Cyber Command has issued enhanced encryption keys to all users. All activities on military networks have now become more secure.

Enhanced Encryption Keys

A new security patch has instantly fixed several vulnerabilities in your network.

Security Update

A comprehensive threat intelligence report has been circulated, giving your team insights to better defend military networks.

Threat Intelligence Report

A simulated "red team" cyberattack exercise has uncovered a few weaknesses in your systems. Your team has easily corrected them.

Red Team Exercise

All service members with access to your networks have completed an exhaustive training program about cybersecurity best practices.

Security Awareness Campaign

You have been put in command of a new cyber unit that specializes in responding to and mitigating security incidents.

Security Incident Response Team (SIRT)

A military research grant has led to innovative cybersecurity advancements that are ready be implemented.

New Research

Leadership has shifted additional funds to your project to ensure its success.

Additional Funding

Members of your team have just completed multiple security certifications, increasing their technical expertise to handle cyber incidents.

Security Certifications

A team of cyberspecialists have completed their operation ahead of schedule. They are now available to assist you.

Specialists Available

An allied nation has just informed you of a vulnerability they've discovered and the steps needed to patch it.

Allied Support

A software vendor has released a patch that fixes known user experience issues. This will improve your team's efficiency.

Vendor Patch

Intelligence has uncovered an imminent cyberattack and also recommended a way to defend against it.

Cyberattack Tip

A parallel project came in under budget. The remaining funds have been shifted to your project.

Budget Increase

Military leadership has identified a need to expand cyber forces. Your now have another team to assist in your mission.

Expanded Cyber Forces

Your team has received additional training, increasing their ability to identify and address risks in the cyber domain.

Updated Training

Computer workstations for your team have been upgraded. This allows for more efficiency and effectiveness.

Workstation Upgrades

Cybersecurity specialists have developed new tools for your team to implement and utilize.

New Cybersecurity Tools

Cybersecurity specialists have developed new techniques for your team to implement and utilize.

New Cybersecurity Techniques

To meet the challenges of tomorrow, Congress has approved additional funding for cyberdefense.

Expanded Policy

Your team and mission have received additional funding.

Increased Funding

Cyber teams have been restructured. You are now in command of additional personnel.

Command Restructure

Additional units have been placed under your command.

Team Expansion

An ally has made their specialists available to your operations.

Ally Assistance

A partner agency with cybersecurity capabilities has identified a system vulnerability and provided a patch.

Patch From a Partner

Recent operations have denied adversaries the ability to perform certain malicious activities.

Adversary Denied

Critical infrastructure in the U.S. has been fortified to resist cyberattacks.

Infrastructure Upgrade

Partners in academia have developed new ways to fortify cybersystems that your team can employ.

Academic Research

Your team has adopted increased cybersecurity industry standards.

Industry Standards Enhancement

Ask for a delayed start.

Reassign a team to assist them immediately.

DoD IT teams have initiated a random but routine security audit of your systems. This is an important but time-consuming process.

Surprise Audit

Direct your team to remove network restrictions to give all users access.

Removing clearance-level network restrictions

Direct your team to help affected users gain access.

Helping affected users with access

Assign your team to investigate the underlying cause.

Investigating network issue

A military intelligence network has unexpectedly blocked users with certain clearance levels.

Network Issue

Direct your team to recover data and repair the troubled system.

Recovering data and repairing file server

Direct your team to purchase a new file system and rebuild it with backup data.

Setting up new file system

A crucial file server containing the personal information of service members has crashed and isn't responding.

System Failure

Direct your team to revoke network privileges for these users and retrain them.

Revoking privileges and training users

Direct your team to revoke network privileges of these users and re-train all users.

Revoking privileges and training all users

Ignore the issue.

A network notification system indicates that one or more users have violated cybersecurity protocols.

Breach of Protocol

Direct your team to closely follow their network behavior.

Following network activity for suspicious behavior

Direct your team to immediately block the user from accessing all systems and review all prior network activity.

Blocking user and reviewing past activity

Refuse to take action without more details.

Military intelligence indicates that a service member may unknowingly pose a threat to cyberdefense systems.

Insider Threat

Direct your team to immediately patch all vulnerable systems around the world — resulting in some system downtime.

Patching global systems

Direct your team to gradually patch all vulnerable systems around the world.

Gradually patching global systems

Trust your other security measures will protect your systems and take no action.

A previously unknown, critical cyber vulnerability has been discovered in software your systems use.

Zero-Day Discovery

Direct your team to disable all accounts and have users reset their credentials.

Resetting all user credentials

Reassign a team to monitor user activity for anomalous behavior.

Take all systems offline and evaluate damages.

Taking systems offline and evaluating

User login credentials to military communications networks have been compromised.

