Overview[]
The NSA/CSS Threat Operations Center (NTOC) is the primary NSA/CSS partner for Department of Homeland Security response to cyber incidents. The NTOC establishes real-time network awareness and threat characterization capabilities to forecast, alert, and attribute malicious activity and enable the coordination of Computer Network Operations.
The primary operational functions of NTOC include creating and maintaining time-sensitive capabilities to determine and disseminate the configuration and activities of networks of interest; characterizing and reporting cyber foreign threats to networks of interest in accordance with NSA’s mission to predict, detect, defeat, and attribute exploitations and attacks; conducting 24x7 detection, alert, and incident response services to defend DOD unclassified networks; providing technical assistance, upon request and as appropriate, to Federal entities; and supporting collaborative planning and Computer Network Operations (by NSA/CSS; USSTRATCOM; and the broader community of the United States, its allies, and its mission partners).