Attach 16 SOO Appendix G -Glossary 09232020.docx

4th Estate Network Optimization Defense Enclave Services (DES) Appendix G – Glossary

4th Estate Network Optimization (4ENO) – The program under the Defense Information Systems Agency, to implement and execute the unification of the Fourth Estate Agencies common use Information Technology (IT).

4th Estate Network Optimization Executive Guidance – The policy memorandum granting DISA the authority to direct the transition of the Fourth Estate Agencies. Defense Information Systems Agency’s (DISA) authority includes the ability to give direction to Defense Agencies and Field Activities (DAFAs) regarding all common use IT assets and services designated to transfer to DISA or to a DISA-approved contract.

Access Layer – Includes switches and endpoint connection devices. It is also called the desktop layer because it focuses on connecting client nodes, such as workstations to the network. It ensures that packets are delivered to end user computers; enables Media Access Control (MAC) address filtering; creates separate collision domains; shares bandwidth, handles switch bandwidth.

Administrative Control (ADCON) – Direction or exercise of authority over subordinate or other organizations in respect to administration and support.

Application Catalog (Software Center) – Centralized application where a user can download software that has been approved. The Application Catalog also manages licenses by enabling a user to download software/updates that are required or approved for their device.

Assessment & Authorization (A&A) – A two-step process that ensures security of information systems. Assessment is the process of evaluating, testing, and examining security controls that have been pre-determined based on the data type in an information system. Authorization, on the other hand, is the process of accepting the residual risks associated with the continued operation of a system and granting approval to operate for a specified period of time. Includes Command Cyber Readiness Inspection (CCRI), Risk Management Framework (RMF), Authority To Operate (ATO), Information Security System Manager (ISSM), Information System Security Officer (ISSO).

Authority to Operate (ATO) - Authorization granted by a Designated Approving Authority (DAA) for a Department of Defense (DoD) Information System (IS) to process, store, or transmit information; an ATO indicates a DoD IS has adequately implemented all assigned cybersecurity controls to the point where. residual risk is acceptable to the DAA.

Automated Call Distribution – A telephony device that answers and distributes incoming calls to a specific group of terminals or agents within an organization.

Automated Content Endpoint Monitoring (ACEM) – The technical capability to conduct automatic continuous monitoring of Information Systems for detection and response to advanced threats from internal and external vectors.

Automated Call Distribution - An automated call distribution system, commonly known as automatic call distributor (ACD), is a telephony device that answers and distributes incoming calls to a specific group of terminals or agents within an organization.

Backup & Storage – Backup storage enables the maintenance, management, retrieval and restoration of backup data for any individual, application, computer, server or computing device.

Business Logic - A set of instructions that specifies and controls the actions that happen to a document or item.

Cabling/Termination –The connection of the wire or fiber to a device, such as equipment, panels or a wall outlet, which allows for connecting the cable to other cables or devices.

Capital Assets – Typically refers to network equipment such as routers, switches, servers, etc. that functions as a system with a value over $250,000.

Change Management – Process designed to help control the life cycle of strategic, tactical, and operational changes to IT services through standardized procedures. With the goal of controlling risk and minimizing disruption to associated IT services and business operations. Guides an organization to optimize the use of resources, business process, budget allocations, or other modes of operation, by making significant changes to them.

Cloud Access Point (CAP) – The security conduit through which the Department of Defense connects to the commercial cloud.

Command Cyber Readiness Inspection (CCRI) - A comprehensive review of a DoD entity's cybersecurity, posture that includes a detailed assessment of its Information Assurance programs, the non-classified and classified Internet Protocol (IP) networks, and the critical cyber.

Common Use IT – Common Use IT Services includes: office productivity services; IT service management such as network operations, backup and storage, database management hosting, service desk and IT asset management; IT acquisitions such as hardware and software procurement; storage services; video teleconferencing; voice infrastructure services; cybersecurity; application and hosting; training; and identity management.

Comply-to-Connect (C2C) – Enforcement of patching and hardened configuration applied to devices before they connect, with continual updates.

Cross Domain Solutions - Net-centric, service-oriented, cross-domain information sharing solutions with guaranteed quality of service.

Cyber Security Service Provider (CSSP) – DoDI 8530.01 requires that: “DoD-owned or DoD-controlled information systems… be aligned to a Network Operations and Security Center (NOSC) and supporting cybersecurity service provider(s)… which will provide required cybersecurity service to aligned systems.” In this instance, CSSP refers to what was previously known as ‘CSSP Tier 2.’

