Attachment D - IT Master Plan 2020.pdf

NASA – Glenn Research Center: Office of the Chief Information Officer

IT Master Plan 2020 October 2019

Contents

Introduction

Purpose

NASA Glenn’s Information Consumers and Stakeholders

IT Strategic Planning Process

Guiding Objectives

NASA Glenn’s IT Environment

Applications Planning

Communications Planning

Computing Planning

CyberSecurity Planning

End-User Planning

Information Management Planning

IT Management and Governance Planning

Appendix A1: Applications Program Roadmap

Appendix A2: Applications Program Target State

Appendix B1: Communications Program Roadmap

Appendix B2: Communications Program Target State

Appendix C1: Computing Program Roadmap

Appendix C2: Computing Program Target State

Appendix D1: CyberSecurity Program Roadmap

Appendix D2: CyberSecurity Program Target State

Appendix E1: End-User Program Roadmap

Appendix E2: End-User Program Target State

Appendix F1: Information Management Program Roadmap

Appendix F2: Information Management Program Target State

Appendix G1: IT Management and Governance Program Roadmap

Appendix G2: IT Management and Governance Program Target State

Introduction

Technology is evolving at unprecedented rates and creating countless opportunities to improve mission productivity, data insights, and business intelligence. Technological advances across industry including mobile computing, process automation, software defined networking, data analytics, machine learning, artificial intelligence, and more lead to new opportunities to advance NASA Glenn Research Center’s programs and projects. Complementing those technological advances, new and innovative service delivery and acquisition practices including shared services and cloud computing promise to create efficiencies and open new opportunities to shift personnel and financial resources towards strategic investments.

These opportunities are balanced by a series of risks facing NASA Glenn Research Center (GRC).

Legacy IT systems and infrastructure are costly to maintain, even more costly to replace, and create unnecessary operational and security risks. Cybersecurity threats are multiplying rapidly, anchored by a legacy environment unprotected from modern threats while a proliferation of connected devices and cloud services open up new and still uncovered avenues for malicious actors. Information management is accelerating towards critical importance as NASA strives to maximize the benefits of the data it produces. Throughout all of this change, NASA GRC’s IT Workforce is challenged to transition from traditional “service delivery” functions to new “service broker” roles while staying current with technology trends in order to both manage service providers and effectively consult with the Center’s researchers and engineers for tailored technology solutions.

NASA’s Mission Support Future Architecture Program (MAP) is transforming the way the Agency does business. Our implementation of this transformation is helping us to identify opportunities for efficiencies, to facilitate collaboration, and to minimize redundancies, while enabling our implementation of the Federal Information Technology Acquisition Reform Act (FITARA).

The OCIO will manage IT at NASA GRC as a strategic resource in order to enable the use of data to drive advances in space missions and aeronautics in support of NASA GRC’s research and engineering efforts.

The OCIO will implement solutions and provide oversight of NASA GRC's IT strategic resources in order to enable the production, use, security, and management of data to support these strategic advances.

Guiding Objectives

The Agency’s IT Strategic Plan identifies several mission oriented strategic outcomes that serve as guiding principles for decisions the Center makes on its IT investments, projects, and policies.

NASA Glenn’s IT Environment

Supporting GRC’s missions, the Center has a large and diverse portfolio of IT services and projects.

The Center’s organizations annually spend an estimated $60M-$65M (including Civil Servant Labor) on a mix of IT products and services. ~60% of the total IT is procured and delivered by the Center and

Agency OCIO organizations. The remaining 40% (~$40M) is procured and implemented by other organizations across the Center. These services are a mix of Enterprise Services, Center Standard

Services, and Center Unique Services.

Enterprise Services are acquired through the Agency

OCIO’s enterprise programs and federal shared service providers. GRC’s OCIO brokers those services ensuring the Center’s requirements are met by the enterprise services and projects are successfully communicated and implemented.

Center Standard Services are primarily delivered by the

Center OCIO (with some exceptions) and are comprised of systems and services utilized by large portions of the Center’s workforce and programs.

GRC’s OCIO delivers these services and in those cases, it is responsible for the successful oversight and governance.

Center Unique Services are those consumed by small populations and individual projects at the Center. Often associated with mission-specific IT, these services are most often procured, implemented, and delivered by organizations outside of the OCIO. The GRC OCIO provides oversight and governance of the acquisition and delivery of Center

Unique Services.

To effectively manage this diverse environment, the IT portfolio is organized into 7 IT Programs, 45

Capabilities, and 188 Services.

This IT Master Plan outlines strategic investments, divestments and practices that enable the Center to balance efficiency and effectiveness for the capabilities and services within each of these programs.

Optimizing the mix of enterprise, center standard, and center unique services will ensure the Center’s programs and projects are positioned with agile and responsive IT services to best meet the Center’s needs.

Applications Communications Information Management

CyberSecurity End-UserComputing IT Management and Governance

Applications Planning

The IT Applications Program addresses NASA’s 21st Century Information Technology Web

Services demands. The Program provides support for the design, development, implementation and maintenance of applications, databases, and web services, and delivers solutions according to customer demand and industry best practices.

Current Situation

NASA Glenn’s current Applications Program is comprised of hundreds of websites, business applications, and software applications in direct support of the Center’s mission and mission support functions. Comprised of 5 capabilities and 28 services, the Center spends upwards of $19M annually on this portfolio of solutions. While the bulk of the annual investment is in software licenses, the Center spends approximately $1.5M annually in sustaining basic web and business application services for the

Center.

