About | HeinOnline Law Journal Library | HeinOnline Law Journal Library | HeinOnline



1 [1] (December 23, 2025)

handle is hein.crs/govetbw0001 and id is 1 raw text is: 





I or nin


&on I F? sedrch Service
Ierrl   ave IeIa~ 'e1914


0


                                                                                   Updated December 23, 2025

Defense Primer: U.S. Cyber Command (USCYBERCOM)


U.S. Cyber Command  (commonly referred to as
CYBERCOM), is   the Department of Defense (DOD)-
which is using a secondary Department of War
designation under Executive Order 14347 dated September
5, 2025-functional unified combatant command (CCMD)
responsible for cyberspace operations. The command
defends DOD  information systems, supports military
commanders  with cyberspace operations, and defends the
United States from cyberattacks. In addition to defending
against increasing adversarial attempts to compromise
military, intelligence, and defense industrial base networks
and critical infrastructure, CYBERCOM is focused on
countering a wide array of malicious cyberspace activities.
Background
The origins of CYBERCOM   can be traced to the late
1990s, when DOD  efforts focused on network centric
warfare and strengthening U.S. computer network
operations-the precursor to cyberspace operations-
through various task forces. The department later
established a Joint Task Force for Global Network
Operations (JTF-GNO) for defensive cyberspace operations
and a Joint Force Component Command for Network
Warfare (JFCC-NW)  for offensive operations. Both task
forces operated under U.S. Strategic Command
(STRATCOM).   Air Force officials also recognized the
importance of cyberspace operations, declaring cyberspace
an official Air Force domain in 2005 and initiating work to
develop a new cyber command. In 2009, the Air Force
established Air Forces Cyber and 16th Air Force as cyber-
focused organizations.
On June 23, 2009, Robert Gates, then-Secretary of Defense
(SECDEF),  directed the creation of CYBERCOM,
establishing the organization as a subordinate (or sub-)
unified command under STRATCOM.   Both the JTF-GNO
and JFCC-NW   were absorbed into the new command, with
their missions moving from CNO to cyberspace operations.
Initially, CYBERCOM  received assistance from the
National Security Agency (NSA), including personnel,
equipment, and resources to perform its mission. The
command  reached full operational capability in 2010. In
2016, under Section 923 of the National Defense
Authorization Act for Fiscal Year 2017 (NDAA; P.L. 114-
328), Congress authorized establishing CYBERCOM as a
unified CCMD. In 2017, the first Trump Administration
directed that CYBERCOM  be elevated to the status of a
Unified Combatant Command.  Led by a four-star general
or admiral, CYBERCOM   is headquartered at Fort George
G. Meade in Maryland. The commander is dual-hatted (i.e.,
simultaneously oversees two distinct organizations) and
also serves as the Director of the National Security Agency
(DIRNSA).
Mission   and  Organization
According to CYBERCOM,   its mission is to direct,
synchronize, and coordinate cyberspace planning and


operations-to defend and advance national interests-in
collaboration with domestic and international partners.
The command  performs four assigned missions:
*  Defend U.S. critical infrastructure and democratic
   processes from malicious cyberspace actors;
*  Defend DOD  Information Networks (DODIN);
*  Integrate options and capabilities in CCMD campaigns
   and plans; and
*  Increase DOD cyber effectiveness through collaboration
   with allies and partners.
Components.
CYBERCOM is organized   into four service components
that provide forces to the command: Army Cyber
Command,  the Navy's U.S. Fleet Cyber Command, Marine
Forces Cyberspace Command, and Air Forces Cyber/16th
Air Force. The commanders of these service components
are dual-hatted as Joint Force Headquarters Cyber (JFHQ-
C) commanders. CYBERCOM also has   two subordinate
unified commands that conduct operations on a continuing
basis for the command: the Cyber National Mission Forces
(CNMF)  and DOD  Cyber Defense Command  (formerly
JFHQ-DODIN).
The Cyber Mission Force (CMF), CYBERCOM's
operational arm, comprises several cyber mission forces:
The CMF  consists of the Cyber National Mission Force, the
Cyber Protection Force, and the Cyber Combat Mission
Force, each with their own associated mission teams. These
teams are controlled through the four subordinate service
JFHQs  and the two subordinate unified commands. Coast
Guard Cyber Command,  part of the Department of
Homeland  Security, has a direct support relationship to
CYBERCOM. Congress has   been exploring the idea of
creating a separate cyber military service under
CYBERCOM through the   Cyberspace Solarium
Commission  (CSC), created by Congress in the National
Defense Authorization Act for Fiscal Year 2019 (NDAA;
P.L. 115-232).
Fxpanded Xuthorities
In view of CYBERCOM's   specialized missions that require
uniquely trained personnel and equipment, Congress has in
10 U.S.C. §167b provided the command with expanded
authorities related to budget, acquisitions, and personnel
management  processes-authorities that are, in general,
broader than those provided to certain other CCMDs and
similar to those of the military departments. In 2018, the
Trump  administration delegated additional authorities to the
SECDEF   for certain military cyberspace operations,
according to DOD.

Budget
DOD  requests funding for CYBERCOM  in budget
justification documents associated with multiple Defense-
Wide  accounts: Operations and Maintenance (O&M);
Procurement; and Research, Development, Test, and