Military, cybersecurity and business management
Command & Control (C2) as a field of knowledge
Brief
Command & Control (C2) is fundamentally about creating the ability to make the right decisions, at the right time, based on the right information, and ensuring that those decisions are translated into coordinated action. The term has its origins in military operations but has gradually gained great importance in cybersecurity, crisis management, air traffic control, public safety, and modern business management. For a leadership team, C2 is particularly relevant because organizations today operate in environments characterized by uncertainty, high rates of change, and large flows of information. The question is no longer primarily whether information is available, but how that information is transformed into situational understanding, priorities, and action. The military tradition focuses on coordinating resources under uncertainty and time pressure. In cybersecurity, C2 is about detecting, understanding, and managing digital threats while protecting the business. In management and business operations, C2 is about creating operational control without stifling initiative and innovation. An important conclusion is that modern organizations should view Command & Control less as ”control of people” and more as ”orchestration of operations.” The organizations that succeed combine centralized situational awareness with decentralized decision-making. The metaphor of the air traffic control tower is particularly interesting because it illustrates just this – air traffic controllers do not control every detail of an aircraft’s operation. They create a shared situational picture, coordinate resources, identify conflicts, and enable safe decisions.
Command & Control (C2)
Command & Control can be defined as the processes, structures, techniques, and behaviors used to:
- create situational awareness
- make a decision
- prioritize resources
- coordinate activities
- follow up the effects
Historically, the field of military development evolved where commanders needed to lead large forces across geographically dispersed areas. Over time, theories emerged regarding leadership, communication systems, intelligence, decision-making, and feedback. A common model describes the following chain:
Observe → Orient → Decide → Act (OODA loop)
- Observe the surrounding world
- Interpret the situation
- Make decisions
- Act
- Note the result
This model is currently used far beyond military operations.
Military Command & Control
In military contexts, C2 is about creating effect through the coordination of people, units, information, and resources. Central principles are:
- common picture of the situation
- clear responsibility
- delegation of powers
- robust communication
- Quick feedback
Particularly interesting is the concept of ”mission tactics,” which has developed strongly in the Nordic countries and Germany. The leadership sets goals and intentions, while the implementation is adapted locally by those with the best understanding of the situation. This differs from older models where central management functions tried to control every activity.
Cybersecurity
In cybersecurity, the term is used in two different ways.
Defensive perspective
The organization needs:
- monitor the digital environment
- detecting incidents
- Prioritize threats
- coordinate actions
Security Operations Centers (SOCs) function in practice as the cyber world's command centers.
From an offensive perspective
In cybercrime and cyberwarfare, the term ”Command and Control server” is also used to describe the systems that attackers use to control compromised computers. This shows that information superiority and leadership are central factors even in digital environments.
Management and business leadership
In companies, the term is often used indirectly through:
- Operational management
- Performance Management
- Enterprise Control
- Operations Management
The traditional management model was based for a long time on reporting up and instructions down, whereas today’s operations are often too complex for this. Instead, a more modern view of C2 is emerging, where management focuses on:
- transparency
- common goals
- Operational situation
- decision support
- decentralized responsibility
Here, C2 becomes more of an organizational ability rather than a hierarchical structure.
Additional areas where C2 occurs
In addition to the areas you mentioned, there are several important applications:
Air traffic control
- Coordination of air traffic
- conflict resolution
- capacity management
Emergency services
- Operations management
- overview
- Resource prioritization
Healthcare
- emergency care
- disaster medicine
- operations planning
Large infrastructure systems
- power grid
- railways
- telecommunications
Space activities
- satellite control
- spacecraft
- space traffic management
Common to all these areas is that they handle complex systems where the consequences of poor coordination can be extensive.
Description of the context of the knowledge area
Command & Control does not exist in isolation; it is strongly dependent on the complexity of the external environment. Historically, detailed control worked relatively well when markets changed slowly and organizations were less interconnected. In today’s digital and globalized environment, the conditions are changing rapidly. Four external factors have a particularly significant impact:
Information overload – Organizations have more data than ever, but at the same time risk losing situational understanding.
Increased uncertainty – Geopolitics, cyber threats and market changes make the future more difficult to predict.
Faster decision cycles – Competitive advantages are often created through faster learning and adaptation.
Higher degree of dependencies – Supply chains, cloud services and partnerships mean that decisions have consequences far beyond the own organization.
Therefore, the focus has gradually shifted from controlling activities to controlling effects and capabilities.
Description of the other adjacent knowledge areas within the knowledge area
C2 is close to several established disciplines:
Governance – Determines responsibility, mandates and game rules.
Risk Management – Identifies and prioritizes uncertainties.
Situational Awareness – The ability to understand the present situation, trends, and future developments.
Operations Management – Effective coordination of the resources of the organization.
Business Intelligence – Collection and analysis of decision-making material.
Enterprise Architecture – Describes how processes, systems, and information flows are interconnected.
Crisis Management – Management in extreme or rapidly changing conditions.
Systems Thinking – Systems thinking focuses on connections and wholes rather than isolated functions.
One can therefore say that Command & Control functions as an integrating discipline that links information, decision-making, and operational action.
How the field of knowledge can create benefit
For companies and public authorities, value is created primarily through better decision-making and faster adaptability. A well-developed C2 perspective contributes to:
Improved situational understanding -Management receives a common and up-to-date picture of the operational situation.
Faster decision-making – Less time is spent gathering information and coordinating resources.
Higher organizational resilience – The organization can handle disruptions, incidents and crises more effectively.
Better balance between centralization and autonomy – The management focuses on direction and priorities while local operations are given room to maneuver.
More efficient use of resources – Resources are moved there where they have the greatest impact.
Increased strategic flexibility – The organization can adapt more quickly to changing market conditions.
Reflections on the air traffic controller metaphor
The air traffic control tower is one of the strongest modern metaphors for Command & Control. It illustrates that C2 is not about ”controlling the pilot” but about:
- create a common overview
- managing conflicts and priorities
- ensuring safety and efficiency
- coordinate many simultaneous actors
- provide decision support to those who carry out the work
The air traffic controller is not flying the plane. The pilot is not flying alone. The value arises in the interplay between central coordination and local autonomy. If you translate this into business management, the central question becomes:
How do we build a ”company air traffic control tower” that creates situational understanding, prioritization, and coordination without removing responsibility and initiative from the business?
That is where modern organizations can benefit most from the Command & Control approach.
