SCHOOL THESIS

Likewise, numerous U.S. and Canadian national strategies recommend working
with international organizations to develop international watch-and-warning networks in
order to detect and prevent cyber attacks. U.S. military policy encourages the necessity to
integrate allies early in planning discussions in order to reduce operational boundaries,
thus increasing the chances of success in combined operations. Finally, from a Canadian
perspective, both Canada’s civilian and military strategies mirror the same themes of
working with international organizations to develop international watch-and-warning
networks in order to detect and prevent cyber attacks.
With this background in mind, this thesis developed three courses of action
(COAs) regarding possible roles NORAD might play in future military cyber attack
warning situations. Each proposed COA was initially analyzed to ensure it met specific
validity criteria (e.g., adequate, feasible, acceptable, distinguishable, and complete.)
COAs were then arranged by increasing levels of responsibility being placed upon
NORAD. Each COA was then examined for specific advantages, disadvantages, and
possible solutions for successful implementation.
After considering these three COAs, this thesis proposes NORAD advocate for
unrestricted national cyberspace event conference participation. This would seem to be a
realistic, achievable first step that offers significant improvement in NORAD cyber attack
situational awareness and improved operational responsiveness, while requiring only a
change in DOD information classification policy for implementation. Allowing NORAD
Canadian personnel to fully participate in real-time cyber event conferences would fulfill
stated U.S. and Canadian national policies, which repeatedly highlight the need for
greater cooperation and information sharing with between allies.
In conclusion, while requiring challenging staff actions nationally within DOD
and internationally with Canada to provide unrestricted access to cyberspace operations,
the recommended action harnesses proven NORAD binational relationships and warning
procedures to provide all-domain warnings to both nations.
xviii