Upload
doduong
View
236
Download
0
Embed Size (px)
Citation preview
UNCLASSIFIED
UNCLASSIFIED
17CCyber Operations Specialist
OCC Approved as of 02 June 2015
UNCLASSIFIED
UNCLASSIFIED2
• Purpose• 17C Overview• 17C Re-Classification• Summary• Questions
Agenda
UNCLASSIFIED
UNCLASSIFIED3
To Familiarize Soldiers and Leaders with the new 17C Cyber Operations Specialist MOS
and provide a detailed overview of theReclassification and Training Process
Purpose
UNCLASSIFIED
UNCLASSIFIED4
17C Overview
UNCLASSIFIED
UNCLASSIFIED5
MOS 17C: Cyber Operations SpecialistApproved: 11 May 2015
Effective: 1 Oct 2015
• Cyber Operations Specialists execute Offensive and Defensive Cyberspace operations in support of the full range of military operations by enabling actions and generating effects across all domains.
• The Cyber Operations Specialist ensures the freedom of maneuver within the Cyberspace domain and denies the same to adversaries.
• Cyber Operations Specialists will enable Offensive Cyberspace Operations (OCO) intended to project power by the application of force in and through Cyberspace by targeting enemy and hostile adversary activities and capabilities.
• Cyber Operations Specialists also enable Defensive Cyberspace Operations (DCO) in order to protect data, networks, net-centric capabilities, and other designated systems by detecting, identifying, and responding to attacks against friendly networks.
17C Overview
UNCLASSIFIED
UNCLASSIFIED6
17C Overview
UNCLASSIFIED
UNCLASSIFIED7
17C Overview
Conduct military cyber operations in support of combatant
commands
Combat Mission Team (CMT)64 Pax each
Combat Support Team (CST)39 Pax each
CMT x 8
CST x 6
Cyber Combat Mission Force (CMF)
Defend the Nation bySeeing adversary activity,
Blocking attacks and Maneuvering to defeat them
National Mission Team (NMT) 64 Pax each
National Support Team (NST) 39 Pax each
NMT x 4
NST x 3
Cyber National Mission Force (NMF)
Cyber Protection Force (CPF)
Defend DoD Information Networks (DODIN) and, when authorized, other infrastructure
Cyber Protection Team (CPT) 39 Pax each
-National -Combat -Service
x 20CPT
UNCLASSIFIED
UNCLASSIFIED8
17C Overview
Work Roles• Access Network Operator• Cyber Defense Analyst• Cyber Security Analyst• Cyber Intelligence Planner• Cyber Operations Planner• Digital Network Exploitation Analyst• Exploitation Analyst• Interactive Operator• NCOIC
UNCLASSIFIED
UNCLASSIFIED9
17C Overview
SL1 – SL4• Digital Network Exploitation
Analyst• Exploitation Analyst• Interactive Operator• Cyber Security Analyst• Cyber Defense Analyst• Access Network Operator• Cyber Intelligence Planner• Cyber Operations Planner
SL5 – 6 • Cyber Intelligence Planner• Cyber Operations Planner• NCOIC• First Sergeant• BN CSM• BDE S-3 SGM• BDE CSM• SGMs in Cyber CoE positions
UNCLASSIFIED
UNCLASSIFIED10
17C Overview
FT GordonARCYBER (Future)
Cyber CoECyber School
Joint Forces HQCyber Protection BDE
782nd MI BN
FT MeadeCYBERCOM HQ
780th MI BDE781st MI BN
USMAArmy Cyber
Institute
FT BelvoirARCYBER HQ
1ST IO CMDJBSA
782nd MI BN, Det-T
Schofield Brrks782nd MI BN, Det-H
Cyber Manning Priorities
1. Cyber Protection BDE
2. 780th MI BDE
3. Joint Forces HQ
4. Cyber CoE
5. Army Cyber Command
6. US Cyber Command
7. Army Cyber Institute
UNCLASSIFIED
UNCLASSIFIED11
17C Overview
• Assigned to the Cyber Mission Force
• AIP Program Eligibility: $250/$300/$500
• SDP Eligibility: $150/$225/$300
• Training Opportunities
• Promotion Opportunities
• Historic Opportunity to Build the Branch
UNCLASSIFIED
UNCLASSIFIED12
17C Reclassification
UNCLASSIFIED
UNCLASSIFIED13
MOS 17C: 611-21 Requirements• PHYSICAL DEMAND RATING OF MEDIUM.• PHYSICAL PROFILE OF 222221.• NORMAL COLOR VISION. • QUALIFYING SCORES.