Recent years have seen a reduction in platforms for web sites and business applications, but the Center retains a legacy application platform hindering access to new and evolving requirements and technologies. Opportunities face the Center in the areas of process automation, mobile applications, business intelligence, artificial intelligence, cloud computing, and the management of the increasing use

Communications Planning

The Communications Program ensures any person participating in fulfilling NASA’s mission will have the ability to communicate securely anywhere, at any time, utilizing communication technology that is reliable, available, responsive and robust. The communications infrastructure uses a combination of commercial and private entities to enable the delivery of data, voice and video services.

NASA Glenn’s current Communications Program provides a diversity of critical center functions ranging from local area networks to thousands of employees and facilities to end user communication devices and software fostering a collaborative and dynamic work environment. Comprised of 6 capabilities and 32 services, the Center spends upwards of $10M annually on this portfolio of solutions.

These investments comprise a broad mix of enterprise provided functions as well as Center unique communications services for the unique missions, facilities, and labs at Lewis Field and Plum Brook

Station.

Computing Planning

The Computing Program provides excellence in centralized on-demand compute, application, and storage services with efficiency, flexibility, elasticity, and high functionality to meet immediate mission demands. Provided are the hardware, software, and expertise to enable greater use of computational and visualization technologies to take advantage of the bandwidth of the human visual system.

Computing services provide GRC’s tenant programs, researchers, and business units with the storage, processing, and computing facility resources needed to execute advanced technology research and mission critical programs. Comprised of 6 capabilities and 17 services, the Center spends upwards of

$5M annually on this portfolio of solutions. Organized by IT Facilities Management, Infrastructure as a

Service, Platform as a Service, Storage, and High Performance Computing, these services provide the foundational computing infrastructure for applications and services.

CyberSecurity Planning

The CyberSecurity Program provides consistent, responsive, cost-effective, and risk-based information security that ensures confidentiality, integrity, and availability of data and information.

NASA and NASA Glenn’s programs and workforce are increasingly reliant on IT systems. This expanding consumption, along with the proliferation of connected devices, cloud computing services, and increasing complexity of IT solutions is broadening the cybersecurity risk posture for the Center and

Agency. Comprised of 5 capabilities and 34 services, the Center spends upwards of $8M annually on this portfolio of solutions. NASA Glenn’s CyberSecurity program includes Security Solutions

Consulting, Program Assessment and Audits, Common Security Controls, and Awareness Education for

NASA’s workforce.

As the internal and external cyber threats evolve, the Center is seeing its core competencies

(engineering, communications, materials) and facilities being increasingly exposed to loss of information confidentiality, integrity, and availability, which is acutely problematic to the Space and

End-User Planning

The End-User Program provides the administration and management of all desktop/laptop computers, mobile devices, print, and collaboration services provided to employees. It ensures all are configured to federal standards. This includes desktop security tools for these systems as well as the email and Active Directory infrastructure for the agency. The Program also provides the customer interface and support for IT services through Enterprise Service Desk.

The End-User Program is the most readily apparent and pervasive interaction between NASA’s IT services and the GRC workforce. Comprised of 7 capabilities and 29 services, the Center spends upwards of $12M annually on this portfolio of solutions. The End-User Program significantly defines how people get their work done and is a main indicator of how people want to conduct their work. This area is the day-to-day touch point into users interacting with their primary business functions.

Comprised of the devices and software services required for end user computing (workstations, tablets, smartphones, associated software, and support services), NASA GRC consumes ~90% of its end user computing devices from the Agency’s enterprise contract.

Information Management Planning

The Information Management Program furthers the development and application of an

Information Architecture that improves the quality and accessibility of data, as well as incorporates the data lifecycle throughout the information creation, usage, and decommissioning process.

The Information Management Program is a relatively new program and in the process of being formulized across the Agency. Likewise, GRC is in the process of program formulization, and establishing dedicated program leadership. Comprised of 6 capabilities and 14 services, the Center spends upwards of $1.5M annually on this portfolio of solutions. Elements of the program include

Records Management, STI, Publishing, Data Management, and Advanced Analytics and Visualization.

Many of these services are delivered and executed out of multiple GRC Directorates – primarily the

Center Operations Directorate and the OCIO.

The need to expand the Center’s paper records storage solutions to capture and make accessible digital records and satisfy federal electronic requirements are imperatives driving the need for local formulation of the Information Management Program. The exponential increases in electronic data accumulated by the Center present opportunities to improve efficiencies and productivity from Data Life-Cycle

Management. The accumulation of this data also introduces the strategic value of Big Data Mining, IT Management and Governance Planning

The IT Management and Governance Program ensures the successful intigration and execution of IT Services, their planning, value proposition, effectiveness, via participatory governance and strategic decision making, across full the scope of IT Authority for the Center.

The evolution of IT and NASA Glenn Research Center’s dependency on it for mission execution continues to increasing at a rapid pace. Comprised of 10 capabilities and 34 services, the Center spends upwards of $7M annually on this portfolio of solutions. As the environment becomes more diverse, more technologically advanced, and more integrated, the Center and Agency continues to place an increasingly higher priority on the strategic management of IT. As Federal and Agency operating models for IT trend towards shared services and enterprise services, the GRC OCIO will ensure the

Center’s consumption and delivery of IT is right-sized ensuring an optimal balance between enterprise and local services.

