Information Sys Security Program

Abstract

The Information Systems Security Program (ISSP) ensures the protection of Navy and Navy hosted joint telecommunication and Information Technology (IT) systems from cyber exploitation and attack. The ISSP extends cybersecurity to ensure confidentiality, integrity, and availability of these systems and content processed, stored, or transmitted therein by performing the acquisition, modernization and sustainment of cybersecurity platforms and systems; cyberspace operations include both defensive and offensive measures, which preserve the ability to protect data, networks, net-centric capabilities, and other designated systems while projecting power by the application of force in or through cyberspace. The ISSP includes the protection of the Navy's National Security Systems (NSS). The ISSP must be rapid, predictive, adaptive, and tightly coupled to cyberspace technology. The ISSP provides cybersecurity systems and infrastructure based on mission impacts, cybersecurity threats, information criticality, vulnerabilities, and required defensive countermeasure capabilities. The ISSP focuses on efforts that address the risk management of cyberspace, which provides capabilities to protect, detect, restore and respond. The ISSP provides the Navy with the following cybersecurity elements: (1) defense of NSS, including the Nuclear Command, Control, and Communications, Navy (NC3-N) system, naval weapons systems, critical naval infrastructure for Command, Control, Communications, Computers, & Intelligence (C4I) afloat and shore networks, joint time and navigation systems, and industrial control systems, using modern cryptographic solutions and cyber security tools; (2) technologies for the Navy's Computer Network Defense (CND) service provider that accelerates the Navy's ability to prevent, constrain, and mitigate cyber attacks and critical vulnerabilities; (3) Navy Cyber Situational Awareness (NCSA) technologies that provides the operational context for cyber threat intelligence and Situational Awareness (SA), from external boundaries to tactical edge infrastructures; (4) assurance of the Navy's Cryptography (Crypto) telecommunications infrastructure and the wireless spectrum; (5) sensing cyber threats across all Navy shore and afloat networks to expand the capabilities of monitoring, assessing, and detecting adversary activities across multiple enclaves through the collection of tools in SHARKCAGE; (6) assurance of joint-user cyberspace domains, using a Defense-In-Depth (DiD) security architecture and its alignment with the Joint Information Environment (JIE)/Joint Regional Security Stack (JRSS); (7) assurance technologies, including Key Management (KM) and Public Key Infrastructure (PKI).

Document Details

• Document Type: R2 Budgetary Justification
• Publication Date: Oct 01, 2021
• Source ID: 0303140N_7_1319_PB_2021
• Change Summary Explanation: TECHNICAL: Key Management (KM): - Capability Increment (CI)-2 Spiral 2 Full Deployment Decision (FDD) renamed to CI-2 Maintenance Revision (MR)-2 Milestone FDD. SCHEDULE: Computer Network Defense (CND): - Starting in FY21, schedule updated to reflect CND Inc 2's migration from specific "capability builds" to a continuous capability enhancement strategy. This strategy specifically addresses end of life and end of support components. The Cybersecurity tools fielded in the Fleet are commercial off-the-shelf (COTS) products that are regularly improved with the latest technologies. CND designs, integrates, tests, and fields these products to protect the Navy's tactical networks from the evolving cyber threat. Navy Cryptography (Crypto): - All KGV-11M milestones shifted due to change in developmental contract award schedule; no impact to programmatic schedule. Advanced Cryptographic Capability (ACC) schedule updates are a result of a change in NSA software release date. - Added ACC NSA Software Certification to Q3FY19. Key Management (KM): - CI-3 Spiral 3 Spin 1 Milestone Full Rate Production Decision (FRPD)/Fielding Decision (FD) shifted from Q3FY21 to Q1FY23 in accordance with NSA schedule. - CI-3 Spiral 3 Spin 2 Development, Integration and Test start shifted from Q1FY20 to Q1FY21 in accordance with NSA schedule. - Key Management Infrastructure (KMI) Tech Refresh initial delivery shifted from Q3FY20 to Q1FY21 in accordance with NSA schedule. SHARKCAGE - Rapid Deployment Capability (RDC) and related milestone completion shifted from Q2FY19 to Q3FY19 to allow for the development of additional capabilities per the RDC Continuation Acquisition Decision Memorandum. Navy Cyber Situational Awareness (NCSA) - Rapid Deployment Capability (RDC) completion and related milestones shifted from Q2FY19 to Q1FY20 due to additional required software updates per the RDC Continuation Acquisition Decision Memorandum Developmental Testing results. - Limited Deployment Decision shifted from Q3FY19 to Q1FY20 in accordance with RDC milestones. FUNDING: Computer Network Defense (CND) (+$1.502M) - FY21 increase is due to Vulnerability Remediation Asset Manager (VRAM) 3.0 development efforts to replace VRAM 2.0 end-of-life, and development work to optimize VRAM for the cloud environment. Navy Cryptography (Crypto)(-$3.553M): - FY21 decrease is due to the completion of the development efforts of KGV-11M End Cryptographic Units (ECU). Key Management (KM) (+$0.214M): - FY21 increase aligns to the initial development of CI-3 Spiral 3 Spin 2 Development, Integration and Testing. Navy Cyber Situational Awareness (NCSA) (-$1.005M): - FY21 decrease reflects a realignment within NCSA from Research, Development, Test and Evaluation (RDT&E) to Operations and Maintenance, Navy (OM,N) due to a change in engineering and fielding strategy to be a predominantly software solution hosted by other planned Defensive Cyberspace Operations/ Network Operations (DCO/NETOPS) systems.
• Service Agency Name: Navy

Entities

Organizations

• United States Navy

Tags

Communities of Interest

• Cyber

DTIC Thesaurus Topics

• Computer Network Security
• Computer Networks
• Computer Security Techniques
• Cross Domain
• Cyber Defense Techniques
• Cyber Protection
• Cyberattacks
• Cybersecurity
• Cyberspace Operations
• Heterogeneous Networks
• Information Operations
• Information Systems
• Network Centric Warfare
• Situational Awareness
• Software Development
• Systems Engineering
• Test And Evaluation

Fields of Study

• Computer science

Readers

• Cybersecurity.
• Enterprise Information Systems Architecture and Joint Command Capability Interoperability Support.
• Maritime and Naval Warfare Studies

Technology Areas

• Cyber
• Fully Networked C3
• Fully Networked C3 - Command and Control