Data Loss Prevention (DLP) – The technical capability to observe and inspect data in motion, at rest, or in the cloud for classified, sensitive, and Personally Identifiable Information (PII) in real time to prevent the unauthorized disclosure of sensitive information by internal or external users.

Data Sharing – General reference to supporting Agency/Activity requirements for access to their data on Commodity networks to support Inspector General (IG), Freedom of Information Act (FoIA), and other programs.

Defense Agencies and Field Activities (DAFAs) – All of the Department of Defense, Fourth Estate Agencies within the scope of the 4ENO optimization effort, to include:

· Defense Information Systems Agency (DISA)

· Defense Technical Information Center (DTIC)

· Defense Microelectronics Activity (DMEA)

· Defense Media Activity (DMA)

· Defense POW/MIA Accounting Agency (DPAA)

· Defense Contract Management Agency (DCMA)

· Defense Contract Audit Agency (DCAA)

· Defense Manpower Data Center (DMDC)

· Defense Finance and Accounting Service (DFAS)

· Defense Threat Reduction Agency (DTRA)

· Defense Logistics Agency (DLA)

· Defense Advanced Research Projects Agency (DARPA)

· Missile Defense Agency (MDA)

· Defense Health Agency (DHA)

· Defense Legal Services Agency (DLSA)

· Defense Security Cooperation Agency (DSCA)

· Defense Technology Security Agency (DTSA)

· Joint Chiefs of Staff (JCS)

· Office of Secretary of Defense (OSD)

· Personnel Force Protection Agency (PFPA)

· Washington Headquarters Service (WHS)

· Joint Service Provider (JSP)

Defense Enclave Services – The service provided by DISA that offers common use IT capabilities. This includes all network and enterprise services included in a seat.

Department of Defense Network (DoDNet) - The name of the network that provides commodity Non-Classified Internet Protocol Router (NIPR) and Secret Internet Protocol Router (SIPR) services. A similar example would be DISANet or Defense Information System Network (DISN).

De-Militarized Zone (DMZ) – Separates the public (and potentially malicious actors) from internal networks and sensitive data. Perimeter network segment that is logically between internal and external networks

Department of Defense Working Capital Fund (DWCF) – A type of revolving fund used to finance operations that function like commercial business activities, (e.g., equipment maintenance, supply and storage activities, and transporting equipment and people). DWCFs are used throughout the department in an effort to efficiently provide services or industrial capabilities.

Directory Services - Provide a distribution point for personnel public key certificates, certificate authority (CA) certificate revocation lists (CRLs), and CA certificates.

Domain Name System (DNS) – The system that automatically translates Internet addresses to the numeric machine addresses used by computers.

Dynamic Host Control Protocol (DHCP) – A protocol used to provide quick, automatic, and central management for the distribution of IP addresses within a network. Also used to configure the proper subnet mask, default gateway, and DNS server information on a device.

Endpoint Devices - The user device that connects to the network (e.g. mobile phone, desktop, laptop, tablet, etc.)

EndPoint Security Solutions – Provide Endpoint Security tools to prevent targeted and deliberate computer network operations against Department of Defense Information Networks (DoDIN), destructive activity (malware infections, e.g. viruses, Trojan horses, worms, bots, and rootkits) from nation states, criminals, hackers. Evolve DoD Host Based Security System (HBSS) to Endpoint Security and integrate endpoint data to situational awareness tools such as Secretary of Defense (SECDEF) Cyber Score Card.

Enterprise Directory Services (EDS) – A suite of services that provide authoritative DoD enterprise identity and contact attributes for combatant commands, services, and agencies (CC/S/As).

Freedom of Information Act (FoIA) - It provides the public the right to request access to records from any federal agency.

Heating, Cooling & Ventilation (HVAC) – Indoor environmental system to maintain temperature, humidity, and air quality for IT capital assets.

High Performance Site – These are considered the site or sites that serve as an Agency’s Headquarters or central offices and require additional layers of redundancy.

Identity and Access Management (IdAM) – Service that enable authenticated and authorized users (human and machines) to access and use information environment resources in accordance with established policies.

Information Security System Manager (ISSM) – Is responsible for developing and managing Information Systems cyber security, including disaster recovery, database protection and software development. Manages IS security analysts to ensure that all applications are functional and secure.

Information Security System Officer – Is responsible for research, develop, implement, test and review an organization's information security in order to protect information and prevent unauthorized access.

Internet Access Point (IAP) – An enterprise Virtual Private Network (VPN) service providing IAP internet access to mission partners across the DISN.

Intrusion Detection System (IDS) - An IDS monitors network traffic searching for suspicious activity and known threats, sending up alerts when it finds such items.

