BY ORDER OF THE SECRETARY
OF THE AIR FORCE
AIR FORCE INSTRUCTION 17-203
16 MARCH 2017
Operations
CYBER INCIDENT HANDLING
COMPLIANCE WITH THIS PUBLICATION IS MANDATORY
ACCESSIBILITY: Publications and forms are available for downloading or ordering on the
e-Publishing website at www.e-Publishing.af.mil
RELEASABILITY: There are no releasability restrictions on this publication
OPR: SAF/CIO A3CW
Certified by: SAF/CIO A3C/A6C
(Brig Gen Kevin B. Kennedy)
Pages: 28
This instruction implements Air Force Policy Directive (AFPD) 17-2, Cyberspace Operations. It
describes and provides broad guidance for implementing the Air Force (AF) and Department of
Defense (DoD) Cyber Incident Handling Program, the major processes that take place within that
program, and the interactions with related U.S. government Defensive Cyberspace Operations
(DCO) and DoD Information Networks (DoDIN) Operations activities. It applies to all military
and civilian AF personnel, members of the AF Reserve, Air National Guard, DoD contractors,
and individuals or activities under legal agreements or obligations with the Department of the
AF. Refer recommended changes and questions about this publication to the Office of Primary
Responsibility (OPR) using the AF Form 847, Recommendation for Change of Publication; route
AF Form 847s from the field through Major Command (MAJCOM) publications/forms
managers to HQ USAF/A6S. The authorities to waive wing/unit level requirements in this
publication are identified with a Tier (“T-0, T-1, T-2, T-3”) number following the compliance
statement. See AFI 33-360, Publications and Forms Management, Table 1.1 for a description of
the authorities associated with the Tier numbers. Submit requests for waivers as directed in the
appropriate paragraphs of this Instruction. Ensure that all records created as a result of processes
prescribed in this publication are maintained in accordance with AF Manual (AFMAN) 33-363,
Management of Records, and disposed of in accordance with the Air Force Records Disposition
Schedule (RDS) located in the AF Records Information Management System (AFRIMS).
