LANDWARNET 2011 TRANSFORMING CYBER WHILE AT WAR UNCLASSIFIED
UNCLASSIFIED
Army Networthiness
Information Exchange Forum
Session: #3
Networthiness
Judi Mullin
NETCOM 9th SC(A) G6, Networthiness Division
LANDWARNET 2011 TRANSFORMING CYBER WHILE AT WAR UNCLASSIFIED
UNCLASSIFIED IEF Session: 3, Track: NETCOM/9th SC(A) 2011-08-24 (1045-1200)//Army Networthiness 2
PURPOSE: To present and discuss the purpose and goal of the Networthiness program and provide an update on program direction.
OBJECTIVES: This presentation will provide you with: • Information on the processes for obtaining a
Certificate of Networthiness
•Common issues encountered during evaluation.
•The current and future initiatives for the Networthiness program
LANDWARNET 2011 TRANSFORMING CYBER WHILE AT WAR UNCLASSIFIED
UNCLASSIFIED 3
• Networthiness: The operational assessment of
systems, applications, or devices to determine
security, interoperability, supportability,
sustainability, usability, (SISSU) and compliance
with Federal, DoD, and CC/S/A regulations.
• Standard definition adopted by DoD, DISA,
Army, Air Force, Navy, and Marines.
IEF Session: 3, Track: NETCOM/9th SC(A) 2011-08-24 (1045-1200)//Army Networthiness
LANDWARNET 2011 TRANSFORMING CYBER WHILE AT WAR UNCLASSIFIED
UNCLASSIFIED 4 IEF Session: 3, Track: NETCOM/9th SC(A) 2011-08-24 (1045-1200)//Army Networthiness
LANDWARNET 2011 TRANSFORMING CYBER WHILE AT WAR UNCLASSIFIED
UNCLASSIFIED 5
•Received by [email protected]
•Checked for completeness – returned or accepted Request
•If accepted, added to SQL Database
•Unique database tracking ID sent to customer
•Analyst works First In First Out
•Coordinates with SME and Requestor as necessary
•Analyst creates recommendation and sends for staffing
•Enterprise Impact Assessment goes forward with recommendation
•Secured into PDF, database updated, reports generated
•Requestor is not sent a copy – copy is linked to database
•Once completes staffing, recommendation sent to Army Enterprise
DAA for digital signature
Accept
Analysis
Review
Sign
Document
2011-08-24 (1045-1200)//Army Networthiness IEF Session: 3, Track: NETCOM/9th SC(A)
LANDWARNET 2011 TRANSFORMING CYBER WHILE AT WAR UNCLASSIFIED
UNCLASSIFIED 6
•All applications within a system receive a CoN with the system.
•Applications added to a system between accreditation periods
receive a CoN, but reference the system and system IATO/ATO.
2011-08-24 (1045-1200)//Army Networthiness IEF Session: 3, Track: NETCOM/9th SC(A)
LANDWARNET 2011 TRANSFORMING CYBER WHILE AT WAR UNCLASSIFIED
UNCLASSIFIED
Committee on National Security Systems (CNSSI) 4009 Definition:
• Application: Software program that performs a specific function directly for a
user and can be executed without access to system control, monitoring, or
administrative privileges.
Definition of a Network:
• Network is a collection of interconnected components. Such components may
include routers, hubs, cabling, telecommunications controllers, key distribution
centers, and technical control devices.
7 2011-08-24 (1045-1200)//Army Networthiness IEF Session: 3, Track: NETCOM/9th SC(A)
LANDWARNET 2011 TRANSFORMING CYBER WHILE AT WAR UNCLASSIFIED
UNCLASSIFIED
CNSSI 4009 Definition:
• System: Any organized assembly of resources and procedures united and
regulated by interaction or interdependence to accomplish a set of specific
functions.
• Information System: A discrete set of information resources organized
for the collection, processing, maintenance, use, sharing, dissemination, or
disposition of information.
8 2011-08-24 (1045-1200)//Army Networthiness IEF Session: 3, Track: NETCOM/9th SC(A)
LANDWARNET 2011 TRANSFORMING CYBER WHILE AT WAR UNCLASSIFIED
UNCLASSIFIED
•IATO/ATO
•Fielding Locations
•MOA
•Patch Management
•Above Baseline Services
•Bandwidth
•Army Golden Master
•Form 2930 for PII (non-POR)
•Ports/Protocols Registered (non-POR)
•IPv6
•HBSS
2011-08-24 (1045-1200)//Army Networthiness IEF Session: 3, Track: NETCOM/9th SC(A) 9
LANDWARNET 2011 TRANSFORMING CYBER WHILE AT WAR UNCLASSIFIED
UNCLASSIFIED
•Data Flow
•Licenses and Support
•Patch Management
•Administrative Access/Control
•Bandwidth
•Army Golden Master
•Form 2930 for PII
•Data in Transit/Rest
•Ports/Protocols
•IPv6
•HBSS
•FIPS 140 and NIAP
•STIGS and Retina
•SCRM
•System/Network IATO/ATO
2011-08-24 (1045-1200)//Army Networthiness IEF Session: 3, Track: NETCOM/9th SC(A) 10
LANDWARNET 2011 TRANSFORMING CYBER WHILE AT WAR UNCLASSIFIED
UNCLASSIFIED
Reuse: • Data Flow
• Administrative
Access/Control
• Bandwidth
• Form 2930 for PII
• Data in Transit/Rest
• Ports/Protocols
• IPv6
• HBSS
• FIPS 140 and NIAP
Cannot reuse:
• Licenses and Support
• Patch Management
• Army Golden Master
(UGM yes)
• STIGS and Retina
• SCRM
• System/Network
IATO/ATO
11 2011-08-24 (1045-1200)//Army Networthiness IEF Session: 3, Track: NETCOM/9th SC(A)
LANDWARNET 2011 TRANSFORMING CYBER WHILE AT WAR UNCLASSIFIED
UNCLASSIFIED 12
https://idm.netcom.army.mil/sites/NW/CoNApproval/Lists/Public/Public.aspx
2011-08-24 (1045-1200)//Army Networthiness IEF Session: 3, Track: NETCOM/9th SC(A)
LANDWARNET 2011 TRANSFORMING CYBER WHILE AT WAR UNCLASSIFIED
UNCLASSIFIED 13
Https://www.us.army.mil/suite/page/137030
https://www.us.army.mil/suite/page/137030 https://www.us.army.mil/suite/page/137030 https://www.us.army.mil/suite/page/137030
2011-08-24 (1045-1200)//Army Networthiness IEF Session: 3, Track: NETCOM/9th SC(A)
LANDWARNET 2011 TRANSFORMING CYBER WHILE AT WAR UNCLASSIFIED
UNCLASSIFIED
• Analyst Team - Personnel shortage due to hiring freeze
- Stabilized work force
• Enterprise IAPM - Direct support for all IA questions/issues
• Automated Checklist Submission - Combined database hosted by Army Data Center
Fairfield
- Automated workflow not email
14 2011-08-24 (1045-1200)//Army Networthiness IEF Session: 3, Track: NETCOM/9th SC(A)
LANDWARNET 2011 TRANSFORMING CYBER WHILE AT WAR UNCLASSIFIED
UNCLASSIFIED
Questions at any time:
• Organizational mailbox under Enterprise Email
• Name may change – Nickname should stay the same
• 2 day turn around for questions
AKO Networthiness Home
• Frequently Asked Questions
• Helpful information and guidance
• Links for more information
15 2011-08-24 (1045-1200)//Army Networthiness IEF Session: 3, Track: NETCOM/9th SC(A)