(U) 2022-08-23 SABRE Roadmap Slides.pdf

UNCLASSIFIED

1UNCLASSIFIED

Secret And Below Releasable

Environment (SABRE) Roadmap

The overall classification of this brief is

UNCLASSIFIED

Secretary of the Air Force

Concepts, Development, and Management

Mission Partner Capabilities Office

Executive Agent Operations, JADC2 Coordinator

As of 23 August 2022

P1

P2

P3 P4

Updated Short Term

SABRE Roadmap

P0 Phase 0 FY21 – Q2 FY22

Establish the data centric security configuration baseline for SABRE. Built on the Native Zero Trust Cloud (NZTC) prototype in accordance with the National Institute of Standards and Technology (NIST) 800-207 Zero Trust Architecture

Phase 2 Q1 FY23 – Q2 FY23

Execute cybersecurity and interoperability testing with mission partners of the SABRE MVP 1.0 on the PINK enclave of CFBLNet in the DreamPort facility

Phase 1 Q4 FY21 – Q1 FY23

Build, configure, and harden the SABRE baseline prototype in the testing CFBLNet testing environment to ensure proper security mechanisms are in place and to prepare to test interoperability with mission partners

Phase 4 Q2 FY23 – Q4 FY26

Work with Services, mission partners, programs of record, and CCMDs to expand SABRE access and functionality

Phase 3 Q1 FY23 – Q4 FY23

Build the SABRE cord cloud instantiations to achieve technical IOC and begin the process of expanding SABRE instantiations to other CCMD AORs

2UNCLASSIFIED

As of 22 August 2022

Starting Conditions: Phase 0: Proof of Concept to Baseline - (FY21 – Q2 FY22)

Decision Point to move from an initial net-centric architecture to a private cloud data-centric architecture for the buildout of SABRE

FY21 FY22 FY23

Q1: Oct-Dec Q2: Jan-Mar Q3: Apr-Jun Q4: Jul-Sep Q1: Oct-Dec Q2: Jan-Mar Q3: Apr-Jun Q4: Jul-Sep Q1: Oct-Dec Q2: Jan-Mar Q3: Apr-Jun Q4: Jul-Sep

SABRE

Chat, Email w/Att, Fileshare, Web Services, VOIP, VTC, FMV, Scalability, Resilience

DATA-CENTRIC SECURITY

Key Tasks:

✓ Complete SABRE proof of concept build supporting

Bold Quest 21.2 to demonstrate data centricity and federation or core human-to-human collaborative services

✓ Begin installation of collaborative services to the

Native Zero Trust Cloud (NZTC) Private Cloud

Infrastructure

✓ Support acquisition programs to upgrade mission applications to operate in a data centric secure

(DCS), Zero Trust, and Identity, Credential and

Management (ICAM) aware environment

✓ Initiate SABRE Risk Management Framework (RMF) process

✓ Conduct initial cyber assessment of technical

Threshold Guidance security controls

Key Dependencies / Variables:

• NSA’s NZTC architecture build out

• Baseline software configuration stability/maturity

End Results:

• Proof of data centricity and the ability of networks to federate with SABRE in seamless transition from net-centric to data-centric environment

• SABRE collaborative services comply with Federated

Mission Networking (FMN) Framework

• NZTC Private Cloud Infrastructure testing of the

Technical Threshold Guidance security controls

• Joint All Domain Command and Control Strategy

Implementation Plan LOE 5, tasks 5.1.a (completed)

Capabilities throughout Phase:

• Verified and Validated (V&V’d) core human-to-human collaborative services (chat, email w/attachments, file share, and web services) functionality

• Implemented zero trust tenants to build security body of evidence to enhance security posture

3UNCLASSIFIED

Purpose: Phase 0 established the data-centric security configuration and infrastructure baseline for

SABRE. Built on the Native Zero Trust Cloud (NZTC) prototype in accordance with the National Institute of

Standards and Technology (NIST) 800-207 Zero Trust Reference Architecture

MPE SABRE Roadmap

Phase 0

Starting Conditions:

Baseline SABRE Private Cloud enterprise build and hardware and software BOM defined

Phase 1: Build, Configure, Interoperability - (Q4 FY21 – Q1 FY23)

