Additional Background and Historical Draft.pdf

Firm Fixed Price Catalog Item SharePoint Environment

The following SharePoint environments will be part of the SharePoint infrastructure that will comprise the SharePoint Fixed Price Catalog items. This information represents the general design of the system and may not be 100% accurate at the time of transition.

1. High Level diagram of the JSC SharePoint invironment. The Staging environment is a replica of production with smaller storage, CPU and Memory allocations.

2. High Level diagram of the KSC SharePoint Non-Production Environment.

DRAFT3. High Level diagram of the KSC Production Environment. The current environment has 4 web front ends as opposed to the 3 depicted in the drawing.

DRAFT

Third party software installed on KSC environment.

1) Virto SharePoint Workflow Activities for SharePoint 2019

a) A no-code set of SharePoint activities for creating custom Workflows using SharePoint Workflow

Designer.

2) Nintex Forms for SharePoint 2019

a) A web based designer that enables forms to be created within SharePoint quickly and easily.

3) Nintex Workflow for SharePoint 2019

a) Allows users to create workflows very quickly and easily.

4) Metalogix ControlPoint

a) Permissions management, administration and governance tool for securing sensitive content within SharePoint environments.

Information Data and Analytics Services (IDAS)

IDAS is the consolidation of the Information Management Program (IMP) and Technology and Data

Division (TDD). The information contained below is future state for IDAS, after Transformation. IDAS

Services are grouped into six areas: CDO Data Strategy & Governance, Data Compliance, Enterprise Data

Operations, Data Consulting Services, Data Science Services, and Business Management.

Services are detailed below, with high level description and supporting information about projects and activities.

CDO Data Strategy and Governance CDO Strategy Support and Federal Requirements: Strategic Leadership and Engagement for all NASA Data-related areas, setting the environment for NASA to unleash the full potential of its data. Works with Federal Data Council and senior leaders across NASA and the Federal

Government to lead, adapt and apply data best practices.

• Evidence Act, Geospatial Data Act, Federal Data Strategy Plans, Open Data Plan

• Data Governance: The development and promulgation of guidance and services that help define, govern, and manage agency data policies, business processes, and overall data management informed by Federal Data guidelines. Includes such things as support for development of Data Management Plans, advising on Data Architecture & Standards, Agency/Local Data Policies and Procedures.

• Agency Congressional Reporting, Data Strategy, Information Quality Act, Comms and

Outreach

• Digital Transformation Integration: Facilitates and contributes to the intersection of data, mission, technology, and modernization needs. CDO and DT collaboration, supporting executive level contributions and engagement moving toward an advanced digital operational environment leading to more informed decisions, increased operational efficiency, and streamlined processes.

• Research Integrity, Artificial Intelligence Ethics, TxA connections

• Governance ITSB Linkage: Prospective Service Formulation, Technology Assessments, Open Data

• Prospective IDAS Service Formulation, Technology Assessments, Open Data

Data Compliance

• Information Policy: The development and promulgation of policies and procedures that enable managing codified information in an organization throughout its life cycle and state/form, from creation to its access and eventual disposition. Including identifying, classifying, storing, securing, retrieving, tracking and destroying or permanently preserving digital and physical records.

• NASA NPRs, NPDs, STI, Records Management, Forms, PRA, Privacy Act

• Data Standards: The development and promulgation of policies ensuring agency conformity with

Federal/NASA guidance. That data standards and governance processes meet statutory, regulatory, and policy standards for information quality, collection, modeling and simulation data and distribution practices for records and digital assets.

• Data Architecture, Release Authority (Data, STI, Code), Data Life-Cycle Management, Modeling / Simulation data

• Policy integration: CIO - IDAS and other SL NPD, NPR, handbooks and in-line guidance. MSD and Missions

• Policy Assessment and Development: Linkage with CDO anticipating Fed STRATEGY and Governance rep for CIO

• Data Protection Integration: The development and promulgation of policies and procedures for conformity, access and integration of data with protection protocols.

• FOIA, CUI, Legal, Export Control

• Data Stewardship: The development and promulgation of policies ensuring organizational data is accessible, usable, safe, and trusted, throughout the data lifecycle.

• Link to CDO Strategy for NASA Stewards, COI, Audit and Reporting Integration, Training and Engagement, Communications

Enterprise Data Operations

• Data Information Collections Services: Systems, platforms, resources, and applications to perform Enterprise services needed to collect, maintain, and distribute large collections of scientific, technical, business, and other categories of information.

