text: Appendix E
  DEFENSIVE CYBERSPACE OPERATIONS-RESPONSE ACTIONS SUPPORT
  E-14. CNMFs, consisting of national mission teams and NSTs assigned to CNMF-HQ, conduct DCO-RA
  missions upon requests from CPTs (at any echelon) when a more progressive defensive approach goes outside
  of the DODIN and into neutral and enemy cyberspace. DCO-RA may rise to the level of force resulting in
  physical damage or destruction of enemy systems depending on the broader operational context. DCO-RA
  tactics have many similarities to OCO, requiring coordinated military orders and careful consideration of
  scope, rules of engagement, and measurable objectives. For these reasons, CNMF-HQ must attain validation
  and authorization from USCYBERCOM to conduct DCO-RA missions. Figure E-3, below, illustrates the
  routing process for requesting DCO-IDM support for non-DODIN friendly cyberspace and DCO-RA
  support.
  Figure E-3. Routing process for defensive cyberspace operations-internal defensive measures
  (non-Department of Defense information network) and defensive cyberspace operations-
  response actions support