Salient Characteristics 23 APR 26.docx

Salient Characteristics A unit on Fort Hood is requesting a secure, survivable integrated private 5G, local edge, hybrid cloud and SATCOM connectivity system with the following salient characteristics:

1. High-Altitude Electromagnetic Pulse (HEMP) Hardening Must have the ability to survive an E1, E2, or E3 pulse.

· Military Grade Protection: Must be built to MIL-STD-188-125-1 standards.

· Operational Continuity: Ensures that even if the national grid or regional communications are fried by a nuclear burst or localized EMP weapon, the unit’s local network remains functional.

2. Micro-Data Center (MDC) Capabilities

· Edge Computing: Processes massive amounts of sensor data (ISR) locally without needing to "reach back" to a vulnerable, distant server.

· Low Latency: Critical for real-time applications like AI-driven target acquisition or augmented reality (AR) HUDs for soldiers.

3. Integrated 5G/Private Network Core Must establish its own secure "bubble" of high-speed connectivity.

· Stealth & Low Probability of Detection (LPD): By using a private 5G core, units can manage their own signal emissions and avoid relying on compromised or non-existent local infrastructure.

· Interoperability: Connects legacy tactical radios with modern high-bandwidth devices seamlessly.

4. Physical and Cyber Security (Zero Trust)

· Tamper Resistance: Must be physically hardened against kinetic damage and unauthorized access.

· End-to-End Encryption: Built on a Zero Trust Architecture (ZTA), ensuring that even if one node is captured, the integrity of the wider network remains intact.

5. Resilient Power Management

· Independent Energy Storage: Typically includes integrated battery backups capable of sustaining operations during a total grid collapse.

· Multi-Source Input: Can often pull power from tactical quiet generators, solar arrays, or microgrids.

Key Procurement Characteristics

- ensures the system meets Army cybersecurity standards, the system must address the transition from traditional perimeter defense to a Zero Trust Architecture (ZTA). Because these systems often operate in "disconnected, intermittent, and limited" (DIL) environments, compliance must focus on maintaining data integrity without constant reach-back to a Central Authority.

Critical Cybersecurity Compliance Characteristics

1. Risk Management Framework (RMF) Alignment Any new technology must navigate the RMF process (NIST SP 800-37) to receive an Authority to Operate (ATO).

· Control Implementation: Must be designed to meet NIST SP 800-53 security controls, specifically those tailored for tactical edge environments where physical security is at higher risk.

· Streamlined Accreditation: System configurations must aim for "Pre-Validated" status to reduce the time-to-field for combatant commands.

2. Zero Trust Architecture (ZTA) Compliance In accordance with the DoD Zero Trust Strategy, system must remove the assumption of "inside" vs "outside" safety.

· Micro-Segmentation: Even if one user or device within the 5G bubble is compromised, the breach is contained. The system uses granular policy enforcement to prevent lateral movement by an adversary.

· Continuous Authentication: Compliance with Joint Force requirements for multi-factor authentication (MFA) and automated identity management at the edge.

3. FIPS 140-3 Data Encryption To protect Controlled Unclassified Information (CUI) and Classified data, the system must adhere to Federal Information Processing Standards.

· Data-at-Rest: All localized storage within the system micro-data center must be encrypted using FIPS 140-3 validated modules.

· Data-in-Transit: Secure tunnels (VPN/IPsec) protect all traffic between the system node and the tactical cloud or handheld devices.

4. Supply Chain Risk Management (SCRM) Given the hardened nature of the hardware, the Army requires strict provenance of all components to prevent "backdoor" vulnerabilities.

· TAA Compliance: Ensures all hardware components are sourced from Trade Agreements Act compliant countries, mitigating the risk of foreign-adversary tampering in the hardware stack.

· Hardened Kernel: Utilization of a secure, stripped-down operating system to minimize the attack surface.

5. Cybersecurity Survivability Attributes (CSAs) It must demonstrate how the system handles an active cyber-attack during an engagement.

· Detection & Reaction: Must include automated tools to detect anomalous behavior (e.g., jamming or unauthorized access attempts) and can autonomously "self-heal" or go into a locked-down state to protect the mission.

Compliance Standards and system features