Bytes, Bombs, and Spies
By: Fsi Stanford
Tags: Fsi Features, War, Department Of Defense, Fsi Scholars, Cybersecurity

On April 15, 2010, Lieutenant General Keith Alexander appeared before the Committee on Armed Services in the United States Senate to review his nomination to become the first commander of the U.S. Cyber Command and also lead the National Security Agency (NSA).¹ During the hearing, General Alexander noted that serious challenges await: “While cyberspace is a dynamic, rapidly evolving environment, what will never change will be an unwavering dedication by both Cyber Command and the National Security Agency to the protection of civil liberties and the privacy of American citizens.”² He told the committee that there is “much uncharted territory in the world of cyber-policy, law and doctrine.”³

Four years later, on March 11, 2014, the Senate Armed Services Committee held a nomination hearing for Vice Admiral Michael S. Rogers to succeed Keith Alexander as head of the NSA and U.S. Cyber Command. In advance of the hearing he was asked about the major challenges that would confront the commander of U.S. Cyber Command. “I believe the major challenge that will confront the next Commander, U.S. Cyber Command will be dealing with the changing threat in cyberspace. Adversaries today seek persistent presences on military, government, and private networks for purposes such as exploitation and potentially disruption. We as a military and a nation are not well positioned to deal with such threats,” Rogers stated.⁴

On March 1, 2018, Lieutenant General Paul Nakasone appeared before the same committee to become the third commander of U.S. Cyber Command (and director of the NSA).⁵ Most of the questions the committee asked Nakasone were on the Cyber Command’s readiness and response to the Russian interference in the U.S. election.⁶ In line with this trend, Senator Ben Sasse asked: “In the cyber space, are our problems primarily technical, or are they primarily strategic and will?” “Senator,” General Nakasone responded, “I would offer that we have a number of different capabilities, and I don’t think that our problems are either of those. I think that what we have to do is continue to determine what is the best way forward here, what fits within our national strategy, and then act on that, Senator.”⁷

The purpose of this chapter is to assess to what degree U.S. Cyber Command now has a clear vision of the best way forward. Is cyberspace closer to being “well-charted territory” for the U.S. government? And has the United States found a (potential) way to deal with the variety of cyber threat actors that are said to (co)exist in this space?⁸ Our assessment focuses primarily on the 2018 U.S. Cyber Command vision entitled “Achieve and Maintain Cyberspace Superiority,” which lays out the potential benefits and risks of following this strategy.

Our main finding is that, with the publication of the most recent vision, U.S. Cyber Command has for the first time articulated a comprehensive strategy that is well adapted to the unique “symptoms” of cyberspace. Yet we also argue that the “medicine” the Cyber Command prescribes to effectively deal with the symptoms needs to be further scrutinized; indeed, the “side-effects” of the strategy are still ill-understood. We described multiple possible scenarios and provide several recommendations.

The remainder of this chapter proceeds as follows. We briefly discuss the history and mission of U.S. Cyber Command. Next, we introduce the 2018 vision and compare it with the 2015 vision. The following sections review how the new vision will likely be implemented within a changing institutional landscape, assess the strategy and provide a scenario-based analysis of the possible short-term and long-term strategic effects of the vision’s implementation, and list several important factors — not discussed in the scenarios — that may influence the potential course of action. The final section provides several recommendations.

History and Mission of U.S. Cyber Command

In mid-2009, Secretary of Defense Robert Gates directed the commander of U.S. Strategic Command (USSTRATCOM) to establish a subunified command, Cyber Command.⁹ According to Michael Warner, the U.S. Cyber Command historian, “the creation of USCYBERCOM marked the culmination of more than a decade’s worth of institutional change. DoD defensive and offensive capabilities were now firmly linked, and, moreover, tied closely, with the nation’s cryptologic system and premier information assurance entity, the NSA.”¹⁰ With the establishment of the new command came a new seal, which has the following code written in its inner gold ring: 9ec4c12949a4f314 74f299058ce2b22a.¹¹ The odd string is the MD5 cryptographic hash of the unit’s mission statement:¹² U.S. Cyber Command “plans, coordinates, integrates, synchronizes and conducts activities to: direct the operations and defense of specified Department of Defense information networks and; prepare to, and when directed, conduct full spectrum military cyberspace operations in order to enable actions in all domains, ensure U.S./Allied freedom of action in cyberspace and deny the same to our adversaries.”¹³

Since 2009, U.S. Cyber Command has grown significantly to execute this mission. Table 4–1 provides a brief overview of the U.S. Cyber Command’s budget, workforce, and development.

