Joint Publication 3-12 (Cyberspace Operations)

Joint Publication 3-12 (Cyberspace Operations)
Name	Joint Publication 3-12
Long name	Joint Publication 3-12 (Cyberspace Operations)
Published by	United States Department of Defense
First published	2010
Latest revision	2018
Subject	Cyberspace operations doctrine
Country	United States

Joint Publication 3-12 (Cyberspace Operations) is the principal doctrinal manual produced by the United States Department of Defense that codifies principles, organization, and execution of cyberspace operations for United States Armed Forces, aligning operational concepts with legal and policy frameworks such as the National Security Strategy and the Department of Defense Cyber Strategy. The publication guides coordination among components like United States Cyber Command and geographic combatant commands including United States European Command, United States Indo-Pacific Command, and United States Central Command, and situates cyberspace activities alongside campaigns such as those in Iraq and Afghanistan.

Overview

Joint Publication 3-12 articulates doctrinal definitions and constructs for planning and conducting operations in the cyberspace domain, integrating terminology used by organizations like National Security Agency, Cybersecurity and Infrastructure Security Agency, and Federal Bureau of Investigation to support interagency cooperation. It frames cyberspace as an operational domain alongside land, maritime, air, and space, shaping force posture for commands such as United States Strategic Command and service components like the United States Air Force and United States Navy. The publication emphasizes mission assurance, defensive cyber operations, offensive cyberspace operations, and cyber protection teams, informing doctrine across institutions including the Joint Chiefs of Staff and the Office of the Director of National Intelligence.

History and Development

Development of the publication traces to early 21st-century doctrinal work following incidents such as the Estonia 2007 cyberattacks and the proliferation of campaigns attributed to actors like Fancy Bear and Sandworm. Initial editions were influenced by policy issuances from administrations under George W. Bush, Barack Obama, and later guidance from Donald Trump and Joe Biden administrations, reflecting shifts captured in documents like the Presidential Policy Directive 20 and the National Cyber Strategy. Interactions with international norms debates, including sessions at the United Nations General Assembly and discussions among NATO members such as United Kingdom and France, shaped revisions. The publication evolved alongside capability developments at institutions like MITRE Corporation and RAND Corporation which provided analytic support for doctrine refinement.

Organization and Roles

The publication delineates roles for organizations including United States Cyber Command, component commands from the United States Army, United States Marine Corps, and United States Navy, and coordinating bodies like the Joint Staff J-3 and J-5 directorates. It assigns responsibilities to cyber protection teams modeled after structures in the National Guard and directed by Combatant Commanders such as the commander of United States Central Command for regional alignment. Partnerships with civilian agencies such as Department of Homeland Security and private-sector entities including firms like Microsoft and Amazon Web Services are recognized for incident response and shared situational awareness, with liaison mechanisms to organizations like the Council on Foreign Relations and Carnegie Endowment for International Peace influencing policy coordination.

Doctrine and Key Concepts

Core doctrinal constructs include command and control (C2) relationships, target development, battle damage assessment, and attribution processes informed by analytic centers like the National Geospatial-Intelligence Agency and Defense Intelligence Agency. Concepts such as persistent engagement, defensive cyberspace operations, and full spectrum cyberspace operations align with models developed by United States Cyber Command leadership and debated within think tanks such as Brookings Institution. The publication incorporates risk management frameworks paralleling standards from National Institute of Standards and Technology and operationalizes cross-domain integration similar to joint operational art discussed in literature from the United States Military Academy.

Types of Cyberspace Operations

JP 3-12 classifies operations into categories including Defensive Cyberspace Operations (DCO), Offensive Cyberspace Operations (OCO), and Department of Defense Information Network (DODIN) operations, paralleling capabilities demonstrated in campaigns and incidents like the Sony Pictures hack and responses to NotPetya. It outlines force employment of capabilities in support of Operation Inherent Resolve-type campaigns and contingency plans for scenarios involving state actors such as Russia, China, North Korea, and non-state actors linked to events like the Stuxnet operation.

Legal, Policy, and Ethical Considerations

The publication situates operations within legal regimes including the Law of Armed Conflict, United States Code, and executive guidance such as Presidential Decision Directive-era authorities, coordinating with legal advisors from the Judge Advocate General's Corps of service branches. It references international law debates held at venues like the International Court of Justice and multilateral forums including NATO discussions, and addresses ethical concerns raised by civil liberties organizations such as the American Civil Liberties Union and policy critiques from academic centers like Harvard Kennedy School.

Implementation and Exercises

Implementation guidance includes integration into joint training and exercises such as Cyber Flag, Eager Lion, and multinational drills run with partners like Japan and Australia, leveraging testbeds at facilities like U.S. Army Cyber Center of Excellence and simulations developed with Defense Advanced Research Projects Agency. It prescribes assessment metrics, red-team/blue-team structures, and after-action review processes used in large-scale exercises including those coordinated by NATO Cooperative Cyber Defence Centre of Excellence.

Criticisms and Controversies

Critiques have centered on the publication's treatment of offensive authorities, attribution challenges, and civil-military boundaries, echoed in analyses by entities such as Human Rights Watch and policy scholars at Johns Hopkins University. Debates persist about transparency, oversight by congressional committees like the House Armed Services Committee and Senate Armed Services Committee, and the balance between operational secrecy and public accountability highlighted in coverage by outlets including The New York Times and The Washington Post.

Category:United States Department of Defense publications Category:Cybersecurity doctrine