DEPARTMENT OF THE AIR FORCE HEADQUARTERS AIR FORCE SPACE COMMAND

Transcription

1 DEPARTMENT OF THE AIR FORCE HEADQUARTERS AIR FORCE SPACE COMMAND AFSPCGM JULY 2017 MEMORANDUM FOR DISTRIBUTION FROM: HQ AFSPC/A2/3/6 150 Vandenberg Street, Suite 1105 Peterson AFB CO SUBJECT: HQ AFSPC Guidance Memorandum (GM) Cyberspace Operations Support Squadron (OSS) RELEASEABILITY: There are no release restrictions associated with this publication. 1. By Order of AFSPC/CC, this Headquarters Air Force Space Command (HQ AFSPC) Guidance Memorandum (GM) assigns responsibilities to cyberspace Operations Support Squadrons (OSS) and their owning and supporting Air Force Space Command (AFSPC) organizations. Compliance with this memorandum is mandatory. To the extent its direction is inconsistent with other AFSPC publications, information herein prevails, in accordance with Air Force Instruction (AFI) , Publications and Forms Management. 2. This GM supplements Air Force Policy Directive (AFPD) 38-1, Organization, and is to be used in conjunction with AFI , Air Force Organization. This instruction defines the mission, organization, and responsibilities of the Cyberspace OSS in support of their owning Cyberspace Wings (CW) and subordinate Cyberspace Operations Groups (COG), which conduct cyberspace operations. The ability for cyberspace squadrons to execute the mission support responsibilities described in this GM are predicated on the availability of required funding and manpower. If funding and/or manpower are not available, parent organizations, at the wing or group level, will be responsible to provide resources necessary to fulfill these responsibilities. 3. Ensure all records created as a result of processes prescribed in this Memorandum are maintained in accordance with Air Force Manual , Management of Records, and disposed of in accordance with the Air Force Records Disposition Schedule. The authorities to waive wing/unit level requirements in this publication are identified with a Tier ( T-0, T-1, T-2, T-3 ) number following the compliance statement. See AFI , Table 1.1 for a description of the authorities associated with the Tier numbers. Submit requests for waivers through the chain of command to the appropriate Tier waiver approval authority, or alternately, to the Publication Office of Primary Responsibility (OPR) for non-tiered compliance items.

2 4. This memorandum becomes void after one year has elapsed from the date of this memorandum, upon publication of an updated AFI or publication of an AFSPCI incorporating the guidance, whichever is earlier. STEPHEN N. WHITING, Major General, USAF Director of Integrated Air, Space, Cyberspace and ISR Operations Attachment: 1. Cyberspace Operations Support Squadron Guidance and Policy Distribution List: HQ AFSPC/A1 HQ AFSPC/A2/3/6 HQ AFSPC/A4/7 24 AF/A1/A2/A3/A4/7/A5/A6/A8/9 624 OC 688 CW/CC 67 CW/CC

3 Attachment 1 Cyberspace Operations Support Squadron Guidance and Policy 1. Chapter 1: Introduction 1.1. Mission The Cyberspace Operations Support Squadron (OSS) provides responsive and timely operational support to a Cyberspace Wing s (CW) units. Operational support includes (but is not limited to) intelligence, operations and realistic training, exercise planning, current operations synchronization and weapons and tactics Organization The Cyberspace OSS is an Air Force unit assigned either directly to the CW or under a subordinate Cyberspace Operations Group (COG). The Cyberspace OSS provides operations support to the CWs and COGs. Figure 1.1 displays an objective OSS unit construct CWs may use for planning and organizing their Cyberspace OSS units. Figure 1.1. Cyberspace Operations Support Squadron Structure CC COMMANDER RA RESOURCE ADVISOR TA TECHNICAL ADVISOR DO DIRECTOR OF OPERATIONS IN INTELLIGENCE OSK WEAPONS and TACTICS OSO CURRENT OPERATIONS OST TRAINING 1.3. Applicability This instruction applies to all military and civilian Air Force personnel, and Department of Defense (DOD) contractors.

