Skip to content

1.07-Integrate Additional Support

Integrate Additional Support Task

Conditions

  • Given a mission to deploy a IR Team in support of Guardnet, State IT systems, or other organization as directedby the Governor
  • Response effort if localized and a Type I / II Federal Disaster Response has not been declared
  • IR Team unable to complete mission requirements due to scope of work and additional support is requested
  • Incident scope increased to Type I / II Federal Disaster Response and additional forces are necessary

Standards

  • Coordinate with JAG / Cyber Legal personnel regarding inclusion of T10 forces in mission operations.
  • In coordination with JAG / Cyber Legal personnel, The Adjutant General (TAG) determines whether or not aDual Status Commander is necessary.
  • If needed, Dual Status Commander and supporting staff begins operations.
  • Upon T10 (USAR or Active Duty) forces arrival, IR Team informs their State Joint Operations Center.
  • Coordinate with JAG / Cyber Legal personnel regarding necessary MOUs and NDAs and appropriate scope forT10 forces.
  • Coordinate with JAG / Cyber Legal personnel to review the Rules for Use of Cyber and any changes neededfor inclusion of T10 forces.
  • Work with T10 forces leadership to establish mutually agreeable Battle Rhythm and integration into ongoingoperations
  • Coordinate with JAG / Cyber Legal personnel immediately should any Soldier become involved in actual orperceived illegal activities

End State

IR Team successfully integrates support from T10 forces in to Cyber mission operations.

Notes

The scope of this Task will vary by state

Manual Steps

Running Script

Dependencies

Other available tools

References

NIST Cyber Security Framework
NIST SP 800-61r2: Computer Security Incident Handling Guide

Revision History