FY21 FY22 FY23

Q1: Oct-Dec Q2: Jan-Mar Q3: Apr-Jun Q4: Jul-Sep Q1: Oct-Dec Q2: Jan-Mar Q3: Apr-Jun Q4: Jul-Sep Q1: Oct-Dec Q2: Jan-Mar Q3: Apr-Jun Q4: Jul-Sep

Key Tasks:

✓ Initiate contracting actions to purchase hardware/software to support CFBLNet SABRE proof of concept

• Complete cloud instantiation hardware/software build and configuration and prototype build leveraging NSA’s NZTC architecture

• Obtain SABRE Interim Authority To Test (IATT) authorizing connection to Combined Federated Battle

Laboratories Network (CFBLNet)

• Continuous internal functional and cybersecurity penetration testing (ongoing)

• Develop training tools/TTPs for future Network

Operations and Security Center (NOSC) training

✓ Coordinate Initial Transport Layer with DISA

Key Dependencies / Variables:

• NZTC architecture build out and stability/maturity continues to be developed and tailored (H/W, S/W, security controls) to accommodate SABRE’s mission

• H/W, S/W configuration and hardening of the enterprise is dependent on NZTC architecture build and its stability/maturity

• CFBLnet connection to DreamPort facility

• H/W delivery and installation could be delayed due to funding and supply chain issues

End Results:

• Enterprise private cloud prototype with hardware and software configuration integrated on top of NZTC

• SABRE IATT authorizing connection to CFBLNet for cybersecurity and interoperability testing

• Contracting actions initiated to procure scaled BOM and SBOM for operational build at Central Region 1 and Western Region data centers

Capabilities throughout Phase:

• SABRE Minimal Viable Product (MVP) v1.0 build will provide data centric core human-to-human collaborative services (Chat, E-Mail w/ Att, File Share, Web Services, VTC, Audio) built on zero trust tenants accessible via ICAM

• CFBLNet access will enable testing and federation with mission partners in a test environment

Purpose: Phase 1 builds, configures and hardens the SABRE baseline prototype in the testing CFBLNet testing environment to ensure proper security mechanisms are in place and to prepare to test interoperability with mission partners

4UNCLASSIFIED

MPE SABRE Roadmap

Phase 1

SABRE is established in the CFBLNet test environment with an IATT for cybersecurity and interoperability testing

Phase 2: Interoperability & Cybersecurity Testing - (Q1 FY23 – Q2 FY23)

FY21 FY22 FY23

Q1: Oct-Dec Q2: Jan-Mar Q3: Apr-Jun Q4: Jul-Sep Q1: Oct-Dec Q2: Jan-Mar Q3: Apr-Jun Q4: Jul-Sep Q1: Oct-Dec Q2: Jan-Mar Q3: Apr-Jun Q4: Jul-Sep

CFBLnet Pink enclave offers greatest access to Mission Partners

Key Tasks:

• Begin self-assessment of security controls

• Perform independent 3rd party interoperability testing by Coalition Interoperability Assurance and Validation

(CIAV) within the PINK enclave of CFBLNet

• Initiate engineering for integration of Trusted Network

Environment (TNE) with SABRE

• Develop Standard Operating Procedures (SOPs) for monitoring and logging

• Validate data tagging and labeling interoperability

IAW FMN Spiral Specification 3 and Intelligence

Community Trusted Data Format

Key Dependencies / Variables:

• Further discussions needed to refine roles and responsibilities around cybersecurity and protection requirements with Combatant

Commands/Services/Agencies CC/S/As as defined in information sharing agreements

End Conditions:

• Confirmation of SABRE MVP v1.0 meets FMN compliance

• provides data-centric core human-to-human collaborative services built on Zero Trust Tenants accessible via ICAM that can federate with mission partners

• Body of evidence is created to support authorization of the zero trust private cloud ATO

Capabilities throughout Phase:

• Verified, validated, and secured SABRE MVP v1.0 build will provide data centric core human-to-human collaborative services built on zero trust tenants accessible via ICAM and can federate with MPs

Purpose: Phase 2 executes cybersecurity and interoperability testing with mission partners of the SABRE

MVP 1.0 on the PINK enclave of CFBLNet in the DreamPort facility.