4 1.4. Waiver Authority Tier 1 is the waiver authority for this instruction unless otherwise specified in higher headquarters instructions. 2. Chapter 2: Responsibilities 2.1 The Commander (CC) will: (T-3) Execute all duties in accordance with (IAW) AFI 1-2, Commander's Responsibilities. While not all inclusive, the following paragraphs provide a brief overview of these duties Promote and safeguard the morale, physical well-being, and general welfare of unit personnel Execute the unit's primary mission, Air Expeditionary Force (AEF) readiness, and mission assurance command and control Maintain effective communication processes and ensure unit members are well disciplined, trained, and developed Manage unit resources to ensure effective and efficient mission accomplishment Foster a unit culture that encourages innovation and challenges inefficiencies. 2.2 The Technical Advisor (TA) will: (T-3) Provide technical analysis of CW weapon system capabilities, equipment and technology Provide accurate information to CW, COG and OSS leadership in methods, materials and technology to improve weapon system operation and processes Provide technical subject matter expertise in Department of Defense Information Network (DODIN) operations, Defensive Cyberspace Operations (DCO) and Offensive Cyberspace Operations (OCO) capabilities to optimize the employment of CW weapons systems Provide and coordinate technical data to support CW exercise execution Manage technical transition Facilitate the transition/integration of capabilities into CW weapons systems Coordinate with internal and external agencies to onboard capabilities and technology Lead the CW technical transition working group to support integrating new capabilities and technology and replace aging equipment in CW cyberspace weapon systems Represent CW cyberspace weapon systems at the 24 AF Cyberspace Decision Board (CDB), as required Attend and conduct meetings to exchange information regarding cyberspace projects, cyberspace project development and cyberspace project status Provide technical guidance to leadership during cyberspace project development, deployment and employment.

5 2.3 The Resource Advisor will: (T-3) Manage OSS financial resources through the development of spend plans and budgets in coordination with unit leadership and wing Financial Management (FM) Provide financial updates to OSS leadership as required Document, track, and execute OSS unfunded requirements and submit for consideration IAW established wing processes The Director of Operations (DO) will: (T-3) Advise the SQ/CC on operational matters Lead a mission-focused operations effort Manage resources necessary to accomplish the mission Provide necessary administration to manage assigned responsibilities Control operations through Flight CCs/Chiefs and Section NCOICs/Chiefs Ensure compliance with this instruction and Higher Headquarters (HHQ) operating instructions, directives, guidance, and policies Oversee accomplishment of all duties in these flights: Intelligence (IN), Weapons and Tactics (OSK), Current Operations (OSO), Operations Training (OST) and Operations Plans (OSX) Advise the commander on operational issues affecting the CW's and/or COG s ability to accomplish the mission Support the development of integrated inspection criteria for unit selfinspections and HHQ inspections Implement policy, guidance, and procedures for mission execution Review operational inputs for unit and HHQ taskers Prepare Cyberspace OSS operational inputs for CW and COG staff meetings Assume command in the absence of the OSS/CC, as the senior officer The Intelligence Flight (IN) will: (T-3) Provide intelligence support for the wing during all phases of conflict and decision making. Train crews/operators and prepare the wing for contingency and wartime missions. Provide intelligence tailored to the CW s/cog s operational mission and base support activities. Provide full-spectrum threat assessments and mission planning in support of deployments, contingencies and combat operations Execute Wing Intelligence program IAW AFI , AFI , AFI and any other applicable HHQ guidance Prepare information and intelligence products highlighting factors impacting execution of Wing missions Maintain repository for read files, intelligence preparation of the operational environment products, adversary threat data and mission planning information to identify and characterize threats to cyberspace operations Serve as the Office of Primary Responsibility (OPR) for organizational priority intelligence requirements (PIR) Manage CW/COG intelligence Requests for Information (RFI) program.

