Cyber Command and Control Mission System (C3MS)

Current as of January 24, 2020


The Cyber Command and Control Mission System (C3MS) synchronizes other Air Force cyber weapon systems to produce operational-level effects in support of combatant commanders worldwide.

C3MS provides operational level command and control (C2) and situational awareness of Air Force cyberspace forces, networks and mission systems. C3MS enables the 16th Air Force commander to develop and disseminate cyber strategies and plans, then execute and assess these plans in support of Air Force and Joint warfighters. 

The C3MS weapon system is operated by the 616th Operations Center (Active Duty) and 854th Combat Operations Squadron (Air Force Reserve) at Joint Base San Antonio-Lackland, Texas, and the 119th Cyber Operations Squadron (Air National Guard) at McGhee Tyson Air National Guard Base, Tennessee. 


C3MS evolved from the legacy Air Force Network Operations Security Center concept, personnel and equipment. With the activation of U.S. Cyber Command and 16th AF, senior leaders recognized the need for an operational-level cyber C2 capability. C3MS was officially designated by Chief of Staff of the Air Force in March 2013 and initial operating capability was declared July 30, 2014.


C3MS is the single Air Force weapon system providing overarching 24/7 situational awareness, management and control of the Air Force portion of the cyberspace domain. It ensures unfettered access, mission assurance, and joint warfighter use of networks and information processing systems to accomplish worldwide operations. The weapon system has five major sub components:

1. Situational Awareness: Producing a common operational picture by fusing data from various sensors, databases, weapon systems and other sources to gain and maintain awareness of friendly, neutral and threat activities that impact joint forces and the Air Force. 
2. Intelligence, Surveillance and Reconnaissance products: Enabling the integration of cyberspace indications and warning, analysis and other actionable intelligence products into overall situational awareness, planning and execution. 
3. Planning: Leveraging situational awareness to develop long- and short-term plans, tailored strategy, courses of action, and shape execution of Offensive Cyberspace Operations, Defensive Cyberspace Operations and DoD Information Network Operations.
4. Execution: Leveraging plans to generate and track various cyberspace tasking orders to employ assigned and attached forces in support of OCO, DCO and DoDIN Ops. 
5. Integration with other C2 nodes: Providing the ability to integrate Air Force-generated cyber effects with AFCYBER lines of effort, USCYBERCOM and other C2 nodes.

General Characteristics
Primary Function: Operational-level cyber C2 and situational awareness.
Crew Positions: Thirteen unique positions consisting of a senior duty officer, deputy senior duty officer, defensive cyberspace watch officer, offensive cyberspace watch officer, DoDIN Ops watch officer, three DCO controllers, three OCO controllers, three DoDIN Ops controllers, cyberspace effects planner, cyberspace operations strategist, cyberspace intelligence analyst, cyberspace operations assessment analyst, and cyberspace operations reporting cell analyst. All mission crews are supported by mission support personnel. 
Inventory: Three 
Major Command: Air Combat Command, Joint Base Langley-Eustis, Virginia
Numbered Air Force: 16th AF, JBSA-Lackland, Texas