• Forms Services, STI Services, Persistent Identifier Services, ORI, SORN development, Limited Package Routing , Exchange planning for Library Data

• Enterprise Data Platform / Intelligent Search: The Enterprise Data Platform services design, deploy and deliver data related information technology (IT) systems, processes, and services across NASA. Platform services supporting data interoperability include integrated search and analytics tools. Platform services provide a secure, readily accessible environment to enable required data collaboration capabilities.

• Data Analytics & Visualization, Library Data Search Services, Datahub/Enterprise Search

• Operations, Modernization and Application Development: Processes and systems used to assess existing data services to define, identify, classify, track, and collaborate on modernization planning. Services include evaluation of process efficiencies, continuous data systems monitoring, incident response, dev/ops, security plan mgmt., and security operations.

Translation of supported data information via modern options for graphs, charts and other visual representations. Real-time streaming analysis of data in the cloud via low latency, highly available, scalable complex event processing.

• Security Operations, DevOps, Cloud Native System Engineering, Continuous Monitoring, Incident Response, Security Plan Management, Configuration Management

• Partnerships & Data Exchange Services: Applications and services that enable the exchange of agency R&D results, scientific research, technical and business data, with stakeholders including contract partners, academia, global science and technical communities, and the general public.

• Internal Data Partnerships, Internal Data Integration, api.nasa.gov, data.nasa.gov, code.nasa.gov, Cataloging Services (ORCID, CHORUS, DOIMS), 0 Trust

• Customer Experience and Support: Processes and systems that provide a single point of contact for users to get assistance with IDAS services. Including help desk, issue tracking, incident response, public access requests, using a modern cross service approach to easily find solutions to common queries, prioritize cases, etc.

• CRM, UI/UX, Incident Response

Data Consulting Services

• ITASC - Information, Technical Advisement Services and Coordination: Support and services to consider applications and services that enable the collection, storage, transformation, and distribution of business, mission, and technical data utilizing a generalized data collection methodology that has not been tailored and codified in any specific business or technical application. Potential collaboration with Kickstarter.

• Project Management (data focused), Risk and Performance Management, Ops and Transition, Emerging IT - IT Technology Infusion, Solutions Architecture

• Portfolio Evaluation and Modernization: Data Lifecycle Management (DLM( services and support for organizations and missions. DLM is the set of tools, processes and associated information used to manage the entire life cycle of any of the agency data assets from its acquisition, storage, distribution, utilization, and disposal. Planning and managing the creation and changes to data definition, configurations, affiliated engineering data, Modeling / Simulation data,and data on the performance in mission environments.

• Data Mapping, Data Modeling, Modeling / Simulation Data, Release Management, Data Utilization Management, Data Integration Services, Data Access Authorization, Archival Services

• Open Data and Open Science: Services, coordination and applications needed to contribute to the NASA Open Data and Open Science initiatives. Advising and/or facilitating interoperability of content from multiple enterprise-type sources, such as databases and intranets, searchable to a defined audience. Engagement includes policy, technologies, standards, inventories and interaction with external Open Science participants to leverage NASA information needed to conduct enterprise-level human and machine searches for information.

• External Data Partnerships, External Data Integration Planning/Eval., STI, SOS, Research

Lifecycle Support

• Data Accessibility: Integration of data and/or data access internal NASA and with external communities (limited and/or public)

• Emerging Data Services: Services to engage and contribute to investment, development and incubation of new technologies to create new or better solutions which meet unarticulated or existing agency operational data needs. This includes evaluation of Center unique technologies for possible expansion and adoption. Includes new technology solutions such as AR/VR and new product incubation services. Repository, agile consultation, Kickstarter integration, APPDAT IoT

Data Platform, ADDPAT Mission Telemetry Service, Data Services – Graduated, APPDAT Gitlab, APPDAT Keycloak, AR/VR

• Data Services – Agile consultation, Incubator, Kickstarter integration, APPDAT 3d Asset

Repository, APPDAT IoT Data Platform, ADDPAT Mission Telemetry Service, Data

Services – Graduated, APPDAT Gitlab, APPDAT Keycloak, AR/VR

• Inter-SL collaboration and coordination

Data Science Services

• Data Science Operations: Provides scalable, affordable, mature data science services, beginning with text analytics, visualization and decision support. Strong interdependencies and teamwork with Data Operations. As DS Applied R&D matures capabilities, they will be promoted from DS

R&D to DS Ops

• Decision Support Services, Data Analytics, Text Analysis, Visualization

• Data Science Foundations: Foundational DS tools, platforms and training to support DS Ops and

DS R&D. Strong interdependencies with cloud and data services.