6 Manage CW/COG production requirements and collections management programs Provide intelligence support to CW/COG exercises IAW the Wing Exercise Program, as required Provide support to Weapons and Tactics and current operations Manage programs for the CW s and COG s critical information, analysis and reporting, and threat warning Manage the unit intelligence support program and provide analytical support to operations through the development of such products as Intelligence Preparation of the Operational Environment (IPOE), Intrusion Set Overview Products (ISOP) and Cyber Threat Matrices (CTM) IAW AFI , Vol 3, Intelligence Familiarization Program, all OSS/IN personnel will maintain currency in their assigned weapon system quarterly with at least eight hours of academics and eight hours of re-certification Manage CW unit-support intelligence training and qualification programs Schedule and coordinate unit intelligence personnel's Initial Qualification Training (IQT) with HHQ Conduct Mission Qualification Training (MQT) program Facilitate Continuation Training (CT) to maintain analyst proficiency, currency and qualification, to include an evaluation, IAW AFI , vol Conduct in-person annual staff training visits (STV) to geographically separated units (GSU) Conduct and attend Ready Intelligence Program (RIP) training Attend the Tactical Planners Course Complete the Intelligence Familiarization Program Manage intelligence standardization and evaluation program The Weapons and Tactics Flight (OSK) will: (T-3) Develop procedures and tactics for planning and employing operational mission and wing assets. Advise wing staff on operational capabilities, limitations and status of resources Execute CW/COG weapons and tactics programs IAW AFI , AFI , Air Force Space Command Instruction (AFSPCI) , AFSPCI and any other applicable HHQ guidance Provide technical analysis and recommendations to higher headquarters for continuous development, dissemination and standardization of cyberspace Tactics, Techniques and Procedures (TTP) Manage and execute the CW tactics development program Develop procedures and unit tactics for planning and employing operational mission and wing assets. Office of Coordinating Responsibility for unit mission training, exercises and evaluation scenarios Develop and maintain Wing Mission Planning Cell (MPC), when needed Conduct annual CW tactics review board Review CW tactics improvement proposals and forward candidate proposals to 24th Air Force (24 AF)/A3TT.

7 Ensure assigned personnel are briefed and familiar with wing and unit missions, taskings, expected adversary threats, threat actor details and provide monthly lessons learned academic instruction Develop and maintain wing standards for weapons and tactics officer training and certification. Squadron weapons and tactics flights may supplement weapons and tactics officer training and certification criteria as required Ensure instructors and standardization and evaluation personnel remain abreast of all combat employment concepts and all mission qualification events reflect unit taskers Identify and recommend appropriate personnel for cyberspace operations deployments and exercise support Lead the development and publication of TTP for wing operations. Examples include Air Force Tactics, Techniques, and Procedures (AFTTP) 3-1 volumes, Flash Bulletins and Tactics Bulletins Participate in Operations Review Boards (ORB) to aid in root cause analysis of physical, technical and administrative related cyberspace incidents and investigations, when needed Develop and maintain Wing Lessons Learned (LL) Program, IAW HHQ LL programs, and informed by Wing Exercise Program observations and other operations Establish and supervise wing participation in weapons competitions Serve as the OPR for CW United States Air Force (USAF) Weapons School nomination packages and waiver requests Manage and instruct CW Tactical Planners Course (TPC) curriculum and training materials Instruct CW MCC quarterly, or as dictated by mission needs Participate in Weapon System Reviews (WSR), Program Management Reviews (PMR), Cyber System Reviews (CSR), Program System Reviews (PSR) and Weapon Support Team (WST) working groups to keep Wing and Group leadership abreast of sustainment and development issues Perform annual, in-person STVs on all subordinate weapon shops All OSK personnel must maintain MR status in their assigned weapon system Review and provide input into Cyber Needs Forms/AF1067s throughout the requirements process on their operational requirement/need for the CW s operational mission(s) Support the PMO of the CW s weapon system(s) in development of future capabilities as they apply to operational and tactical employment Act as the CW s OPR for supporting all units whether Active Duty, Air Reserve or Air National Guard for tactics development and employment on the weapon system(s) employed by the CW At least two OSK members will attend significant professional, mission-based conferences and working groups pertinent to their mission (e.g., WSR, CPTCON, DCO conference, MAJCOM and NAF annual WEPTACs and TRBs, conferences of their supported weapon systems, etc.).

