Differentiate between defensive and offensive information operations within C2.

• A. Defensive IO focuses on protecting information and systems; offensive IO seeks to disrupt or influence adversaries’ information environment.
• B. Defensive IO is about physical security; offensive IO is about financial manipulation.
• C. Defensive IO only concerns public relations; offensive IO only concerns cyber intrusion.
• D. Defensive IO aims to disrupt enemy communications; offensive IO protects own networks.

Answer: (B)

Defensive information operations focus on protecting information and the systems that handle it, ensuring integrity, confidentiality, and availability. Offensive information operations aim to disrupt or influence the adversary’s information environment, shaping what they can see, believe, or do. In practice, defensive IO includes safeguarding networks, implementing access controls, monitoring for threats, and responding to incidents. Offensive IO covers activities that degrade an adversary’s ability to operate in the information space, including deception, influence operations, and cyber actions aimed at disrupt­ing or manipulating their information flows.

The other descriptions mix up the roles. Physical security and financial manipulation aren’t about information operations. Public relations and cyber intrusion alone don’t capture the defensive vs. offensive dynamic. Disrupting enemy communications is an offensive goal, while protecting own networks is a defensive goal, so they don’t reflect the same distinction.