1300 J6 AMHE Industry Day 20250502v2.pptx

J6 Information Operations Genna Schiner, Supervisory Program Manager Ed Thompson, AMHE Technical Pillar Lead May 14, 2025 Updated as of Feb 19, 2025

J6 Organization

Chief Information Officer (CIO): Mr. Adarryl Roberts (SES) Program Executive Officer (PEO): Mr. James Johnson (SES) Portfolio Manager: Ms. Jessica Thomas Program Manager: Ms. Genna Schiner Technical Pillar Lead: Mr. Ed Thompson

Operational Technology (OT) in DLA includes Facility Related Control Systems (FRCS), Industrial Control Systems (ICS), Supervisory Control and Data Acquisition (SCADA), and Internet of Things (IoT) and is categorized by “Pillars”.

Warfighter Always

PEOPLE PRECISION POSTURE PARTNERSHIPS

OT Pillars

Operational Technology is categorized into eight pillars based on functionality*

Other Marquees Mobile Range

- User Managed Device (UMD) Mobile Trailer Drones Solar Panels 3D Scanners CNC Wood Router Vehicle Telematics

Programmable Logic Controllers Vertical Lift Modules Dimension and Weigh System Conveyors

Automated Material Handling Equipment Groundwater Treatment Systems Vapor Recovery Systems Effluent Monitoring Systems Environmental Remediation Systems

Utility Control Systems Central Plant Steam Systems Water Treatment Systems Waste Treatment Systems Utility (& Smart) Metering

Building Control Systems Building Automation Systems Electrical Systems Building Lighting Systems Elevator Systems

HVAC

Vehicle Charging Systems

Petroleum, Oil & Lubricants Automated Fuel Handling Systems Automated Tank Gauging Systems Hydrant Fuel Automation Maintenance Automatic Fueling Service Station

Fire Protection Fire Alarm Reporting Systems Fire Suppression Systems Mass Notification Systems

Operational Technology Requirements Security Electronic Security Systems Electronic Key Control Intercoms

MILCON / SRM**

*Not all inclusive; **Not a pillar, crosses multiple pillars Environmental

Mission, Vision, and Goals Mission: Provide expert services for Enterprise level logistics, life, health, and safety systems.

Vision: Valued enabler and partner to customers Functions:

Technology planning/management Infrastructure and environment support Program, acquisition, and contract partner Enhance cybersecurity across landscape Goals:

99.6% Uptime (Prod) Improve Partner Satisfaction/Confidence by 5% Upgrades/Migrations Complete ~ NLT 6 months prior to EOL Cyber Hygiene Scores Annual Average “B+” Time to Deliver (Install projects) ~ incrementally / phased e.g., 9, 12, 18 months based on scope and complexity (Kick Off to IOC) Time to Award - 100% contact submission on-time (PALT) ~ backwards plan and complete ahead of schedule without significant impacts to cost Centralize and transition work in house i.e., Move work closer to people managing the systems vs. outsourcing

Organizational Strategy

OT Strategic Initiatives Establish Enterprise Level Acquisition and Program Support Plan Life Cycle Sustainment Support Building Industry Support Goals and Objectives in Alignment with the DLA Strategic Plan People: Provide people with consistency and predictability; workforce development Precision: Digital Business Transformation (DB-X); OT Test Lab Establishment Posture: Optimizing Organizational Structure; Risk Issues, and Opportunity Management Program Partnerships: Establish Technical Governance and Stakeholder Buy-In; Conduct Tollgate Reviews J6 Digital Strategy Leverage Digital Ready Workforce Enhance IT Governance and Operational Success Advance Digital Ecosystem in Global Environment Drive Data and Analytics Capabilities

Challenges We are changing how we do business – acquisition, collaboration, and communication (culture) New space with minimal DoD/OSD policy or direction Cyber i.e., disruptive technologies with emerging attack vectors Aging infrastructure that is cost prohibitive to modernize Tenant sites Construction activities Interoperability availability (hardware and software dependencies) Under resourced based on current DoD/OSD expectations Funding Personnel

What is the problem?

cant ‘use it til it cant be used’ & then scramble for a solution Must Leverage enterprise solutions as much as possible DoD due to update DFARS 252.239.7001 clause; DoD policy updates on 8140 vs 8570 Infrastructure that has various makes & manufacturers and various requirements Siloed focus by site Executive Orders + DOGE = Do more with less

Lifecycle Management of OT Systems Lifecycle management involves overseeing the asset’s full lifespan from planning to deployment to decommissioning OT is used to monitor, manage and control physical devices and related processes OT generally has a long lifecycle OT devices embed operating systems Proprietary and/or other special considerations may exist

- Lifecycle management involves overseeing the asset’s full lifespan from planning to deployment to decommissioning

- OT is used to monitor, manage and control physical devices and related processes -- Onsite support for everything is expensive

- OT generally has a long lifecycle -- 20 to 30 years is unheard of in IT systems

- Many OT devices have operating systems embedded -- Attack vector

- Special considerations must be taken into account during the lifecycle to ensure minimal operational disruptions -- For example, manufacturer maintenance restrictions

Lifecycle Management of OT Systems Contd.

Lifecycle management includes:

Both hardening legacy systems and planning for cyber security when considering new systems Completion of all requirements for system deployments Regular updates and maintenance, both hardware and software throughout the full usage of the system for example:

Updating Firmware, Servers, Switches Applying Security Patches, Updating Operating Systems Conducting Periodic Inspections Replacing Inoperable Components, etc.