8 2.7. The Current Operations Flight (OSO) will: (T-3) Coordinate with CW units and the 624th Operations Center (624 OC) to maintain situational awareness and provide daily updates to the CW, COG and unit leadership Advise CW leadership of significant events (Commander s Critical Information Requirement [CCIR], Operational Report [OPREP-3], etc.) or message (Operational Order [OPORD], Fragmentary Order [FRAGO], Warning Order [WARNORD], Deployment Order [DEPORD], Execution Order [EXORD], etc.) traffic requiring priority action Notify external agencies of significant events or message traffic requiring HHQ or host base Command Post attention Provide operational support and assistance to Wing Plans and Programs (CW/XP) office to ensure senior leadership has timely situational awareness of ongoing situations affecting operations, tactical units or weapon systems Coordinate, deconflict and consolidate (if required) Administrative Control (ADCON) functions related to weapon system integration and taskings from HHQs, working with the respective COGs. If required, coordinate CW/CC approval for submission to HHQ Serve as the OPR for the CW/CC s CCIRs and deconflict the OPREP-3 reporting and CCIR information contained within the CW/CC and First Sergeant handbook with CW/XP Conduct the Wing Exercise Program (WEP) Act as OPR for the execution of the Wing Exercise Program IAW CW and HHQ guidance, specifically AFI , associated AFSPC Supplements and applicable joint guidance documents (e.g., CJCSM C) Direct exercise activities within the CW and provide input to integrate CW capabilities into information operations (IO), mission integration support operations (MISO), electronic warfare (EW), and air, space and cyberspace exercises and events in support of Air Force, Joint and/or Coalition objectives Interface with the AFSPC Exercise Coordination Team (AFSPC-ECT) and participate in the Exercise Life Cycle IAW AFSPCSUP Provide CW units with oversight, guidance and support for exercise participation Ensure leadership is informed of the approved Annual 24 AF, Air Force Space Command (AFSPC) and USCYBERCOM Component Exercise Plan (CEP) documents Maintain CW exercise schedule Manage training objectives in Joint Training Information Management System (JTIMS) in compliance with (ICW) CJCSM C for CW units Manage JTIMS accounts, access and privileges for assigned CW personnel/trusted Agents Coordinate and deconflict virtual environments and range requirements through the Wing Range Management Program (WRMP) Gather and document feedback from participating units to consolidate inputs and publish exercise After Action Reports (AAR).

9 Conduct wing exercise after action reviews to highlight significant lessons observed and lessons learned, in coordination with OSK and HHQ lessons learned processes and programs Act as the CW OPR for the execution of the WRMP, IAW CW and HHQ guidance, specifically AFI , AFI , AFPD 63-1, AFPD 20-1 and associated AFSPC directives Manage and operate the CW range and Modeling and Simulation (M&S) programs IAW with AFI and AFI and AFPD 63-1 and AFPD Coordinate and deconflict the WRMP schedule to support to the wing s exercise, weapons & tactics competitions, and training program events to enhance Live, Virtual, and Constructive for Operational Training (LVC-OT) initiatives Act as Wing focal point for input to the M&S Development to HHQs Manage and track scenario development to feed the weapon system M&S databases Coordinate, deconflict and validate with the wing weapons & tactics and units to identify M&S best practices and promote appropriate standards and protocols to facilitate interoperability and suitable use/reuse across cyberspace and the Air Force organizations working through HHQs IAW AFPD Manage and deconflict the WRMP consolidated range exercises and M&S schedules on the appropriate virtual environment, range and/or WS M&S systems/networks Advocate, implement, and enforce LVC-OT standards and practices and ensure simulation capabilities are shared, classification issues are resolved and general issues with M&S for operational training are identified and addressed with HHQs Identify, consolidate, deconflict and report lessons observed and lessons learned related to exercises (live, virtual and/or range environments) to OSK and incorporate into the CW s AAR for submission to HHQ Write a trip report after each conference/tdy Solicit, document, schedule and track unit schedulers for WS and crew training requirements for virtual environments on the range and/or weapons system M&S Maintain at least Basic Mission Capable (BMC) status of all OSO military personnel Build and maintain training forms and documents in AFSPC-directed Authoritative Data Sources (ADS) to track training, currency, proficiencies, and requirements IAW the Ready Cybercrew Program (RCP) Tasking Memorandum (RTM) and AFI 17-2 [MDS] vol Provide guidance to CW units on completion of 24 AF Cyber Needs Forms (CNF) and AF Forms 1067, Modification Proposals. Monitor the status of CWgenerated CNFs and AF Forms 1067 by attending AFSPC-sponsored Validation and Certification Boards (VCB), pre-vcbs, and Cyber Decision Boards (CDB), and notify the appropriate COG of status and status changes. Participate in all CNF vectoring meetings and serve as CW focal point for operational prioritization processes, to include an annual operational ranking of all CW CNFs and AF 1067s for 24 AF and AFSPC.

