French Cyber Command

French Cyber Command
Unit name	French Cyber Command
Native name	Commandement de la cyberdéfense
Caption	Emblem
Start date	2017
Country	France
Branch	Armed Forces of France
Type	Cyber command
Role	Cyber defence and operations
Garrison	Hexagone Balard
Nickname	COMCYBER
Commander1	General Thierry Burkhard
Notable commanders	General Pierre de Villiers

French Cyber Command

French Cyber Command is the central cyber operational formation of the Armed Forces of France, responsible for planning, directing and conducting military cyber operations and coordinating cyber defence across French military services. Established amid rising global concerns about state-sponsored cyber activity and hybrid threats, the command integrates resources from the French Army, French Navy, French Air and Space Force, and defence agencies to protect national military networks and to project cyber effects as part of joint operations. It works alongside civilian bodies and international partners to respond to cyber incidents and to shape doctrine for offensive and defensive cyber activities.

History

French Cyber Command was created in 2017 as part of a reorganization of the Ministry of Armed Forces (France) under the leadership of then Minister Florence Parly and senior military planners from the École Militaire. Its establishment followed earlier initiatives such as the 2011 creation of the Defence Information and Communication Systems Agency (now DGA Maîtrise de l'information) and the 2014 publication of France’s first national cyber strategy by François Hollande's administration. The command built on capabilities developed by units like the Centre de Lutte Informatique Défensive and research partnerships with institutions such as INRIA, CNRS, and the Paris Sciences et Lettres University. Growth of COMCYBER paralleled similar organizations including the United States Cyber Command, the United Kingdom National Cyber Force, and NATO Cyber Defence Centre of Excellence initiatives.

Mission and responsibilities

COMCYBER’s mission set includes protection of military information systems belonging to the Ministry of Armed Forces (France), support to deployed forces in theaters such as Operation Barkhane and Operation Chammal, and preparation and execution of cyber operations that may contribute to military objectives. It is tasked to deter adversaries through persistent cyber defence, to conduct active cyber defence measures, and to provide cyber intelligence in collaboration with the Direction Générale de la Sécurité Extérieure and the Agence nationale de la sécurité des systèmes d'information. The command also advises civilian authorities during national cyber crises declared under the Loi de programmation militaire and coordinates with the Secrétariat général de la défense et de la sécurité nationale for resilience planning.

Organization and command structure

COMCYBER is led by a designated commander reporting to the Chief of the Defence Staff within the Armed Forces of France hierarchy and interfaces with the Ministry of Armed Forces (France). The command comprises operational cyber units drawn from the French Army, French Navy, and French Air and Space Force, as well as liaison elements attached to the Direction Générale de l'Armement and the Centre de Planification et de Conduite des Opérations. Specialized detachments focus on cyber threat intelligence, incident response, and offensive cyber capabilities, while support elements handle logistics, legal affairs, and interagency coordination involving the National Gendarmerie and the Préfecture de police de Paris for domestic contingencies.

Capabilities and operations

COMCYBER develops and fields defensive architectures, intrusion detection, network hardening, and rapid incident response capabilities to protect critical military networks and platforms including Rafale systems, Mistral (ship class) communications, and satellite links tied to CNES assets. Offensive capabilities are structured for authorization under political direction and can include cyber reconnaissance, exploitation, disruption of adversary command and control, and support to kinetic operations similar in concept to activities seen in the Russo-Ukrainian War. The command leverages tools created by the Direction Générale de l'Armement and research collaborations with Thales (company), Dassault Aviation, and cybersecurity firms operating in the La Défense (Paris) technology cluster.

International cooperation and legal framework

COMCYBER operates within French and international law, including frameworks established by the United Nations Charter, European Union cyber policy instruments, and bilateral agreements with partners such as the United States Department of Defense, United Kingdom Ministry of Defence, and NATO’s Cyber Defence Pledge signatories. It participates in joint exercises with allied formations like NATO Cooperative Cyber Defence Centre of Excellence and bilateral drills such as those conducted with Germany and Spain. Legal oversight involves the Conseil d'État and parliamentary reviews tied to the Loi de programmation militaire, while intelligence-sharing relationships extend to agencies including the National Cybersecurity Agency of France and counterparts in the Five Eyes alignment.

Training, recruitment, and personnel

Personnel are drawn from career officers and specialists across the Armed Forces of France, with recruitment targeting technical expertise from institutions like Télécom Paris, École Polytechnique, and military academies such as the École Spéciale Militaire de Saint-Cyr. Training programs combine courses at the École de guerre with cyber curricula from civilian establishments including Université Paris-Saclay and industry certifications sourced from vendors active in La Défense (Paris). COMCYBER also invests in talent retention via reserve programs tied to the Volontariat dans les armées and partnerships with research institutes including CEA and CNES.

Incidents and notable operations

Publicly disclosed operations and incidents tied to French military cyber activity include defensive responses to intrusions affecting defence contractors during periods of heightened tension over events such as the 2015 French football stadium attack aftermath and interference attempts around NATO Summit preparations. The command has been linked to cooperative actions with allied cyber forces in countering campaigns attributed to state actors operating from Russia, China, and non-state actors targeting French defence infrastructure. While operational details remain classified, COMCYBER’s role has been highlighted during crises requiring protection of military communications during deployments to theaters like the Sahel (region) and maritime operations in the Mediterranean Sea.

Category:Military units and formations of France Category:Cybersecurity organizations