Secure disposal of the system when decommissioned

Risk Management Risk management: Important part of the lifecycle management of an operational technology system Continuous monitoring and maintenance is essential to all OT systems Track device health Collect data Identify anomalies Proactively address issues Identify and correct system vulnerabilities Involves monitoring metrics such as device connectivity, utilization, and network traffic to ensure operational efficiency and reliability

Potential artificial intelligence (AI) use cases potential if data lake created

AMHE Enterprise J6 Contract Expectations DLA researching an Indefinite Delivery Indefinite Quantity (IDIQ) DLA may issue individual AMHE IDIQ Task Orders (TOs) TOs include preventive, corrective, and cybersecurity support in line with the DoD RMF Framework requirements Personnel supporting cybersecurity of these systems are required to meet minimum baseline and computing environment certifications System inventory occurring and ongoing across all lines of effort Configuration management of all systems will be an important part of lifecycle management Using networked systems to modernize monitoring and automation Solutions must be adaptable across pre-Prod and Prod regions what is being considered:

Solutions must be adaptable to DLA’s changing technical landscape. DLA is in the planning stages of a test/dev environment setup for systems where appropriate, this will provide an environment for standing up system changes prior to production deployment

End Slide 1

OT Network Manager / Architect Zero Trust (ZT)

ZT

Phase 1 Education Develop 8140 Qualification Matrices SANS, CISA, SEL University Courses Academia/Certifications pathways Cross Training IT to OT / OT to IT - Train the Trainer Digital Twins e.g., Richmond HVAC OT-SDN and NTP/PTP Vulnerability Management and Incident Response Asset Discovery Intrusion Detection and End-point Security Log Aggregation and transfer process DLA Energy e.g., OT-SDN and NTP/PTP Sustainment, budgeting, and acquisition planning

Phase 2 Production Migrations e.g., SBIR J68 Richmond Richmond HVAC System Cutover to Production DLA OT Network with ATO Target Richmond Facility Related Control Systems (FRCS) to migrate to Production OT-SDN with ATO Implement validated emerging OT technologies

DLA Energy e.g., deploy OT-SDN – Manchester, WA with ATO

Phase 3 CONUS Deployment Plan and Develop OT-SDN cutovers by Geographical Sites Migrate FRCS Systems at Geographical Sites with ATO Implement validated emerging OT technologies

OCONUS Planning Develop Lessons Learned from CONUS deployment Evaluate and Determine Schedule for OCONUS implementation

Richmond HVAC Digital Twin Example

Fan Chart

DLA

Purdue Model

OT LEVEL 0

DLA Enterprise Business Network DLA Applications used to support Enterprise Business and User Goals. Items typically found in this zone include: Internet Access Points, Email Servers, DLA Customer Facing Web Servers, CRM Systems, HR Systems, Enterprise Document Management Systems and Remote Access VPN endpoints.

DLA Enterprise Network DISA Absorbable IT Shared Services for DLA business unit or subsidiaries. Items typically found in this zone include: Local File and Print Servers, Communications and Phone Systems, DLA Site Directories, DLA Site Specific Remote Access Solutions, Security Event Aggregators, and Site-Specific Internet Access Points.

DMZ for OT DLA series of function specific zones where services and data can be shared between the zones. Items typically found in this zone include: HBSS, Carbon Black, Patch Management Servers, Anti-Virus Management Systems, Site Specific Applications Servers, Jump Server Environments, Business Intelligence Systems, Backend Databases for Site Specific Applications, and Development Systems.

Supervisory Control LAN Includes the functions involved in operating the real-time control system. Items typically found in this zone include: Control Center Operation Workstations (WS), Human Machine Interfaces (HMI), Engineering Workstations, Security Event Collectors, Operations Alarm Systems, Communications Front Ends, Data Historians, and Network/Application Administrator Workstations.

Control Devices Includes the functions involved at the site-specific operating environments. Item typically found in this zone include: Dedicated Operator Workstations, Programmable Logic Controllers (PLCs), Control Processors, Programmable Relays, Remote Terminal Units (RTUs), Remote Interface Units (RIUs) and Process Specific Micro-controllers.

Process Control Instrumentation Includes the functions involved in transitioning from cyber to physical and from physical to cyber. Item typically found in this zone include: Sensors, Actuators, Motors, Process Specific Automation Machinery and Field instrumentation devices.

J64 Operations Support Includes the functions involved in managing the DLA OT operations and monitoring environment. Items typically found in this zone include: Operations Scheduling, Tracking Tools, T&D Operations, Simulation, and Modeling Tools, ForeScout and other Analysis Tools, Replicated Historians, and Data Visualization and VM Utilities. Dedicated J64 operations specific IT services e.g., DHCP, LDAP, DNS, and authorized file servers.

DLA ERP Tools and Services Archive/File Servers J64 Operations Management Control System Supervisory Controls PLC/RTU IP Communication Safety and Instrumented Systems I/O from Sensors

HBSS

OT LEVEL 1

OT LEVEL 2

OT LEVEL 3

IT

LEVEL 4

IT

LEVEL 5

OT DMZ

DMZ

Process Controls/ICS Industrial Control Systems (ICS) Operation Zone Business Zone

DLA

DISA

4ENO

TBD

DOTNET

Operational Technology DLA Enterprise

DMZ

image10.png image11.png image3.png image12.emf image13.emf image14.png image1.jpg image2.png image4.png image5.jpeg image6.png image7.png image8.png image9.png