Slide 1

Lets Work Together

(Cmon cmon, work together)

team workmentorsupportcreatesuccessstrategyideamotivatepartnershipinspirevisionleadsolutionlearncreativitydevelopDOEAMESANLBNLJLABINLLBNLLLNLNRELLANLNETLORNLPNNLPPPLPANTEXSRSSLACSNLKCPFERMISRNLY12ORAU

IT Transformation Partnerships at the DOE National Laboratories and PlantsJill Deem, CIO, NRELTom Schlagel, CIO, BNLTom Harper, CIO, LANL

INLNRELLBNLLLNLLANLSNLPNNLANLBNLNETLORNLNatl Nuclear SecurityScienceEnergySRNLAmesFERMIPPPLJLabSLACY12SRSNNSSKCPPantexNational Laboratory CIO Members and Participants

ORAU

Bob Ottesen(KCP)

Chester Maze(ORAU)

Denise Stephens(INL)

Diane DenAdel(Ames)

George Dailey(Y12)

Jerry Johnson(PNNL)

Jill Deem(NREL)

Kent Gross(Pantex)

Mary Harris(SRNL)

Michael Vahle(SNL)

Randy Melen(Acting)(SLAC)

Richard Robinson(LLNL)

Rosio Alvarez(LBNL)

Roy Whitney(Jlab)

Becky Verastegui, Secretary

Steve Baumgartner(PPPL)

Tom Harper(LANL)

Tom Schlagel(BNL)

Valerie Perez(SRS)

Vicky White(Fermi)

Mike Bartell(ORNL)Stuart Hannay(ANL)

Bob Hillier(NNSS)

Gil VegaDOE, Associate CIO for Cyber Security and Chief Information Security OfficerMichael LocatisDOE, Chief Information OfficerRobert BreseDOE, Deputy Chief Information Officer

Robert OsbornNNSA, Associate Administrator for Information Management & CIO

Action Add image for Bob Osborn3A Brief History of the NLCIONLCIO began as the Systems of Labs Computing Coordinating Committee (SLCCC) in December, 1996To advise laboratory directors and to provide an interface to DOE organizations on issues in computing and information processing.Function as a forum for information exchange, consensus building, and coordination of the major activities in scientific computing and information processing.

A Brief History of the NLCIOSLCCC became NLCIO in May, 2008 Advises the U.S. Department of Energy (DOE) National Laboratory Directors Council and provides an interface to DOE organizations on issues in Information Technology (IT) and cyber security.Functions as a forum for information exchange, consensus building, and coordination of major activities in IT and cyber security.5National Laboratory Councils6National Laboratory Directors Council(NLDC)National Laboratories Chief Information Officers(NLCIO)National Laboratories Chief Communications Officers(NLCCO)National Laboratory General Counsel (NLGC)informalNational Laboratories Chief Research Officers(NLCRO)National Laboratories Chief Operating Officers(NLCOO)National Laboratories Chief Financial Officers(NLCFO)National Laboratories Chief Human Resources Officers(NLCHRO)DOE Information Management Governance CouncilSecretary Chu created the Cyber Security Governance Council (CSGC), later to become IMGC.Announced by Deputy Secretary Poneman in December, 2009.Formed to reflect the shared responsibility for cyber security, and information management, among the Under Secretaries, the DOE Chief Information Officer, and the National Laboratories/Plants.IMGC-AG (Advisory Group) is represented by four CIOs from Labs/Plants.IMGC-WG (Working Group).

77NLCIO Executive Committee8

Tom Harper, LANL Chair

Steve Baumgartner, PPPL Chair Elect

Tom Schlagel, BNLPast Chair

Jerry Johnson, PNNLExecutive Member

Becky Verastegui, ORNLSecretaryJill Deem, NRELExecutive MemberHow We Work TogetherNLCIO is a mature organization with monthly teleconferences and quarterly meetings.Began as information sharing, has progressed to strategic planning and joint initiatives.NLCIO relationship with DOE OCIO has matured with the current administration to one of collaboration and partnership.

We are peers, working together and with Headquarters, to leverage best-in-Complex solutions, share lessons learned, find efficiencies, and respond to mission needs.

