Here's the notes from Gen Bender's lunch chat I mentioned before. Please note these are his words mangled by my interpretation. Overall I found the time spent with him worth it, not a dog-phony show, and informative. I was also confident that the future of Cyber is at least vectored in a good-direction, despite my disagreements with some of where we're going.So the first was, "We're the best advanced Air Force of the Industrial Age." Which was echoed a couple times in other thoughts and comments as we ate and talked. Overall, he appeared to be getting at our ability to dominate Air and all aspects of it, but being ill-suited to continue to dominate Air as we struggle to get a grasp on Cyber. If we don't grasp how Cyber impacts Air Operations (ex. Maintainers utilizing web-enabled laptops to update maps, AOC NIPR/SIPR Access Points, ICS/SCADA systems overall, etc.) and make sure we've covered those attack-vectors, we're not going to succeed. Some of this can be seen in the Ukraine Artillery hack or not.
"The days of the pilot on the pointy end being the only operator are old fashioned and over. We need a focus on teamwork because everyone is impacted by cyber, not just our Operators on the keyboards. On a football team--who's the operator?" This was a comment after a discussion about how we're going to differentiate between operators, maintainers and users of the AFNET. Gen Bender was not of the mind to spec out a separate Cyber Mx line (I am). Because if you're operating on the domain for Mx, that's still operations. He doesn't want someone to think of the domain as Air, and we "hop off" the domain to do Mx. Cyber can't allow that mindset. Interesting thought, not sure I agree.There was a good discussion about a technical track for Cyber Officers and Gen Bender said it's something he's taking back to the CSAF. Because the retention problem is going to be very different from the pilot one (pays, privileges, smaller outside hire opportunities) and the specifics required are more specialized. So a pilot can spend an assignment getting spun up on an airframe, and stay within that airframe. But we don't' have any of that in Cyber and taking someone from ICS/SCADA systems and throwing them into Router Exploitation is very different from F16->F15 or even F-16->Drone. (Note - please correct me if I'm wrong in this assumption.) It was also pointed out that we can't just have a cadre of technical experts at the O1-O4 level and have no one moving up the chain to advocate for capes and resources. It appeared lost on my fellow O's, but it's a good point.There was also some discussion about AFSPC as the home for Cyber. Because cyber has to be fast and that is not AFSPC. They'll spend decades on a project and it's ok, because: rockets, satellites, and the void. They fail one launch, at that's a cool $2B instantly gone. But if we spend 2 years on a cyber project, it's already outdated and we're behind. 3 years to POM for a project? GTFO (my words, obviously). He said he brought that up to the CSAF/SecAF, but as we're AFSPC now it's where we've got to work. But it's in the whole cyber mind that AFSPC isn't working out, and the efficiency wasn't as good as expected.I didn't take notes on this, but he spoke at length about the culture change and really needing to work on that and make sure we get it right. Which means bringing the right people in and getting the training right. On training, "...right now we're taking in new Airman and treating them like they've got no idea how tech works. Everyone starts at baseline zero with no regard for previous experience." He did say they're developing a test to judge aptitude for cyber capabilities, similar to the TBAS. Training for us is a realy problem. Our training pipeline is not responsive, nor does it address the AF's needs beyond warm body. I can't take a Airman out of tech school and get them prepared to start working in our operational units sooner than a year. There's topics that aren't even covered in school (ex. virtualization) because AETC doesn't want to pony up the cash for equip. Additionally, the on-going training is woefully out of date.
On culture it's more about making sure that as we push towards ops that we get it right. If we can get more of you guys into cyber to educate our oncoming senior leaders (and me) about what real ops is, that would be great.
EDIT - Forgot this one. He also spoke about how we're doing applications and software. Specifically mentioned the dog-shit(my words) software USAFA is using for their student actions. How he approached SalesForce about possibly utilizing their applications and got push back from corporate AF asking what experience that commercial developer had running large university management. Turns out SalesForce support a ton of universities, enough to have a dedicated portion of their site for it. Also, costs less than $100 per student.