text: Chapter 1
  INTELLIGENCE
  1-57. Cyberspace operations, EW, and intelligence mutually identify the cyberspace and EMS aspects of the
  OE to provide recommendations for friendly courses of action during the military decision-making process.
  Cyberspace and EW forces support information collection that may be used by intelligence professionals.
  Conversely, intelligence operations provide products that enhance understanding of the OE, enable targeting,
  and support defense in cyberspace and the EMS. It is critical that information acquired through cyberspace
  operations and EW is standardized and reported to the intelligence community.
  1-58. Intelligence supports cyberspace operations through the intelligence process, intelligence preparation
  of the battlefield (IPB), and information collection. Intelligence at all echelons supports cyberspace operations
  and EW planning, and helps measure performance and effectiveness through battle damage assessment.
  Cyberspace planners leverage intelligence analysis, reporting, and production capabilities to understand the
  OE, develop plans and targets, and support operations throughout the operations process. In the context of
  cyberspace and the EMS, the OE includes network topology overlays that graphically depict how information
  flows and resides within the operational area and how the network transports data in and out of the area of
  interest.
  INTELLIGENCE PREPARATION OF THE BATTLEFIELD
  1-59. During IPB, the staff considers how the adversary or enemy utilizes cyberspace and the EMS to achieve
  their objectives. Intelligence and CEMA staff also consider state and non-state actors with capability, access,
  and intent to affect friendly operations as they define and analyze the area of interest.
  1-60. Intelligence analysts, with support from other staff elements, evaluate enemy and adversary use of
  cyberspace and the EMS. This includes evaluating aspects such as—
  * Adversary or enemy use of cyberspace and the EMS.
  * Reliance on networked capabilities.
  * Sophistication of cyberspace attack capabilities.
  * Adversary cyberspace defense capabilities.
  * Adversary EW capabilities.
  * Network vulnerabilities (both adversary and friendly).
  * Ability to synchronize cyberspace operations with other operations.
  * Adversary use of social media for social engineering.
  1-61. When assessing the enemy or adversary courses of action, the intelligence staff considers how the
  enemy or adversary will include cyberspace and the EMS in its operations. The commander and staff should
  consider threat courses of action in cyberspace and the EMS when planning friendly operations. (See ATP 2-
  01.3 for more information about IPB).
  1-62. Weather (terrestrial and space) also affects operations in cyberspace and the EMS. In assessing weather
  effects, the staff considers key terrain in cyberspace and the EMS in relation to other aspects of the area of
  interest and the area of operations.
  ELECTROMAGNETIC SUPPORT AND SIGNALS INTELLIGENCE
  1-63. ES and signals intelligence (SIGINT) are similar in function, but SIGINT requires separate authorities.
  EW personnel conduct ES to acquire information in support of a commander’s maneuver plan. No requirement
  or restriction exists for EW personnel to have SIGINT authorities to conduct these activities.
  1-64. EW and SIGINT personnel both identify emitters in the EMS and may cue each other for targeting,
  but have distinct mission responsibilities. EW personnel characterize and identify emitters by analyzing
  external signals for immediate threat recognition and warning, force protection, and targeting. ES provides
  combat information that has a limited time value to support operations. ES information may be passed to
  intelligence units or staff for further SIGINT analysis depending on situation and authorities. SIGINT personnel
  analyze internal signal parameters to produce and disseminate intelligence, which requires SIGINT authorities.