text: Cyberspace Operations and Electromagnetic Warfare Fundamentals
  JOINT FORCE AND ARMY
  2-3. The joint force and the Army divide cyberspace operations into three categories based on the portion
  of cyberspace in which the operations take place and the type of cyberspace forces that conduct those
  operations. Each of type of cyberspace operation has varying associated authorities, approval levels, and
  coordination considerations. An Army taxonomy of cyberspace operations is depicted in figure 2-1, below.
  The three types of cyberspace operations are—
  * DODIN operations (refer to ATP 6-02.71).
  * DCO.
  * OCO.
  2-4. The Army conducts DODIN operations on internal Army and DOD networks and systems using
  primarily signal forces. The Army employs cyberspace forces to conduct DCO which includes two further
  sub-divisions—DCO-IDM and defensive cyberspace operations-response actions (DCO-RA). Cyberspace
  forces conduct DCO-IDM within the DODIN boundary, or on other friendly networks when authorized, in
  order to defend those networks from imminent or ongoing attacks. At times cyberspace forces may also take
  action against threat cyberspace actors in neutral or adversary networks in defense of the DODIN or friendly
  networks. These types of actions, called DCO-RA, require additional authorities and coordination measures.
  Lastly, cyberspace forces deliberately target threat capabilities in neutral, adversary, and enemy-held portions
  of cyberspace by conducting OCO. Cyberspace forces may include joint forces from the DOD cyber mission
  forces or Army-retained cyberspace forces. See Chapter 3 of this publication for more details on cyberspace
  forces.
  Figure 2-1. Cyberspace operations taxonomy