A New Vision: Persistence through Superiority

U.S. Cyber Command published its first “vision” in 2015, which recognizes that, when it comes to cyber operations, “We as Department are still in the early stages of this journey.”¹⁴ It has a strong focus on specifying U.S. Cyber Command’s role within the Department of Defense and stresses the role of partnerships and the development of capability and force.¹⁵ The document can better be described as an elaborate mission statement, rather than a strategy. Its most explicit discussion of what that entails is found at the start of the document: “Our mission in cyberspace is to provide mission assurance for the operation and defense of the Department of Defense information environment, deter or defeat strategic threats to U.S. interests and infrastructure, and support achievement of Joint Force Commander objectives.” And the ultimate goal of the Cyber Command is to protect “freedom, liberty, prosperity, intellectual property, and personal information.”¹⁶ The document does not say how it aims to “deter” or “defeat” actors in cyberspace. Similarly, it does not describe any mechanisms for protecting the essential values, or at what costs.¹⁷

The new 2018 vision, entitled “Achieve and Maintain Cyberspace Superiority,” does provide a coherent plan for directing U.S. Cyber Command’s activities in cyberspace. The document offers “a roadmap for USCYBERCOM to achieve and maintain superiority in cyberspace as we direct, synchronize, and coordinate cyberspace planning and operations to defend and advance national interests in collaboration with domestic and foreign partners.”¹⁸ Taken as a whole, the new command strategy emphasizes continual and persistent engagement against malicious cyberspace actors. One could summarize the vision using Muhammad Ali’s famous phrase: “Float like a butterfly, sting like a bee.” The U.S. Cyber Command aims to move swiftly to dodge blows of opponents, while simultaneously being attentive to and creating openings to strike.¹⁹

The emergence of this new vision recognizes that previous strategies for confronting adversaries in cyberspace have been less than successful. Table 4–2 provides a brief comparison of the main imperatives of the two visions. As the report notes:

Adversaries direct continuous operations and activities against our allies and us in campaigns short of open warfare to achieve competitive advantage and impair U.S. interests. Our adversaries have exploited the velocity and volume of data and events in cyberspace to make the domain more hostile. They have raised the stakes for our nation and allies. In order to improve security and stability, we need a new approach.²⁰

The 2015 vision observes that cyberspace is an ever-changing space of constant contact and activity.²¹ Yet, whereas in the 2015 vision it is a mere throwaway comment, this observation has become the foundation of the 2018 vision to seek superiority through persistent engagement.

Another key change in the vision is the acknowledgment that activities in cyberspace that do not rise to the level of armed conflict (as traditionally understood in international law) can nevertheless have strategically significant effects. The document notes:

The spread of technology and communications has enabled new means of influence and coercion. Adversaries continuously operate against us below the threshold of armed conflict. In this “new normal,” our adversaries are extending their influence without resorting to physical aggression. They provoke and intimidate our citizens and enterprises without fear of legal or military consequences. They understand the constraints under which the United States chooses to operate in cyberspace, including our traditionally high threshold for responseto adversary activity. They use this insight to exploit our dependencies and vulnerabilities in cyberspace and use our systems, processes, and values against us to weaken our democratic institutions and gain economic, diplomatic, and military advantages.²²

Overall, it should be noted that, in theory, a strategy of persistence could be the most defensive one. Think about how Muhammed Ali famously dodged punches from his opponents: the other guy in the ring is desperately punching, but Ali persists, wearing him out and mentally dominating his opponent. A strategy of persistence could also be the most aggressive one. Think about Ali’s practice of constantly punching his opponents, leaving them no opportunity to go on the offense — and sometimes he knocked them out.

A New Vision in a Changing Institutional Landscape

In addition to coinciding with a new administration, the new vision came into being in an evolving institutional landscape that will directly affect its implementation and further development.²³ This includes three (ongoing) institutional changes: (1) U.S. Cyber Command decoupling from Strategic Command, (2) a change of “cyber guards,” and (3) a maturing U.S. Cyber Command.

First, in August 2017, the Department of Defense (DoD) initiated the process to elevate U.S. Cyber Command to a unified combatant command,²⁴ and the official elevation of the command took place on May 4, 2018.²⁵ Proponents argue that this elevation will speed up U.S. Cyber Command’s operational approval and coordination.²⁶ The official DoD statement also said that it “will help reassure allies and partners and deter adversaries” as the elevation demonstrates increased U.S. resolve.²⁷ Alternatively, the decoupling of U.S. Cyber Command from USSTRATCOM might help to dispel the notion that adversaries should or can be deterred in cyberspace. After all, USSTRATCOM’s official role is strategic deterrence, whereas the U.S. Cyber Command vision seeks to move away from the deterrence paradigm and focus on strategic persistence to achieve superiority.²⁸

Second, U.S. Cyber Command’s elevation coincided with the confirmation of General Nakasone. It remains unclear in which direction Nakasone will steer the agency. The prepared statement of his testimony before the committee closely matched the vision’s “new thinking” on persistence, noting that “operating and aggressively defending our networks is a foundational mission . . . we need to impose costs on our adversaries to ensure mission success by persistent delivery of cyberspace effects in defense of our nation and in support of our combat forces.”²⁹ Yet his answers in the Q&A mostly reflected “old thinking” within the cyber deterrence paradigm. For example, Nakasone talked about the need to build up a diverse set of capabilities to deter cyberattacks.³⁰

Third, the vision will be implemented against the backdrop of an everexpanding U.S. Cyber Command capacity. On May 17, 2018, the Cyber Mission Force (CMF) attained full operational capability of all 133 teams.³¹ This means that in three years the organization doubled in capacity: in March 2015 it was about half of its target.³² U.S. Cyber Command has also opened its new Cyber Center and Joint Operations Center (ICC/JOC) at Fort Meade.³³ Finally, the possible splitting of NSA and U.S. Cyber Command remains an unresolved issue.³⁴ The NSA and U.S. Cyber Command have been “dualhatted” since the inception of the latter in 2009.³⁵ The splitting of the dual-hat role has been considered for years.³⁶ Although there has been an expectation that the role would eventually be uncoupled, a logical recommendation following the vision would be to maintain the dual-hat arrangement. After all, “seizing the initiative” in cyberspace requires the need to constantly move between different types of computer network operations (CNO).³⁷

A Scenario-Based Analysis of Cyber Persistence

U.S. Cyber Command’s new vision, a high-level document, is far from comprehensive. It may serve as a starting point for the U.S. government to adjust its strategic behavior in cyberspace, but U.S. Cyber Command will have to do a lot more heavy intellectual lifting to identify and address critical stumbling blocks it is likely to encounter in its implementation. This section highlights some of those and further develops the U.S. Cyber Command research agenda through scenario-based analysis.

At the outset, it is important to describe what U.S. Cyber Command seeks to achieve. Its ultimate objective is to “gain strategic advantage,” which according to Richard Harknett and Michael Fischerkeller can be interpreted to mean changing the distribution of power in favor of the United States.³⁸ This is in line with the observation made by Harknett that the cyber activity of adversaries that takes place below the threshold of war is slowly degrading U.S. power — both state and nonstate actors.³⁹ More generally, the premise underlying U.S. Cyber Command’s vision is depicted in figure 4–1.

The notion is that the U.S. government’s position has slipped over the years and that therefore international stability has increased. The series of cyberattacks that took place in the early 2000s with highly disruptive consequences — including the hacking of the Democratic National Committee (2016), WannaCry (2017), and NotPetya (2017) — underline this view. These attacks suggest that adversaries have grown bolder and potentially also more capable. This new status quo is deemed unacceptable by the United States, a situation also more broadly recognized in the 2017 National Security Strategy and the 2018 National Defense Strategy.⁴⁰

The best-case scenario following the command vision is therefore that the U.S. government achieves the end it desires and dramatically improves the (“general” or “cyber”) distribution of power — that is, it achieves superiority through persistence.⁴¹ More specifically, the way the U.S. Cyber Command aims to gain strategic effect is to seize the initiative, retain momentum, and disrupt adversaries’ freedom of action.

Yet we need to be clear about the possible consequences of seeking this objective: a United States more powerful in cyberspace does not necessarily mean one that is more stable or secure. As used here, stability is a subset of the broad view of cyberspace that includes freedom, liberty, prosperity, intellectual property, and personal information.⁴²

More formally, there are four possible scenarios, as shown in figure 4–2:

1. Win/Win: The strategy will lead to a more favorable distribution of power as well as a more stable and secure cyberspace and world.