Through this change, the Center’s IT workforce will adapt to the new operating model, stepping away from traditional IT engineering and delivery roles and into solutions architecture and service brokering roles.

Throughout this shift the OCIO must also address the IT governance expectations of federal FITARA and FISMA legislation as well as the Agency’s BSA decisions. The OCIO strives to execute this transition as a value-added enabler to the Center’s missions, and not as a compliance oversight function.

Successful navigation through this transformation requires a disciplined approach to IT Management.

Appendix A1: Applications Program Roadmap

Vision:

Goals & Outcomes:

Capability Service Current State FY20 FY21 FY22 FY23 FY24 Target State / Benefit Maintain minimal support of the ColdFusion environment when CF moves to the

Eliminate phase and work to migrate remaining applications to other languages or delivery mechanisms

Decommission the Cold Fusion environment when remaining

CF applications have been transitioned to other delivery mechanisms

C(EA-F)(R)(VE) C(EA-U)(O)(VE)

Implement and mature the

JiRA environment and service to deliver Business Process

Automation solutions

C(EA-F)(R)(VE)

Investigate application modernization technologies to implement a new application development environment;

replaces current ColdFusion environment

C(EA-U)(OT)(VE)

Web and Native

Application Services

Web information available anywhere from any platform. Information is easy to find. Mobile enabled websites and applications supporting Work-from-Anywhere.

Web Design and

Development

Website support is provided to meet specific needs on a variety of tools.

Web Applications are developed in a Central environment primarily using ColdFusion, while infusing newer application development techniques and languages. These development techniques can support any of the Business Management

Applications.

ColdFusion is in the review phase of the Agency’s language lifecycle.

EA-Phase U with Drivers being R, P, C, T, and/or D

Continue full support of the current web application development environment and tools to deliver applications in ColdFusion (CF), in line with the Agency’s Application Development

Language Roadmap

C(EA-F)(R)(VE)

Operate and maintain new web application environment and the applications

C(EA-U)(OT)(VE)

GRC Applications Program Roadmap Address NASA’s 21st Century Information Technology Web Services demands and be a relevant key player to the agency. Design, develop, implement and maintain applications, databases, web services and deliver solutions according to customer demand and industry best practices.

- Build the organization and modernize service delivery with great communication backed by well written policy and procedure which contributes to better operation and project management.

- Achieve vendor independence through the use of open source software and open standards.

- Support the increasingly data-intensive nature of NASA projects by including the need to consider the data lifecycle from the point of output from simulations or experiments to the application and use of the data.

- Enhance web application system scalability and availability.

- Modernize website service delivery to enable improved technology and resource use within OCIO and throughout GRC.

- Emphasis on digitizing everything into formats that can be manipulated and mined for knowledge by computers.

- Deliver cost effective services according to changing demands due to IT consolidation, industry best practices, budget and technology innovations.

- Keep current with the latest technologies being used for scientific computing and visualization, including, for example, mobile devices and other consumer level products, hybrid computing, in-situ visualization, 3D printing, augmented and virtual reality.

Code Format:

Provider(EA-Phase)(Drivers)(Attribution Org(s))

EA-Phase F with any Drivers

Provider: (F) Federal; (A) Agency; (C) Center EA-Phase: (F) Funded; (U) Unfunded

Drivers: (M) Federal/Agency/Center Mandate; (O) Obsolescence; (R) Generally Expected Requirement; (P) Known Mission Requirement; (C) IT Consolidation; (T) Tech Advancement; (D) Innovative Disruptor

Attribution Org: Two-character Directorate or Division level Organization code(s) primarily attributed to Roadmap item (ex., L0,LB,F0,FT,V0,VM). Maximum of three organizational codes.

EA-Phase U with Drivers being M and/or O

Operate and maintain the JiRA environment and service to deliver Business Process Automation solutions

C(EA-F)(R)(VE)

Identify, update, and utilize a defined suite of tools (Jira, Jira Service Desk, Python) to deliver applications, continue to update and refine the suite in alignment with industry best practices, and leverage a PaaS environment for application delivery, where appropriate

C(EA-U)(OCT)(VE)

Capability Service Current State FY20 FY21 FY22 FY23 FY24 Target State / Benefit

Agency will lead an effort to analyze 30% of the total application inventory for rationalization opportunities, define platform centric architectures, and establish standards for defining application cost

Agency will lead an effort to analyze 60% of the total application inventory for rationalization opportunities, rationalize high-value ROI opportunities to enterprise solutions, complete the rationalization of applications using obsolete programming languages, implement standard platform technologies, and inventory dependencies on non-NASA systems

Agency will lead an effort to analyze 90% of the total application inventory for rationalization opportunities, rationalize applications to appropriate enterprise platforms, and establish end user configurable platforms

AC(EA-U)(R)(VE) AC(EA-U)(R)(VE) AC(EA-U)(R)(VE)

Agency will lead an effort to continue to update the tool and portfolio information in the Agency Application

Rationalization Tool (AART), which will be used to improve the portfolio of NASA’s applications

Agency will lead an effort to integrate AART with other authoritative IT systems to support decision making (i.e., NAMS, PCAT, etc.) , which will be used to improve the portfolio of NASA’s applications

A(EA-F)(MT)(VE) AC(EA-U)(CRT)(VE)

Track, guide, and work with internal web site owners to assure all websites and web applications are transitioned to HTTPS security compliance

C(EA-U)(M)(VE)

Track, guide, and work with application owners to assure all websites and web applications are transitioned to IPv6 compliance

C(EA-F)(M)(VE)

Web and Native

Application Services

(cont.)

