Cybercom's Move Toward Persistent Engagement Has A Cost Nobody Has Calculated

The Doctrine As Stated

U.S. Cyber Command's persistent engagement doctrine, articulated in the 2018 command vision and reinforced in the subsequent Department of Defense Cyber Strategy publications, holds that the United States must operate continuously in cyberspace, below the threshold of armed conflict, to deny adversaries the freedom of action they would otherwise exploit. The doctrine is, in plain reading, a reasonable response to a strategic environment in which the adversary does not respect a passive defensive posture. The doctrine has had effects that the workforce that executes it understands better than the leadership that articulated it.

The doctrine requires the workforce to maintain operational tempo continuously rather than episodically. The continuous tempo, sustained across eight years now, has produced a workforce condition that the formal readiness reporting does not fully capture. Inside the wire, the operators are running operations at a rate that the institution's manpower planning assumed would be episodic. The institution has not, in the corresponding eight years, materially adjusted the manpower planning. The gap between the operational tempo and the manpower planning is the gap the workforce is absorbing.

What The Gap Looks Like In Practice

What the gap looks like in practice, on the operations floor, is the standard set of indicators that any high-tempo military organization produces under sustained load. Retention of journeyman operators is lower than the institution's stated targets. Time to certify a new operator to full mission capability is longer than the institution's documented schedule. The rotation rhythm that the workforce is supposed to follow, intended to balance operations with training and personal recovery, has been compressed in ways that the official personnel system does not reflect because the official personnel system runs on a different calendar than the operations floor runs on.

For the record, the workforce is not collapsing. The workforce is performing. The workforce is performing at a price that is being deferred, the way deferred maintenance on any complex system is deferred. Deferred maintenance is the kind of cost that does not show up in the quarterly readiness report. Deferred maintenance shows up later, in the form of capability gaps that emerge after the workforce has absorbed enough load that the absorption stops being sustainable.

The Leadership Posture

The leadership posture, at the headquarters level, has been a posture of acknowledging the doctrine's workforce implications in the abstract while declining to translate the acknowledgment into the structural changes the workforce would require to maintain the tempo without continued degradation. The structural changes would include real growth in the cyber mission force end strength, real changes in the rotation rhythm that the personnel system enforces, and real investment in the training pipeline at the front end of the force-generation process.

None of these changes is impossible. Each requires the kind of sustained budget and policy attention that the Department of Defense has not consistently delivered for the cyber workforce across the trailing decade. The budget cycle produces incremental gains. The doctrine demands continuous operations. The arithmetic of incremental gains against continuous operations is the arithmetic that produces the workforce condition the operations floor is currently in.

What The Floor Is Saying

The cyber operators I trust on this subject have, in conversations across the last two years, all said versions of the same thing. The operators are committed to the doctrine. The operators are not committed to the institution as it currently configures itself to support the doctrine. The distinction matters. The institution can lose a workforce that remains committed to the doctrine but loses faith in the institution's commitment to the workforce. The loss happens slowly until it happens quickly.

The mid-career operators are the population the institution should be most concerned about. The mid-career population is the population whose departure decisions, made at the eight to twelve year mark, determine the senior journeyman and master sergeant bench five and ten years out. The departure decisions in the current cycle are running, by the working-level reporting at the units that track these numbers, at materially higher rates than the institution's projection assumed. The projection has not been adjusted publicly. The projection is wrong.

The Authority Question

The authority question is connected to the workforce question more directly than the commentariat acknowledges. Operators executing under Title 10 authority on persistent engagement missions carry oversight burdens that materially exceed the corresponding burdens on operators executing under Title 50 authority in the intelligence community equivalent roles. The authority answers the question before the politics does. The authority also answers the workforce posture question, because the workforce that bears the heavier oversight burden also bears the heavier non-operational time cost, and the operator who looks at the comparison eventually adjusts the operator's own career calculus.

The fix is not to lighten the Title 10 oversight. The Title 10 oversight is the architecture that lets the country conduct military operations in cyberspace under appropriate accountability. The fix is to right-size the workforce to the oversight burden, which is the workforce conversation the institution has been deferring. The deferral is not free. The deferral has a price. The workforce is currently paying the price.

What I Would Tell A New Operator

What I would tell a new operator arriving at Cybercom is what the older operators told me. The work is real. The mission is real. The institution is human, with the strengths and the weaknesses that human institutions have. Find the mentors who have seen the tempo and have learned to manage their own load. Find the leaders who treat the workforce as the resource that produces the capability, rather than as the cost center that the budget shop has to manage. Learn the authority architecture early. Take the writing of the lawyer seriously. Do not assume that the headquarters fully understands what the operations floor is carrying.

The capability has been there. The will to fund the capability at the level the doctrine requires has been the variable. The next budget cycle will tell us whether the variable is moving. The workforce will tell us, by its retention pattern, whether the institution has earned another quarter of the workforce's patience. In the after-action, the patience has limits. Inside the wire, those limits are getting closer.