CISP Process New Public.pptx
PPTX presentation 2 MB Posted
- Attached to
- Commercial Internet at Edwards AFB, CA
- Solicitation number
- FA930226Q0054
About this file
This is a process briefing presentation describing the Air Force Materiel Command (AFMC) Commercial Internet Service Provider (CISP) Authorization to Operate (ATO) approval workflow for commercial WiFi implementation at Air Force installations.
The briefing outlines a three-phase implementation process for providing commercial WiFi services to support hybrid workforce operations. The Customer phase requires submission of AF Form 3215, O-6 Concurrence Memo, and floor plans with proposed equipment placement and Classified Processing Area (CPA) identification. The AFLCMC CITO UX Team manages the ATO approval portion, expediting the Security Relevant Change (SRC) documentation and ATO boundary updates from the previously standard one-year timeframe down to days or weeks. The Comm Sq/Customer/Vendor Implementation phase involves vendor design, equipment purchase, installation, and acceptance. All proposed implementations must meet AFMC CISP Security Criteria, including: WPA2 or better encryption, approved hardware/software providers, guest network configuration with monitoring consent statements, node isolation to prevent rogue connections, continuous software/hardware update monitoring, pornography site blocking, and Intrusion Detection System (IDS) installation. The WiFi implementation must present as a guest network with no physical or logical connection to NIPRNet, with TEMPEST review completion and spectrum management approval by the 88th Communications Squadron. Physical security controls include locked communication closets and escorted vendor access. The point of contact for AFMC CISP matters is Craig Boke (PM) at craig.boke@us.af.mil.
View the file
Other files
| File | Type | Posted |
|---|---|---|
| QandA.pdf | ||
| Solicitation - FA930226Q0054.pdf |
On GovTribe
Work with this file
- Download the original file
- Contacts named in this file
- Similar government files
- Ask GovTribe AI about this file
Text version
AFMC
Commercial Internet
AFLCMC/OZI
11 May 2026
Air Force Life Cycle Management Center
UNCLASSIFIED
UNCLASSIFIED
Providing What the Warfighter Needs When They Need It
Briefer:
UNCLASSIFIED
Providing What the Warfighter Needs When They Need It
UNCLASSIFIED
Purpose Air Force Material Command permits units that have requirements and funding to purchase commercial WiFi, thru existing contracts, from local vendors. The customer must be on-boarded to the AFMC CISP ATO before the service can be ordered. The Security Controls Assessor will compare proposed implementation with the security requirements of the AFMC CISP ATO.
This briefing provides an overview of the process and technical areas the vendor must meet to be approved to provide service to base users under the AFMC CISP ATO.
Briefer:
UNCLASSIFIED
Providing What the Warfighter Needs When They Need It
UNCLASSIFIED
What is it ?
Commercial WiFi:
Same risk as teleworking from home, hotel, or kiosk (VPN protects CUI) Rapid solution for robust connectivity Untethers workers from cubicles Seamless user experience Increases moral, recruitment, retention and productivity AFLCMC CITO managing boundary expansion for AFMC units under CISP ATO
CISP –Key Enabler to Hybrid Workforce
Office of the Future
Untether Workers Expedite AFLCMC CISP Approval Days/Weeks
5/17/2022
Providing What the Warfighter Needs When They Need It
Flexibility
Hoteling
Hot Desking
Collaboration
CISP Implementation Process
Providing What the Warfighter Needs When They Need It
UNCLASSIFIED
Getting Commercial Internet operational has 3 phases - Customer completing initial Docs, Getting building covered under our ATO, and Comm Sq/Customer/Vendor working implementation. We targeted the ATO part because it was averaging a year under the previous process.
CITO UX Team (2 people) is responsible for ATO (middle) portion. However, they work with customers to share best practices/assist however they can.