• DS Architecture, DS Workforce Development, Tools, Platforms & Training

• Data Science Consulting: Data Science planning, strategy, leadership, outreach, and more.

• AI and Data Ethics Consulting, DS Outreach Across NASA and Beyond, DT AIML & DS Leadership, Planning, Strategy: Services to apply cutting edge DS techniques to unique problem sets via small government DS cadre and scalable DS contract workforce based on demand.

• Data Science Applied R&D: DS Consultation, Data Scientists for Hire via Contract, Applied AIML(+) Capabilities

• Inter-SL collaboration and coordination

Business Management

• Communications: Website Management, Public Comms, Internal Comms, Stakeholder

Management, Relationship Management

• IDAS Service Line Board & Portfolio Leadership: Oversight, integration and reporting for the portfolio of IDAS projects and new activities (integration with PMO and ITMB)

• Project Management: Process Assessments, IDAS-integrated Service Line Scheduling, Portfolio

Assessment

• Road mapping: Strategic Project Planning, Strategic Resource Planning, Linkage with Ops ITSM, Ops EPMO and SAO awareness

• Resource Management: Budget, Software Purchasing, Cloud Cost Management, Forecasting, Service Usage Support, Base/Demand linkage with EBMO, Enterprise contract support development linkage with ITAM and Acquisition planning

• IDAS Service Provider Mgmt.: Personnel Mgmt., Training, Development, Emerging Skillsets, Talent Assessments, Interoperability and exposure

Vision

▪ Provide services and governance to allow the NASA community to publish and exchange information both internally and externally with ease and efficiency while maintaining a compliant and secure posture.

11/13/2023

Web Services Office (WSO)

Responsible for Enterprise Web and Cloud services. The office and service offerings are provided by the Web

Services Office which oversees the WESTPrime contract. Responsibilities of the group include:

• Governance over NASAs web ecosystem including domain names, application architecture/guidelines

• Providing managed Cloud Services to all centers - Amazon Web Services (PaaS) – 376 instances

• Design, development, deployment and operation of internal and external web applications including www.nasa.gov, images.nasa.gov, science.nasa.gov – 58 applications

• Enterprise software (SaaS) including Google Apps, Devops, Wiki, Blog, Drupal, Wordpress

More information inside.nasa.gov/webservices

Application Portfolio Highlights

▪ www.nasa.gov – Web content management system

(CMS) provided OCOMM. Top government site and frequent winner of Webbys. 13,365,314 visitors with

53,575,119 page views.

▪ Solar Eclipse – Streaming and web content provided on behalf of SMD. 12.1 million unique viewers (more then

Super Bowl 16) streamlining

▪ AVAIL (Images.nasa.gov) – Image publishing to public on behalf of Nasa Images Group. Created 2015 as first site to publish NASA images in multiple formats

61/13/2023

Application Portfolio Hilights

▪ Magic Draw – Modeling Software as a Service solution for

Office of Chief Engineer for shared licenses across NASA

▪ CARA – Monte Carlo simulation for OCE – perfect use of cloud for expanding and contracting compute resources

▪ EVA - Data integration for Extravehicular Activity first users of containers and serverless computing in cloud

▪ Gsuite – Google docs for NASA community

▪ Box – Dropfolder functionality for NASA community

▪ 55 additional applications/websites in environment

71/13/2023

Governance

▪ Web Services Board – meets biweekly. Representation from center web service managers and directorates as well as Office of Communications (OCOMM)

▪ Domain Name approvals – oversee addition of the 3rd level domains in the public space in conjuction with

OCOMM and directorates

▪ Web site policies for compliance – e.g. 508, security etc.

but NOT content

▪ Web site visitor metrics and portfolio management –

STRAW and Google Analytics

▪ Certification Approvals

▪ Still need to put together a plan for “clean-up” of derelict web sites – managing 1200 public and 1400 internal Sites 81/13/2023

WESTPrime Overview of Notional Technology Stacks

Web Services Cloud Overview

Web Services Cloud is a secure, high-performance, multi-tenant environment that is hosted in Amazon’s public and private cloud facilities.

What does that mean to NASA?