Web Design and

Development (cont.)

Web information available anywhere from any platform. Information is easy to find. Mobile enabled websites and applications supporting Work-from-Anywhere.

Website support is provided to meet specific needs on a variety of tools.

Web Applications are developed in a Central environment primarily using ColdFusion, while infusing newer application development techniques and languages. These development techniques can support any of the Business Management

Applications.

ColdFusion is in the review phase of the Agency’s language lifecycle.

Agency will lead an effort to complete the analysis of the application inventory for rationalization opportunities, and continue to use the portfolio to deliver services against the portfolio

AC(EA-U)(R)(VE)

Agency will continue the effort to leverage AART to direct customers to the appropriate application (i.e., “when to use what”) , which will be used to improve the portfolio of NASA’s applications, and integrate additional discovery data into the portfolio of NASA’s applications

GRC Applications Program Roadmap (cont.)

AC(EA-U)(RT)(VE)

Operate and maintain the suite of web tools (WordPress, Sortsite, etc.) to quickly deliver and support web services, while reviewing and augmenting the portfolio to improve service delivery

C(EA-F)(RT)(VE)

Review internal websites to determine which ones should be targeted for migration to the Central infrastructure for better management and security of resources, with a goal of migrating or eliminating 10% of the internal websites

Review internal websites to determine which ones should be targeted for migration to the Central infrastructure for better management and security of resources, with a goal of migrating or eliminating an additional 10% of the internal websites

Review internal websites to determine which ones should be targeted for migration to the Central infrastructure for better management and security of resources, with a goal of migrating or eliminating an additional 10% of the internal websites

Review internal websites to determine which ones should be targeted for migration to the Central infrastructure for better management and security of resources, with a goal of migrating or eliminating an additional 10% of the internal websites

Review internal websites to determine which ones should be targeted for migration to the Central infrastructure for better management and security of resources, with a goal of migrating or eliminating an additional 10% of the internal websites

C(EA-U)(MOC)(VE) C(EA-U)(MOC)(VE) C(EA-U)(MOC)(VE) C(EA-U)(MOC)(VE) C(EA-U)(MOC)(VE)

TBD TBD TBD TBD TBD

Assess the portfolio of web applications, requirements for applications, and mobile platforms to determine the proper place for mobile apps vs. web applications to determine the position within the portfolio and model for delivery

C(EA-U)(TD)(VE)

Web information available anywhere from any platform. Information is easy to find. Mobile enabled websites and applications supporting Work-from-Anywhere.

Web and Native

Application Services

(cont.)

Native Application

Design and

Development

C(EA-U)(TD)(VE)

Operate and maintain WordPress environment to enable the delivery of web services which enable customers to develop and maintain their web sites

C(EA-F)(R)(VE)

GRC Applications Program Roadmap (cont.)

Demands for Mobile Apps within the current environment has been minimal, therefore the infrastructure to support mobile application development has not been fully established.

Mobile App

Development

Content Management and Support

Websites are provided on an as-needed basis in a variety of technologies and capabilities to deliver information to various customers.

Consolidate public-facing websites into a central environment to provide a consistent user experience

AC(EA-U)(MOC)(VE)

Continue to update the WordPress service to continue to meet web curator’s needs, and leverage the future web environment to deliver services

C(EA-F)(RT)(VE)

Ensure that mobile app development activities are accomplished within the next generation application development solutions

Maintain current Agency integrated financial management system for the Agency (SAP)

A(EA-F)(M)(B0)

Maintain current Agency Travel System (Concur Government Edition-CGE)

A(EA-F)(M)(B0)

Maintain current Agency Web Time and Attendance Distribution System (WebTADS)

A(EA-F)(R)(B0)

Maintain Agency eBudget System (N2)

A(EA-F)(R)(B0)

Maintain Agency Workforce Integrated Management System (WIMS)

A(EA-F)(R)(B0)

Asset and Materials

Management

Financial Management Systems are mostly owned at the Agency

Level. There are no definite plans to upgrade/transition to any new Agency Systems at this time. A few applications exist at the Center level.

Business Intelligence

AC(EA-F)(R)(VE)

Continue to use, operate, and maintain the business intelligence applications (Tableau, Power BI, SharePoint, etc.), while assessing the portfolio for possible optimization to approved Agency solutions and implementations

AC(EA-U)(R)(VE)

A(EA-F)(M)(B0)

Maintain GRC Travel and PR Business Unit Workflow tools with possible expansion of capability to support Agency delivery

C(EA-F)(R)(B0)

Maintain Agency Labor Distribution System (ALDS)

A(EA-F)(M)(B0)

Maintain Agency Financial Management Business Warehouse Application (BOBJ)

Maintain Agency Meta Data Manager (MdM)

A(EA-F)(R)(B0)

Maintain Agency PCard System

A(EA-F)(R)(B0)

Although there are no definite plans to upgrade/transition to any new Center or Agency

Systems at this time, iBot technology is being evaluated by the Agency to optimize business intelligence.

GRC Applications Program Roadmap (cont.)

There are no definite plans to upgrade/transition to any new

Center or Agency Systems at this time.

Financial Management

Business Management

Applications

Provide a suite of Center and Agency tools (and specific capabilities) to meet NASA’s Business Services needs.