2. Win/Lose: The strategy will lead to a more favorable distribution of power but also a growing degree of hostility in cyberspace and the world.

3. Lose/Win: The strategy will not lead to a more favorable distribution of power, but it does ensure a more stable and secure cyberspace and world.

4. Lose/Lose: The strategy will not lead to a more favorable distribution of power and will lead to a growing degree of hostility in cyberspace and the world.⁴³

To gain a better understanding of which scenario is most likely, we address each in turn, providing an overview of the mechanisms that could cause the United States to end up in each situation.⁴⁴ For each scenario we take the following mechanisms into consideration: (1) threat perception of other (relevant) actors, (2) the ability of the United States to take away the initiative, and (3) the ability of the United States to seize the initiative. On the former, “Scholars in international relations have long given threat perception a central role in theories of war, deterrence, alliances, and conflict resolution,” Janice Gross Stein notes.⁴⁵ Threat perceptions are subjective, but have “real” implications. Indeed, as Raymond Cohen writes: “Threat perception is the decisive intervening variable between action and reaction in interna-tional crisis.”⁴⁶ How other actors, both adversaries and allies, will perceive U.S. (intended) actions in cyberspace will therefore have a decisive influence on how the strategy plays out in the future. In addition, the success of the U.S. Cyber Command strategy depends on its ability to dominate cyberspace and reduce the opportunity of adversaries to (re)act.

An important limitation of this scenario-based analysis is that we only project what could happen if the United States were to change its current approach.⁴⁷ In line with the above discussion of the U.S. government’s perception of a degrading status quo, there are equally risks to not changing the course of action (which some would describe as “inaction”). Indeed, it is highly unlikely that, if the command scrapped its vision and proceeded on course, we would end up in a better situation in the (near) future.

First, there could be convergence of goals (win/win); superiority in cyberspace will in the long run also lead to a more stable environment, less conflict, norms of acceptable behavior, and so on. In fact, some argued at the first U.S. Cyber Command symposium that strategic persistence might first worsen the situation before making it better.⁴⁸ This notion is depicted as arrow A in figure 4–3. The figure also shows two other potential win/win scenarios.

The first scenario (arrow A) is possible when: (1) U.S. Cyber Command initially is unable to seize the initiative from a capacity perspective but becomes increasingly better at it in the future; and/or (2) other actors increase their hostility in the short term, but become less hostile in the long run. The first condition may well hold; as was noted, U.S. Cyber Command is still developing its cyber capacity. Even though the CMF has achieved full operational capability, it will take time for the new workforce to operate capably and for all units to coordinate effectively.⁴⁹ The second condition is much less likely to hold: other actors are likely to adapt to U.S. activities over time, and the number of actors in this space (with hostile intent) will increase. FireEye has reported on the “rise of the rest,” stating: “While Russia and China remain atop the list of the most sophisticated cyber adversaries, FireEye has been observing an uptick in the number of state-sponsored cyber espionage campaigns from other countries.”⁵⁰

Another scenario, parsimoniously depicted as arrow C in figure 4–3, is interesting to consider as well. This situation could, perhaps paradoxically, be described as “deterrence through a strategy of persistence.” The condition that would likely underlie this scenario is that the main threat actors are initially cautious to act following the release of a new U.S. believe it to be unlikely that other actors will wait and see which way the wind blows. An excerpt from Nakasone’s nomination hearing is telling:

Senator Sullivan: They [our adversaries] don’t fear us. General Nakasone: They don’t fear us. Senator Sullivan: So, is that good? General Nakasone: It is not good, Senator.⁵¹

Following up on Senator Dan Sullivan’s question, Senator Sasse asked: “And three years ago at the OPM hack we had Obama intelligence chiefs up here, primarily before the Homeland Security Committee, and we asked them the exact same questions: Is there any response from the United States Government that’s sufficient to change the Chinese behavior? And they said absolutely not. Do you think there’s any reason the Chinese should be worried about U.S. response at the present?” Nakasone responded: “Again, I think that our adversaries have not seen our response in sufficient detail to change their behavior.”⁵² In line with this comment, it is unlikely that the vision alone will be sufficient or threatening enough to have this type of response.

