Defensive CYBER Operations

The Defensive CYBER Operations (DCO) Army program, detailed in Line Item 0128B63000, is a critical component of the Army's efforts to secure and defend its information networks and infrastructure. The primary objective of this program is to provide the Army with robust defensive cyber capabilities that enable commanders to deter, disrupt, and defeat adversary offensive cyber operations. The DCO program supports a range of Army organizations, including the Army Cyber Command (ARCYBER), Information Warfare Operations Center (IWOC), five Regional Cyber Centers (RCCs), the Cyber Warfare Battalion (CWB), the Multi-Domain Task Force (MDTF), and Cyber Protection Teams (CPTs) within Army Components 2 and 3.

The DCO program is managed by the Program Executive Office for Enterprise Information Systems (PEO EIS) and is structured around three primary platforms or levels. The first is the DCO Garrison DCO Platform, which provides base-level defensive cyber capabilities to protect Army installations and networks from cyber threats. This platform focuses on securing fixed infrastructure and supporting day-to-day operations at Army bases, ensuring that critical assets and information remain protected against a wide range of cyber attacks.

The second major component is the DCO Deployable Defensive Systems, which are designed to provide tactical and command post-level cyber defense. These systems are mobile and can be deployed alongside operational units to protect command and control nodes, communications, and mission-critical systems during field operations. The goal is to ensure that Army units retain secure and reliable communications and data integrity even in contested or hostile cyber environments.

The third element is the DCO Development Environment, also managed by PEO EIS, which serves as an armory for developing, testing, and refining new defensive cyber tools and techniques. This environment supports rapid prototyping and integration of emerging technologies, enabling the Army to adapt quickly to evolving cyber threats and maintain a technological edge over adversaries.

The overarching goals of the DCO program are to gain time and economy of force in the cyber domain, control key terrain in cyberspace, protect critical assets and infrastructure, and develop actionable intelligence to inform operations. By investing in these capabilities, the Army aims to ensure mission assurance and operational continuity in the face of increasingly sophisticated cyber threats. The program also seeks to enhance the Army's ability to conduct defensive cyber maneuvers, respond to incidents, and support broader Department of Defense (DoD) information security objectives.

For FY 2026, there is no new funding requested for Line Item B63000, as indicated in the budget justification. In FY 2025, funds were realigned from this line item to support the development of defensive cyber software prototypes under a different budget activity. This realignment reflects the Army's ongoing efforts to optimize resources and prioritize the development of advanced cyber defense tools.