CYBERCOM

U.S. Cyber Command (USCYBERCOM) is the American military command charged with directing, synchronizing, and conducting cyberspace operations in defense of U.S. interests. It was established in 2009 as a sub-unified command under U.S. Strategic Command and elevated to a full unified combatant command in 2018, placing it on par with commands like CENTCOM and INDOPACOM.

CYBERCOM is headquartered at Fort Meade, Maryland, co-located with the National Security Agency (NSA). The two organizations share a leader under a "dual-hat" arrangement: the Commander of CYBERCOM also serves as Director of the NSA and Chief of the Central Security Service. This arrangement has been periodically reviewed by Congress and the executive branch, with debates over whether the roles should be split.

Its operational arm is the Cyber Mission Force (CMF), a set of teams divided across three mission sets:

• Cyber National Mission Force (CNMF) — defends the nation against significant cyber threats, elevated to a sub-unified command in 2022.
• Cyber Combat Mission Force — supports geographic and functional combatant commands with offensive and defensive operations.
• Cyber Protection Force — defends the Department of Defense Information Network (DoDIN).

CYBERCOM operates under the doctrine of "defend forward," articulated in the 2018 DoD Cyber Strategy, which authorizes engaging adversaries in cyberspace closer to the source of malicious activity rather than waiting for attacks to reach U.S. networks. Section 1642 of the FY2019 National Defense Authorization Act and a related National Security Presidential Memorandum (NSPM-13) expanded its authorities to conduct operations against foreign actors below the threshold of armed conflict.

Notable reported activities include operations against the Islamic State (Operation Glowing Symphony), efforts to counter Russian interference during the 2018 U.S. midterm elections, and the deployment of "hunt forward" teams to allied nations such as Ukraine prior to and during the 2022 Russian invasion. CYBERCOM coordinates with CISA, FBI, and allied cyber commands but is distinct from civilian cybersecurity agencies.