United States Army Cyber Command
ARCYBER is the Army’s service component to USCYBERCOM. It defends the Army network, provides the Army’s share of the Cyber Mission Force, and has expanded into what the Army calls information advantage - cyber, electronic warfare, information operations, and the network treated as one problem. It is a Service Component Command, not a Direct Reporting Unit.
| Field | Value |
|---|---|
| Type | Army Service Component Command (ASCC) |
| Headquarters | Fort Gordon, Georgia |
| Commander | Christopher_L_Eubank, Lieutenant General (from December 3, 2025) |
| Subordinate to | US_Army / Headquarters, Department of the Army |
| ASCC to | USCYBERCOM |
| Established | October 1, 2010 |
Mission
ARCYBER directs and conducts integrated electronic warfare, information, and cyberspace operations as authorized, and operates and defends the Army portion of the Department of Defense Information Network (DODIN-A). Concretely:
- Offensive and defensive cyberspace operations through Army-provided Cyber Mission Force teams presented to USCYBERCOM
- DODIN operations - running the Army’s global network through NETCOM
- Information advantage - integrating cyber, electromagnetic warfare, information operations, and data as a single operational function
- Support to theater armies through expeditionary cyber and electromagnetic activities teams
The command’s relocation to Fort Gordon colocated it with the Cyber_Center_of_Excellence and the Army’s cyber schoolhouse, and put it adjacent to NSA Georgia.
Subordinate Organizations
- NETCOM (Network Enterprise Technology Command, Fort Huachuca, AZ) - DODIN-A operations
- Cyber_Protection_Brigade (Fort Gordon, GA)
- 780th_Military_Intelligence_Brigade (Fort Meade, MD) - offensive cyber; assigned to INSCOM, operationally under ARCYBER
- 11th_Cyber_Battalion (Fort Gordon, GA) - expeditionary cyber and electromagnetic activities
- 91st_Cyber_Brigade (Virginia Army National Guard)
- Joint_Force_Headquarters-Cyber_Army - presents Army cyber effects to combatant commands
The 1st_Information_Operations_Command was deactivated under the Army_Transformation_Initiative; its functions dispersed across ARCYBER and the theater armies.
Why it matters
The Army network is a permanent, enormous IT program. DODIN-A modernization - unified network, zero trust architecture, identity and credential management, cloud migration under cArmy, and endpoint security - is executed through NETCOM and acquired through CPE_C2_Information_Network and PAE_C2_CC2 at ASAALT. This is the Army’s largest sustained IT services and software market.
Zero trust has a deadline. Departmental zero trust targets have forced the Army into a multi-year architecture replacement that pulls in identity, microsegmentation, analytics, and continuous monitoring vendors.
Offensive cyber and electromagnetic warfare tooling. Capability development for cyber effects, RF sensing and attack, and signature management flows through a mix of programs of record, OTAs, and rapid-acquisition vehicles. Expeditionary cyber teams under the 11th_Cyber_Battalion are a fast-adopting user base.
Data and AI at the network edge. ARCYBER has been an early Army adopter of data platforms and machine learning for network defense and for information-environment assessment, which is where commercial analytics companies have found entry.
Fort Gordon geography. The colocation of ARCYBER, the Cyber_Center_of_Excellence, NSA Georgia, and two INSCOM brigades makes Augusta the Army’s cyber industrial cluster.