Continue to track the Agency effort of advocating iBots as a path to optimizing Business Intelligence services and incorporate, as appropriate, into the optimization strategy as applicability of solutions become more defined

AC(EA-U)(T)(VE)

Continue to use, operate, and maintain the asset and materials management applications, while assessing the portfolio for possible optimization

Adopt the Information

Management Program (IMP) development approach for configuration management, re-use, design, and metadata standards as related to GRC forms

AC(EA-F)(MOT)(CO)

TBD TBD TBD TBD TBD

Continue to use, operate, and maintain the JiRA for Business Process Automation applications, while assessing the portfolio for possible optimization

Agency is researching replacement technologies for the existing Adobe Experience

Manager platform.

Transition GRC forms to Agency-determined Forms technology that leverages standards-based user interface technologies (e.g., HTML 5 and adaptive/responsive CSS) to support a mobile workforce

AC(EA-U)(MOT)(CO)

Continue to use, operate, and maintain the investment management applications, while assessing the portfolio for possible optimization

AC(EA-F)(R)(B0)

Continue to use, operate, and maintain the reporting applications, while assessing the portfolio for possible optimization

AC(EA-F)(R)(VE)

Forms Management

GRC Applications Program Roadmap (cont.)

There are no definite plans to upgrade/transition to any new

Center or Agency Systems at this time.

There are no definite plans to upgrade/transition to any new

Center or Agency Systems at this time.

There are no definite plans to upgrade/transition to any new

Center or Agency Systems at this time.

Reporting

There are no definite plans to upgrade/transition to any new

Center or Agency Systems at this time.

Investment

Management

Legal Practice

Management

Continue to use, operate, and maintain the Agency human resources management applications (WTTS, FPPS, HR Portal, STARS, and EPDS), while assessing the portfolio for possible optimization.

AC(EA-F)(R)(J0)

Project Management

There are no definite plans to upgrade/transition to any new

Center or Agency Systems at this time.

There are no definite plans to upgrade/transition to any new

Center or Agency Systems at this time.

Human Resources

Management

Supply Chain

Management

Business Process

Automation

Continue to use, operate, and maintain the supply chain management applications, while assessing the portfolio for possible optimization

AC(EA-F)(R)(VE)

AC(EA-F)(R)(VE)

Continue to use, operate, and maintain the project management applications, while assessing the portfolio for possible optimization

Adapt GRC forms to adhere to common Agency data model to ensure consistent naming conventions, shared validation, integration with external data sources, and representation using common serializations (e.g., JSON or XML)

AC(EA-F)(MOT)(CO)

Migrate GRC forms to a centralized Agency repository that stores and delivers forms to GRC end users

Business Management

Applications (cont.)

Provide a suite of Center and Agency tools (and specific capabilities) to meet NASA’s Business Services needs.

AC(EA-F)(MOT)(CO)

AC(EA-F)(R)(VE)

Track and migrate the remaining GRC applications to eAuthentication, so that authentication can be migrated to User Based

Enforcement (UBE)

AC(EA-U)(M)(VE)

Faster development and deployment of websites and applications to met customer needs. Faster, more secure development and operation of web applications. Moving away from standard platforms to apps, especially in public information areas. A single account management capability increases security, use and management of applications.

Compliance with government mandates and ability for internet to host more services.

Operate and maintain a robust suite of tools and capabilities to provide application services to GRC, while continuing to review the suite to optimize the capabilities

C(EA-F)(T)(VE)

Maintain services to manage, test and improve the 508 compliance of GRC web resources (FY19 Center and Agency solution is SortSite)

Implement DevOps tools to provide automated code reviews to developed websites and web apps

Infrastructure

Applications

GRC Applications Program Roadmap (cont.)

There are no definite plans to upgrade/transition to any new

Center or Agency Systems at this time.

Utilities and Tools

Web Applications are developed in a Central environment primarily using ColdFusion, while infusing newer application development techniques and languages. These development techniques can support any of the Business Management

Applications.

The OCIO provides the tools, services and capabilities to operate and manage the web and web services capabilities for the Center.

Code Management, Review, and Support

Operate and maintain current and next generation database capabilities to meet the needs of web applications and websites

C(EA-F)(R)(VE)

C(EA-U)(R)(VE)

eAuthentication

Services

IT Security and Software

Technical Authority requires that code be secure. Currently, this is assured through a cursory code reviews and scans of the web interface.

Most GRC applications meet the requirement to authenticate using eAuth services but many remain to be migrated.

Center Facilities

Management and

Operations

A Central database capability is provided as a back end for web applications.

Web Utility Services

Database

Physical Security

Application Services

Enterprise Physical Access

Control System (EPACS) server environment provides physical access control for Center, which integrates with the Center’s regional servers. This manages the local security control devices and ties into the enterprise.

