Active Cyber Operations
The DSI engages in both defensive and proactive cyber operations to secure the nation's critical infrastructure. Operational details are highly classified, but unclassified summaries of our defensive posture are provided below.
Defensive Posture (Defend Forward)
We actively hunt for malicious activity within domestic networks before it reaches critical systems. Our zero-trust implementation ensures that no node is inherently trusted.
| Sector | Protection Status | Incident Response SLA |
|---|---|---|
| Energy Grid | Tier 1 Monitored | 15 Minutes |
| Financial Services | Tier 2 Assisted | 2 Hours |
| Federal Civilian Executive Branch | Fully Managed (Einstein 3A) | Immediate |
Joint Operations Center (JOC)
The JOC operates 24/7/365, serving as the central hub for monitoring global cyber traffic and coordinating rapid response to ongoing incidents.
[PDF] Report an Incident to the JOC