5UNCLASSIFIED

MPE SABRE Roadmap

Phase 2

Starting Conditions: Phase 3: Reach Cloud IOC in Western Region - (Q1 FY23 – Q4 FY23)

Completed Interoperability testing FY21 FY22 FY23 FY24

Q1: Oct- Dec

Q2: Jan- Mar

Q3: Apr- Jun

Q4: Jul- Sep

Q1: Oct- Dec

Q2: Jan- Mar

Q3: Apr- Jun

Q4: Jul- Sep

Q1: Oct- Dec

Q2: Jan- Mar

Q3: Apr- Jun

Q4: Jul- Sep

Q1: Oct - Dec

Q2: Jan - Mar

Q3: Apr - Jun

Q4: Jul - SepKey Tasks:

• Obtain IATT SABRE MVP v1.0 for operational deployment of Central Region 1 and Western cloud instantiations

• Establish/approve tenant Service Level

Agreements (SLAs)

• Install SABRE cloud instantiations within Central

Region 1 and Western Region

• Connect cloud instantiations with transport layer

• Identify location/interface of operational GNOSC

• Integrate with CSSP

• Conduct independent 3rd party cybersecurity testing by AFRL ITEC

• Establish initial plan for integration of extant systems and federation of partners

• Draft plan to extend capabilities via interfaces to ensure integration

• Obtain Authorization To Operate (ATO)

• Meet technical IOC for SABRE

Key Dependencies / Variables:

• Decision point on Global NOSC (GNOSC) location

• Hardware delivery and installation could be delayed by funding and supply chain issues which will delay Technical IOC

• Engineering and design work of the transport layer needs to be completed by DISA Q2FY23

• •DISA must approve Cloud instantiations at

Western Region & Central Region Data Centers

• Joining, Membership and Exiting Instructions

(JMEIs) development and vetting with mission partners to establish and approve SLAs

End Conditions:

• GNOSC with ITSM is established

• SABRE achieves technical IOC - conditions include:

• A SABRE IT system is installed and enables a user to “login”

• SABRE will enable identity services of a user

• SABRE will be authorized to operate in accordance with the

DoD RMF process enabling the security controls and services as called out in the MPE Threshold Guidance

• SABRE is federated with at least one (1) mission partner capability

Capabilities throughout Phase:

• SABRE is technically IOC, able to meet the minimum core human-to-human services as laid out in the Joint MPE CONOPS, when US person can login and communicate with a partner

• GNOSC logging and monitoring workflows

Purpose: Phase 3 builds the SABRE core cloud instantiations to achieve technical IOC and begin the process of expanding SABRE instantiations to other CCMD AORs

MPE SABRE Roadmap

Phase 3

6UNCLASSIFIED As of 22 August 2022

Technical IOC for SABRE

ATO for SABRE is granted

Scaled BOM and SBOM for operational build delivered

Phases 4: SABRE Buildout & Federation - (Q2 FY23 – Q4 FY26)

FY21 FY22 FY23 FY24

Q1: Oct- Dec

Q2: Jan- Mar

Q3: Apr- Jun

Q4: Jul- Sep

Q1: Oct- Dec

Q2: Jan- Mar

Q3: Apr- Jun

Q4: Jul- Sep

Q1: Oct- Dec

Q2: Jan- Mar

Q3: Apr- Jun

Q4: Jul- Sep

Q1: Oct - Dec

Q2: Jan - Mar

Q3: Apr - Jun

Q4: Jul - Sep

Key Tasks:

• Start to rationalize & consolidate U.S.

operated extant systems

• Obtain federation and integration approval from ISRMC for foreign networks

• Begin federation of approved foreign networks to the operational environment

• Expand SABRE to support other CCMDs based on country prioritization, country’s capabilities, and country’s ability to federate with SABRE

• Continue cloud expansion for redundancy/resiliency

• Begin integration with expeditionary environment

• Establish initial plan to integrate mission applications

• Define operational IOC requirements with CCMDs

• Identify an exercise on the CFBLNet to expose

SABRE to a broader audience.

Key Dependencies / Variables:

• Inform ISRMC on federation and integration to foreign networks

• JSAP response on prioritization for integrating mission applications will be completed

End Conditions:

• Consolidated selected existing extant systems into SABRE

• Expanded SABRE support to CC/S/As

• Plan to transition select compatible mission applications into

SABRE is complete and ready to implement

Capabilities throughout Phase:

• Federation of approved foreign networks

• Increased availability and reliability through cloud expansion

Purpose: Phases 4 works with Services, mission partners, programs of record, and CCMDs to expand SABRE access and functionality

MPE SABRE Roadmap

Phases 4

7UNCLASSIFIEDAs of 22 August 2022