C(EA-F)(MR)(VE,E0)

Review the industry’s Web Application Development tools and capabilities (Code Management, Automated Code Review, Agile Development, SaaS infrastructure, Bug Tracking System, Development Language, Provisioning Service) for implementation as part of Glenn’s suite of application development tools

C(EA-F)(T)(VE)

FAC(EA-U)(RT)(VE)

Operate and maintain current Code repositories (PVCS, GitLab (open source version)), while exploring and implementing a industry supported standard code repository for GRC, based on a review of the Agency application portfolio

Continue to operate, use, and maintain the suite of Center Facilities Management and Operations applications

C(EA-F)(R)(F0)

AC(EA-F)(MOT)(VE,CX)

Sustain and complete the migration of additional critical locations into the Electronic Key Management capability

(HW/SW/Configuration/Keys)

C(EA-F)(MOT)(VM,CX)

Sustain the Electronic Key Management capability

(HW/SW/Configuration/Keys)

C(EA-F)(MOT)(VM,CX)

Continue to ensure that all applications are eAuth compliant so that authentication and authorization is UBE, and maintain minimum level of eAuthentication non-compliance through consultation, tracking, and governance

C(EA-F)(M)(VE)

Continue to operate, use, and maintain the suite of Center Safety and Industrial Hygiene applications

C(EA-F)(R)(F0)

Operate and maintain the Center EPACS environment at versions (Hardware & Software) consistent with the Agency requirements

Work with Agency to assess new License Management plan for impacts to existing environments, validate SW usage information, and determine a transition strategy

Work with Agency SW

Management (ASAM) Team to test SW Asset Management

Tools and reporting dashboard, refine procurement processes using an Expanded ELMT and Fully staffed ASAM and determine impacts to changes in Pcard and Elevated Privileges action on ability to procure and deploy SW

Begin to utilize Centralized

Agency SW procurement process, establish and provide appropriate NASA training to reflect the new SW Lifecycle

Management (SWLM) efforts, provide Agency-wide communication detailing all the new processes, update all necessary policies and procedures, and begin the migration steps to move to the new Agency SW Management environment

AC(EA-F)(RPCT)(VE,L0) AC(EA-F)(RPCT)(VE,L0) AC(EA-F)(RPCT)(VE,L0)

Provide training on software engineering for computational science to empower researchers to be more effective

C(EA-U)(T)(VE)

Establish and maintain a lecture series on computational science

C(EA-U)(T)(VE)

Increase personnel levels to meet demand for the development of Computational Science Applications

C(EA-U)(P)(VE)

Complete migration from Center to Agency licensing model for suite of applications used researchers and engineers to complete their design and modeling activities, while maintaining Center supported applications for those applications not included in the Agency’s suite

AC(EA-F)(RPCT)(VE,L0)

AC(EA-F)(RPCT)(VE,L0)

GRC Applications Program Roadmap (cont.)

Researchers and engineers have access to many applications but no cohesive support for rapid prototyping of applications and support to produce high quality scientific code.

Design and Modeling

Applications

Code L provides and maintains a suite of design and modeling tools to the R&E community at

GRC. This is delivered on AESOP using the Engineering Access

Approval Process. The Agency portion of the expanded ELMT and ASAM is said to be funded, but all the Center level effort and costs associated to the actual licenses are not funded.

Computational Science

Applications

Operate and maintain the suites of scientific licenses and applications for researchers and engineers to complete their design and modeling activities (i.e.

CREO, Solidworks, AutoCad, MagicDraw), and continually review the portfolio to identify and implement improvements as technologies evolve, as integrated with Agency license management activities Science and Engineering

Applications

Low friction startup of computational science projects, recognition of scientific computing as a key component of all of GRC's R & D work, and support to create high quality, reproducible scientific computing code. Provide software and tools for conducting design, modeling, and analysis are available, as needed, to researchers.

Throughout the lifecycle of the tools, assess the portfolio against industry capabilities to improve the capabilities that are used at GRC and throughout NASA

C(EA-U)(TR)(VE)

Create, operate, and maintain an environment (hardware / software) where researchers can quickly begin to explore their ideas for doing analysis and simulations, including tools for doing software engineering

C(EA-U)(CT)(VE)

Work with Agency to assess new License Management plan for impacts to existing environments, validate SW usage information, and determine a transition strategy

Work with Agency SW

Management (ASAM) Team to test SW Asset Management

Tools and reporting dashboard, refine procurement processes using an Expanded ELMT and Fully staffed ASAM and determine impacts to changes in Pcard and Elevated Privileges action on ability to procure and deploy SW

Begin to utilize Centralized

Agency SW procurement process, establish and provide appropriate NASA training to reflect the new SW Lifecycle

Management (SWLM) efforts, provide Agency-wide communication detailing all the new processes, update all necessary policies and procedures, and begin the migration steps to move to the new Agency SW Management environment

AC(EA-F)(RPCT)(VE,L0) AC(EA-F)(RPCT)(VE,L0) AC(EA-F)(RPCT)(VE,L0)

TBD TBD TBD TBD TBD

TBD TBD TBD TBD TBD

C(EA-F)(CT)(VE)

Operate and maintain the suites of scientific licenses and applications for researchers and engineers to complete their analysis activities (i.e. MATLAB, Simulink, LabView (i.e., NASTRAN, PATRAN, COMSOL, ANSYS), and continually review the portfolio to identify and implement improvements as technologies evolve

Conduct live demos and workshops to researchers on setting up embedded systems using Matlab/Simulink

C(EA-F)(RPT)(VE)

Operate and maintain floating license based toolkits and plug-in applications (i.e., Mathworks, MatLab, etc.) to enable researches to easily perform embedded autocoding

Create and maintain a GRC embedded software library and development support/tutorial web site to enable researchers to efficiently begin their embedded software development efforts

C(EA-U)(RPT)(VE)

Complete migration from Center to Agency licensing model for suite of applications used researchers and engineers to complete their design and modeling activities, while maintaining Center supported applications for those applications not included in the Agency’s suite

AC(EA-F)(RPCT)(VE,L0)

AC(EA-F)(RPCT)(VE,L0)

GRC Applications Program Roadmap (cont.)

