"On Cyber" - Summary

Let's explore how principles from traditional warfare can be applied to cyber operations and cybersecurity. It's important to understand that cyber conflict is not a future threat, but a present reality. Both state and non-state actors are actively using cyberspace to achieve their objectives, often in tandem with physical operations. While these cyber operations may not cause the visible destruction we associate with traditional warfare, they pose a significant threat to national security by strategically undermining it.

Cyber operations are a complex field that requires a wide range of expertise. This includes not only technology but also social sciences, law, military science, and more. Just as militaries have had to adapt their principles of combat power and readiness to various challenges throughout history, they must now do the same for the unique challenges of the cyber domain. However, the doctrine and practices for cyber operations are still in their early stages and have room for growth.

Cyber conflict doesn't just happen on a large, strategic scale. It also occurs at operational and tactical levels. Think of state-sponsored hacking campaigns or activities aimed at securing information. These are not isolated incidents but part of larger campaigns. Therefore, those defending against these threats should also think in terms of campaigns rather than individual incidents.

Now, let's consider how we can apply military planning and training to cyber operations and defense. Currently, most organizations rely on the skills of individuals rather than a coordinated team effort and flexible processes. But imagine if we could apply the same deliberate planning and training used in the military to these organizations. This could allow them to make better use of their limited cybersecurity resources.