10 Maintain a unit exercise representative (UER) program. Conduct quarterly meetings with UERs to provide updates on AFSPC CEP status, training on the Exercise Life Cycle, ensure best practices and trends are shared, clarify guidance and identify issues Coordinate and submit CW requirements to AFSPC Cyberspace Simulator/Range Steering Group (CSSG) to help ensure LVC-OT initiatives, weapon system integration, coordination, and deconfliction of M&S/range activities, development and scheduling within the Wing The Operations Training Flight (OST) will: (T-3) Direct, monitor and schedule operations training for all unit personnel Execute CW/COG Operations Training program IAW AFI v Manage and provide oversight of CW and subordinate unit operations training programs Conduct staff training visits on CW units to ensure compliance with HHQ training guidance Develop and/or update CW training policy and assist in the development of subordinate unit cyberspace crew training policy Identify deficiencies in training, equipment, or support, which preclude optimum mission accomplishment, identify unit initiatives which may have MAJCOM-wide or cross MAJCOM applications and act as focal point for liaison between lateral wing and subordinate unit weapons shops Monitor operator Mission Ready (MR) status to ensure CW mission requirements are met Share best practices and trends, clarify guidance and resolve issues Manage the CW operations training waiver process Manage CW training curricula to include Master Training Plans (MTP), Master Training Task Lists (MTTL), CT Plans of Instruction (POI), RCP training elements and the RCP Tasking Memorandum (RTM) Coordinate requirements with CW units, 39th Information Operations Squadron (39 IOS), 24 AF/A3TT and HQ AFSPC/A2/3/6TT for cyber-crew training tools, training aids and simulators with external agencies Coordinate with CW units and OSS/OSO WRMP to develop CW range training requirements Assist CW units in the management of MQT and CT for Mission Ready/Combat Mission Ready (MR/CMR), Basic Cyberspace Qualified (BCQ) and Basic Mission Capable (BMC) personnel In addition to the Chief of Operations Training, at least two individuals per weapon system must maintain MR status and instructor certifications in their assigned weapon system Instructors must perform instructor duty every 180 days to maintain currency. Instructor duty includes academic instruction (e.g., classroom) or performancebased instruction (e.g., simulator, ops floor, etc.) in which the individual functions in an instructor capacity. The Chief of Operations Training can update their currency when conducting annual instructor reviews.

11 Manage and maintain CW Instructor Certification Course curriculum and training materials Facilitate CW Instructor Certification Course Conduct quarterly meetings with unit training directors to ensure best practices and trends are shared, guidance is clarified and issues identified Coordinate recommendations with respective AFSPC action officers for concurrence Support the wing range management program for weapon system training events, exercises, after action reports, hot washes and lessons learned Serve on the Squadron Operational Review Panel (ORP) Attend and participate in Realistic Training Review Boards (RTRB) The Chief of Training and at least one other MR flight member will attend Training Planning Team (TPT) and WSR working group meetings to keep Wing and Group leadership abreast of sustainment and development issues. GLOSSARY OF REFERENCES AND SUPPORTING INFORMATION References AFI , Format and Content of Mission Directives, 12 Feb 03 AFI , Operational Capability Requirements Development, 6 Nov 13 AFI , Control and Documentation of Air Force Programs, 15 Aug 06 AFMAN , Preparing Official Communications, 15 Oct 07 AFPD 38-1, Organization, 1 Jun 96 AFPD 38-5, Unit Designations, 1 Jul 96 AFI 1-2, Commander's Responsibilities, 8 May 14 AFPD 14-2, Intelligence Rules and Procedures, 29 Nov 07 AFI , Oversight of Intelligence Activities, 5 Nov 14 AFI v1, Intelligence Training, 31 Mar 15 AFI v2, Intelligence Standardization/Evaluation Program, 31 Mar 15 AFI v3, General Intelligence Rules, 10 Mar 08 AFI , Intelligence Support to Force Protection, 4 May 12 AFMAN , Information Technology Asset Management, 19 Mar 14 AFI , Operational Reporting, 11 Jun 14 AFI AFSPCSUP, Operational Reporting, 19 Nov 14 JP 5.0, Joint Operation Planning, 11 Aug 11 AFI AFSPCSUP, Participation in Joint and National Exercises, 6 Apr 16 AFPD 63-1, Integrated Life Cycle Management, 3 Jul 12 AFI /20-101, Integrated Life Cycle Management, 7 Mar 13 AFPD 16-10, Modeling and Simulation, 23 Jan 15 AFI v1, Cybercrew Training, 2 Apr 14 AFI , Determining Manpower Requirements, 30 Dec 03 AFI , Publications and Forms Management, 1 Dec 15 AFI AFSPCSUP, Publications and Forms Management, 29 Mar 16 AFI , Tactics Development Program, 15 Sep 11 AFI , Weapons and Tactics Program, 15 Oct 04