– A MINIMUM SCORE OF 110 IN APTITUDE AREA FOR GT AND A MINIMUM SCORE OF 116 IN APTITUDE AREA ST ON ARMED SERVICES VOCATIONAL APTITUDE BATTERY (ASVAB) TEST ADMINISTERED PRIOR TO 2 JANUARY 2002.
– A MINIMUM SCORE OF 110 IN APTITUDE AREA GT AND A MINIMUM SCORE OF 113 IN APTITUDE AREA ST ON ASVAB TESTS ADMINISTERED ON AND AFTER 2 JANUARY 2002, BUT PRIOR TO 1 APRIL 2014.
– A MINIMUM SCORE OF 110 IN APTITUDE AREA FOR GT AND A MINIMUM SCORE OF 112 IN APTITUDE AREA ST ON ASVAB TESTS ADMINISTERED ON AND AFTER 1 APRIL 2014.
• THE SOLDIER MUST MEET TOP SECRET (TS) SENSITIVE COMPARTMENTED INFORMATION (SCI) ACCESS ELIGIBILITY REQUIREMENTS TO BE AWARDED AND MAINTAIN MOS. (ONLY SECRET REQUIRED FOR APPLICATION PACKET)
• SOLDIER IS REQUIRED TO RECEIVE AND PASS A COUNTERINTELLIGENCE SCOPE POLYGRAPH (CSP) PRIOR TO BEING AWARDED THE MOS AND MUST CONTINUE TO PASS SUBSEQUENT CSPS TO HOLD THE MOS. SOLDIERS WHO REFUSE TO TAKE OR FAIL A CSP WILL BE RECLASSIFIED. (ONLY REQUIRED AFTER APPLICATION APPROVAL PRIOR TO FIRST DUTY STATION)
• FORMAL TRAINING (SUCCESSFUL COMPLETION OF 17C CYBER OPERATIONS SPECIALIST COURSE, CONDUCTED UNDER THE AUSPICES OF THE US ARMY CYBER SCHOOL) IS MANDATORY. HOWEVER, CONSTRUCTIVE CREDIT WAIVER FOR FORMAL TRAINING MAY BE GRANTED BY COMMANDANT, US ARMY CYBER SCHOOL, FORT GORDON, GA 30905-5300
• THE SERVICE REMAINING REQUIREMENT (SRR) IS 3 YEARS FOR RECLASSIFICATION INTO MOS 17C UNDER THE PROVISIONS OF AR 614-200, CHAPTER 4.
17C MOS Requirements
UNCLASSIFIED
UNCLASSIFIED14
• AT A MINIMUM, SOLDIERS SFC AND BELOW MUST POSSESS AN SECRET CLEARANCE AT TIME OF APPLICATION. AFTER RECLASSIFICATION APPROVAL SOLDIERS WILL BEGIN APPLICATION PROCESS TO RECEIVE INTERIM TOP SECRET CLEARANCE PRIOR TO ATTENDING TRAINING. SOLDIERS WILL REQUIRE A SECURITY CLEARANCE OF TOP SECRET WITH SCI ACCESS PRIOR TO BEING AWARDED THE MOS
• SOLDIERS MUST HAVE NO ADVERSE INFORMATION IN THEIR OFFICIAL MILITARY PERSONNEL FILE, PROVOST MARSHALL RECORDS, OR LOCAL SECURITY OFFICE, AS WELL AS, NO DISQUALIFYING INFORMATION IN THEIR MEDICAL RECORDS THAT WOULD PREVENT THE GRANTING OF A SECURITY CLEARANCE OR MEETING PHYSICAL REQUIREMENTS TO BE AWARDED THE MOS.