Second, it is worth considering several “escalation scenarios” — lose/lose and win/lose as shown in figure 4–2. One could equally argue that a strategy of superiority through persistence comes with a set of ill-understood escalation risks about which the vision is silent. It is noteworthy that neither “escalate” nor “escalation” appears in the new strategy document.⁵³ As Jason Healey has argued:

The vision … ignores many of the risks and how to best address them. Most importantly, the vision does not even recognize the risk that more active defense — in systems and networks in other, potentially friendly nations — persistently, year after year, might not work and significantly increases the chances and consequences of miscalculations and mistakes. Even if they are stabilizing, such actions may be incompatible with the larger U.S. goals of an open and free Internet.⁵⁴

To address these concerns in a more detail, figure 4–4 depicts five types of escalation scenarios: examining the arrows from right to left (A → E), they go from bad to worse. Arrows A and B both depict scenarios in which the United States achieves its ultimate objective, but has to pay a price for it. Arrows C–E depict a situation in which following the strategy does not make anything better.

In situations A and B the adversaries become more aggressive and conduct attacks that are highly disruptive to society.⁵⁵ These behaviors could be the result of either an increased willingness to do so or an increased capacity. With respect to the latter, the U.S. vision — and associated changed course of action — may encourage other actors to grow increase spending on offensive cyber operations. The conventional proliferation literature on weapons of mass destruction (WMD) includes extensive examination of the role of special interests in stimulating demand for weapons development.⁵⁶ The notion is that the new U.S. vision can be used by those groups within a country that favor a growing cyber command to justify or lobby for greater military spending.⁵⁷

Situations A and B, as shown in figure 4–4, may also come about because of adversaries’ growing incentive to conduct offensive cyber operations of a highly disruptive nature. In this case, the heightened hostility might be a sign that the U.S. strategy is effective. Consider, for example, the current war against the Islamic State of Iraq and Syria (ISIS): losing territory and grip in the Middle East, the terrorist organization is said to be keen to recruit followers in Europe and other places in the world to conduct lethal attacks outside of Iraq and Syria. Attempts to perpetrate mass killings are a way to show they still need to be feared (and potentially to bolster recruitment), but they do not change the balance of power (BoP) in the region. Actors in cyberspace might become more noisy and aggressive purely to increase friction, gain attention, and so on — and perhaps also to influence public opinion in the hope the United States will change its strategy.

Arrows C–E paint a picture of the most grim possible scenarios, with the U.S. strategy failing on all accounts. These worst-case scenarios might partially result from the causal mechanisms on adversaries’ capacity building described above for situations A and B. They also come about owing to U.S. failure to seize the initiative. This type of failure could stem from a multitude of sources.

First, a failure to seize the initiative may be due to a misunderstanding of the required means. The Cyber Command vision has remained silent on the available arsenal of capabilities. Scholars, however, have offered some examples of what this could entail. Michael Sulmeyer argues that the United States should “hack the hacker”: “It is time to target capabilities, not calculations Such a campaign would aim to make every aspect of hacking much harder: because hackers often reuse computers, accounts, and infrastructure, targeting these would sabotage their capabilities or render them otherwise useless.”⁵⁸ Such activities would indeed increase the friction that adversaries encounter in conducting hostile cyber activities against the United States.

It remains to be seen, however, whether that approach will result in persistent strategic advantage. The mixed results from the takedown of WebStresser, the largest service providing distributed denial of service (DDoS) available on the market, illustrate the issue. Europol shut down the website’s infrastructure in late April 2018, at a time when the online service had more than 136,000 users.⁵⁹ According to Link11, a cybersecurity firm based in Germany, a week after the takedown of the portal the DDoS attacks fell 60 percent across Europe.⁶⁰ But a different firm, Corero Network Security, claimed that DDoS attack volumes actually increased the week after the shutdown.⁶¹

Second, the United States might overplay its hand. Muhammad Ali boxed sixty-one matches as a professional. He would not have won fifty-six of those fights if he had fought all of his opponents at the same time. U.S. Cyber Command is operating in a space in which it has to seize the initiative against a large and ever-growing number of actors. The dangers of fighting on multiple fronts, even for the most capable actors, are well known from conventional warfare. Because the number of (potential) cyber fronts is several orders of magnitude greater than the number of conventional warfare fronts, the risks of overextension have become exponentially higher too.

Superiority through Persistence: Against Whom, for Whom, and What Else?

The scenarios described in the previous section provide an overview of several causal mechanisms that could have implications for the new vision. Several other important factors may influence the potential course of action as well. This section discusses four additional considerations that are largely left undiscussed in the vision.

First, the scenario-based analysis did not distinguish between different types of adversaries. Yet even if the United States were able to seize the initiative against one actor, it might not be able to do so against all actors. It has been argued that the United States has historically focused on the large states in the international system. As Thomas Barnett writes in a well-known Esquire article:

Ever since the end of World War II, this country has assumed that the real threats to its security resided in countries of roughly similar size, development, and wealth — in other words, other great powers like ourselves. During the Cold War, that other great power was the Soviet Union. When the big Red machine evaporated in the early 1990s, we flirted with concerns about a united Europe, a powerhouse Japan, and — most recently — a rising China. What was interesting about all those scenarios is the assumption that only an advanced state can truly threaten us. The rest of the world? Those less-developed parts of the world have long been referred to in military plans as the“Lesser Includeds,” meaning that if we built a military capable of handling agreat power’s military threat, it would always be sufficient for any minor scenarios we might have to engage in the less-advanced world. That assumption was shattered by September 11.⁶²

In the same vein, there is likely no one-size-fits-all way to implement strategic persistence in the cyber domain.⁶³ Note that several reports, including one from former secretary of defense Ash Carter, have argued that U.S. Cyber Command contributions in the campaign against ISIS have been minor.⁶⁴ It is unclear to what degree this alleged underperformance is the result of the United States preparing for the wrong threat. In any case, it does provide a valuable lesson about the difficulty of being effective in cyberspace against all types of threat actors.⁶⁵

Second, much has been written on cyber deterrence in recent years. Given the low signal-to-noise ratio of policy discussions on this topic, the vision understandably and reasonably tries to shift the focus of cyber strategy toward an approach that is more closely matched to the realities of today. However, in being entirely silent about the topic of deterrence, it might go too far, and it implies that concepts of cyber deterrence have no relevance to U.S. cyber policy. It is likely that some form of deterrence is still needed to address lowprobability cyber threats of high consequence.

Third, the U.S. Cyber Command vision acknowledges the importance of increasing the resilience of U.S. cyber assets as an important aspect of sustaining strategic advantage. But the only words in the document about doing so say that U.S. Cyber Command will share “intelligence and operational leads with partners in law enforcement, homeland security (at the federal and state levels), and the Intelligence Community.”⁶⁶ Greater resilience of U.S. cyber assets will enhance our ability to bring the cyber fight to adversaries by reducing their ability to gain benefits by escalating in response, and yet the coupling between cyber defense and offense goes unmentioned.

Fourth, the vision correctly notes that “cyberspace threats . . . transcend geographic boundaries and are usually trans-regional in nature.” It also notes “our scrupulous regard for civil liberties and privacy.”⁶⁷ But U.S. guarantees of civil liberties and privacy are grounded in U.S. citizenship or presence on U.S. soil. If cyber adversaries transcend geographic boundaries, how will the command engage foreign adversaries who operate on U.S. soil? The vision document is silent on this point, even though it could have significant implications on its course of action.

Conclusion and Recommendations

The purpose of this chapter is to provide a brief overview of the U.S. Cyber Command strategy. In the constantly changing terrain of cyberspace in which “everyone is everyone’s neighbor,” the United States seeks (cyber) superiority through persistence, as stated in the 2018 vision. The ultimate goal is to maintain or favorably change the balance of power by seizing the initiative in cyberspace. We noted, however, that it remains unclear what will be sacrificed in pursuit of this optimal outcome.

From an operational perspective, we recommend that the U.S. Cyber Command give high priority to the following two aspects when implementing the strategy: prioritization and operational speed.

First, in seeking to engage on so many levels against so many actors, prioritization has to become a top issue in implementing the new vision. Priorities should not be decided on the basis of state actor versus nonstate actor, or nation-state versus criminal, hacktivist, or something else. Instead, in line with the vision’s objective, prioritization decisions should be made on the basis of BoP-relevant actor versus BoP-irrelevant actor.⁶⁸ As said, this does however not mean that the United States should act in the same way against all BoP-relevant actors.

Second, operational speed and agility will manifest differently against different opponents; moreover, significant government reorganization will be required to increase operational speed and agility. What Muhammad Ali was most famous for — and what remained constant throughout all of his matches — was his amazing speed. The United States seems to be aware of the importance of threat actor prioritization and operational speed, as both are mentioned in the strategy.

The scenario-based analysis in this chapter aims to provide more insight into how the new strategy might play out. More research should be conducted on time frames for implementation, operational codes, and other external factors.