12 AFSPCI , Tactics Development Program, 23 Feb 16 AFSPCI , Weapons and Tactics Program, 14 Jun 13 Capabilities Based Assessment (CBA) Report from Air Force Space Command, 24 Jun 2016 Abbreviations and Acronyms 24 AF 24th Air Force 624 OC 624th Operations Center AAR After Action Reports ADCON Administrative Control AEF Air Expeditionary Force AF Air Force AFI Air Force Instruction AFPD Air Force Policy Directive AFSC Air Force Specialty Code AFSPC Air Force Space Command AFSPCI Air Force Space Command Instruction AFSPC-ECT AFSPC Exercise Coordination Team AFSPCSUP Air Force Supplement AFTTP Air Force Tactics, Techniques, and Procedures BCQ Basic Cyberspace Qualified BMC Basic Mission Capable CBA Capabilities Based Assessment CCDR Combatant Commander CCIR Commander s Critical Information Requirement CCMD Combatant Command CEP Component Exercise Plan CMF Cyber Mission Force CMR Combat Mission Ready CNF Cyberspace Needs Form COG Cyberspace Operations Group CSS Commander s Support Staff CSSG Cyberspace Simulator/Range Steering Group CSR Cyber System Review CST Client Support Technician CT Continuation Training CW Cyberspace Wing DCO Defensive Cyberspace Operations DEPORD Deployment Order DO Director of Operations DOD Department of Defense DODIN Department of Defense Information Network EXORD Execution Order

13 FM Financial Management FRAGO Fragmentary Order GSU Geographically Separated Unit HAF Headquarters Air Force HHQ Higher Headquarters HQ Headquarters IAW In Accordance With ICW In Compliance With ILCM Integrated Life Cycle Management IN Intelligence IOS Information Operations Squadron IQT Initial Qualification Training ISR Intelligence, Surveillance, and Reconnaissance IT Information Technology JTIMS Joint Training Information Management System JWICS Joint Worldwide Intelligence Communication System LL Lessons Learned LVC-OT Live, Virtual, and Constructive for Operational Training M&S Modeling and Simulation MAJCOM Major Command MQT Mission Qualification Training MR Mission Ready MTP Master Training Plan MTTL Master Training Task List MS Mission Support NAF Numbered Air Force NIPRNET Non-classified Internet Protocol Router Network NSA National Security Agency OCO Offensive Cyberspace Operations OPORD Operational Order OPR Office of Primary Responsibility OPREP Operational Report ORB Operations Review Board ORP Operational Review Panel OSK Weapons and Tactics OSO Current Operations OSS Operations Support Squadron OST Operations Training OSX Operations Plan POI Plans of Instruction PPBE Planning, Programming, Budgeting and Execution PMO Program Management Office PMR Program Management Review PSR Program System Reviews

14 RCP Ready Cybercrew Program RFI Request For Information RTM Ready Cybercrew Program Tasking Memorandum SIPRNET Secret Internet Protocol Router Network STO Special Technical Operations STV Staff Training Visit TPC Tactical Planners Course TPT Training Planning Team TTP Tactics, Techniques and Procedures USAF United States Air Force USCYBERCOM United States Cyber Command WARNORD Warning Order WRMP Wing Range Management Program WSR Weapon System Review WST Weapon Support Team