• THE SERVICE REMAINING REQUIREMENT (SRR) IS 3 YEARS FOR RECLASSIFICATION INTO MOS 17C UPON COMPLETION OF TRAINING UNDER THE PROVISIONS OF AR 614-200, CHAPTER 4.
• SOLDIER IS REQUIRED TO RECEIVE AND PASS A COUNTERINTELLIGENCE SCOPE POLYGRAPH (CSP) PRIOR TO BEING AWARDED THE MOS AND MUST CONTINUE TO PASS SUBSEQUENT CSPS TO HOLD THE MOS. SOLDIERS WHO HAVE PREVIOUSLY FAILED A CSP PRIOR TO SUBMITTING THEIR APPLICATION WILL BE DENIED RECLASSIFICATION. SOLDIERS WHO ARE APPROVED FOR RECLASSIFICATION TO 17C WILL RECEIVE A CSPDURING RECLASSIFICATION TRAINING.
17C Reclassification Specifics
UNCLASSIFIED
UNCLASSIFIED15
SSG and Below Reclassification Specifics • SSG AND BELOW MUST MEET THE NCOES QUALIFICATIONS FOR PROMOTION TO THE
NEXT HIGHER RANK, INCLUDING STRUCTURE SELF-DEVELOPMENT (SSD) COURSES, AND MEET THE FOLLOWING RANK AND TIME IN SERVICE (TIS) REQUIREMENT:
– SPC AND BELOW WITH LESS THAN 4 YEARS TIME IN SERVICE.
– SGT WITH LESS THAN 10 YEARS TIME IN SERVICE.
– SSG WITH LESS THAN 15 YEARS TIME IN SERVICE.
17C Reclassification Specifics
UNCLASSIFIED
UNCLASSIFIED16
SFC and MSG Reclassification Specifics • SERGEANTS FIRST CLASS (SFC) SPECIFIC QUALIFICATIONS FOR SOLDIERS
REQUESTING RECLASSIFICATION INTO 17C MOS:– ALC GRADUATE WITH AT LEAST 9 YEARS TIS, BUT NO MORE THAN 20 YEARS TIS. SOLDIERS DO
NOT NEED TO BE A SENIOR LEADER COURSE (SLC) GRADUATE BECAUSE THEY MUST ATTEND THE 17C MOS SLC AFTER GRADUATION OF THE 17C MOS PRODUCING COURSE.
– SOLDIERS WHO HAVE COMPLETED SLC WILL ATTEND REQUIRED CYBER MISSION FORCE FUNCTIONAL TRAINING IAW JOINT CYBERSPACE TRAINING AND CERTIFICATION STANDARDS.
• MASTER SERGEANTS (MSG) SPECIFIC QUALIFICATIONS FOR SOLDIERS REQUESTING RECLASSIFICATION INTO 17C MOS:
– AT LEAST 11 YEARS TIS, BUT NO MORE THAN 24 YEARS TIS. – SOLDIERS WILL ATTEND SPECIFIC CYBER MISSION FORCE FUNCTIONAL TRAINING IAW JOINT
CYBERSPACE TRAINING AND CERTIFICATION STANDARDS BEFORE REPORTING TO INITIAL 17C ASSIGNMENT. AFTER COMPLETION OF THE IDENTIFIED TRAINING THEY WILL BE AWARDED A CONSTRUCTIVE CREDIT WAIVER FOR FORMAL 17C MOS TRAINING BY THE COMMANDANT, US ARMY CYBER SCHOOL, FORT GORDON, GA 30905-5300.
– MUST POSSESS A TOP SECRET CLEARANCE WITH SCI ACCESS AT TIME OF APPLICATION UNDER THE PROVISIONS OF AR 380-67, (PERSONNEL SECURITY PROGRAM), 24 JAN 14.
17C Reclassification Specifics
UNCLASSIFIED
UNCLASSIFIED17
17C Reclassification Packet RequirementsEXAMPLE PACKET AND TEMPLATES AVAILABLE AT
HTTPS://USCYBERSCHOOL.ARMY.MIL
• Cyber Cover Letter• DA 4187 Reclassification Request• Cyber Questionnaire• ERB (E6 and above with photo)• DA Pam 611-21 Acknowledgement Memo• DA Form 705 within 30 days• DA 5500 within 30 days (If applicable)• Security Clearance Verification Memo• NFNA initial screening packet • Last five NCOERs (SSNs blacked out)• All NCOES PME DA Form 1059’s (SSNs blacked out)• Certifications and Credentials verification Memo• Civilian Education Transcripts
17C Reclassification Specifics
UNCLASSIFIED
UNCLASSIFIED
Soldier Prepares Packet
Career Counselor Submits to
OCC
Packet received by
OCC
Assigned to CMF UNIT
17CWork Role Certified
Y Y
N
Packet Returned to
Career Counselor
N
Packet Accepted
Packet Returned to
Career Counselor
Soldier Notified
HRC Changes
MOS1 Oct 2015
Meets 17C611-21 Criteria
N
Y
Packet Screened against ADGM
N
Y
Packet Accepted
Packet Returned to
Career Counselor
N
Soldier Notified
Soldier Notified
Soldier Notified
Y
17C Training Screening
(Cont)
Packet Screened against ADGM
Meets 17C611-21 Criteria
Y
N
17C Packet Approval Process
UNCLASSIFIED
UNCLASSIFIED
Training Waiver Y
Full Training Waiver
Partial Training Waiver
Approval to Career
Counselor
Submit to HRC RRB
HRC change MOS / issue PCS Orders
Soldier Reports to CMF UNIT
Approval to Career
Counselor
Submit to HRC RRB
HRC slots in phase 2 &
issues PCS Orders
Reports to 17C Phase 2 FT Gordon
N
Soldier Notified
Approval to Career
Counselor
Submit to HRC RRB
HRC slots in training &
issues PCS Orders
Reports to 17C Phase 1Corey Station
17C Training Screening
(Cont)
17C Training Screening Process
UNCLASSIFIED
UNCLASSIFIED
17C MOS Training Overview230-17C10 Ph1 Cyber Operations Specialist (Corry Station FL) (~24 weeks) 230-17C10 (CP) C15-185 Cyber Operations Specialist (Fort Gordon, GA) (~22 weeks)
Joint Cyber Analysis Course (JCAC) Cyber Common Technical Core (Intermediate Cyber Core equiv) CPT Methodologies OCO Analyst
Training
Immersive Cyber Ops Exercise
17C MOS training consists of two phases. The first phase is the Joint Cyber Analysis Course taught under the auspices of the U.S. Navy at Corry Station, FL. The second phase will be will be conducted at Fort Gordon, Georgia
Joint Cyber Analysis Course(26 weeks)
*CTS course, Navy executed• Introduction• Discrete Structures• Programming Fundamentals• Computer Organization &
Architecture• Operating Systems• Networking Concepts & Protocols• Windows• UNIX• Programming• Enterprise Level Networking• Protocol Analysis• Wireless Technologies• Target Research/SIGINT Analysis• Active Exploitation• CND• Forensics Methodologies & Malware
Analysis• Capstone
Cyber Common Technical Core(8-9 weeks)
A) Windows1) Command-Line Interface2) Windows Registry3) Windows Boot Process4) Forensically Relevant Registry Keys5) Windows Resource Protection6) Processes7) NTFS File System8) Auditing9) Windows Networking10) Windows Forensics11) Active DirectoryB) Unix1) Shells and Scripting2) Boot Process3) Processes, File Systems, Logging4) Networking and Redirection5) Survey Analysis and Risk AssessmentC) Networking1) LAN Communications2) Inter-Network Communications3) Transport and Helper Protocols4) Services and Network Discovery5) Filtering Devices6) File Transfer, Tunneling, and Redirection7) SSH Forward Tunnels8) SSH Reverse Tunnels9) Exploits through TunnelsD) Security Concepts: Exploit Meth. & Hacker Mindset1) Exploitation Methodology2) Threats3) Access Methods4) Risk Analysis5) Understanding the Mindset
Capstone(3 weeks)
*Under Development
• Concept: Cyber Knight meets Cyber Ranger School
• OCO vs. DCO scenarios, including team leadership, cyber planning, and operator and analyst missions
CPT Methodologies(1-2 weeks)
*Air Force developing
Common core, tool agnostic methodologies for CPT squads:
• Mission Protection• Discovery/Counter-Infiltration• Cyber Threat Emulation• Cyber Readiness• Cyber Support
OCO/Analyst Course(2-4 weeks)
*Under Development
Proposed CBTs (Pre-reqs):• CYEC1200 – Basic Adversary
Tactics• CYEC1250 – Basic Cyber
Adversary Awareness• CYEC2150 – CNO at NSA• NETA1021 – Internet
Technologies• NETA2002 – Orientation to
Applied Digital Network Analysis• RPTG1012 – Basics of SIGINT
Dissemination• TOOL2201 – Intro to PINWALE
Proposed Resident Lessons:• CRSK1000 – Intro to SIGINT
Development• CYEC2200 – Advanced
Adversary Tactics• NETA1030 – DNI Gateway• NETA2030 – Basic Metadata
Queries
UNCLASSIFIED
UNCLASSIFIED
17C Selection and Training
FY 15 OCT NOV DEC JAN FEB MAR APR MAY JUN JUL AUG SEP
FY 16 OCT NOV DEC JAN FEB MAR APR MAY JUN JUL AUG SEP
FY 17 OCT NOV DEC JAN FEB MAR APR MAY JUN JUL AUG SEP
17C NOFC 17C MILPER
HRC PCS WINDOW 17C Phase 1 JCAC Corry Station, FL (16)
HRC PCS WINDOW
HRC PCS WINDOW
HRC PCS WINDOW
17C Phase 1 JCAC Corry Station, FL (16)
17C Phase 1 JCAC Corry Station, FL (16)
17C Phase 1 JCAC Corry Station, FL (16)
17C Phase 2 FT Gordon (16)
PCS to Unit
PCS
17C Packet Review HRC
17C Phase 1 JCAC Corry Station, FL (16)
17C Phase 1 JCAC Corry Station, FL
17C Packet Review HRC
17C Packet Review HRC
17C Packet Review HRC
HRC PCS WINDOW
HRC PCS WINDOW
17C Phase 1 JCAC Corry Station, FL
PCS to Unit
PCS to Unit
PCS to Unit
17C Phase 1 PCS to Unit
PCS to Unit
17C Phase 2 is not conducted until Mid Feb 2017 due to
inadequate SCIF Space and course development
PCS
Graduates of Classes 1 thru 5 given will conduct pipeline
training IAW Bridging Strategy
17C Packet Review HRC
17C Packet Review HRC
UNCLASSIFIED
UNCLASSIFIED22
17C Selection Timeline
• NOFC Published 11 MAY 2015
• MILPER 15-164 Published on 2 June 2015• Packets accepted starting 1 June 2015
• Packet Screening and Approval Windows for FY16 Training seats– FY16 Packets Accepted: Jun 2105 – Aug 2015– FY16 Packet Screening Panel: Sep 2015
• Soldier Notified and Slotted for training in ATRRS – Notification Window: 15-30 Sep 2015– First FY16 Class for reclassification Soldiers Starts Mar 2016
• Soldier will report to Corey Station (PH1) and Fort Gordon (PH2) on 10th of month prior to class start date.
• Course is PCS move only. (BAH PME waiver authorized)
• All Reclassification Soldiers must live off post. No Barracks avail/auth
UNCLASSIFIED
UNCLASSIFIED23
Questions ?