▪ Rapid Deployment – AWS infrastructure and software can be deployed instantaeously

▪ Cost Savings – Infrastructure is on-demand, scalable, and shared across multiple tenants

▪ Secure – FedRAMP and NASA Security and Compliance; Continous monitoring and backup, disaster recovery solutions are provided

WESTPrime

Cloud Architecture

Customer Case Studies at WESTPrime

▪ EVA

» Electronic Data Integration Solution - Provides unified access management of internal datasets.

» Comprises of multiple systems like Navigator, Search, ESOC, ETL, Sevanah, Document Store, etc.

» Uses S3, SQS, optimized memory r3 EC2 instances

▪ Enterprise Search – Uses SOLR and Hadoop Framework

» Cost effective: Significant savings over commercials search solutions

» Indexed 17 Million+ documents to date

» Hosted in secure, ITAR compliant GovCloud Region at AWS

» Scalable infrastructure: Designed for high availability and performance

» Processes data at a throughput of over 400 mbps

▪ SERVIR — an acronym meaning “to serve” in Spanish

» Joint venture between NASA and the U.S. Agency for International Development (USAID), which provides satellite-based Earth observation data for managing climate risks and land use.

» 34 Countries / 19 Satellites and Sensor Data / 1M+ Maps produced on the SERVIR Web portal in 2013

» Estimated ~22M End Users

» Leverages EC2 servers and S3 for external object storage

▪ Drupal-As-A-Service

» MSFC key partner in defining the service

» Multi-tenant or dedicated infrastructure options

» Custom Drupal distribution of NASA and Drupal community created modules.

» Maintenance, patching and hosting are provided

» Offered in a public internet facing, private NASA networks, and a private SBU data venue

Innovative Solutions hosted at

WESTPrime Security

Overview

▪ Security-as-a-Service

» Security functions are off-loaded from customers.

» Fully managed security stack and monitoring.

» Secure Architecture, Engineering, and Development support.

» Fully managed application security program.

• Static code analysis;

• Dynamic app scans by team of experts;

• Secure development support.

▪ Compliance-as-a-Service

» Fully managed ATO for apps leverages existing compliance team/work.

» AWS FedRAMP ATO at Moderate level.

» GovCloud available for ITAR and PII workloads.

» NASA Continuous Monitoring ATO at Moderate level.

» ATO granted August 2013 & 800-53 Rev 4 Updated – June 2015 16

WESTPrime Security

Engineering & Operations

Security Engineering and Operations

▪ Web Application Firewall for public apps

▪ Perimeter firewalls and access control devices (bastions, etc)

▪ Host-based agent and centralized logging

▪ WESTPrime managed security services provide:

» Monitoring and Incident Response;

» Coordination with NASA SOC and center IR teams;

» Vulnerability Management and remediation support;

» Application Security support services;

» Secure Application Architecture support services.

Software-As-A-Service

▪ Drupal-As-A-Service

▪ WordPress-As-A-Service » Shared infrastructure for cost savings for templated or custom implementations

» Allows for fast, easy site launches

» Secure, redundant environment

▪ Inside.nasa.gov » Intranet solution that any organization at NASA can use to securely connect teams, projects, and knowledge

» Provides the ability for groups to share content, documents, events, discussions, task lists, calendars, etc.

▪ To find out more or to order WESTPrime services, contact webservices@lists.nasa.gov or visit Web Services at https://inside.nasa.gov/webservices

▪WESTPrime Service Catalog -https://inside.nasa.gov/services/westprime-service-catalog

Web Services Office (WSO) Contact

211/13/2023

Q&A

Thank You

For more information please go to inside.nasa.gov/webservices

Available WESTPrime Services

Cloud Offerings

▪ Standardized Linux (LAMP)

Stacks

▪ Standardized Windows

(WAMP) Stacks

▪ Internal Software-as-a-Service

▪ External Software-as-a-Service

▪ Platform-as-a-Service

▪ Custom Application Stacks

▪ Sandbox – Free Tier, Managed

▪ Disaster Recovery Services

231/13/2023

Managed Cloud Services

▪ Design & Readiness Assessments

▪ Secure On-Boarding and Migration

▪ Patching and Updates

▪ Vulnerability Assessments

▪ Asset Management and CMDB

▪ Backup & Contingency Planning

▪ Incident Response

▪ System Monitoring

▪ FedRAMP Continuous Monitoring

▪ Cost Control, Optimization, and

Chargeback