Highly Specialized IT

Applications

Embedded Software

Currently, only one developer in

OCIO is providing support to the center's missions and projects on an as requested basis, which limits support. Using in-house written tools to interface embedded systems to Matlab for debugging. Increased support could be provided with additional staff in addition to increased code sharing and consolidation opportunities.

Opportunities exist to consolidate software licenses.

Engineers will be able to easily get an embedded system up and running quickly and inexpensively in Matlab, Simulink, and other researcher-familiar environments. All required software and toolkits have shared agency floating licenses to increase productivity and reduce costs.

Support can be obtained from a NASA website or Code V team of developers.

Artificial Intelligence

Expert Systems

Analysis Applications

Code L provides and maintains a suite of engineering analysis tools to the R&E community at

GRC. This is delivered on AESOP using the Center approved

Engineering Access Approval

Process. The Agency portion of the expanded ELMT and ASAM is said to be funded, but all the

Center level effort and costs associated to the actual licenses are not funded.

Science and Engineering

Applications (cont.)

Low friction startup of computational science projects, recognition of scientific computing as a key component of all of GRC's R & D work, and support to create high quality, reproducible scientific computing code. Provide software and tools for conducting design, modeling, and analysis are available, as needed, to researchers.

Appendix A2: Applications Program Target State

Appendix B1: Communications Program Roadmap

Capability Service Current State FY20 FY21 FY22 FY23 FY24 Target State / Benefit

The Agency Communications

Program implements the

Backbone Topology Transition, which will make Cleveland a hop on the underlying nationwide NASA backbone network and provides for improved backbone connectivity performance for

GRC

Transition NASA Backbone circuits from legacy GSA

Networx contract to the new

GSA EIA contract

AC(EA-U)(T)(VM) C(EA-U)(R)(VM)

Design a logical Non-NASA

Tenant service where NASA provides “Internet Service” to customers using NASA network electronics

C(EA-U)(T)(VM)

Explore ISP fiber diversity in LF and PBS demarcation locations for use by non-NASA customers

Implement ISP fiber diversity in LF and PBS demarcation locations for use by non-NASA customers

C(EA-U)(T)(VM) C(EA-U)(T)(VM)

Investigate and document business case and opportunity to create a "Commercial to

NASA Connectivity" OCIO service

Mature and continuously improve new "Commercial to

NASA Connectivity" OCIO service

C(EA-U)(RT)(VM) C(EA-U)(RT)(VM)

Evaluate requirement for commercial Cloud peering requirement for GRC Data

Center Managed Cloud

Environment (MCE)

C(EA-U)(TD)(VM)

Monitor, operate, and sustain NASA Backbone Connectivity

C(EA-U)(R)(VM)

Provider: (F) Federal; (A) Agency; (C) Center EA-Phase: (F) Funded; (U) Unfunded

Drivers: (M) Federal/Agency/Center Mandate; (O) Obsolescence; (R) Generally Expected Requirement; (P) Known Mission Requirement; (C) IT Consolidation; (T) Tech Advancement; (D) Innovative Disruptor

Attribution Org: Two-character Directorate or Division level Organization code(s) primarily attributed to Roadmap item (ex., L0,LB,F0,FT,V0,VM). Maximum of three organizational codes.

GRC IT Communications Program Roadmap

Wide Area Network

Any person participating in fulfilling NASA’s mission will have the ability to communicate securely anywhere, at any time, utilizing communication technology that will be so reliable, available, responsive and robust that it will be transparent. The communications infrastructure will use a combination of commercial and private entities to enable the delivery of data, voice and video services.

- A reliable unified communications structure that gives customers great flexibility and a near-industry standard experience in the way they do their work. Users have the ability to connect seamlessly & efficiently in a single environment, no matter the medium of communication.

- Clear Agency & Center network security responsibilities that ensure all users' information is safe and leaves all users feeling secure.

- Faster network speed at all access points & speed that meets all operational needs to facilitate greater collaboration across NASA boundaries & expanded research opportunities.

- Improved obsolescence & refresh plan for cabling & networking/communications technologies, providing customers with a quality and reliable infrastructure that touts greater longevity.

- The ability to provide customized networking & communications services, so customers can pursue unique & specialized projects.

- Seamless coverage of Center needs between Agency & Center-defined responsibilities, leaving no gaps in support for users to accomplish their own goals.

Code Format:

Provider(EA-Phase)(Drivers)(Attribution Org(s))

GRC is connected to the NASA

Nation-wide backbone with two

OC-48s at 2.5 Gbps. In FY18, it is anticipated that this will be upgraded to two 10 Gbps circuits as a result of an Agency continuous service improvement to meet growing requirements for NASA backbone speeds nation wide.

NASA Backbone

Connectivity

Non-NASA Tenant

Connectivity

The Non-NASA Tenant

Connectivity offering is new to the OCIO and there is currently only one available solution. Non-

OCIO organizations have historically provided connectivity for tenants that they sponsor.

The GRC OCIO will be considered a partner to the mission and a technical expert in facility and research wide area communications services including being a broker for OARnet service. Institutional wide area network services will be reliable, fast, and meet all mission needs.

