text: Appendix E
  JFHQ-DODIN through the USCYBERCOM portal. The cyberspace operations-integrated planning element
  provides situational awareness of all DCO-IDM missions conducted in the AOR to USCYBERCOM.
  Note. When a cybersecurity service provider becomes aware of a threat on the DODIN, it forwards
  the information to JFHQ-DODIN. The JFHQ-DODIN uses the notice from the cybersecurity
  service provider to begin the process of employing a CPT (either DODIN or Service) before
  receiving the RFS through the routing channels. However, the requesting unit is still responsible
  for both initiating the RFS process and informing a cybersecurity service provider.
  E-11. JFHQ-DODIN has directive authority for cyberspace operations to conduct DCO-IDM globally on the
  DODIN. JFHQ-DODIN provides situational awareness to USCYBERCOM regarding all DCO-IDM
  missions. JFHQ-DODIN also have tactical control of all Service cyberspace component commands for
  DODIN operations and DCO-IDM only. JFHQ-DODIN has DODIN CPTs that conduct DCO-IDM;
  however, their primary focus is generally on monitoring and implementing proactive DCO-IDM to mitigate
  cyberspace threats on the DODIN globally.
  Note. Initiating DCO-IDM to respond to a cyberspace threat proactively uses a top-down
  approach. Proactive DCO-IDM occurs when JFHQ-DODIN identifies a cyberspace threat on the
  DODIN, before receiving an RFS or being informed by a cybersecurity service provider, and
  proactively deploy a CPT (either DODIN or Service) to mitigate the cyberspace threat.
  E-12. If the DODIN CPTs are unavailable to satisfy the RFS, JFHQ-DODIN oversees a joint approval
  process to task one of the Service cyberspace component commands to provide a Service CPT to conduct
  DCO-IDM in support of the unit’s request. The assigned CPT may perform DCO-IDM remotely or collocate
  with the JTF headquarters or requesting unit. When collocated with the unit, the CPT is still under the
  command of its organic unit. Figure E-2, page E-5, illustrates the routing process for requesting DCO-IDM
  support for corps and below.