Operationalizing Cyber in Multi-domain Operations: A Kill-Chain- Centric Approach for Cyber Strike Packages

Abstract

This paper examines the challenge of integrating cyber capabilities into NATO Multi-Domain Operations (MDO) at the operational level. While doctrine emphasizes convergence across domains, cyber is not consistently incorporated into execution processes, particularly within the joint targeting cycle. Drawing on a NATO-aligned instructional vignette and student planning exercises, this study proposes a kill-chain-centric framework using Cyber Strike Packages (CSPs) to synchronize cyber effects with other domains.  Observations from the instructional environment indicate that cyber capabilities are frequently underutilized or misaligned with operational timelines when planners lack a structured integration framework. Application of the CSP model improved alignment between cyber effects, targeting decisions, and cross-domain coordination.  The findings suggest that cyber integration is primarily a problem of structure and timing rather than capability alone. In particular, planners struggled to align cyber preparation timelines with rapid operational decision cycles. The proposed framework addresses this challenge by organizing cyber effects around target, timing, effect, and assessment within the kill chain.  The paper concludes that improving cyber integration in NATO operations does not require entirely new doctrine, but more effective incorporation of cyber into targeting processes, planning timelines, and operational decision-making.