This presentation was delivered by Major General Brett Williams at the RUSI Cyber Conference on 16 September 2015.

1. What is it?
Where is it?
Who Cares?
CYBERSPACE
Major General (Ret) Brett T. Williams
Former Director of Operations
United States Cyber Command PROPRIETARY, DO NOT DISTRIBUTE OR DUPLICATE WITHOUT PERMISSION

2. 4 CYBERSPACE AXIOMS*
• There is no such thing as “cyber war.” The nature of conflict and
competition is enduring, but the character changes.
• “Cyber” does not require a new approach to national strategy,
economic competition or defense.
• Senior leaders who do not understand the principles of cyberspace
operations will delegate strategic decisions to the IT department.
• “Cyber” is not a verb, adjective or noun, it does not connote an attack
and is best used as part of the compound word cyberspace.
* A statement or proposition that is regarded as being established, accepted, or self-evidently true.
PROPRIETARY, DO NOT DISTRIBUTE OR DUPLICATE WITHOUT PERMISSION

3. WHAT IS CYBERSPACE?
• The information environment or domain created by plugging together
all of the computers, cables, switches, satellites and wireless devices
that allow us to move large amounts of data very fast.
• Similar to air and space - it is everywhere, difficult to visualize, hard to
define borders and best leveraged using advanced technology.
• Different than the physical domains because it is man-made and
changes constantly - great opportunities with significant risk.
PROPRIETARY, DO NOT DISTRIBUTE OR DUPLICATE WITHOUT PERMISSION

4. WHERE IS CYBERSPACE?
• It is everywhere - another dimension of the Global Commons
• Apply the lessons learned from the maritime and air domains
• Defined access for individuals, commercial entities & nation-states
• Establish the rules, enforce the rules
PROPRIETARY, DO NOT DISTRIBUTE OR DUPLICATE WITHOUT PERMISSION

5. FREEDOM OF MANEUVER IN CYBERSPACE
The ability to function in cyberspace at a known and
accepted level of risk
PROPRIETARY, DO NOT DISTRIBUTE OR DUPLICATE WITHOUT PERMISSION

6. WHO CARES ABOUT CYBERSPACE?
• We all should care.
• Cyberspace allows us to get information, move information and use
information to make better decisions faster than the competition.
• There can be no such thing as “a day without cyber”
• Freedom of maneuver in cyberspace is critical to national security for:
• Economic stability and prosperity
• Defense
PROPRIETARY, DO NOT DISTRIBUTE OR DUPLICATE WITHOUT PERMISSION

7. 7
Analytic Framework for Responding
to Cyberspace Attack
Response SpectrumCharacterize Attack
Determine
Appropriate
Response
Constraints/Restraints:
• SROE
• Intel/Access/Capability
• Proportionality
• Escalation
• Precedence
• Deconfliction
• Intel/Ops Gain-Loss
• Time (+target/severity) drives requirement for pre-approved, pre-planned actions.
• Response execution by agency with capability and capacity, then align authorities
1. Target
2. Severity/Impact
3. Attacker
4. Attack Vector
5. Advanced Warning
Level 0 – Absorb the blows
Level 1 – Deny Objectives
- Cyber Response
Level 2 – Deny Objectives and
Impose Costs
- Low visibility
- Cyber/Physical
Response
- Proportional,
non-escalatory
Level 3 – Deny Objectives,
Impose Costs,
Deter Future Attacks
- High Visibility
- High Cost Imposing
INCREASEDSEVERITY
UNCLASS
UNCLASS
PROPRIETARY, DO NOT DISTRIBUTE OR DUPLICATE WITHOUT PERMISSION

8. Don’t make it harder than it already is.
CYBERSPACE
Major General (Ret) Brett T. Williams
Former Director of Operations
United States Cyber Command PROPRIETARY, DO NOT DISTRIBUTE OR DUPLICATE WITHOUT PERMISSION