99Partnerships and Shared ChallengesCyber SecurityVirtualization and SustainabilityPath to the CloudMobilityCollaboration

10Cyber SecurityPolicyWorked closely with DOE OCIO on the development of O205.1BShift from compliance to risk-based cyber security programsRisk-based programs presented at DOE Risk Management SummitSharing Best PracticesContractor Assurance SystemContinuous MonitoringIncident ResponseMutual aid and Lessons Learned during the FY11 cyber attacks on National LabsLab representatives on the JC3 IPTEventide

11Cybersecurity Incident Response: Lessons Learned EventidePanel Discussion, Wednesday, 4:40-6:00 pm,Dallas Ballroom ECybersecurity incident response: lessons learned eventidepanel discussion Wednesday, 4:40-6:00 p.m.; Location: Dallas Ballroom E; Track: Guiding Cybersecurity: Federal Initiatives; Skill Level: Non-TechnicalJerry Johnson, Chief Information Officer, Pacific Northwest National LaboratoryKevin A. Kerr, Chief Information Security Officer and Senior Advisor, IT Risk Management, Oak Ridge National LaboratoryAndy Kowalski, Computing and Networking Infrastructure Manager, Thomas Jefferson National Accelerator FacilityDale Leschnitzer, Cybersecurity Risk Assessor and IT Contingency Planning Coordinator, Los Alamos National LaboratoryDr. Thomas A. Harper, Chief Information Officer, Los Alamos National LaboratoryIn FY 2011, cybersecurity defenses at three DOE National Laboratories were breached by attacks characterized as Advance Persistent Threats. All three disconnected their sites from the Internet for as much as two weeks during response and recovery efforts. In March 2012, Los Alamos National Laboratory, in cooperation with various NNSA and DOE locations, conducted the Eventide Exercise, a multi-site information security response exercise focusing on the triage, mutual aid capabilities, and coordination between sites during a large-scale information security event. This session will include presentations on the FY 2011 attacks and the Eventide Exercise. The site presenters will share what happened, how their site responded and key lessons learned. The Eventide presentation will describe the exercise, a summary of the results, and lessons learned. Following the presentations will be a Q&A and discussion panel.11Virtualization and SustainabilitySustainabilityLeadership in Green ITVirtualizationServers moving from individual physical servers to virtual servers hosting multiple physical machines for agility, reliability, and power savingsVirtual Desktop Infrastructure in production or being explored across all sitesA natural next step for virtualized systems is to liberate them from your data center

12

The Green IT paper helped to change the conversation from data center consolidation to energy efficiency

12Path to the CloudDOEs Right Path (with NNSA YOURcloud, YourVOICE, and services), built on LANLs Infrastructure on Demand (IoD), with the scale and commercial pricing of the data center to create a virtual workspace and services model. Commercial Clouds (some examples)Google for Government (LBNL, PPPL, and INL) Service Now IT Service Management in the cloud

13

NNSA 2NV

DOE IE

M&O

Other Federal CloudsSite-level proof-of-principle activities Google for Government (LBNL, PPPL, and INL) Service Now (services on a cloud for FNAL, LBNL, NREL)

13MobilityThe explosive growth of smart phones and mobile devices in the consumer market presents a risk to the labs, but also a significant opportunityThe challenge to the labs is to take advantage of our workers desire to access the enterprise from their mobile devices, while making sure that information is appropriately protected

14

14CollaborationMany sites moving to Voice over IP replacing their legacy telephone switches, making voice services just another app on the networkThe converged voice and data platform opens up new collaboration opportunities, combining voice, video, email, chat, and web toolsThe challenge for the labs is to make this new platform seamlessly interoperate between sites, so that collaboration is as easy between sites is as easy as it is within a site15VoIP BNL (CISCO UCS), JSA, LANL, ORNL, PNNL Collaboration toolsSharepoint (Ames, BNL, LANL, ORNL, etc.)Desktop videoconferencing Sandia, planning: BNL, LANL, PNNLWebEx, Movi, OCS/Lync Integrated messaging and calendaring Exchange (at most sites): Lync consolidation at someGoogle: INL, LBNL, PPPL, and INL Zimbra: JSA

15ThanksWe welcome your comments and thoughtsGreat work is underway, but a lot of unmet challengesAll of you IMC participants have great opportunities to collaborate and participateBe part of the team Be part of the solution

16Questions?team workmentorsupportcreatesuccessstrategyideamotivatepartnershipinspirevisionleadsolutionlearncreativitydevelopDOEAMESANLBNLJLABINLLBNLLLNLNRELLANLNETLORNLPNNLPPPLPANTEXSRSSLACSNLKCPFERMISRNLY12ORAU