Army Networthiness - AFCEA

LANDWARNET 2011 TRANSFORMING CYBER WHILE AT WAR UNCLASSIFIED

UNCLASSIFIED

Army Networthiness

Information Exchange Forum

Session: #3

Networthiness

Judi Mullin

NETCOM 9th SC(A) G6, Networthiness Division


UNCLASSIFIED IEF Session: 3, Track: NETCOM/9th SC(A) 2011-08-24 (1045-1200)//Army Networthiness 2

PURPOSE: To present and discuss the purpose and goal of the Networthiness program and provide an update on program direction.

OBJECTIVES: This presentation will provide you with: • Information on the processes for obtaining a

Certificate of Networthiness

•Common issues encountered during evaluation.

•The current and future initiatives for the Networthiness program


UNCLASSIFIED 3

• Networthiness: The operational assessment of

systems, applications, or devices to determine

security, interoperability, supportability,

sustainability, usability, (SISSU) and compliance

with Federal, DoD, and CC/S/A regulations.

• Standard definition adopted by DoD, DISA,

Army, Air Force, Navy, and Marines.

IEF Session: 3, Track: NETCOM/9th SC(A) 2011-08-24 (1045-1200)//Army Networthiness


UNCLASSIFIED 4 IEF Session: 3, Track: NETCOM/9th SC(A) 2011-08-24 (1045-1200)//Army Networthiness


UNCLASSIFIED 5

•Received by [email protected]

•Checked for completeness – returned or accepted Request

•If accepted, added to SQL Database

•Unique database tracking ID sent to customer

•Analyst works First In First Out

•Coordinates with SME and Requestor as necessary

•Analyst creates recommendation and sends for staffing

•Enterprise Impact Assessment goes forward with recommendation

•Secured into PDF, database updated, reports generated

•Requestor is not sent a copy – copy is linked to database

•Once completes staffing, recommendation sent to Army Enterprise

DAA for digital signature

Accept

Analysis

Review

Sign

Document

2011-08-24 (1045-1200)//Army Networthiness IEF Session: 3, Track: NETCOM/9th SC(A)


UNCLASSIFIED 6

•All applications within a system receive a CoN with the system.

•Applications added to a system between accreditation periods

receive a CoN, but reference the system and system IATO/ATO.



UNCLASSIFIED

Committee on National Security Systems (CNSSI) 4009 Definition:

• Application: Software program that performs a specific function directly for a

user and can be executed without access to system control, monitoring, or

administrative privileges.

Definition of a Network:

• Network is a collection of interconnected components. Such components may

include routers, hubs, cabling, telecommunications controllers, key distribution

centers, and technical control devices.

7 2011-08-24 (1045-1200)//Army Networthiness IEF Session: 3, Track: NETCOM/9th SC(A)


UNCLASSIFIED

CNSSI 4009 Definition:

• System: Any organized assembly of resources and procedures united and

regulated by interaction or interdependence to accomplish a set of specific

functions.

• Information System: A discrete set of information resources organized

for the collection, processing, maintenance, use, sharing, dissemination, or

disposition of information.



UNCLASSIFIED

•IATO/ATO

•Fielding Locations

•MOA

•Patch Management

•Above Baseline Services

•Bandwidth

•Army Golden Master

•Form 2930 for PII (non-POR)

•Ports/Protocols Registered (non-POR)

•IPv6

•HBSS

2011-08-24 (1045-1200)//Army Networthiness IEF Session: 3, Track: NETCOM/9th SC(A) 9


UNCLASSIFIED

•Data Flow

•Licenses and Support

•Patch Management

•Administrative Access/Control

•Bandwidth

•Army Golden Master

•Form 2930 for PII

•Data in Transit/Rest

•Ports/Protocols

•IPv6

•HBSS

•FIPS 140 and NIAP

•STIGS and Retina

•SCRM

•System/Network IATO/ATO

2011-08-24 (1045-1200)//Army Networthiness IEF Session: 3, Track: NETCOM/9th SC(A) 10


UNCLASSIFIED

Reuse: • Data Flow

• Administrative

Access/Control

• Bandwidth

• Form 2930 for PII

• Data in Transit/Rest

• Ports/Protocols

• IPv6

• HBSS

• FIPS 140 and NIAP

Cannot reuse:

• Licenses and Support

• Patch Management

• Army Golden Master

(UGM yes)

• STIGS and Retina

• SCRM

• System/Network

IATO/ATO



UNCLASSIFIED 12

https://idm.netcom.army.mil/sites/NW/CoNApproval/Lists/Public/Public.aspx



UNCLASSIFIED 13

Https://www.us.army.mil/suite/page/137030

https://www.us.army.mil/suite/page/137030 https://www.us.army.mil/suite/page/137030 https://www.us.army.mil/suite/page/137030



UNCLASSIFIED

• Analyst Team - Personnel shortage due to hiring freeze

- Stabilized work force

• Enterprise IAPM - Direct support for all IA questions/issues

• Automated Checklist Submission - Combined database hosted by Army Data Center

Fairfield

- Automated workflow not email



UNCLASSIFIED

Questions at any time:

[email protected]

• Organizational mailbox under Enterprise Email

• Name may change – Nickname should stay the same

• 2 day turn around for questions

AKO Networthiness Home

• Frequently Asked Questions

• Helpful information and guidance

• Links for more information


mailto:[email protected]


UNCLASSIFIED

Are there any questions now?


Documents

Army Networthiness - AFCEA