Commercial to NASA

Connectivity

Small ad-hoc examples of

Commercial/NASA connectivity is performed by Organizations external to the OCIO.

EA-Phase U with Drivers being M and/or O EA-Phase U with Drivers being R, P, C, T, and/or D EA-Phase F with any Drivers

If the business case is validated, build-out commercial Cloud peering for GRC Data Center Managed Cloud Environment

(MCE)

C(EA-U)(TD)(VM)

Make improvements to the current Network Access

Approval Process

C(EA-U)(R)(VM)

Increase FTE staffing to build a

GRC Communications

Program Office, in alignment with Enterprise Services, meet

BSA goals, and develop service offerings in areas that are currently lacking

AC(EA-U)(C)(VM)

Evaluate Core Speed Upgrades to 40 or 100 Gbps

C(EA-U)(RT)(VM)

Begin planning and complete design for GRC firewall replacement

Replace obsolete GRC firewalls

Begin planning and complete design for GRC perimeter components (minus firewalls) replacement

Replace obsolete GRC perimeter components

(excluding firewalls)

C(EA-U)(O)(VM) C(EA-U)(O)(VM) C(EA-U)(O)(VM) C(EA-U)(O)(VM)

Plan for “Phase 2” of Network

Core Risk Reduction, which will improve network reliability by eliminating single points of failure in the GRC network, and align the GRC network topology to the

Agency and GRC target architectures

Execute “Phase 2” of Network

Core Risk Reduction, which will improve network reliability by eliminating single points of failure in the GRC network, and align the GRC network topology to the

Agency and GRC target architectures

C(EA-U)(M)(VM) C(EA-U)(M)(VM)

Develop and resource project plan to configure internal networks and deploy IPv6 configurations to end nodes and clients

Configure IPv6 Deployment for

Internal Client Networks, end nodes and clients

C(EA-U)(MT)(VM) C(EA-U)(MT)(VM)

Center Network

Once fully staffed, evolve the GRC Communications Program Office to be a business partner and value-add to Glenn Research Center organizations and missions by achieving target state goals set forth in this GRC IT Master Planning document, improving service delivery, and enabling NASA mission success

AC(EA-U)(R)(VM)

Implment Network Access control per direction from NASA

Strategy to Improve Network Security

A(EA-F)(MT)(VM)

Institutional services are modern, up to industry best practice, and enables

GRC organizations to achieve their business functions by providing a reliable, fast, and diverse data transport capability in support of other IT Services. Plum Brook network architecture allows for it to serve as a COOP site for GRC. Network access control systems and processes are deployed in a way that increases security without decreasing usability or timeliness of access. Remote

Access is reliable, cost effective, and enhances the Work-from-Anywhere experience at GRC. All modern protocols including IPv6 are deployed.

All infrastructure is supportable and not at risk of unscheduled service failure. Dynamic Host Configuration

Protocol is deployed for Agency compliance. The center network is robustly monitored and operators have troubleshooting toolkits at their disposal to resolve incidents and problems in a timely manner. Agency

Network Transformation is achieved in a way that achieves efficiencies without sacrificing customer service or functionality.

GRC Comm Services will be resourced sufficiently to manage its portfolio of services and projects, and provide communications services holistically to GRC, including custom-tailored, customer-driven, and Center-unique needs that commodity enterprise communications services doesn’t offer currently. All Comm Services at

GRC will be managed under one office and all possible organizational efficiencies therein will be leveraged.

GRC specialized communications will be able to meet customer expectations and requirements for non-standard network services like

SCADA, control, and test facility networks.

Local Area Network

GRC Institutional networking meets nearly all BSLs, but there are some areas for improvement. 40 / 100 Gbps core speeds are on the horizon.

Plum Brook is reliant on a SPOF

WAN connection. No real network access control.

GRC IT Communications Program Roadmap (cont.)

Design Plum Brook perimeter architecture to improve reliability and enable it as a

COOP site

C(EA-U)(R)(VM)

Implement Plum Brook data circuit reliability improvements

C(EA-U)(TP)(VM)

Agency will implement networks to enable mission and business system availability during peak usage hours and be configurable in less than 4 hours

Agency will implement networks to enable mission and business system availability during peak usage hours and be configurable in less than 1 hour

Agency will implement networks to enable mission and business system availability during peak usage hours and implement adaptive technologies to configure the network driven by usage, security policies, and traffic analytics

A(EA-F)(RT)(VM) A(EA-F)(RT)(VM) A(EA-U)(RTD)(VM)

Explore Service Catalog entry for custom virtual network segments for customer use

(i.e. campus wide VLANs or

VRFs)

C(EA-U)(RTD)(VM)

GRC LAN Zoning and External

Services Network (ESN) Re-architecture (LAZER) Project updates ESN and Internal hosting environments to align with Agency zoning concepts

Evaluate continuous service improvements for GRC internal and external data center networks to improve reliability, performance, and resiliency

Execute continuous service improvements for GRC internal and external data center networks to improve reliability, performance, and resiliency

C(EA-U)(CR)(VM) C(EA-U)(CR)(VM) C(EA-U)(CR)(VM)

Augment available bandwidth from internal network to OCIO data center

C(EA-U)(RPT)(VM)

Hosting Networks

The External Services Network

(ESN) provides for a GRC-DMZ-like hosting environment for

Agency and Publicly accessible services at GRC. Internal Data

Center network service is provided via the standard GRC

LAN architecture; there are no data center or hosting network considerations for high…