DEPUTY SECRETARY OF DEFENSE
1010 DEFENSE PENTAGON
WASHINGTON, DC 20301-1010
June 21, 2017
Incorporating Change 2, June 6, 2019
MEMORANDUM FOR: SEE DISTRIBUTION
SUBJECT: Directive-Type Memorandum (DTM) 17-007 – “Interim Policy and Guidance for
Defense Support to Cyber Incident Response”
References: See Attachment 1.
Purpose. This DTM:
• Provides supplementary policy guidance, assigns responsibilities, and details
procedures for providing Defense Support to Cyber Incident Response
(DSCIR).
• Is effective June 21, 2017. This DTM will expire June 21, 2020 and will be
converted to a new issuance in accordance with DoD Instruction (DoDI)
5025.01.
Applicability. This DTM:
• Applies to OSD, the Military Departments, the Office of the Chairman of the
Joint Chiefs of Staff and the Joint Staff, the Combatant Commands, the Office
of the Inspector General of the Department of Defense, the Defense Agencies,
the DoD Field Activities, and all other organizational entities within DoD
(referred to collectively in this DTM as the “DoD Components”).
• Applies to the Army National Guard and the Air National Guard (referred to
collectively in this DTM as the “National Guard”) personnel when under
federal command and control. Also applies to National Guard personnel
when:
o The Secretary of Defense determines that it is appropriate to employ
National Guard personnel in Title 32, United States Code (U.S.C.), status
to fulfill a request for defense support of civil authorities.
o The Secretary of Defense requests the concurrence of the governors of the
affected States.
o Those governors concur in the employment of National Guard personnel
in such a status.
• In addition to the “does not apply” provisions in Section 2.d. of DoD
Directive (DoDD) 3025.18, this DTM does not apply to: