verify CCMD operational requirements are being tracked and actioned in a timely manner 3 B ll D Achieve IOC and report status to CDRUSCYBERCOM IOC is defined as havingFof the JMD-designated billets filled and in place at NSA- 'with the appropriate skill sets 3 B ll E Achieve FCC and report status to CDRUSCYBERCOM NLT FOC is reached when CITE-ARES demonstrates the ability to perform the following Mission lb 1 Sec 1 4 a USSC I mnem4muwc 4 Coordinate integrate and deconflict 5 Transition Phase I C-ISIL planning and CO from USCYBERCQM Headquarters HQ Service Cyber Components SCCs and Joint Force Headquarters - Cyber JFHQ-C and conduct all Phase II planning and CO 3 B ll E Establish processes for sharing potential target information within JEFF-ARES specifically for LOE 5 See Ref J snows Arum 3 B 11 G Conduct cyberspace C-ISR activities ISO C-ISIL objectives as described in Ref J Ensure requests for Identif oersonnel directed to resource JTF-ARES who do not -ecurity clearance polygraph and foreign national association requirements for badging and access I 3 B 11 J Support JTF-ARES security accesses to include but not limited to SPC and alternative or compensatory control measures ACCM through staff coordination with the appropriate USCYBERCOM managing organization 3 B 11 K U Manage and perform Intelligence Oversight requirements 3 B 11 L U Manage and conduct Foreign Disclosure Officer FDO activities and processes 3 3 11 M Identify personnel required to complete SPC training 3 3 12 U JFHQ-C ARMY ARCYBER 3 3 12 A Wm Establish to execute CO 3 3 12 3 Provide a 3-star General Officer to serve as the Commander of JTF-ARES 3 3 12 C Establish a planning team to lead the organization and implementation of 3 3 12 D ICW USCYBERCOM identify a work location within NBA-W capable of accommodating JTF personnel 3 B 12 E Establish a Plan of Action and Milestones POAEM for the integration of all personnel to include interagency and coalition partner oersonnel into the identified work location s with IOC and FCC NLT for the JTF 3 3 12 F Generate the requirements for a JMD and BPT provide personnel to JTF-ARES based on manning requirement approved by CDRUSCYBERCOM A JMD will be provided SEPCOR as part of a FRAGO to this TASKORD once approved by CDRUSCYBERCOM Select personnel to be identified by the JTF-ARES Commander personnel must have taken NSA required classes for SPC access NLT W memi The reporting date for JTF-ARES main body personnel is 1000-1100 28 April 2016 Report tq_address 8605 USSC 6th Armored Cavalry Rd Fort Meade MD 20755 rbXS USSC I 3 3 12 3 Provide_C-ISR and c- OPE tactics and capability development tailored to deliver desired cyberspace effects as developed by JTF-ARES 3 3 12 H U Provide technical development and assurance for future capabilitiesEstablish rocesses for b 1 S 1 4 USSC sharin potential target information 3 m I 13 1 533 with CITE-ARES 3 B 12 J BPT support re-alignment of CMF teams as required to support JTF-ARES 3 3 12 K Develop estimate of funding required to establish and maintain JTF-ARES broken down into a funding schedule based on the following temporary duty costs and NSA information technology IT shortfalls Provide estimate to Services and USCYBERCOM J8 NLT 25 April 2016 3 B 12 L Provide risk assessment to existing ARCYBER JFHQ-C Army missions based upon force reallocation to JTF- ARES Risk assessment is due to the USCYBERCOM J3 NLT 15 May 2016 3 3 13 U CYBER NATIONAL MISSION FORCE CNMF 3 3 13 A Provide personnel to JTF-ARES based on manning requirement approved by CDRUSCYBERCOM A JMD will be provided SEPCOR as part of a FRAGO to this TASKORD once approved by CDRUSCYBERCOM Select personnel to be identified by the JTF- ARES Commander personn 1 must have taken NSA required classes for SPC access NLT The reporting date for JTF-ARES main body personnel is 1000-1100 28 April 2016 Report to address 8605 6 Armored Cavalry Rd Fort Meade MD USSC Sim 1am mm 550 I 3 3 13 3 Supportnc-ISR and cyberspace operational preparation of the environment C-OPE tactics and capability development tailored to deliver desired cyberspace effects as developed by JTF-ARES 3 3 13 0 U Provide technical development and assurance for future capabilities 3 B 13 D BPT support re-alignment of CMF teams as required to support JTF-ARES 3 B 13 E Provide risk assessment to existing missions based upon force reallocation to Risk assessment is due to the USCYBERCOM J3 NLT 15 May 2016 3 3 14 U JFHQ-C MARINES MARINE CORPS FORCES CYBER COMMAND MARFORCYBER 3 B 14 A BPT provide