Industry Day Case Development Modernization Requirements.pdf

Case Development Modernization:

Problem Definition (The Core Issue):

The Defense Security Assistance Management System (DSAMS) is the primary Information Technology (IT) system used by DSCA and the Implementing Agencies (IA) to develop and conduct Foreign Military Sales (FMS), Building Partner Capacity (BPC), and FMS Training Execution.

DSAMS, a monolithic client-server system suffers from inadequate data architecture, insufficient means of data sharing/integration, numerous performance deficiencies, insufficient data validation mechanisms, and does not meet numerous other operational, compliance, and/or cybersecurity requirements.

DSCA’s Case Development Modernization (CDM) seeks to develop new efficient system(s) to replace DSAMS as well as provide new capabilities desired by the business and/or required by the mission. In doing so, CDM must ensure newly developed systems follow modern software’s best practices and design patterns (e.g. 12-Factor, CI/CD, cloud native, high cohesion & low coupling, well-defined interfaces), are incrementally and iteratively delivered based on technical and business requirement, and achieve desired data quality, data architecture, compliance, security, operational efficiency, and other outcomes.

Technological/Architectural Challenges: DSAMS's outdated architecture, built on disparate technologies such as Java, PERL, Shell Script, PL/SQL, and CITRIX Storefront, restricts the system's ability to adapt to growing demands, such as providing broader access to case development information and reduced request-processing latency.

Compliance Deficiencies: Legacy systems and processes within DSAMS fail to meet essential Zero Trust compliance, Section 508 compliance, and other cyber requirements, posing cybersecurity risks.

Data Fragmentation: Due to the proliferation of standalone systems and manual workarounds that replicate or supplement core system functions, critical case data resides in external Military Departments and Implementing Agencies (MILDEP/IA) and Department of War (DoW) systems (including Commercial Off the Shelf Enterprise Resource Planning (COTS ERP) packages and other custom-built applications) lacking seamless integration with DSAMS. The various business rules, interfaces, and data structures within these external systems create significant data sharing and consolidation obstacles and severely limit the amount of actionable data that is available to security cooperation stakeholders.

Inefficient Data Collection: Current data collection methods from these disparate and outdated external systems are non-standardized, error-prone, labor-intensive, and lack adequate functional and administrative control by DSCA. This results in unreliable and unpredictable insight into the Case lifecycle process.

These combined deficiencies negatively impact DSAMS's ability to provide predictable and reliable case tracking data; therefore, hindering accountability and visibility across the Security Cooperation Enterprise. Modernization is crucial to address these core issues and enable DSAMS to effectively support the evolving needs of security cooperation.

Scope of Case Development Modernization shall include:

• All capabilities currently provided by the legacy DSAMS application excepting those deliberately chosen for pruning to allow retirement of the legacy DSAMS application and any other new business identified requirements.

• All capabilities currently provided by the legacy Case Tracking System application, excepting those deliberately chosen for pruning to allow retirement of the legacy CTS application

• Refactoring of database code to modern APIs and application business layer to reduce stress on the database, improve performance, and enable horizontal scalability

• Achieving Zero Trust compliance, achieving agency 508 standards, full ICAM integration and any other NIST cyber requirements

• Establish modernized data exchange layer

• Streamline of user interfaces for more efficient and intuitive data entry and retrieval

• New capabilities currently performed outside of existing DSCA systems, offline or in IA homegrown Excel or other automated systems such as:

ο Preapproved Letter of Request; Letter of Request workflow; Implementing Agency

Case assignment and tracking

• Develop Standard and Ad Hoc reporting and analytics levering Advana or similar Analytics product

• Consolidation of four existing distinct Oracle database schemas into one Postgres database

• Solution should be developed and hosted in AWS cloud

Case Lifecycle Task Management & Document Repository:

Problem Definition (The Core Issue):

The Security Cooperation tasks associated with processing FMS documentation from pre-Letter of Request (LOR) through to Case Closure are executed in decentralized systems making the tracking and reporting difficult. There is no current method to determine status of the overall process without requesting information across multiple organizations and this results in a lack of situational awareness and transparency. This is especially difficult when the activities are coordinated from Implementing Agency (IA) to DSCA, DSCA to other USG Departments, and DSCA to IAs as most of these processes are done via email and manual process. Examples include but are not limited to; Congressional Notifications, Technology Security and Foreign Disclosure (TSFD) processing, 18-18 Notifications processing, COMSEC approvals, Non- Recurring Cost Waivers, and etc. DSCA is looking for CDM solutions:

• That enable the automation of multiple levels of reviews, approvals, and reformatting resulting in greater workflow transparency and efficient workflow management.

• That makes data for the processes available and dashboards to determine the process length and to identify possible opportunities for improvement are also required. This should include the capability to provide visual dashboards as well as exportable reports.

• That includes document storage for all the in-scope processes is required to include version controls, draft, final, approved documents and those documents that are required by FMR 15.6.

Case Development Modernization: