The US Military’s Cyberwarfare Challenge

National Interest | Mark Montgomery and Matthew Ferren

US Cyber Command combined non-kinetic space and digital effects to disrupt Iranian communications during Operation Epic Fury, following offensive cyber operations supporting Venezuelan actions against Nicolas Maduro. Despite these limited successes against secondary regional adversaries, integrating offensive cyber into joint theater planning remains severely hindered by execution uncertainty, restricted intelligence visibility, and operational friendly-fire risks across conventional domains.

The Pentagon faces deep structural friction because cyber force generation relies on five distinct military services, leaving critical billets unfilled across 150 Cyber Mission Force teams comprising 6,200 personnel. Strategic integration is broken. Forward tactical formations like the Army’s 11th Cyber Battalion remain severely constrained by slow, centralized authorization chains at Fort Meade. Preparing for high-intensity peer conflict against China’s People’s Liberation Army requires transitioning from static pre-positioned network access to rapid dynamic capability regeneration, embedding permanent close-access teams, and unifying operational command under a dedicated Joint Task Force-Cyber construct.

Comment

Centralised delegation of authority under NSPM-13 creates an operational bottleneck that separates strategic cyber effects from tactical combat decision-making. While Fort Meade maintains strict administrative oversight over high-tier digital payloads, theater commanders at USINDOPACOM lack direct command over organic cyber assets during real-time engagements. This command fracture prevents agile synchronization between non-kinetic fires and conventional maneuver units.

The operational friction stems from conflicting organizational authorities between functional combatant commands and service components. Under current authorities, expeditionary units like the Army’s 11th Cyber Battalion must route targeting requests back through national-level Cyber National Mission Force channels for clearance. This multi-tiered clearance chain adds critical operational latency to dynamic targeting cycles managed by USINDOPACOM non-kinetic effects cells.

Strategic Question for Discussion

If authorization authorities under NSPM-13 remain centralized at Fort Meade, how effectively can forward elements like the Army’s 11th Cyber Battalion synchronize non-kinetic effects during fast-moving maritime contingencies in the Indo-Pacific?

Centralized release authority under NSPM-13 creates an irreconcilable timing mismatch with high-tempo tactical engagements. The structural requirement to route close-access cyber operations back to national authorities inherently introduces delays that exceed the target-perishability window of forward maneuver units. Unless delegation mechanisms evolve, forward cyber teams will remain limited to passive intelligence gathering rather than active strike enablers.

Share your assessment in the comments below.

To read in details click here