personnel to JTF-ARES based on manning requirement approved by CDRUSCYBERCOM A JMD will be provided SEPCOR as part of a FRAGO to this TASKORD once approved by CDRUSCYBERCGM Select personnel to be identified by the JTF- ARES Commander personnel must have taken NSA required classes for SPC access The reporting date for main body personnel is 1000-1100 28 April 2016 Report to address 8605 6a Armored Cavalry Rd Fort Meade MD 20755 me%c I 3 3 14 3 WAT Provide and c- OPE tactics and capability A velopment tailored to deliver desired cyberspace effects as developed by JTF-ARES 3 B 14 C U Provide technical development and assurance for future capabilities 3 B 14 D BPT support re-alignment of CMF teams as required to support 3 B 14 E Provide risk assessment to existing MARFORCYBER Marines missions based upon force reallocation to JTF-ARES Risk assessment is due to the USCYBERCOM J3 NLT 15 May 2016 3 B l5 U JFHQ-C AIR FORCE AIR FORCE CYBER COMMAND AFCYBER 3 B 15 A BPT provide personnel to JTF-ARES based on manning requirement approved by CDRUSCYBERCOM A JMD will be provided SEPCOR as part of a FRAGO to this TASKORD once approved by CDRUSCYBERCOM Select personnel to be identified by the JTF- ARES Commander personnel must have taken NSA required classes for SPC access NLT 31 May 2016 The reporting date for JTF-ARES main body personnel is 1000 1100 28 April 2016 Report to address 8605 6 Armored Cavalry Rd Fort Meade MD 20755 USSC USSC 3 3 15 3 momm Provide C-ISR and c- OPE tactics and capability development tailored to deliver desired cyberspace effects as developed by JTF-ARES 3 B 15 C U Provide technical development and assurance for future capabilities 3 B 15 D BPT support re-alignment of CMF teams as required to support JTF-ARES 3 B 15 E Provide risk assessment to existing AFCYBER JFHQ-C Air Force missions based upon force reallocation to JTF-ARES Risk assessment is due to the USCYBERCOM J3 NLT 15 May 2016 3 3 16 U NAVY FLEET CYBER com 3 B 16 A BPT provide personnel to based on manning requirement approved by CDRUSCYBERCOM A JMD will be provided SEPCOR as part of a FRAGO to this TASKORD once approved by CDRUSCYBERCOM Select personnel to be identified by the JTF- ARES Commander personnel must have taken NSA required classes for SPC access NLT 31 May 2016 The reporting date for JTF-ARES main body personnel is 1000-1100 28 April 2016 Report to mmumc address 8605 6th Armored Cavalry Rd Fort Meade MD 20755 USSC 3 3 16 3 mm_ Provide-C-ISR and c OPE tactics and capability development tailored to deliver desired cyberspace effects as developed by JTF-ARES 3 B 16 C U Provide technical development and assurance for future capabilities swarm 1043 WW 3 3 16 D BPT support re-alignment of CMF teams as required to support JTF-ARES 3 3 16 E Provide risk assessment to existing JFHQ-C Navy missions based upon force reallocation to the JTF-ARES Risk assessment is due to the USCYBERCOM J3 NLT 15 May 2016 3 3 17 U REQUESTED SUPPORT FROM USCENTCOM AND UNITED STATES SPECIAL OPERATIONS COMMAND USSOCOM 3 3 17 A Integrate staff into key battle events and Commander s update to ensure support for current and future full spectrum operations 3 3 17 3 Integrate staff into key USCENTCOM and USSOCOM target deconfliction processes to align current target engagement authority TEA and intelligence gain loss IGL processes and enable early development of targets and with lethal fires 3 3 17 C Request attendance at USCYBERCOM meetings as desired to be kept informed and provide input on subsequent missions associated with this order and Ref as well as missions outside the USCENTCOM AOH 3-B-18 SUPPORT In CSAS l' 3 3 18 A Wm usa Support and participate in the process for deconfliction of cyber mission forces W mwm rbH f Sec 1 4 3 USSC _l 3 3 18 3 Provide intelligence support prior to and during execution Specific intelligence requirements will be passed by the JTF-ARES Intel Fusion Cell prior to execution 3 3 18 C Attend USCYBERCOM meetings as desired to be kept informed and provide input on subsequent missions associated with this order and Ref 3 C U COORDINATING INSTRUCTIONS 3 c 1 approves all 1 1 4 - 1 1 4 USSC tm missions ec General Officer Flag Officer GOFO b1m _ may approve 6 3 missions 3 mwm 3 c 2 Sm Tom Commander will have target validation deconfliction and concept of operations CONOPs approval authority 3 C 3 USCYBERCOM Joint Operations Center JOC will use the USCYBERCOM Standing Operating Procedures SOP and watch checklist to manage deconfliction procedures 3 c 4 USCYBERCOM OPS SYNC