Information Sys Security Program

Abstract

The Information Systems Security Program (ISSP) ensures the protection of Navy and Navy hosted joint telecommunication and Information Technology (IT) systems from cyber exploitation and attack. The ISSP extends cybersecurity to ensure confidentiality, integrity, and availability of these systems and content processed, stored, or transmitted therein by performing the acquisition, modernization and sustainment of cybersecurity platforms and systems; cyberspace operations include both defensive and offensive measures, which preserve the ability to protect data, networks, net-centric capabilities, and other designated systems while projecting power by the application of force in or through cyberspace. The ISSP includes the protection of the Navy's National Security Systems (NSS). The ISSP must be rapid, predictive, adaptive, and tightly coupled to cyberspace technology. The ISSP provides cybersecurity systems and infrastructure based on mission impacts, cybersecurity threats, information criticality, vulnerabilities, and required defensive countermeasure capabilities. The ISSP focuses on efforts that address the risk management of cyberspace, which provides capabilities to protect, detect, restore and respond. The ISSP provides the Navy with the following cybersecurity elements: (1) defense of NSS, including other mission requirements (details held at a higher classification), naval weapons systems, critical naval infrastructure for Command, Control, Communications, Computers, & Intelligence (C4I) afloat and ashore networks, joint time and navigation systems, and industrial control systems, using modern cryptographic solutions and cyber security tools; (2) technologies for the Navy's Computer Network Defense (CND) service provider that accelerates the Navy's ability to prevent, constrain, and mitigate cyber attacks and critical vulnerabilities; (3) Navy Cyber Situational Awareness (NCSA) technologies that provides the operational context for cyber threat intelligence and Situational Awareness (SA), from external boundaries to tactical edge infrastructures; (4) assurance of the Navy's Cryptography (Crypto) telecommunications infrastructure and the wireless spectrum; (5) sensing cyber threats across all Navy ashore and afloat networks to expand the capabilities of monitoring, assessing, and detecting adversary activities across multiple enclaves through the collection of tools in SHARKCAGE; (6) assurance of joint-user cyberspace domains, using a Defense-In-Depth (DiD) security architecture and its alignment with the Joint Information Environment (JIE)/Joint Regional Security Stack (JRSS); (7) assurance technologies, including Key Management (KM) and Public Key Infrastructure (PKI).

Document Details

• Document Type: R2 Budgetary Justification
• Publication Date: Oct 01, 2024
• Source ID: 0303140N_7_1319_PB_2024
• Change Summary Explanation: TECHNICAL: Key Management (KM): NSA changed methodology from Spirals and Spins to Releases. The KMI program will implement an Agile Development approach that will incorporate the tenets of a Development, Security, and Operations (DevSecOps) development methodology for the continued development of KMI CI-3 capabilities implementing Releases 0 thru 7. SCHEDULE: Navy Cryptography (Crypto): - Shifted KGV-11M deliveries to Q2-Q4 FY24. Key Management (KM): - CI-3 Full Rate Production Decision (FRPD)/Fielding Decision (FD) shifted from Q1FY24 to Q2FY24 in accordance with NSA schedule. NSA reassessed the Technical Requirements Package to include CI-3 as a result of Department of Defense Chief Information Officer (DODCIO) guidance to address Tier 1 updates in CI-3, resulting in additional scheduling delays. - CI-3 Release 0 Development, Integration and Test begins Q4FY23 in accordance with NSA schedule. - CI-3 Release 1 Development, Integration and Test start shifted from Q2FY23 to Q2FY24 in accordance with NSA schedule. - CI-3 Release 2 Development, Integration and Test start shifted from Q4FY23 to Q4FY24 in accordance with NSA schedule. - CI-3 Releases 3-7 Development, Integration and Test will commence 6 months after the prior release starting in Q2FY25. - Key Management Infrastructure (KMI) Tech Refresh completion shifted from Q2FY26 to Q1FY27 in accordance with NSA schedule. FUNDING: Overall funding has a net decrease of $0.362M in subprojects. The most significant funding change is in the Computer Network Defense (CND) program for increasing Continuity of Operations (COOP) development, and Navy Cryptography (Crypto) program for increasing Crypto Modernization (CM) development efforts.
• Service Agency Name: Navy

Entities

Organizations

• United States Navy

Tags

Communities of Interest

• Cyber

DTIC Thesaurus Topics

• Command And Control
• Command And Control Systems
• Computer Network Security
• Computer Networks
• Computer Security Techniques
• Cross Domain
• Cyber Defense Techniques
• Cyber Protection
• Cyberattacks
• Cybersecurity
• Cyberspace Operations
• Information Systems
• Information Warfare
• National Security
• Network Centric Warfare
• Situational Awareness
• Test And Evaluation

Fields of Study

• Computer science

Readers

• Cybersecurity.
• Enterprise Information Systems Architecture and Joint Command Capability Interoperability Support.

Technology Areas

• Cyber
• Fully Networked C3
• Fully Networked C3 - Command and Control