567th Cyberspace Operations Group

567th Cyberspace Operations Group
Unit name	567th Cyberspace Operations Group
Caption	Emblem of the 567th Cyberspace Operations Group
Dates	2013–present
Country	United States
Branch	United States Air Force
Type	Cyberspace operations
Role	Offensive and defensive cyber operations, cyberspace superiority
Garrison	Langley Air Force Base, Virginia

567th Cyberspace Operations Group is a United States Air Force unit organized to conduct cyberspace operations, including offensive cyber, defensive cyber, and network warfare. The group operates in coordination with joint commands, national agencies, and allied partners to support combatant commands and strategic objectives. It integrates personnel from specialized cyber squadrons and collaborates with research institutions, acquisition agencies, and tactical units.

History

The unit was activated during an era of rapid expansion of United States Cyber Command capabilities and the Air Force Cyber Command construct, emerging in the aftermath of doctrinal shifts influenced by events such as the 2010s cyberattacks on US infrastructure and doctrinal publications from Air Force Doctrine Publication 3-12 Cyber Operations. Early development paralleled organizational changes at Air Combat Command and coordination with National Security Agency missions. The group’s formation reflected lessons from operations in the Global War on Terrorism and interoperability efforts with United States Central Command, United States European Command, and allied structures like NATO’s Cooperative Cyber Defence Centre of Excellence. Over time, it adapted to policy guidance from the Department of Defense Cyber Strategy and force design initiatives directed by the Secretary of the Air Force and Chief of Staff of the Air Force.

Mission and Role

The group’s mission aligns with joint cyberspace objectives outlined by United States Cyber Command and supports taskings from Combatant Commands including USCENTCOM, USEUCOM, and USPACOM. It provides cyber mission teams that execute defensive cyberspace operations (DCO), offensive cyberspace operations (OCO) under authorities such as the Department of Defense cyber policy, and full-spectrum cyberspace support to warfighting and strategic deterrence efforts. The unit partners with the National Cybersecurity and Communications Integration Center, Cybersecurity and Infrastructure Security Agency, and acquisition entities like the Defense Advanced Research Projects Agency to integrate capabilities into operations. It also supports continuity with intelligence organizations such as the Defense Intelligence Agency and Office of the Director of National Intelligence.

Organization and Units

The group is composed of multiple squadrons aligned to mission sets and supported by administrative and technical elements. Typical subordinate units include cyber operations squadrons, mission support elements, and intelligence support flights that interface with Air Force Intelligence, Surveillance and Reconnaissance Agency concepts. It coordinates with 501st Combat Support Wing-like organizations for basing and logistics, while operational taskings flow from numbered Air Force structures and joint command nodes. Personnel include operators trained at institutions such as Air Force Institute of Technology, National Cryptologic School, and partner universities tied to Cybersecurity Education initiatives.

Equipment and Capabilities

Equipment and capabilities center on networked mission systems, offensive toolkit repositories, defensive monitoring arrays, and secure communications. The group employs suites interoperable with Joint Regional Security Stacks, commercial cloud services certified under Department of Defense Cloud Computing Security Requirements Guide, and specialized hardware compatible with Advanced Encryption Standard implementations and Transport Layer Security frameworks. Capabilities include target discovery, vulnerability analysis, incident response, malware reverse engineering, and electronic warfare integration in support of Naval Network Warfare Command and Army Cyber Command interoperability. Tools are developed in partnership with organizations such as MITRE Corporation, Carnegie Mellon University's CERT, and industry leaders in cybersecurity.

Notable Operations and Deployments

The group has provided cyberspace mission teams to support operations across multiple theaters, integrating with joint force exercises such as Cyber Flag, JTF-ARES simulations, and multinational exercises with NATO Cyber Exercise Locked Shields. It has supported defensive campaigns in response to large-scale incidents attributed to state actors in cyber incidents paralleling those linked to actors like units associated with Advanced Persistent Threat 29 and others. Deployments have included persistent support to U.S. Central Command operations, mission assurance for Pacific Air Forces basing networks, and collaboration with United States Strategic Command for homeland defense posture.

Awards and Decorations

Elements of the group and its subordinate squadrons have received unit awards and commendations coordinated through Air Force Awards and Decorations processes, reflecting excellence in operations, mission support, and innovation. Recognitions align with criteria applied to awards such as the Air Force Outstanding Unit Award and campaign or service medals associated with deployed support to combatant commands and joint operations.

Lineage and Assignments

The unit’s lineage reflects activation and assignment orders issued within the United States Air Force organizational framework, with administrative alignment under numbered Air Forces and major commands responsible for cyberspace operations. Assignments tie to operational control by cyber command authorities and administrative chains via Air Combat Command-like headquarters or designated cyberspace major commands. The group’s organizational record is maintained consistent with Air Force Historical Research Agency standards.

Category:United States Air Force groups Category:Cyber warfare units