Cyberspace operations are planned actions carried out in digital environments to achieve a mission objective. They can be defensive, such as hardening systems, blocking malicious traffic, or removing an intruder, or offensive, such as gaining access, disrupting services, or shaping what an adversary can see and do.
In cyber security, the term matters because the same access can serve different goals. A foothold in a network may be used to collect intelligence over time, to preserve visibility for defenders, or to trigger an immediate effect that exposes the operator. That creates tradeoffs between stealth, speed, and persistence. Real-world campaigns often involve careful coordination, logging, segmented access, and approval steps so that one action does not destroy useful access or interfere with another mission. Understanding cyberspace operations helps teams decide when to observe, when to contain, and when to act.