SCDS_CONOPS_v15_Clean_Draft.docx

UNCLASSIFIED

Source Content Dissemination Service (SCDS) Concept of Operations

Source Content Dissemination Service (SCDS) SCDS Concept of Operations

(U) Users: All consumers of NGA GEOINT Data, Tools and Services accessed on NIPRNET, SIPRNET and JWICS networks,

(U) Who are they? Department of Defense (DoD), Intelligence Community (IC), Allied System for Geospatial Intelligence (ASG), Other Federal Agencies and Academia.

(U) Location: SCDS will reside in a Government Cloud environment to include UC2S, SC2S and TC2S.

(U) Security Domains: JWICS-SCI (TC), SIPRNET-SECRET (SC), and NIPRNET-UNCLASSIFIED (UC)

(U) System Purpose Overview: The legacy NGA Gateway architecture is filled with disparate, monolithic systems that store and manage a plethora of Foundation GEOINT content including Safety of Navigation (SoN) products, elevation products, imagery products, targeting products and foundation feature data in both file and vector-based formats housed in a geospatial databases and associated file systems. SCDS (Source Content Dissemination Services), will provide an overarching cloud-based architecture, enabling automated ingest, storage, cataloging and provisioning for discovery and dissemination. The automated Foundation GEOINT Discovery and Release Tool (FGDRT) ensures that only authorized users have access to the appropriate data. These newly automated processes drastically reduce the entire process from weeks to hours. SCDS will be a cohesive, cost effective system that will provide scalability for future needs.

(U) System Objective: SCDS will radically reduce the time and effort required to make Foundation GEOINT available to end users, while providing high availability access to the DoD, IC, NSG and ASG, enabling the realization of successful mission objectives:

· Direct vendor digital upload capability eliminates the handling of hardcopy media and manual loading, reducing errors and processing time

· Automated transfer of products and data to higher domains, eliminating repetitive data loading

· Discovery and Release adjudication in minutes

· Rapid, simplified dissemination through shared microservices and APIs

· Portable architecture utilizing cloud services for cost savings

(U) Assumptions: The program will utilize:

· GEOAxIS will serve as the Identity and Access Management (IdAM) provider, gathering the necessary user entitlement information to be utilized by SCDS and the Foundation GEOINT Discovery and Release Tool (FGDRT) to ensure GEOINT is discovered and released only to authorized users.

AWS Diode, Enterprise Cross-Domain Service (ECDS) and Wormhole will provide automated cross-domain services to move content and code from lower networks to upper networks.

· Cyber Analysis and Modification Platform (CAMP) will enable the modification, scanning, and analysis of malicious content in order to provide information assurance and data loss prevention.

(U) Outcomes: Upon implementation and into the future, SCDS core capabilities will provide the following outcomes:

· Manages: Enterprise Data Management capabilities that automate the ingestion, extraction, conditioning, and cataloging necessary to disseminate content to consumers.

· Reduced timelines from data ingest and to dissemination, from months to minutes.

· Onboarding of new datatypes in a streamlined manner whether imagery, non-imagery, structured, or unstructured.

· Data Conditioning functionalities that provide the ability to properly tag and format ingested data to support discovery and search by diverse and even unanticipated users and uses.

· Enables: The Office of International Affairs direct integration of Foundation GEOINT content with disclosure and release decisions associated workflows.

· Automates quality control, standardizes data tagging in accordance with Office of the Director of National Intelligence (ODNI) Standards

· Customized product generation based on user entitlements

· ODNI and NMF (NSG Metadata Foundation) Compliant Metadata to improve data discovery, search, and retrieval

· Reduced operational and sustainment costs through the utilization of:

· Serverless Functions for Data Processing

· Autoscaling Groups to scale up/down based on demand

· Automated deployments and patching enabled by NGA CORE

· Shares: An enterprise-wide data service repository that allows authenticated users and machines to discover and consume Foundation GEOINT data and products.

· Automated notifications sent to the contracting office and associated production offices for data deliveries to better inform and impact contracts.

(U) Retirement of Legacy Systems: SDCS replaces the Legacy Gateway systems that sustains a number of services performing some role in the overall Foundation GEOINT storage and management process. SCDS will migrate modernized legacy systems onto SCDS hardware, which will be more reliable, cost effective and deliver services in hours instead of days and weeks.

(U) SCDS Core Capabilities see Appendix A