Passwords Compromised

Direct your team to administer cybersecurity refresher training to all users.

Administering cybersecurity refresher training

Purchase new filtering software to remove harmful emails in transit.

Malicious actors have launched a widespread campaign to trick system users into revealing sensitive information.

Phishing Email

Direct your team to evaluate networks, ensuring they are fortified against such attacks.

Ensuring network resistance to ransomware attacks

Assume your networks are secure, as they've never fallen victim to ransomware before.

Direct your team to create backups of all systems in case any of them become affected.

Backing up systems

Reports of a new ransomware attack are circulating throughout the cybersecurity community.

Ransomware

Direct your team to configure network settings to defend against the attack.

Reconfiguring network settings

Upgrade infrastructure with new firewall systems.

Disregard network issues as a temporary nuisance.

A botnet is attempting to disable military networks with a distributed denial-of-service (DDoS) attack.

DDoS Attack

Direct your team to inform and educate each officer about these types of attacks.

Educating leadership about risks

Reassign a team to study adversary behavior by allowing attacks to occur in a controlled way.

Direct your team to configure firewalls to block the malicious activity.

Configuring firewalls

Malicious actors have launched social engineering attacks targeting commanding officers.

Social Engineering Attack

Report the breach, then direct your team to review all network logs to determine the extent of damages.

Investigating data breach

Report the breach, then direct your team to disable everyone's accounts immediately and slowly reinstate them.

Disabling and reinstating accounts

Report the breach, then direct your team to implement new policies and issue new cybersecurity training.

Military information stored on a secured server has somehow found its way into the public.

Data Breach

Direct your team to reroute communications through less secure pathways.

Rerouting communications

Direct your team to troubleshoot affected systems.

Troubleshooting affected systems

Direct your team to replace all affected systems with new equipment.

Replacing equipment

A natural disaster has disrupted military communication infrastructure within a key region.

Disrupted Communications

Direct your team to reroute network traffic through redundant systems.

Direct your team to repair damaged network equipment and infrastructure. 

Repairing damaged equipment and infrastructure

Direct your team to use nonmilitary networks for military activity.

An industrial accident has damaged crucial military network infrastructure.

Damaged Infrastructure

Direct your team to debug and patch the issues.

Debugging and patching issues

Direct your team to switch to a different software platform.

Switching software platforms

Contract a vendor to troubleshoot the issues.

An unknown software bug has led to cybersystem issues around the world.

Disabled Networks

Investigating unauthorized access

Report the breach, then direct your team to take compromised systems offline until further notice.

Taking compromised systems offline

Report the suspected breach, then assume the network activity is just a glitch and ignore it.

Network activity logs indicate an unknown user has accessed secured servers.

Infiltrated Systems

Direct your team to block connections from all military networks.

Blocking unauthorized connections

Direct your team to preemptively fortify overall security settings across all networks.

Fortifying security of all networks

Assume your networks are secure and do nothing.

A known hacktivist is attempting to access a network of servers that contains sensitive military information.

Unauthorized Access Attempts

Reassign a team to monitor all network traffic for suspicious activity.

Direct your team to ensure all systems redundancies are prepared, should any need to be taken offline.

Ensuring redundant systems

Wish them luck; you know your systems are very secure.

A non-state actor has publicly threatened to attack your cybersystems.

Suspicious Activity

Direct your team to help your allies analyze the malware for ways to defend against it.

Analyzing malware

Rely exclusively on allies to investigate the malware and ask they report back their findings.

An allied nation has shared information about newly discovered malware that they've encountered.

Malware Discovered

Direct your team to maneuver against these threats, defeating them before any damage is done.

Maneuvering and defending

Direct your team to reactively respond to cyber incidents, should they occur.

Assume that the other agencies don't need any support, as they have their own cyber teams.

A partner agency has identified adversarial cyber plans to disrupt an upcoming national election.

Election Threat

Reassign a team to monitor all traffic for suspicious activity.

Trust your existing security measures will suffice and take no action.

Intelligence specialists have uncovered adversarial plans to commit cyber espionage against military officials.

Espionage Plans Uncovered

Direct your team to help your partners analyze the spyware for ways to defend against it.

Rely exclusively on partners to investigate the spyware and ask they report back their findings.

A partner agency has discovered a new type of spyware in the wild.

Spyware Discovered

Direct your team to evaluate and patch the vulnerability of all affected systems.

Evaluating and patching

Direct your team to take compromised systems offline until further notice.

A communications vulnerability has been discovered within connected weapons systems.

Weapon System Vulnerability

Request more information to better prepare for the project.

Requesting more info

Your commanding officer has provided you a project brief, but it is lacking some specific details.

First Mission

Protect your network