text: National, Department of Defense, Army Reserve, and Joint Cyberspace and Electromagnetic Warfare
  Organizations
  Cyber National Mission Force
  D-28. The CNMF conducts DCO against cyberspace threats based on USCYBERCOM and national
  priorities. The CNMF may conduct DCO within the DODIN or, when authorized, outside of the DODIN in
  friendly cyberspace. When authorized and directed the CNMF conducts DCO-RA in neutral and enemy
  cyberspace. The CNMF consists of national mission teams, national support team(s), and national CPTs.
  D-29. National mission teams are tactical teams that conduct DCO-RA. NSTs support national mission teams
  with intelligence analysis, cyberspace capability development, linguist support, and planning. National CPTs
  conduct national-level DCO-IDM that can extend to defend non-DOD mission partners or critical
  infrastructure networks when ordered by the Secretary of Defense. The CNMF is assigned to and directed by
  the CNMF-HQ. Table D-1, below, outlines the interrelationship between cyber mission force elements,
  associated cyberspace operations and actions, and typical operating locations in friendly, neutral, and enemy
  cyberspace.
  Table D-1. Elements of the cyber mission force and their associated teams
  Type of Cyberspace Cyberspace Force Location in Type of Cyberspace
  Operation Conducting the Cyberspace Actions
  Operation
  DODIN Ops Service retained cyber The DODIN Cyberspace security
  mission forces
  OCO Cyber combat mission Neutral and adversary Cyberspace attack and
  force consisting of cyberspace exploitation
  combat mission teams
  supported by combat
  support teams
  DCO-IDM (DODIN) Cyber protection force Friendly cyberspace Cyberspace defense
  consisting of Service,
  DODIN, and CCMD
  CPTs
  DCO-IDM (non-DODIN) Cyber protection force Non-DODIN friendly Cyberspace defense
  consisting of national cyberspace
  CPTs
  DCO-RA CNMF consisting of Neutral and adversary Cyberspace attack and
  NMTs supported by cyberspace exploitation
  national support teams
  Legend
  CCMD combatant command DODIN Department of Defense information
  CNMF cyber national mission force network
  CPT cyber protection team DODIN Ops Department of Defense information
  DCO-IDM defensive cyberspace operations-internal network operations
  defense measures NMT national mission team
  DCO-RA defensive cyberspace operations-response OCO offensive cyberspace operations
  actions
  UNITED STATES CYBER COMMAND SUBORDINATE ELEMENTS
  D-30. Figure D-1 on page D-6, illustrates the allocation of teams from the cyber mission force to
  USCYBERCOM’s subordinate elements and combatant commands. USCYBERCOM subordinate elements
  are —
  * CNMF-HQ.
  * JFHQ-DODIN.
  * JFHQ-C (total of four).
  * Service cyberspace component commands.