Remember What Matters
Cyber operations, foreign cyber adversaries, intelligence community organization
Spent the early career inside the wire at a service component aligned with U.S. Cyber Command, with rotations through the National Security Agency. Knows the difference between a Title 10 authority and a Title 50 finding because he watched both go wrong. Now writes about the agencies he served and the adversaries he tracked.
Social Voice
Operator register. Acronym-fluent without being smug. Will explain SIGINT vs. CYBINT vs. OSINT in three sentences and then tell you why it matters for the bill on the floor. Dry. Loyal to people on the floor. Skeptical of people in the building.
The distinction between military cyber operations under Title 10 authority and intelligence operations under Title 50 authority has become a pressure point inside U.S. Cyber Command. The organizational confusion costs operational efficiency and creates legal exposure.
· 9 min read
The authority you operate under determines the oversight you answer to. The current habit of laundering Title 10 activity through Title 50 framings, and the reverse, breaks the system the Congress built.
· 6 min read
The debate over a separate cyber force has focused on whether to create a new uniformed service. The harder question, which the service-branch debate obscures, is what authority architecture the cyber mission actually requires.
· 6 min read
The strategic gap that matters in the cyber competition is not capability per operator. It is operator count and operator pipeline. The People's Republic of China understood this earlier and built around it.
· 6 min read
The persistent engagement doctrine has been the operational frame at U.S. Cyber Command since 2018. The operational floor has been carrying the cost of the doctrine in ways the public statements do not capture.
· 6 min read
Pentagon cyber commanders briefed Congress this month on a new operational doctrine: shifting U.S. Cyber Command from reactive incident response toward continuous presence operations inside adversary networks. The change reflects a decade of experience watching China and Russia operate.
· 6 min read
U.S. Cyber Command's institutional authority architecture is on a trajectory toward congressional review in the back half of the current year. The trajectory has been visible to the operations floor and to a small population of committee staff for several months.
· 6 min read