text: Chapter 2
  DODIN operations centers to enable shared situational understanding. The regional cyber centers perform
  the same functions in all theaters.
  2-147. The regional cyber centers’ operational areas and core missions align with the theater and field army
  commanders’ operational areas:
  * United States Army Regional Cyber Center-CONUS (continental United States and South).
  * United States Army Regional Cyber Center-Europe (Europe and Africa).
  * United States Army Regional Cyber Center-Korea.
  * United States Army Regional Cyber Center-Pacific.
  * United States Army Regional Cyber Center-Southwest Asia.
  2-148. The regional cyber center performs or coordinates DODIN operations tasks that span the theater or
  multiple theaters. Centralizing high-level tasks provides consistent service among regions by performing the
  operational function at the only location with visibility or awareness of multiple regions.
  2-149. The regional cyber center is under operational control of the Army Cyber Operations and Integration
  Center directs for DODIN operations, defensive cyberspace operations-internal defensive measures, network
  vulnerability assessment, and incident management within the theater. The regional cyber center collaborates
  with the Army Cyber Operations and Integration Center to—
  * Coordinate threat assessments and support to multi-agency vulnerability assessments with the
  supporting counterintelligence element.
  * Develop countermeasures and defensive cyberspace operations strategies.
  * Conduct attack signature sensing and warning analysis.
  * Develop mitigation strategies to support network defense and prevent data loss, including spillage.
  Spillage is a security incident that results in the transfer of classified information onto an
  information system not authorized to store or process that information (CNSSI 4009). An example
  of spillage is SECRET data on NIPRNET.
  * Conduct the computer defense assistance program to support commanders in theater. The
  computer defense assistance program includes penetration testing, network assistance visits, and
  network damage assessments.
  Tactical Actions Center
  2-150. The NETCOM tactical actions center provides enterprise network engineering, planning, operations,
  and cybersecurity support within a theater of operations that has no assigned SC(T). The tactical actions
  center provides strategic and tactical planning, operations, and cybersecurity support to meet inter-theater
  communications requirements. The tactical actions center is the in-theater lead for planning, engineering, and
  executing NETCOM projects and operations.
  Strategic Signal Brigade
  2-151. Strategic signal brigades provide operational and strategic support area signal support to serve
  warfighters in a theater of operations. This support includes long-haul transport, communications
  infrastructure, automation, and network management. The strategic signal brigade provides—
  * Operational direction through technical channels to the network enterprise center in provisioning
  services.
  * Access to the DODIN-A for fixed station Army assets within its theater.
  * Gateway access to the DODIN-A for expeditionary Army units.
  * Advice to commanders, staff, and users on the capabilities, limitations, and employment of
  communications, network, and automated information system assets.
  * Advice to supported commanders and staff on information management, automation policy,
  technical matters, and system performance.
  * Input to all-source intelligence assessments and estimates concerning the DODIN-A at the
  operational and strategic levels.