Intrusion Prevention System (IPS) - An IPS is a form of network security that works to detect and prevent identified threats. Intrusion prevention systems continuously monitor your network, looking for possible malicious incidents and capturing information about them.

Letter Estimate (LE) – An LE is a formal document submitted to the partner as a result of a request for new, or changes to existing, workload. The LE restates the partner’s expectations/mission, requirements, assumptions, and the recommended technical solution. It also includes the estimated cost for implementation and sustainment of the new or changed workload. LEs establish the basis for, or changes to, the service level agreement.

Memorandum of Agreement (MOA) – Prepared to document the specific terms and responsibilities of a binding agreement between two or more parties. An MOA includes specific terms that are agreed to and a commitment by at least one party to engage in action. It includes either a commitment of resources or binds a party to a specific action or both. An MOA may or may not include nonrecurring reimbursable support, but cannot include recurring reimbursable support.

Mobility – The use of mobile devices, such as smartphones and tablets, for business purposes. Includes mobile device management (e.g. DoD Mobility Unclassified Capability (DMUC)), as well as provisioning of devices (e.g. Navy Spiral contract) and device service (e.g. AT&T).

NetOps – Capabilities that automate the Operations, Administration, Maintenance, Provisioning and Troubleshooting of network services and infrastructure

Network Operations Center (NOC) / Security Operations Center (SOC) – Monitoring and intervention in availability and performance (NOC) and incidents and alerts (SOC) affecting the network.

Onboarding - Provide SSP network capabilities to end-users

Patch Management – Patch identification, prioritization, implementation, roll-back and reporting.

Presence (Publish user status) – A part of a user’s profile that indicates the user’s current availability and status to other users in the organization. Displayed in applications, such as, Cisco Jabber, Personnel Accountability Management (PAM), Microsoft Office 365, etc.

Print Services – All functions encompassing physical document production, scanning, copy/reproduction, and Optical Character Recognition, and bounding and binding of physical documents. This service includes the selection, installation, maintenance, and sustainment of printer and multifunction devices for the aforementioned functions.

Public Key Infrastructure (PKI) – Provides a trusted identity management infrastructure through software and hardware to bind keys for encrypting and decrypting messages and the associated user’s identity, ensuring they are authentic via a Certification Authority.

Release and Deployment – Deploy releases into the live environment in a controlled manner. Release and Deployment Management ensures the integrity of the live environment is protected, and correct components are released.

Request Fulfillment – To fulfill service requests from users and route each request to the appropriate process for handling within accepted service levels.

Risk Management Framework (RMF) - Is a set of criteria that dictate how the United States (U.S.) Government IT systems must be architected, secured, and monitored.

Scanning – Inspection of potential points of exploit on a computer or network to identify security vulnerabilities.

Seat – Seats are a unit of measure to indicate the size of a network. It is considered to be a physical desktop, laptop, thin client, or zero client device.

Secure Content Delivery – The use of commercial Internet Technology to accelerate and secure DoD content and applications on SIPR network SIPRNET using compliant standards and IP Security tools (Cryptographic Tools) that can consist of hardware and software.

Security Stack – A suite of equipment that performs firewall functions, intrusion detection and prevention, enterprise management, virtual routing and forwarding, and provides a host of network security capabilities.

Service Desk – Designed to provide the user with a single point of contact for all of their IT needs, used to communication and satisfy both user and IT provider objectives.

The DES architecture will transition globally dispersed and diverse service desks to a common Service Support Environment.

Single Service Provider (SSP) - One entity to provide all required transition and sustainment for infrastructure, network, operations and management, engineering and innovation, cybersecurity and technical refresh support services under a single unified network.

Standard Site – Any location that is a service center location or a field site (Backend) / Non-HQ

Supply Chain Risk Management (SCRM) Compliance – Process of identifying, assessing, and mitigating the risks associated with the distributed and interconnected nature of IT/Operational Technology (OT) product and service supply chains.

Training – Training required to transition to usage of new capabilities (e.g. new IT Service Management (ITSM) software); developed for online “self-help” user database.

User Activity Monitoring (UAM) – The technical capability to observe and record the actions and activities of an individual, at any time, on any device accessing U.S. Government information in order to detect insider threats and to support investigations.

Virtual Desktop Infrastructure (VDI) – Virtualization technology that hosts a desktop operating system on a centralized server in a data center.

Virtual Private Network (VPN) – Technology that creates a safe and encrypted connection over a less secure network, such as the internet.

Workflow Enablement – Used to consistently manage common business processes within an organization by enabling the organization to attach business logic to documents or items.

Zero Trust Architecture – Network architecture that required verifying the identity of all people and devices prior to system access.

image1.png image2.png