Operational Mission Needs and IT Security Reviews For Operational Systems

capabilitypackageAny warfighter that has ever tried to implement an innovative IT solution to a real world problem has run up against the seemingly endless requirements imposed on solutions in the name of security.  Of course, we understand the necessity of this, but it can often be quite frustrating when a solution seems so close at hand (technically feasible, financially attainable), but is so far away in implementation. And too frequently the many checks and paperwork drills seem to be very disconnected from any real security needs.

I recently met with some folks at NSA that are trying hard to improve that.  Mr. Jerry Watkins, the Communications and Outreach Manager for the Commercial Solutions for Classified Program (CSfC) Office has developed a promising solution. Recognizing that the rate of technology change will always stay ahead of the ability of existing proprietary solutions to keep up, he has designed a layered approach to commercial products.  Standards-based from the start, solutions are preapproved in “capability packages” that are vendor agnostic.  The user can use this capability package, which points to approved vendor devices that meet NSA requirements.

As DoD works more with our coalition partners, these solutions are available to international partners, as well as internal DoD.  Because they are based on the latest commercial technologies available, there is a great opportunity for innovative solution providers to push their products forward.

The technology pieces of a capability package will be subjected to a prequalification, with US government protection profiles and commercial lab testing.  If the product is approved, CSfC includes that product in their list and an MOA is developed between vendor and NSA.  Having all of this work done before the solution is needed is a great advantage.

The desired outcome, of course, is fielded solutions that are useful and grow throughout the warfighters community.  A successful solution will be integrated into the way our forces operate and be included in operational CONOPS.  So far, NSA has had great success with some needed, repeatable solutions such as multi-site VPNs, campus WIFI’s, and mobility secure VoIP.

CTOvision Pro Special Technology Assessments

We produce special technology reviews continuously updated for CTOvision Pro members. Categories we cover include:

  • Analytical Tools - With a special focus on technologies that can make dramatic positive improvements for enterprise analysts.
  • Big Data - We cover the technologies that help organizations deal with massive quantities of data.
  • Cloud Computing - We curate information on the technologies enabling enterprise use of the cloud.
  • Communications - Advances in communications are revolutionizing how data gets moved.
  • GreenIT - A great and virtuous reason to modernize!
  • Infrastructure  - Modernizing Infrastructure can have dramatic benefits on functionality while reducing operating costs.
  • Mobile - This revolution is empowering the workforce in ways few of us ever dreamed of.
  • Security  -  There are real needs for enhancements to security systems.
  • Visualization  - Connecting computers with humans.
  • Hot Technologies - Firms we believe warrant special attention.

 

solid
About ChrisScott

Chris Scott is an experienced department of defense enterprise technology professional and business executive with a long running track record of fielding proven technologies into large organizations. She interacts with senior DoD and IC officials and provides insights to our readers here. She publishes at CTOvision.com and DelphiBrief.com and the new analysis focused Analyst One

Trackbacks

  1. [...] Any warfighter that has ever tried to implement an innovative IT solution to a real world problem has run up against the seemingly endless requirements imposed on solutions in the name of security.  [...]