This is the passive, active, and dynamic employment of capabilities to respond to imminent or on-going actions against Air Force or Air Force-protected networks, the Air Force's portion of the Global Information Grid, or expeditionary communications assigned to the Air Force. Cyberspace defense incorporates CNE, computer network defense (CND), and CNA techniques and may be a contributor to influence operations. It is highly dependent upon ISR, fused all-source intelligence, automated indications and warning, sophisticated attribution/characterization, situational awareness, assessment, and responsive C2.

Who responds with the employment of capabilities where there is a threat?