diff --git a/elements/planning-and-operational-support-vocabulary.json b/elements/planning-and-operational-support-vocabulary.json
new file mode 100644
index 0000000..2033e87
--- /dev/null
+++ b/elements/planning-and-operational-support-vocabulary.json
@@ -0,0 +1,75 @@
+{
+  "values": [
+    {
+      "value": "Data Exploitation"
+    },
+    {
+      "value": "Data Exploitation - Analytic Support"
+    },
+    {
+      "value": "Data Exploitation - Translation Support"
+    },
+    {
+      "value": "Financial Resources"
+    },
+    {
+      "value": "Financial Resources - Academic"
+    },
+    {
+      "value": "Financial Resources - Commercial"
+    },
+    {
+      "value": "Financial Resources - Government"
+    },
+    {
+      "value": "Financial Resources - Hacktivist or Grassroot"
+    },
+    {
+      "value": "Financial Resources - Non-Attributable Finance"
+    },
+    {
+      "value": "Planning"
+    },
+    {
+      "value": "Planning - Open-Source Intelligence (OSINT) Gathering"
+    },
+    {
+      "value": "Planning - Operational Cover Plan"
+    },
+    {
+      "value": "Planning - Pre-Operational Surveillance and Reconnaissance"
+    },
+    {
+      "value": "Planning - Target Selection"
+    },
+    {
+      "value": "Skill Development / Recruitment"
+    },
+    {
+      "value": "Skill Development / Recruitment - Contracting and Hiring"
+    },
+    {
+      "value": "Skill Development / Recruitment - Document Exploitation (DOCEX) Training"
+    },
+    {
+      "value": "Skill Development / Recruitment - Internal Training"
+    },
+    {
+      "value": "Skill Development / Recruitment - Military Programs"
+    },
+    {
+      "value": "Skill Development / Recruitment - Security / Hacker Conferences"
+    },
+    {
+      "value": "Skill Development / Recruitment - Underground Forums"
+    },
+    {
+      "value": "Skill Development / Recruitment - University Programs"
+    }
+  ],
+  "version" : 1,
+  "description": "The PlanningAndOperationalSupportVocab is the default STIX vocabulary for expressing the planning and operational support functions available to a threat actor.",
+  "author": "STIX",
+  "stix": "1.0.1",
+  "type": "planning-and-operational-support-vocabulary"
+}