jp3_12r

Chapter II
periodic refreshing and retesting to ensure that they are still both secure and capable of
creating the required effects despite changes in the targeted OE.
g. Protection
(1) Protection is somewhat unique within cyberspace because adversaries can
create multiple, cascading effects that may not be restricted by physical geography,
civil/military boundaries, and significantly expand the area requiring protection. Cyberspace
capabilities requiring protection include not only the infrastructure (computers, cables,
antennas, and switching and routing equipment), as well as parts of the EMS (e.g., datalink
frequencies to include satellite downlink, cellular, and wireless), and the content (both data
and applications) on which military operations rely. Key to cyberspace protection is the
positive control of the DODIN and the ability to monitor, detect, and prevent hostile traffic
from entering and exfiltration of information.
(2) Protection of friendly cyberspace uses a combination of defensive capabilities
and OPSEC. Because of the speed of effects in cyberspace, automated technologies for
securing networks, verifying approved network configurations, and discovering network
vulnerabilities often provide a far better chance of success than their manual equivalents.
However, the strongest encryption and most secure protocols cannot protect our networks
from poorly trained/motivated users who do not employ proper security practices.
Commanders should ensure personnel understand and are accountable for their roles in
cybersecurity.
II-12 JP 3-12