CHIEFS OF STAFF
MANUAL
DISTRIBUTION: A, B, C, JEL, S
CYBER INCIDENT HANDLING PROGRAM
References: See Enclosure H.
1. Purpose. This manual describes the Department of Defense (DoD) Cyber
Incident Handling Program and specifies its major processes, implementation
requirements, and related U.S. government interactions.
2. Cancellation. CJCSM 6510.01A, 24 June 2009, “Information Assurance (IA)
and Computer Network Defense (CND) Volume I (Incident Handling Program),”
is canceled.
3. Applicability. This manual applies to the Joint Staff and to Combatant
Commands, Services, Defense agencies, DoD field activities, and joint and
combatant activities (hereafter referred to as CC/S/A/FAs).
4. Procedures. See Enclosures A through G.
5. Summary of Changes
a. Updates manual to include the new mission, processes, and procedures
of U.S. Cyber Command (USCYBERCOM), the subunified command of U.S.
Strategic Command (USSTRATCOM).
b. Updates manual based on Unified Command Plan (UCP) Change 1,
12 September 2011.
6. Releasability. This manual is approved for public release; distribution is
unlimited. DoD components (to include the Combatant Commands), other
federal agencies, and the public may obtain copies of this manual through the
Internet from the CJCS Directives Home Page--
http://www.dtic.mil/cjcs_directives.
Directive Current as of 18 December 2014