text: Integration through the Operations Process
  TASK AND DIRECT COLLECTION
  4-44. In addition to the G-2 or S-2 using SIGINT for information collection, the G-3 or S-3 may task
  cyberspace and EW assets to support the information collection effort. In this instance, the CEMA section will
  assist the G-2 or S-2 by assigning organic EW assets while requesting additional EW and cyberspace assets as
  required. The G-2 or S-2 is responsible for maintaining the synchronization of all assets used for the information
  collection efforts.
  EXECUTE COLLECTION
  4-45. The focus when executing information collection is to collect data that answers CCIRs and IRs for
  analysis during the IPB process. This information assists in shaping the OE and attaining information on the
  enemy. Collection activities acquire information about the enemy, including their cyberspace and EMS-
  dependent capabilities and assets. Collection activities begin shortly after the receipt of the mission activities
  of the operations process and continue throughout preparation and execution activities.
  4-46. The G-2 or S-2 executes collection by conducting—
  * Intelligence operations.
  * Reconnaissance.
  * Surveillance.
  * Security operations.
  Intelligence Operations
  4-47. Intelligence operations are the tasks undertaken by military intelligence units through the intelligence
  disciplines to obtain information to satisfy validated requirements (ADP 2-0). Through intelligence operations,
  the G-2 or S-2 attains information regarding threat capabilities, activities, disposition, and characteristics.
  Intelligence operations use multiple intelligence disciplines to collect information regarding cyberspace and the
  EMS to satisfy CCIRs and IRs. However, knowledge attained from the other intelligence disciplines may also
  provide cyberspace and EMS related insight. In addition to gathering information on peer and near-peer threats
  through SIGINT, criminal intelligence collects information on cyberspace and EMS-related illegal activities
  conducted throughout the assigned AO. For more information on criminal intelligence, refer to AR 195-2.
  Reconnaissance
  4-48. Reconnaissance is a mission undertaken to obtain, by visual observation or other detection methods,
  information about the activities and resources of an enemy or adversary, or to secure data concerning the
  meteorological, hydrographic, or geographic characteristics of a particular area (JP 2-0). Reconnaissance
  produces information about the assigned AO. Through reconnaissance, the G-2 or S-2 can collect information
  regarding such mission and operational variables as terrain characteristics, enemy and friendly obstacles to
  movement, and the disposition of enemy forces and civilians. Combined employment of three methods of
  reconnaissance (dismounted, mounted, and aerial) can result in the location and type(s) of friendly, civilian,
  and threat cyberspace and EW capabilities operating in the assigned AO. Upon request, the CEMA section
  supports the G-2 or S-2’s reconnaissance efforts by employing EW assets to conduct electromagnetic
  reconnaissance to collect information in the EMS and request OCO support to conduct cyberspace exploitation
  in cyberspace.
  Surveillance
  4-49. Surveillance is the systematic observation of aerospace, cyberspace, surface, or subsurface areas,
  places, persons, or things by visual, aural, electronic, photographic, or other means (JP 3-0). Surveillance
  involves observing an area to collect information and monitoring civilians and threats in a named area of interest
  or target area of interest. Surveillance may be autonomous or part of a reconnaissance mission. Collecting
  information in cyberspace and the EMS as part of a surveillance mission is also called network surveillance.
  Network Surveillance is the observation of organizational, social, communications, cyberspace, or
  infrastructure connections and relationships (FM 2-0). Network surveillance can also include detailed