Cyber Primer

Integrating cyber operations
As these operations may be dependent on infrastructure and networks
associated with, or even located within, physical target sets, we need to
de-conflict and thoroughly understand the gain/loss balance to avoid
fratricide and the compromise of ‘equity’. It may be possible to create the
required effect using relatively low equity or open-source (or modified
open-source) tools that can provide agile and flexible response options.
Integrating cyber into operational planning is achieved through joint action 47
which is a framework for considering the integration, coordination and
synchronisation of all military activity within the battlespace. Joint action is
implemented through the orchestration of:
• information activities;
• fires;
• outreach; and
• manoeuvre.
4.4. Tactical effects. At the tactical level, the time required to develop
access and invest in capability may mean that creating high-end cyber
effects is reserved for early or important actions that have a high
pay-off. However, lower-level attacks (such as locally interfering with a single
building’s network access and subsequently employing a low-end common
payload) may increasingly be seen on operations. The Israeli integration of
cyber operations into the conventional bombing of a Syrian nuclear research
institute is a good example of the operational/tactical use of cyber. 48
4.5. Time. Cyber accesses often take years to develop. Knowledge of
specific accesses and capabilities will be tightly controlled and held at
the highest classification levels. Conversely, while this preparatory phase
can take years, the execution phase may only take seconds. Similarly,
in defensive terms, it may take far more people, time and resource to
successfully protect and defend our own networks than for an adversary to
launch a credible attack against them.
47 Joint action is defined as: the deliberate use and orchestration of military capabilities
and activities to affect an actor’s will, understanding and capability, and the cohesion
between them to achieve influence. Joint Doctrine Publication (JDP) 3-00, Campaign
Execution (3rd Edition, Change 1).
48 More details on this case study can be found at Annex 4A on pages 78-79.
68
Cyber Primer (2nd Edition)