What U.S. Cyber Command Must Do

In June 2009, the Secretary of Defense announced the creation of U.S. Cyber Command USCYBERCOM, a new subunified command to be led by the director of the National Security Agency NSA. While the press colored the announcement with Big Brother undertones and hints of civil liberties surrendered, the real story lies in the intriguing legal landscape of USCYBERCOM and what it could mean for the security, efficiency, and economy of the militarys networks. The Department of Defense DOD, the largest single consumer of Federal information technology dollars, has struggled for decades to bring a singular voice and management process to its communications infrastructure. Although this is not the stated intent of the new command, USCYBERCOM must ultimately reconcile its role in information technology ownership and draw clear operational boundaries if it is to administer cyber security through unified standards and procedures. As USCYBERCOM now has its first commander and begins shaping its core functions, fundamental changes in the legal landscape must occur in parallel with the new organizational structure if the command hopes to effect a comprehensive approach to Cyberspace Operations. In short, it must go beyond cosmetic organizational change and set to work on a campaign that genuinely reduces interdepartmental friction, repairs ailing processes, and truly empowers it to meet its mission, both specified and implied.