process will serve as the forum for CMF and JIATF and deconfliction across Department of Defense DOD operations 3 C 5 U Disclosure to foreign governments will be handled IAN existing US policy 3 C 6 Designated JTF-ARES key leaders advanced echelon ADVON from the JMD will report 1100hrs 25 April 2016 to the NSA Visitor Center 3 C 7 The reporting date for main body personnel is 1000-1100 28 April 2016 Report to address 8605 gm Armored Caval Rd Fort MD 207551me 6 USSC 3 C 8 U Additional requests for support will be sent SEPCOR to NSA SID 3 c 9 Each service FPCO and STO Chief Identify personnel that are currently readron to ACCMs and the specific ACCMs to which each is cleared Identify personnel occupying a STO Billet with the associated STO billet numbers for each Consolidate and pass this information to the USCYBERCOM personnel tasked as JTF-ARES acting STO Chief and FPCO 3 C 10 U OPERATIONS SECURITY OPSEC 3 C 10 A The integration of OPSEC throughout the lifecycle of JTF-ARES is vital to sufficiently protect critical but unclassified information that could compromise the success of CO and ultimately put personnel and assets at risk from a force protection standpoint From an administrative and planning perspective the discussion of GTE activities outside workspaces and across social media is highly discouraged as is talking around JTF-ARES topics on non secure communication devices and transmissions SEW I 1 Sect4m ussc 3 C 11 U PUBLIC AFFAIRS GUIDANCE 3 C 11 A Public affairs posture is in response to inquiry No release of information regarding this order is authorized without prior coordination with USCYBERCOM AND 4 A Administrative control ADCON of JTF-ARES personnel remains with resourcing Service Commanders It is the responsibility of Service Cyber Component Commanders to ensure that tasked JTF-ARES positions remain staffed with qualified personnel until it is disbanded 4 3 U FUNDING USCYBERCOM funding is limited to facilities administrative supply support and IT at NSA-W All other funding requirements are the responsibility of the Services All Service Components Organizations incurring incremental costs ISO this TASKORD will separately track and report those costs to Service Comptrollers and USCYBERCOM J8 by means and in formats prescribed by the Service for subsequent reporting to the Defense Finance and Accounting Service DFAS IAN Financial Management Regulation7000-14R Volume 12 Chapter 23 para 2308 4 C USCYBERCOM subordinate units will coordinate with the ARCYBER and where applicable USCYBERCOM Directorate representatives J1 J3 J4 J6 J8 or $80 on JTF-ARES JMD position fills network accounts building accesses expected arrival and departure dates and other mission related requirements 4 D U This is a mission there are no Joint Operation al Planning and Execution System Adaptive Planning and Execution APEX requirements 4 E JFHQ-Cs and Service Cyber Components will not send personnel TDY to Fort MBade to fill positions on JTF-ARES bx3 ussc dut unless those personnel already have an NSA provided me%c lThe exception is that if NSA-W personnel security have completed the individual s Notification of Foreign National Association NFNA review and found favorable adjudication and has provided an appointment to the individual for an NSA SCI read-in at Fort Meade Personnel should proceed once they have a scheduled read-in appointment 4 F U This order and all references will be posted at AND 5 A USCYBERCOM will retain operational control OPCON of JTF-ARES All tactical forces allocated to JTF-ARES will be OPCON to the JTF Commander 5 3 The Cyberspace Operations Teams COTs are general support to JTF-ARES 5 C 001 CMT is general support to JTF-ARES 5 D U All components will acknowledge receipt and understanding of this TASKORD within 24 hours via official message traffic or email to 5 E U POINTS OF CONTACT POCS 5 E 1 Pr' POC for this i 'bua ussc Alternate POC USSC POC 5 E 4 After Hours POC USCYBERCOM JOC Duty Officer JDO NSTS 969-1645 COMM 443-654-4804 NIPR smuusr un_moima ammo USA 35 I SIPR 5 F U Request for information regarding execution of this order amplifying guidance and or additional details are to be submitted at this link asEx S ROGERS ADM USN USCYBERCOM Classified By Derived From USCYBERCOM SCG Dated 20160503 Declass 0n 20410503 l SW USSC                     National Security Archive    Suite 701  Gelman Library  The George Washington University    2130 H Street  NW  Washington  D C  20037    Phone  202 994‐7000  Fax  202 994‐7005  nsarchiv@gwu edu