Information Sys Security Program

Abstract

FY2020 funding request was reduced by ($0.616) million to account for the availability of prior year execution balances. The Information Systems Security Program (ISSP) ensures the protection of Navy and Navy hosted joint telecommunication and Information Technology (IT) systems from cyber exploitation and attack. The ISSP extends cybersecurity to ensure confidentiality, integrity, and availability of these systems and content processed, stored, or transmitted therein by performing the acquisition, modernization and sustainment of cybersecurity platforms and systems; cyberspace operations include both defensive and offensive measures, which preserve the ability to protect data, networks, net-centric capabilities, and other designated systems while projecting power by the application of force in or through cyberspace. The ISSP includes the protection of the Navy's National Security Systems (NSS). The ISSP must be rapid, predictive, adaptive, and tightly coupled to cyberspace technology. The ISSP provides cybersecurity systems and infrastructure based on mission impacts, cybersecurity threats, information criticality, vulnerabilities, and required defensive countermeasure capabilities. The ISSP focuses on efforts that address the risk management of cyberspace, which provides capabilities to protect, detect, restore and respond. The ISSP provides the Navy with the following cybersecurity elements: (1) defense of NSS, including the Nuclear Command, Control, and Communications, Navy (NC3-N) system, naval weapons systems, critical naval infrastructure for Command, Control, Communications, Computers, & Intelligence (C4I) afloat and shore networks, joint time and navigation systems, and industrial control systems, using modern cryptographic solutions and cyber security tools; (2) technologies for the Navy's Computer Network Defense (CND) service provider that accelerates the Navy's ability to prevent, constrain, and mitigate cyber attacks and critical vulnerabilities; (3) Navy Cyber Situational Awareness (NCSA) technologies that provides the operational context for cyber threat intelligence and Situational Awareness (SA), from external boundaries to tactical edge infrastructures; (4) assurance of the Navy's Cryptography (Crypto) telecommunications infrastructure and the wireless spectrum; (5) sensing cyber threats across all Navy shore and afloat networks to expand the capabilities of monitoring, assessing, and detecting adversary activities across multiple enclaves through the collection of tools in SHARKCAGE; (6) alignment to Navy's Insider Threat program; (7) assurance of joint-user cyberspace domains, using a Defense-In-Depth (DiD) security architecture and its alignment with the Joint Information Environment (JIE)/Joint Regional Security Stack (JRSS); (8) assurance technologies, including Key Management (KM) and Public Key Infrastructure (PKI).

Document Details

• Document Type: R2 Budgetary Justification
• Publication Date: Oct 01, 2020
• Source ID: 0303140N_7_1319_PB_2020
• Change Summary Explanation: The FY 2020 funding request was reduced by $(0.616) million to account for the availability of prior year execution balances. TECHNICAL: Key Management (KM): - Capability Increment (CI)-2 Spiral 2 Full Deployment Decision (FDD) renamed to CI-2 Maintenance Revision (MR)-2 Milestone FDD. SCHEDULE: Navy Cryptography (Crypto): - KGV-11M Development Contract Award shifted from Q2FY18 to Q4FY18, in accordance with the schedule. Contract awarded July 2018. - KGV-11M Development and Product Testing start date shifted from Q3FY18 to Q4FY18, and end date shifted from Q2FY20 to Q3FY20, in accordance with the schedule. - Next Generation Crypto Development removed from schedule due to undefined National Security Agency (NSA) requirements; effort had not been funded, therefore funding remains the same. Key Management (KM): - Capability Increment (CI)-2 Spiral 2 Maintenance Revision (MR)-2 Milestone Full Deployment Decision (FDD) shifted from Q2FY18 to Q4FY19 in accordance with NSA schedule. - CI-2 Spiral 2 Spin 3 Development, Integration and Test completion shifted from Q3FY17 to Q2FY19. - Key Management Infrastructure (KMI) Tech Refresh Development, Integration and Test completion shifted from Q4FY17 to Q2FY20 in accordance with NSA schedule. -CI-3 Spiral 3 Spin 1 initial Development, Integration and Test shifted from Q1FY18 to Q3FY18 in accordance with NSA schedule. - KMI Tech Refresh initial delivery shifted from Q4FY18 to Q3FY20 in accordance with NSA schedule. FUNDING: Navy Cryptography (Crypto)(-$2.738M): - FY20 decrease is due to the finalization of the development efforts of KGV-11M End Cryptographic Units (ECU). SHARKCAGE (+$1.474M): - FY20 increase is to continue development of the SHARKCAGE Defensive Cyberspace Offensive (DCO) enclave to address requirements from the fleet in light of emerging threats in the tactical environment. The increase will also incorporate NC3-N development efforts (details held at a higher classification). Navy Cyber Situational Awareness (NCSA) (-$1.331M): - FY20 decrease reflects a realignment within NCSA from Research, Development, Test and Evaluation (RDTE) to Operations and Maintenance, Navy (OMN) based on program requirements shifting from development to procurement, integration and sustainment.
• Service Agency Name: Navy

Entities

Organizations

• United States Navy

Tags

Communities of Interest

• Cyber

DTIC Thesaurus Topics

• Computer Network Security
• Computer Networks
• Computer Security Techniques
• Computers
• Cross Domain
• Cyber Defense Techniques
• Cyber Protection
• Cyberattacks
• Cybersecurity
• Cyberspace Operations
• Information Systems
• Insider Threats
• Risk Analysis
• Situational Awareness
• Software Development
• Systems Engineering
• Test And Evaluation

Fields of Study

• Computer science

Readers

• Civilian Systems Systems Program Capability Development and Upgrade Support Activity Expense and Pay Management.
• Cybersecurity.
• Maritime and Naval Warfare Studies

Technology Areas

• Cyber
• Fully Networked C3
• Fully Networked C3 - Command and Control