Information Sys Security Program

Abstract

The Information Systems Security Program (ISSP) ensures the protection of Navy and Navy hosted joint telecommunication and Information Technology (IT) systems from cyber exploitation and attack. The ISSP extends cybersecurity to ensure confidentiality, integrity, and availability of these systems and content processed, stored, or transmitted therein by performing the acquisition, modernization and sustainment of cybersecurity platforms and systems; cyberspace operations include both defensive and offensive measures, which preserve the ability to protect data, networks, net-centric capabilities, and other designated systems while projecting power by the application of force in or through cyberspace. The ISSP includes the protection of the Navy's National Security Systems (NSS). The ISSP must be rapid, predictive, adaptive, and tightly coupled to cyberspace technology. The ISSP provides cybersecurity systems and infrastructure based on mission impacts, cybersecurity threats, information criticality, vulnerabilities, and required defensive countermeasure capabilities. The ISSP focuses on efforts that address the risk management of cyberspace, which provides capabilities to protect, detect, restore and respond. The ISSP provides the Navy with the following cybersecurity elements: (1) defense of NSS, including the Nuclear Command, Control, and Communications, Navy (NC3-N) system, naval weapons systems, critical naval infrastructure for Command, Control, Communications, Computers, & Intelligence (C4I) afloat and ashore networks, joint time and navigation systems, and industrial control systems, using modern cryptographic solutions and cyber security tools; (2) technologies for the Navy's Computer Network Defense (CND) service provider that accelerates the Navy's ability to prevent, constrain, and mitigate cyber attacks and critical vulnerabilities; (3) Navy Cyber Situational Awareness (NCSA) technologies that provides the operational context for cyber threat intelligence and Situational Awareness (SA), from external boundaries to tactical edge infrastructures; (4) assurance of the Navy's Cryptography (Crypto) telecommunications infrastructure and the wireless spectrum; (5) sensing cyber threats across all Navy ashore and afloat networks to expand the capabilities of monitoring, assessing, and detecting adversary activities across multiple enclaves through the collection of tools in SHARKCAGE; (6) assurance of joint-user cyberspace domains, using a Defense-In-Depth (DiD) security architecture and its alignment with the Joint Information Environment (JIE)/Joint Regional Security Stack (JRSS); (7) assurance technologies, including Key Management (KM) and Public Key Infrastructure (PKI).

Document Details

• Document Type: R2 Budgetary Justification
• Publication Date: Oct 01, 2022
• Source ID: 0303140N_7_1319_PB_2022
• Change Summary Explanation: TECHNICAL: Key Management (KM): - Capability Increment (CI)-2 Spiral 2 Full Deployment Decision (FDD) renamed to CI-2 Maintenance Revision (MR)-2 Milestone FDD. SCHEDULE: Navy Cryptography (Crypto): - All KGV-11M milestones shifted due to change in developmental contract award schedule; no impact to programmatic schedule. - Advanced Cryptographic Capability (ACC) schedule updates are a result of a change in NSA software release date. - KGV-11M Development and Product Testing extended into 1QFY21 (extension due to COVID-19 schedule delays). - Added KGV-11M TRR 2QFY20. - ACC Deliveries did not start in 4QFY19 due to an NSA schedule slip. NSA fielding decision was received March 2020. Shifted ACC Deliveries to start in 3QFY20. Key Management (KM): - CI-3 Spiral 3 Spin 1 Milestone Full Rate Production Decision (FRPD)/Fielding Decision (FD) shifted from Q1FY23 to Q4FY25 in accordance with NSA schedule. NSA reassessed the Technical Requirements Package to include CI-3 as a result of Department of Defense Chief Information Officer (DODCIO) guidance to address Tier 1 updates in CI-3, resulting in additional scheduling delays. - CI-3 Spiral 3 Spin 1 Development, Integration and Test completion shifted from Q2FY21 to Q4FY21 in accordance with NSA schedule - CI-3 Spiral 3 Spin 2 Development, Integration and Test start shifted from Q1FY21 to Q3FY21 in accordance with NSA schedule. - Key Management Infrastructure (KMI) Tech Refresh initial delivery shifted from Q1FY21 to Q3FY21 in accordance with NSA schedule. - Key Management Infrastructure (KMI) Tech Refresh completion shifted from Q4FY25 to Q2FY26 in accordance with NSA schedule. FUNDING: SHARKCAGE (-$4.108M): - FY22 decrease is due to the maturity of the current SHARKCAGE COTS/GOTS capabilities that are integrated together to support the POR system. Navy Cyber Situational Awareness (NCSA) (-$1.598M): FY22 decrease is due to the reduction of new data feed ingestion resulting in less development and also a shift of effort to maintaining current data feeds and incremental improvements to the existing baseline using Operations and Maintenance, Navy (OM,N).
• Service Agency Name: Navy

Entities

Organizations

• United States Navy

Tags

Communities of Interest

• Cyber

DTIC Thesaurus Topics

• Command And Control
• Command And Control Systems
• Computer Network Security
• Computer Networks
• Computer Security Techniques
• Control Systems
• Cross Domain
• Cyber Defense Techniques
• Cyber Protection
• Cyberattacks
• Cybersecurity
• Cyberspace Operations
• Heterogeneous Networks
• Information Systems
• Situational Awareness
• Systems Engineering
• Test And Evaluation

Fields of Study

• Computer science

Readers

• Cybersecurity.
• Enterprise Information Systems Architecture and Joint Command Capability Interoperability Support.

Technology Areas

• Cyber
• Fully Networked C3
• Fully Networked C3 - Command and Control