Customer:
3215 is the requirement to Comm Sq O-6 Concurrence signed by unit Floor Plan with proposed equipment placement and any Classified Processing Areas If CPAs are present, eSSS staffed thru 9 offices to approve WiFi being added to facilit
The eSSS can take months even though vendor already incorporating physical separation (3 meters stand-off) into design (Note: OZI is looking to perform Rapid Improvement Event with eSSS coordinators.)
UX Team:
- We speed-lined this process to improve 1-year (average) for each building through AF Enterprise process Accepting, processing, and providing approval document is done quickly (days/weeks)
Customer working with Vendor for Install:
Vendor design Equipment purchase Vendor implementation
This is our of UX Team’s ability to influence.
Previous experience in 20014 took 1 year.
We will continue to ideas to streamline (i.e. vendor purchase equipment)
Customer Prepares Initial Docs
Initial Requirement to Comm SQ
Team Onboards to ATO
Reviews request
Customer works with vendor to install
O-6 Concurrence Memo
Floor Plan
TEMPEST eSSS
Submits request in CISP Tracker Tool
Generates Security Relevant Change (SRC) Memo
Updates ATO Boundary
Comm Sq releases order to Vendor
Equipment Purchased
Vendor performs installation
Acceptance
Provides SRC to Comm Sq
Vendor designs
Operational
AFMC CISP ATO Security Criteria The proposed implementation will be evaluated to ensure it is equal or better than the standard commercial WiFi implementation Uses approved providers for hardware/software Presents as a guest network with consent to monitor statement WPA 2 or better encryption Node isolation to preclude easy dropping Continuous monitoring of Software/Hardware for updates/upgrades Blocking porn sites
Artifacts that show required settings are extremely helpful (screen shots)
Providing What the Warfighter Needs When They Need It
UNCLASSIFIED
Example CISP On-boarding Questionnaire
| Question | Responsible Party | Comments | Control | |
| Who is your CISP provider i.e. Spectrum, AT&T | KAS Cable | CM-8 | ||
| Do you perform installations of Wi-Fi guest networks under contract? | ISP Vendor | Yes | ||
| Is this ISP already in place or a future project? | new project | |||
| A captival portal/splash page that includes a user agreement and password must be installed | ISP Vendor | Yes | PL-4; AC-1,2,4,18; IA-2,5(1); PL-4; SA-5 | |
| The CISP must not touch the NIPRNet (Device Isolation) | ISP Vendor/Base Comm | commercial internet will not physically or logically touch the NIPRNet | AC-4 | |
| WAPs should be configured to prevent rogue connections | ISP Vendor | KAS Cable will configure the WAPS to prevent rounge connections | SI-4(14) | |
| Wi-Fi must be employed WPA2 or greater | ISP Vendor | |||
| WPA2 is used | SC-12, AC-18(1) | |||
| Monitoring for wireless intrusions and notification must be configured | ISP Vendor | KAS will install an IDS | SI-4(14) | |
| Physical assets will be protected i.e. lock comm closets, escorted personnel in all gov facilities | Base Comm | The gov will escort all vendors and the equipment is locked in comm closests | PE-2/3, SC-7(14) | |
| A TEMPEST and Spectrum review must be completed (spectrum management if not in TEMPEST review) | Base Comm | Yes by the 88th CS; CISP will only be utilized for use case types that exclusively transmit publicly releasable data or is protected by an approved VPN. | PE-19, SC-40(1) | |
| Is the WiFi level configured to reduce the detection potential of wireless links? Ie is the signal strength beyond the base boundary? Can the vendor adjust the bandwidth if needed? | ISP Vendor | KAS cable can adjust the signal strength | SC-40(2) | |
| An IDS or IPS should be installed and monitored | ISP Vendor | KAS will install an IDS | SI-4 |
Providing What the Warfighter Needs When They Need It
UNCLASSIFIED
AFMC CISP POCs Craig Boke (PM) (craig.boke@us.af.mil)
Providing What the Warfighter Needs When They Need It
UNCLASSIFIED
image1.jpeg image10.png image11.png image7.jpeg image8.png image9.png image4.png
File details come from the government source that posted it. Updated .