Cyber Security Initiative

This activity detects, identifies, neutralizes, and mitigates malicious activities directed by foreign entities that target MDA cyber assets. The following actions are required on a continuing basis to accomplish the DoD CI in Cyberspace Initiative: - Collaborate with the MDA Computer Emergency Response Team to detect, neutralize, and mitigate potential foreign entity directed malicious and insider threat activities targeting MDA administrative and fire control networks, and mobility devices. - Conduct CI Incident Assessment of potential foreign entity directed malicious or insider threat activities and refer suspected incidents or events to the Federal Bureau of Investigation or military department CI organizations for further investigation. - Conduct CI forensics analysis of MDA computer network activity logs to identify potential indicators of malicious activities from foreign entities, insider threats, and computer network attacks or exploitations. - Coordinate with national and DoD level intelligence, CI and law enforcement agencies to identify foreign entity cyber actor intrusion sets and the tactics, techniques and procedures used to target MDA and its Cleared Defense Contractor computer networks. - Coordinate with MDA cleared defense contractors that have been compromised by foreign intelligence entities to capture and triage exfiltrated MDA related data, allowing MDA engineering teams to perform proper damage assessments. - Provide required initial and periodic training to ensure the MDA workforce is kept apprised of foreign entity threats to DoD personnel, facilities, information, activities, and information technology systems. - Protect MDA Sensitive Compartmented Information Facility and Special Access Program areas from cellular/wireless device monitoring. - Provide support to the MDA Counter Insider Threat program. Specific and/or unique accomplishments to each FY are as follows: