(U) NGAI 3020.26_Continuity of Operations Program_Update_1.pdf

UNCLASSIFIED

National Geospatial-Intelligence Agency

INSTRUCTION

NUMBER 3020.26

26 May 2021

Administrative Update 1, 15 March 2023

NOC

SUBJECT: Continuity of Operations Program

References: See Enclosure 1.

1. PURPOSE. This Instruction:

a. Establishes policy and assigns responsibilities for the planning, management, execution, exercise, and maintenance of NGA’s Continuity of Operations (COOP) Program functions in accordance with (IAW) References (a) through (am).

b. Governs all activities involved with planning and preparation for the survival, continuity, recovery, and reconstitution of NGA’s mission essential function (MEF).

c. Supports National, DoD, Intelligence Community (IC), and NGA continuity goals and objectives to ensure the resilience of NGA’s mission.

d. Rescinds NGA Instruction 3020.26, “Continuity of Operations Program,” 17 May 2018.

2. APPLICABILITY. This Instruction applies to all NGA civilian employees, military service members, other Government agency personnel assigned to NGA, and contractors hereinafter referred to as personnel.

3. DEFINITIONS. See Glossary.

4. POLICY. It is NGA policy to:

a. Assure the resilience of its people, processes, technology, and facilities that support its

MEF: task, collect, process, exploit, analyze, and disseminate timely, relevant, and accurate geospatial intelligence, consisting of imagery, imagery intelligence, and geospatial information for use by the Armed Forces, Departments or Agencies of the US Government, and foreign partners. (Reference (ai))

b. Govern and employ a risk-based, enterprise-wide approach for survival, continuity, recovery, and reconstitution of NGA’s essential functions (EFs), functions (Fs), essential support activities (ESAs), support activities (SAs), information systems (including contractor/vendor-operated systems and systems in the acquisition cycle/development phase) infrastructure, and mission-essential tasks following a natural or manmade disruption.

NGAI 3020.26

c. Maintain the capability to rapidly, methodically, and effectively respond and resume, recover, and reconstitute NGA’s business processes, information technology (IT) systems, and human resources following an undesirable event (UDE) (natural or manmade) and to support this requirement through the establishment of thorough continuity plans, procedures, and technical measures.

5. RESPONSIBILITIES. See Enclosure 2.

6. EFFECTIVE DATE. This Instruction is effective on the date of signature.

Ernest B. Markham

Chief of Staff

Enclosures

1. References

2. Responsibilities Glossary

TABLE OF CONTENTS

CHANGE LOG

ENCLOSURE 1: REFERENCES

ENCLOSURE 2: RESPONSIBILITIES

Director, NGA Deputy Director, NGA

Chief of Staff Mission Assurance Officer Associate Director for Operations

Associate Director for Capabilities Associate Director for Support

Associate Director for Enterprise Agency Continuity Coordinator

Director, NGA Operations Center Chief, NGA Operations Center Mission Assurance

Operations Center Director Intelligence Director Source Operations Officer

Information Technology IT Mission Watch Officer NGA Operations Center Core Leadership Team

Chief Financial Executive General Counsel

Director, Human Development ....................................................................................... 14 15 Director, Office of Corporate Communications Director, Office of Contract Services

Director, Security and Installations ................................................................................. 15 16 Director, Chief Information Officer and IT Services ......................................................... 16 17

Chief Information Security Officer Chief, Defensive Cyber Operations Cyber Security Operations Cell

Chief, Information Technology Continuity and Recovery Branch ..................................... 18 19 Chief, Cyber Security Office Risk Management Division ................................................. 19 20

Chief, Enterprise Service Center Infrastructure Service Providers Application Service Providers

Authorizing Officials and Delegated Authorizing Officials Directorate Component Heads and Agency Element Leads ............................................ 20 21

Directorate and Agency Element Component Business Continuity Lead Planners ........... 22 23 Information System Owners

Chiefs, NGA Support Teams

GLOSSARY

CHANGE LOG

Change Change

Date Revised

By Pages

Affected Change Description

1-1 03/15/2023 DXCI

1, 10, 13-

15, 17-19, 23, 28-29, Updated Referencing.

1-2 03/15/2023 DXCI

2, 7-8, 10- 21, 24-31

Updated the establishment and use of acronyms.

1-3 03/15/2023 DXCI 3 Updated Table of Contents.

1-4 03/15/2023 DXCI 5-6 Updated References.

1-5 03/15/2023 DXCI

7-12, 14, 16-19, 21-

Changed Directorate Heads and Agency Element Leads to Component Heads and Directorates and Agency Elements to Components.

1-6 03/15/2023 DXCI 7

Moved responsibility of “oversees the COOP Program Budget Line Item” from the Associate Director for Support to the Director.

1-7 03/15/2023 DXCI 9-10

Removed responsibilities for the

Associate Director for Enterprise and Associate Director for Support.

1-8 03/15/2023 DXCI

10-11, 13- 21, 23, 25-

Updated paragraph numbers.

1-9 03/15/2023 CIO-T 11, 17, 20

Updated responsibility for Director, Chief Information Officer and

Information Technology Services related to tracking and providing NGA systems status updates and coordinating authorized outages with

Director, NGA Operations Center.

1-10 03/15/2023 DXCI 13 Removed Directorate from after SI.

1-11 03/15/2023 CIO-T 18

Updated Chief, Defensive Cyber

Operations to Chief, Cyber Security Operations Cell.

1-12 03/15/2023 CIO-T 18, 20 Updated defense to defensive.

1-13 03/15/2023 DXCI 27-29

Updated glossary terms and definitions.

ENCLOSURE 1

REFERENCES

(a) Presidential Policy Directive 40, “National Continuity Policy,” 15 July 2016

(b) Office of Management and Budget Circular Number A-123, “Management’s

Responsibility for Enterprise Risk Management and Internal Control,” 15 July 2016

(c) Office of Science and Technology Policy/Office of Management and Budget Directive

D-16-1, “Minimum Requirements for Federal Executive Branch Continuity Communications Capabilities,” 15 December 2016 (TS//NF)

(d) Department of Homeland Security, Federal Emergency Management Agency, Federal Continuity Directive (FCD) 1, “Federal Executive Branch National Continuity Program and Requirements,” 17 January 2017

(e) Department of Homeland Security, Federal Emergency Management Agency, FCD 2, “Federal Executive Branch Mission Essential Functions and Candidate Primary Mission Essential Functions Identification and Submission Process,” 13 June 2017

(f) Homeland Security Council, “National Strategy for Pandemic Influenza Implementation Plan,” May 2006

(g) Intelligence Community Directive (ICD) 118, “Intelligence Community Continuity Program,” 12 November 2013

(h) ICD 503, “Intelligence Community Information Technology Systems Security Risk Management,” 15 September 2008, Technical Amendment, 21 July 2015

(i) Intelligence Community Standard 503-03, “Implementing the Risk Management Framework for Intelligence Community Information Systems,” 15 February 2017

(U//FOUO)

(j) Committee on National Security Systems Instruction 1253, “Security Categorization and Control Selection for National Security Systems,” 27 March 2014 29 July 2022

(k) National Institute of Standards and Technology (NIST) Special Publication (SP) 800-30

Revision (Rev) 1, “Guide for Conducting Risk Assessments,” September 2012

(l) NIST SP 800-34 Rev 1, “Contingency Planning Guide for Federal Information

Systems,” May 2010

(m) NIST SP 800-53 Rev 5, “Security and Privacy Controls for Federal Information

Systems and Organizations,” September 2020

(n) “Department of Defense Mission Assurance Strategy,” 07 May 2012

(o) DoD Directive (DoDD) 3020.26, “DoD Continuity Policy,” 14 February 2018

(p) DoDD 3020.40, “Mission Assurance (MA),” 29 November 2016, Change 1, 11 September 2018

(q) DoD Instruction (DoDI) O-2000.16, Volume 1, “DoD Antiterrorism (AT) Program

Implementation: DoD AT Standards,” 17 November 2016, Change 23, 20 November 2019 07 May 2021 (CUI)

(r) DoDI 3020.39, “Mission Assurance Policy for the Defense Intelligence Enterprise (DIE),” 2 March 2015, Change 2, 21 September 2020

(s) DoDI 3020.42, “Defense Continuity Plan Development,” 17 February 2006, Certified current, 27 April 2011

(t) DoDI 3020.45, “Mission Assurance (MA) Construct,” 14 August 2018, Change 1, 02 May 2022

(u) DoDI 8500.01, “Cybersecurity,” 14 March 2014, Change 1, 07 October 2019

(v) “Department of Defense Implementation Plan for Pandemic Influenza,” August 2006

(w) United States Northern Command, “Department of Defense Global Campaign Plan for Pandemic Influenza and Infectious Disease,” 15 October 2013 (U//FOUO)

(x) NGAD NGA Directive 3021, “Emergency Management” (EM) Program,” 17 March 2015, Administrative Update 1, 28 October 2015

(y) NGA Instruction (NGAI) 1000.1, “Personnel Accountability in Conjunction with Natural or Manmade Disasters and National Emergencies,” 27 February 2018, Administrative

Update 1, 19 November 2021 (U//FOUO)

(z) NGAI 1060.1, “Telework Program,” 02 April 2021, Administrative Update 1, 25 August 2022

(aa) NGAI 3000.1 “Exercise Program,” 31 July 2018

(ab) NGAI 5425.1, “Corporate Policy Program,” 12 April 2021, Administrative Update 1, 23 February 2022

(ac) NGAI 5600.1, “Engaging with Federal, Executive, Judicial and Legislative Communities; the Media, and the General Public,” 29 December 2015

(ad) NGAI 7210.2, “Administrative Control of Appropriated Funds and Anti-deficiency Act (ADA) Violations,” 01 October 2014

(ae) NGAI 8040.2, “Records Management Program,” 21 October 2020

(af) NGAI 8940.1 “Lessons Learned Program,” 28 November 2017

(ag) “Allied System for Geospatial-Intelligence (ASG) Crisis Response Concept of Operations (CONOPS),” 26 September 2014 (S//REL TO USA, FVEY)

(ah) “National Geospatial-Intelligence Agency Pandemic Influenza and Infectious Disease Response Plan,” June 2014, Revised May 2017(U//FOUO)

(ai) “NGA National Geospatial-Intelligence Agency Continuity of Operations (COOP) Plan,” April 2013, Revised April 2017 06 January 2022 (S//NF)

(aj) NGA Information Assurance Requirements Catalog, Current Edition

(ak) NGA Memorandum for Under Secretary of Defense for Policy, “Designation of

Component Continuity Coordinator,” 31 January 2018

(al) “NGA Outage Control Board (OCB) Standard Operating Procedures (SOP) – (NGAI

NI-8500.2 Supplement),” 01 September 2015, Revised 07 April 2016 (U//FOUO)

(am) “The 2018 DoD Cyber Strategy”

ENCLOSURE 2

RESPONSIBILITIES

1. Director, NGA (D/NGA).

a. Ensures planning, programming, and budgeting for continuity capabilities (including mission and IT system resilience) are adequate to support NGA’s COOP Program and continuation of NGA’s MEF under all conditions IAW References (a), (c), (g), (o), (p), and (r).

b. Approves NGA’s MEF IAW References (e), (o), and (s).

c. Designates an Agency Continuity Coordinator (ACC), who has the authority and responsibility for oversight of NGA’s continuity activities IAW References (a), (o), (s), and

(ak).

d. Approves NGA’s order of succession IAW References (d) and (s).

e. Delegates NGA authorities IAW References (d) and (s).

f. Serves or delegates appointment of a Mission Assurance (MA) Officer with necessary security clearance and authority for addressing security, protection, and risk-management

(RM) issues. (Reference (p))

g. Works with the Chief Financial Executive (CFE) and Directorate Component Heads and Agency Element Leads to recommend realignment of funds to support contingency requirements in support of resilience planning and response, recovery, and reconstitution operations IAW References (d) and (ai).

h. In coordination with the Director, Security and Installations (D/SI),; Chief, NGA

Operations Center Mission Assurance MA (C/NOC MA),; Directorate Component Heads and Agency Element Leads,; and Directorate and Agency Element Component Business Continuity (BC) Lead Planners, help identify alternate facilities and work spaces based on requirements. Planning should consider scenarios that include relocation from any facility at which the Directorate Component Heads and Agency Element Leads work or provide support.

i. Oversees the COOP Program Budget Line Item.

2. Deputy Director, NGA (DD/NGA).

a. Works with the CFE and Directorate Component Heads and Agency Element Leads to recommend realignment of funds to support contingency requirements in support of resilience planning and response, recovery, and reconstitution operations IAW References (d) and (ai).

b. In coordination with the D/SI, C/NOC MA, Directorate Component Heads and Agency

Element Leads, and Directorate and Agency Element Component BC Lead Planners, help identify alternate facilities and work spaces based on requirements. Planning should consider scenarios that include relocation from any facility at which the Directorate Component Heads and Agency Element Leads work or provide support.

3. Chief of Staff (CoS).

a. Recommends NGA’s order of succession to the D/NGA IAW References (d) and (s).

b. Recommends NGA’s delegations of authority to the D/NGA IAW References (d) and

(s).

c. Advises the D/NGA on making continuity decisions, specifically on response, recovery, and reconstitution to support facility, security, and personnel functions IAW Reference (ai).

d. Works with the CFE and Directorate Component Heads and Agency Element Leads to

e. In coordination with the D/SI, C/NOC MA, Directorate Component Heads and Agency

Element Leads, and Directorate and Agency Element Component BC Lead Planners, helps identify alternate facilities and work spaces based on requirements. Planning should consider

4. MA Officer.

a. Addresses security, protection, and risk-management RM issues IAW Reference (p).

b. Develops/participates in a risk forum that addresses internal risks that affect the accomplishment of the Agency’s MEF IAW References (p).

c. Integrates MA with existing DoD risk management RM efforts IAW References (p).

d. Elevates strategic risk issues to the appropriate MA Coordination Board Forums within the IC and DoD.

e. Integrates MA-related responsibilities assigned in the DoD Cyber Strategy IAW

Reference (p).

f. Provides strategic direction for decisions made at the Joint Technical Working Group, the Joint Risk Working Group, and the NGA Mission Assurance MA Risk Management RM Committee.

5. Associate Director for Operations (ADO).

a. Recommends NGA’s MEF(s) to the D/NGA IAW References (e), (o), and (s).

b. Advises the D/NGA in making continuity decisions, specifically on response, recovery, and reconstitution to support the status of mission and operations and the impacts to NGA’s

MEF IAW Reference (ai).

c. Works with the CFE and Directorate Component Heads and Agency Element Leads to

d. In coordination with the D/SI, C/NOC MA, Directorate Component Heads and Agency identify alternate facilities and work spaces based on requirements. Planning should consider

6. Associate Director for Capabilities (ADC).

a. Advises the D/NGA on making continuity decisions, specifically with contingency contracting/budget requirements and long-term programmatic resilience planning IAW

Reference (ai).

b. Works with the CFE and Directorate Component Heads and Agency Element Leads to

c. In coordination with the D/SI, C/NOC MA, Directorate Component Heads and Agency identify alternate facilities and work spaces based on requirements. Planning should consider scenarios that include relocation from any facility at which the Directorate Component Heads

7. Associate Director for Support.

a. Oversees the COOP Program Budget Line Item.

b. Works with the CFE and Directorate Component Heads and Agency Element Leads to

c. In coordination with the D/SI, C/NOC MA, Directorate Component Heads and Agency identify alternate facilities and work spaces based on requirements. Planning should consider scenarios that include relocation from any facility at which the Directorate Component Heads

8. Associate Director for Enterprise.

a. Works with the CFE and Directorate Heads and Agency Element Leads to recommend realignment of funds to support contingency requirements in support of resilience planning and response, recovery, and reconstitution operations IAW References (d) and (ai).

b. In coordination with the D/SI, C/NOC MA, Directorate Heads and Agency Element

Leads, and Directorate and Agency Element BC Lead Planners, helps identify alternate facilities and work spaces based on requirements. Planning should consider scenarios that include relocation from any facility at which the Directorate Heads and Agency Element Leads work or provide support.

9 7. ACC.

a. Oversees the establishment and development of an integrated and synchronized COOP Program for NGA that is consistent with applicable laws and regulations IAW References (a) through (w).

b. Ensures effectiveness and survivability of NGA’s continuity capabilities IAW References

(a) through (w), (ag), and (ai).

c. Leads NGA’s planning and execution of business continuityBC/disaster recovery (BC/DR) exercise programs. (Reference (aa))

d. Leads NGA’s mission response, recovery, and reconstitution efforts during a contingency/continuity event. These actions include recommending ordering the activation of the NGA COOP Plan, Directorate and Agency Element Component Business Continuity BC Plans (BCPs), Information System Contingency Plans (ISCPs), and Disaster Recovery Plans (DRPs) IAW References (o), (ag), and (ai).

e. Oversees all policies concerning utilization of alternate sites for undesirable events

UDEs BC to include physical space decisions, and senior level coordination with NGA components and other Federal agencies.

f. Identifies and ensures potential strategic risks are identified and addressed resulting from MA National Level Exercises, Emergency Management and Force Protection Exercises and real-world negative events affecting facilities or personnel, to include power outages, unscheduled network outages, and other facilities failures.

g. Integrates and synchronizes MA functional area planning and execution across NGA;

this should include integrating MA-related responsibilities assigned IAW Reference (am).

h. Identifies, prioritizes, and remediates mission risk and resilience efforts across NGA.

i. Collaborates with Director, Chief Information Officer and IT Services (D/CIO-T) and

Director, Security and Installations (D/SI) on any alternate facilities or workspaces that have requirements for IT hardware, networks, and software to continue operations, should normal operating facilities become unavailable.

10 8. Director, NOC (D/NOC).

a. Represents NGA concerning continuity affairs and policy at external senior-level

Federal, DoD, IC COOP, and BC/DR forums.

b. Submits continuity planning, programming, budgeting, and execution (PPBE) requirements to the appropriate parties for review, decision, validation, and action IAW References (a), (d), (g), (o), (p), and (r).

c. Executes Essential Records Program management responsibilities with regard to the

Agency’s Continuity Program IAW Reference (ae).

d. Advises the Executive Committee (EXCOM) and Directorate Component Heads and

Agency Element Leads in making continuity decisions.

e. Coordinates authorized outages with D/CIO-T during authorization and implementation phases to minimize mission impacts.

11 9. C/NOC MA.

a. Serves as NGA’s Continuity Manager and office of primary responsibility (OPR) for MA policy, programs, and plans IAW Reference (r).

b. Coordinates NGA efforts to ensure the continued function and resilience of capabilities and assets by refining, integrating, and synchronizing risk management RM and continuity planning that directly relates to mission execution IAW References (d) and (p).

c. Establishes, develops, maintains, and executes an integrated and synchronized COOP program that is consistent with applicable laws and regulations IAW References (a) through (w).

d. Provides strategic planning assistance, guidance, and PPBE review and validation in support of the NGA COOP Program IAW References (a), (d), (g), (o), (p), and (r).

e. In coordination with the D/SI, EXCOM, Directorate Component Heads and Agency Element Leads, and Directorate and Agency Element Component BC Lead Planners, helps identify alternate facilities and work spaces based on requirements. Planning should consider

f. Develops COOP policy and provides guidance and support to Directorate Component Heads and Agency Element Leads regarding the development of BCPs IAW References (r) and (ab).

g. Coordinates ISCPs with the Chief, IT Continuity and Recovery Branch.

h. Maintains and updates the NGA COOP plan IAW References (a), (d), (g), and (s).

i. Provides and maintains the corporate repository for EF, F, ESA, SA, BC, and ISCPs within the NGA continuity planning tool (CPT).

j. Provides and maintains the corporate repository for MA risk management RM and risk registry information within the NGA Risk and Opportunity Management System (NROM) IAW

References (b), (d), and (p).

k. Provides and maintains the corporate repository for exercise and scenario product information within the enhanced master scenario events list system.

l. Reviews BCPs for completeness and currency.

m. Collaborates with Directorate Component Heads and Agency Element Leads, and their respective BC Lead Planners, to ensure essential records are identified and available at planned alternate facilities IAW Reference (ae).

n. Collaborates with Chief, IT Continuity and Recovery Branch on recovery time capability

(RTC) and ensures systems support mission requirements or document risk acceptance or mitigation if RTC is not properly aligned with enabled missions. Documents risk acceptance or mitigation in NROM System.

o. Collaborates with Chief Information Security Officer (CISO) regarding cybersecurity risk acceptance and mitigation.

p. Collaborates with appropriate offices within CIO-T, Information System Administrators

(Information System Owners (ISOs), Intelligence Surveillance and Reconnaissance, ISCPs), and functional system users to ensure:

(1) Accurate recovery time objective (RTO) and RTC alignment for NGA information systems;

(2) ISCPs are linked to the NGA mission(s) (i.e., EF/F/ESA/SAs) they enable in the

NGA CPT;

(3) ISCPs support mission requirements or document risk acceptance if RTO is not properly aligned with mission.

q. Plans and conducts annual test, training, and exercise (TT&E) of the NGA COOP Program and continuity plans IAW References (c), (d), (g), (o), (p), (r), (s), and (aa).

r. Develops and submits updates to the NGA MEF to the ADO, as required IAW

Reference (e).

s. Monitors NGA compliance with National, IC, DoD, and NGA COOP Program policy and maintains the NGA continuity readiness metrics program IAW Reference (s).

t. Coordinates with the CFE to provide input for annual Office of Management and Budget

(OMB), Congressional Budget Justification Book (CBJB), and Office of the Director of National Intelligence (ODNI) performance metrics IAW References (a), (d), (g), (p), and (r).

u. Supports the SI Directorate in administering the NGA mass notification system for business continuity BC purposes IAW References (c), (d), and (o).

v. Coordinates and collaborates with D/SI in the scheduling and conducting of external

NGA MA assessments (e.g., Joint Mission Assurance MA Assessments and Balanced Survivability Assessments).

w. Provides continuity training to NGA leadership, continuity planners, and personnel IAW

References (d), (e), and (g).

x. Conducts business process analysis biennially and reviews EFs within the CPT IAW References (d) and (e).

y. Coordinates training, annual access validation, and general use and life support (e.g., budgetary, communications, equipment, etc.) for all NGA alternate sites.

z. Works with D/SI and other relevant stakeholders to ensure viability of the Computerized

Emergency Notification System for MA activities (e.g. BC and Personnel Accountability (PA) purposes) IAW References (d), (o), (s), (x), and (y).

aa. Collaborates with the Chief, Information Technology IT Continuity and Recovery Branch on the status of the NGA IT Contingency Planning Program (ITCPP) to ensure compliance and accuracy of program metrics and measures.

ab. Coordinates with Chief, IT Continuity and Recovery Branch; ISO; and the Chief, Cyber Security Office Risk Management RM Division to identify which specific NGA EF, F, ESA, and SAs each information system supports. Evaluates each system's RTC capabilities against the EF, F, ESA, SA, and RTO requirements. Determines potential risks using gap analysis between mission requirement and program capability identifying and prioritizing risk, as well as providing appropriate risk mitigation measures and controls to address identified risk IAW References (h) through (m), and (u).

ac. Serves as Agency Program Manager (PM) for the defense critical infrastructure program activities, including development and review of the NGA task critical asset list IAW

Reference (t).

12 10. Operations Center Director.

a. Leads the NOC Core Leadership Team.

b. Maintains a common operating picture of business continuity BC readiness, manages the authorized outage process, and implements the ASG crisis response IAW Reference (ag).

c. Notifies the Casualty Affairs Program Office of incidents involving an employee’s death, serious injury/illness, or unexplained absence IAW Reference (x).

d. Maintains NGA’s operating status information and collaborates with appropriate external organizations to advise them of NGA’s operating status during changes in Continuity of Government Condition (COGCON) Level or as directed or appropriate IAW References (g) and (x).

e. Collects and reports personnel accountability PA information, in support of HD responsibilities, and as provided by Directorate Component Heads and Agency Element Leads during business continuity BC events. This information is reported to the D/NGA;

DD/NGA; CoS; ADO; ADC; D/NOC; Director, Office of Corporate Communications (D/OCC);

and external organizations as directed IAW References (d) and (y).

f. Collects information on NGA site emergency response carried out by the D/SI and the mission recovery efforts of the Directorate Component Heads and Agency Element Leads.

This information is reported to the D/NGA, DD/NGA, CoS, ADO, ADC, D/NOC, D/OCC, and external organizations as directed.

13 11. Intelligence Director serves on the NOC Core Leadership Team.

14 12. Source Operations Officer serves on the NOC Core Leadership Team.

15 13. IT Mission Watch Officer (ITMWO) serves on the NOC Core Leadership Team.

16 14. NOC Core Leadership Team provides EXCOM and Directorate Component Heads and Agency Element Leads with timely command, control, communications, and IT systems information including: COGCON, COOP, BCP, and DRP implementation, and NGA crisis response team(s) status/reporting IAW References (ag), (ai), and (ak).

17 15. CFE.

a. Works with EXCOM, Directorate Component Heads and Agency Element Leads to

b. Coordinates with C/NOC MA for input for annual OMB, CBJB, and ODNI performance metrics IAW References (a), (d), (g), (p), and (r).

c. Seeks additional contingency funding through supplemental or reprogramming processes that may be authorized by the DoD, ODNI, OMB, or Congressional oversight in response to approved PPBE contingency requirements IAW Reference (ad).

d. Develops and provides guidance and support to Directorate Component Heads and

Agency Element Leads regarding the planning and programming of funds to support continuity activities.

18 16. General Counsel (GC).

a. Reviews contingency records for legal sufficiency as required, including external agreements (e.g., memorandum of agreement (MOA), memorandum of understanding

(MOU), and proper use memorandum) IAW Reference (d).

b. Provides legal guidance in areas such as privacy and contracts (facilities and personnel) in conjunction with COOP, BCP, DRP, ISCP planning efforts, and contingency/continuity events IAW References (d), (s), and (y).

c. Collaborates with D/SI on the requirements of supported and supporting organizations through MOAs, MOUs, and other agreements as applicable to NGA core sites IAW

Reference (d).

19 17. D/HD.

a. Coordinates the telework program requirements and incorporates relevant COOP requirements during COOP Plan activation IAW Reference (z).

b. Manages the PA program, assigns a PA Liaison to the NOC, and provides reports to the NOC Director on the status of personnel as required or appropriate IAW References (d), (x), and (y).

c. Advises the CoS regarding the standup of the Emergency Family Assistance Center in the event of a mass casualty incident IAW References (ag) and (ai).

20 18. D/OCC.

a. Informs the workforce of NGA’s operating status.

b. Communicates with Congress, DoD, ODNI, and other federal, state, and local government public affairs staffs as appropriate IAW Reference (ac).

c. Informs the media and public of changes to NGA’s operating status, as appropriate, and prepares responses to inquiries from Congress, other Federal departments and agencies, and national and local media IAW Reference (ac).

21 19. Director, Office of Contract Services (D/OCS).

a. Ensures expeditious acquisition of the resources necessary for response, recovery, and reconstitution operations from an undesirable event (UDE), for up to 30 days, or until normal operations have resumed IAW References (d) and (ai).

b. Ensures resilience requirements are explicitly stated and included in all applicable contracts for survival, continuity, recovery, and reconstitution of the NGA MEF, EFs, Fs, ESAs, SAs, and IT systems IAW References (d), (s), and (u).

c. Collaborates with D/CIO-T to ensure IT resilience requirements for primary and backup infrastructure systems and services are explicitly stated in all IT contracts for survival, continuity, recovery, and reconstitution of the MEF, EFs, Fs, ESAs, and SAs IAW References (d), (s), (u), and (aj).

22 20. D/SI.

a. Serves as the cognizant security authority for all security programs and is the Senior

NGA Official for the Antiterrorism; Emergency Management; Chemical Biological Radiological Nuclear, and Explosives Preparedness; Cybersecurity; Defense Security Enterprise (composed of personnel, physical, industrial, information, and operational security programs;

special access programs security policy; critical program information protection policy; and security training) Insider Threat; and Law Enforcement (suspicious activity reporting) Programs. (Reference (x))

b. Ensures appropriate synchronization of Emergency Management responsibilities, plans, and procedures with COOP, BCP, DRP, and ISCP planning and execution requirements.

c. Ensures the D/NOC is informed and kept updated of NGA site emergency response efforts.

d. Conducts annual (at minimum) TT&E of primary and backup infrastructure systems and services (e.g., power and water) at NGA core sites IAW References (d) and (t).

e. Ensures appropriate synchronization of antiterrorism risk management (RM) with other protection program RM efforts under an MA RM framework IAW Reference (p) and (q).

f. In coordination with the C/NOC MA, EXCOM, Directorate Component Heads and Agency Element Leads, and Directorate and Agency Element Component BC Lead Planners, help identify alternate facilities and work spaces based on requirements. Planning should consider scenarios that include relocation from any facility at which the Directorate

Component Heads and Agency Element Leads work/provide support.

g. Ensures there is space available for a minimum of 30 days at all COOP sites to support staff augmentation and relocation plans.

h. Oversees and administers the alert notification system. Works with C/NOC MA and other relevant stakeholders to ensure viability of the Computerized Emergency Notification System for MA activities (e.g. BC and PA purposes) IAW References (d), (o), (s), (x), and (y).

i. Collaborates with GC on the requirements of supported and supporting organizations through MOAs, MOUs, and other agreements as applicable to NGA core sites IAW

j. Expedites budget and emergency evacuation documentation for emergency evacuations of NGA employees and their families IAW Reference (x).

k. Collaborates with Directorate Component Heads and Agency Element Leads, D/CIO-T, and ACC on any alternate facilities or workspaces that have requirements for IT hardware, networks, and software to continue operations, should normal operating facilities become unavailable.

l. Coordinates and collaborates with C/NOC MA in the scheduling and conducting of external NGA MA assessments (e.g., Joint Mission Assurance MA Assessments and Balanced Survivability Assessments).

23 21. D/CIO-T.

a. Oversees the execution of the NGA ITCPP in support of the MEF, EFs, Fs, ESAs, and

SAs through the development of ISCPs and amalgamated facility-based DRPs within the NGA CPT that support response, recovery, and reconstitution of consolidated IT data centers, information systems, transport methods, operating systems, applications, data, and virtual environments IAW References (d), (h) through (p), (r) through (u), and (ah).

b. Assigns the Senior IT Continuity Advisor to oversee the CIO-T Continuity and Recovery effort.

c. Assigns and trains ITMWOs to serve the NOC Core Leadership Team.

d. Assigns and trains the Chief, Enterprise Service Center (ESC) to tTracks and provides

NGA systems status updates and coordinates authorized outages with the D/NOC during authorization and implementation phases to minimize mission impacts.

e. Maintains and reports the status of IT systems and network availability as it pertains to

NGA’s ability to continue its MEF.

f. Collaborates with D/OCS to ensure IT resilience requirements for primary and backup infrastructure systems and services are explicitly stated in all IT contracts for survival, continuity, recovery, and reconstitution of the MEF, EFs, Fs, ESAs, and SAs IAW References

(d), (s), (u), and (aj).

g. Issues, maintains, accounts for, and provides training for crisis communications devices

(CCDs) to key individuals and those performing emergency functions. This may include

Government Emergency Telecommunications Service (GETS), Wireless Priority Service (WPS) capabilities, and Iridium satellite phones IAW References (c) and (aj).

h. Ensures that NGA personnel can access unclassified IT services during a continuity event and annually tests telework capabilities, including IT infrastructure, required to support telework options during a continuity event IAW References (d) and (aj).

i. Works with Directorates and Agency Elements Components to determine NGA CCD requirements and eligible users IAW Reference (c).

(1) Manages, processes, and performs necessary tasks to issue, collect, turn in, redistribute, or request CCDs.

(2) Maintains inventory rosters for all CCDs issued to NGA personnel.

(3) Supports NGA CCD tests to ensure the functionality and usability of each device.

(4) Provides funds for costs associated with the purchase of CCDs. GETS and WPS cards are provided at no cost to Directorate Component Heads and Agency Element Leads;

however, there may be additional costs to purchase phones from the NGA Personal IT

Device Office.

j. Makes risk management RM and funding decisions to resource, plan, and prepare for the resilience, continuity, recovery, and reconstitution of NGA’s IT data centers, systems, applications, data, and virtual environments when faced with UDEs IAW References (d), (s), and (u).

k. Leads the development of an enterprise-wide data backup, storage, and recovery strategy to ensure the integrity, confidentiality, and availability of critical information resources so IT systems that create, process, store, and transport classified or sensitive but unclassified information and data are protected and backed up in accordance with IAW IC and DoD policy IAW References (h) through (p), (r) through (u), and (aj).

l. Collaborates with ACC, Directorate Component Heads and Agency Element Leads, and

D/SI on any alternate facilities or workspaces that have requirements for IT hardware, networks, and software to continue operations, should normal operating facilities become unavailable.

m. Advises Directorate Component Heads and Agency Element Leads in making IT continuity decisions.

n. Ensures completeness of Enterprise Transition Activity Plans (ETAP) including required actions for take-down and restart of all systems with associated ISCPs.

o. Assists in coordinating site-level ETAPs for major data centers and field sites with significant NGA machine presence. (Reference (al))

24 22. CISO.

a. Collaborates with C/NOC MA regarding cybersecurity activities, including but not limited to risk acceptance and mitigation.

b. Responsible for cybersecurity controls, risk mitigation measures, and approving Systems Security Plans.

c. Coordinates with Chief, Defensive Cyber Operations Cyber Security Operations Cell

(CSOC) and Chief, Enterprise Service Center (C/ESC) to ensure defense defensive cybersecurity operations are integrated into continuity of operations COOP planning.

25 23. Chief, CSOC.

a. Coordinates with CISO and C/ESC to ensure defensive cybersecurity operations are integrated into continuity of operations COOP planning.

b. Ensure alternate sites include defensive cyber operations tools and capabilities for ensuring the defense of NGA equities during contingency operations.

26 24. Chief, IT Continuity and Recovery Branch.

a. Serves as the Senior IT Continuity Advisor to D/CIO-T.

b. Oversees the CIO-T Continuity and Recovery effort.

c. Serves as NGA’s IT Continuity Manager and point of contact for CIO-T continuity policy, programs, and plans.

d. Serves as the NGA ITCPP point of contact for IT contingency policies, programs, and plans in support of the MEF, EFs, Fs, ESAs, and SAs through the development of ISCPs and amalgamated facility-based DRPs and restoration plans IAW References (d), (h) through (p),

(r) through (u), and (ah).

e. Supports the response, recovery, and reconstitution of consolidated IT data centers, information systems, transport methods, operating systems, applications, data, and virtual environments.

f. Plans and conducts annual TT&E of CIO-T EFs, Fs, ESAs, SAs, and all NGA ISCPs, including IT infrastructure and support services and functions IAW References (d), (g), (o), (r), (u), and (aj).

g. Collaborates with Authorizing Officials (AOs) and Delegated Authorizing Officials (DAOs) to ensure ISCPs are approved for all systems before granting authorization to operate IAW References (h) through (m), (u), and (aj).

h. Coordinates with ISOs to meet annual ISCP TT&E requirements, submitting the appropriate exercise completion forms, and creating After Action Reports (AARs) and corrective action plans to address any identified planning deficiencies.

i. Establishes and develops DRPs in coordination with appropriate Directorates and Agency Elements Components to ensure the restoration of IT infrastructure and support services.

j. Provides compliance metrics of the NGA ITCPP in support of the MEF.

k. Coordinates with ISOs, Infrastructure Service Providers, and Application Service

Providers to develop, implement, and maintain ISCPs for all IT systems IAW References (h) through (m).

l. Collaborates with C/NOC MA on the status of the NGA ITCPP to ensure compliance and accuracy of program metrics and measures.

m. Coordinates ISCPs with the C/NOC MA.

n. Collaborates with C/NOC MA on RTC assignment and ensures systems support mission requirements or document risk acceptance or mitigation if RTC is not properly aligned with enabled missions. Documents risk acceptance or mitigation in NROM System.

Registration of IT risks and engaging advocacy and support for risk elimination, mitigation, or transfer.

o. Coordinates with ISOs; C/NOC MA; and Chief, Cyber Security Office Risk Management

RM Division to identify which specific NGA EF, F, ESA, and SAs the information system

p. Coordinates with ISOs to conduct real-word training and testing of ISCPs.

27 25. Chief, Cyber Security Office Risk Management RM Division.

a. Coordinates with ISOs; C/NOC MA; and the Chief, IT Continuity and Recovery Branch to identify which specific NGA EF, F, ESA, and SAs each information system supports.

b. Evaluates each system's RTC capabilities against the EF, F, ESA, SA, and RTO requirements. Determines potential risks using gap analysis between mission requirement and program capability identifying and prioritizing risk, as well as providing appropriate risk mitigation measures and controls to address identified risk IAW References (h) through (m), and (u).

c. Ensure ISCPs are approved for all systems before granting authorization to operate IAW References (h) through (m), (u), and (aj).

28 26. Chief, C/ESC.

a. Tracks and provides NGA systems status updates and coordinates authorized outages with the NOC to minimize mission impacts.

b. Ccoordinates with CISO and Chief, CSOC to ensure defense defensive cybersecurity operations are integrated into continuity of operations COOP planning.

29 27. Infrastructure Service Providers coordinate with the Chief, IT Continuity and Recovery Branch; ISOs; and Application Service Providers to develop, implement, and maintain ISCPs for all IT systems IAW References (h) through (m).

30 28. Application Service Providers coordinate with the Chief, IT Continuity and Recovery Branch; ISOs; and Infrastructure Service Providers to develop, implement, and maintain ISCPs for all IT systems IAW References (h) through (m).

31 29. AOs and DAOs.

a. Ensure ISCPs are approved for all systems undergoing Assessment and Authorization before granting Authorization to Operate IAW References (h) through (m), (u), and (aj).

b. Ensure each system identifies and properly implements appropriate cybersecurity controls and risk mitigation measures to facilitate IT availability/resilience IAW References (h) through (m), (u), and (aj).

c. Ensure all information systems have an approved System Security Plan in place and are compliant with applicable architecture and resilience policy IAW References (h) through (m), (u), and (ak).

d. Collaborate with the Chief, Information Technology IT Continuity and Recovery Branch to ensure ISCPs are approved for all systems before granting authorization to operate IAW References (h) through (m), (u), and (aj).

32 30. Directorate Component Heads and Agency Element Leads.

a. Present prioritized decision options to the EXCOM to resource, plan, and prepare for the survival, continuity, recovery, and reconstitution of all Directorate or Agency Element Component EFs, Fs, ESAs, and SAs that enable NGA’s MEF IAW Reference (d).

b. Participate in NGA’s risk management RM efforts and incorporate resilience planning into organizational strategic and implementation planning to reduce mission risk.

c. Ensure implementation of this Instruction within the Directorate or Agency Element Component and incorporate continuity requirements into daily operations IAW References (d), (g), (r), and (t).

(1) Establish a program to manage the day-to-day operation of the Directorate or Agency Element Component COOP program including evaluating plans for risk; prioritizing recovery of EFs, Fs, ESAs, and SAs; and applying appropriate mitigation actions to ensure the continuation of the MEF(s).

(2) Identify and designate, in writing, Directorate or Agency Element Component BC

Lead Planners.

(3) Provide BC Lead Planners with the authority to effectively direct day-to-day continuity planning and risk management RM efforts.

(4) Appoint, in writing, a Primary and Alternate Lead BC Planner at NCE and NCW at the Directorate or Agency Element Component level, annually, or when changes occur. The signed letter will be placed in the Senior Leader Battle Book, the CPT, and emailed to Mission Assurance MA Readiness and Preparedness Team.

(5) Ensure development and maintenance of BCPs that address a disruption of mission support operations at any of the NGA or mission partner facilities from which the Directorate or Agency Element Component provides support IAW References (d), (g), and (r).

(6) Direct Directorate or Agency Element Component level exercises at least once annually of BCPs for EFs, Fs, ESAs, and SAs deemed critical to supporting continuation of the NGA MEF during a contingency to prepare for all-hazards continuity emergencies/disasters, identify deficiencies, and demonstrate viability of the COOP program and continuity plans IAW References (d), (g), (h), (o), and (r).

d. Conduct annual self-assessments of continuity readiness that include a review/validation of EFs, Fs, ESAs, SAs, and BCPs to ensure organizational changes are documented, continuity plans/data are current, and gaps between enabling IT recovery capabilities and EF/F RTO requirements are identified IAW References (c) and (d).

e. Ensure all CPT data is kept current with any major change updated within 30 days.

f. Implement PA using approved methods during continuity events. Ensure timely delivery of PA data and results, and report all incidents involving an employee’s death, serious injury, illness, or unexplained absence to the NOC Watch immediately IAW Reference (y).

g. Implement continuity plans when directed or as necessary.

h. Provide CCD requirements and eligible users to CIO-T. Ensure GETS, WPS, and

Iridium satellite phone tests are conducted at least quarterly by users to ensure each device is functional and usable IAW Reference (c).

i. Ensure mandatory BC/DR training is completed annually for all personnel IAW

j. Support the C/NOC MA with defense critical infrastructure program activities, including development and review of the NGA task critical asset list IAW Reference (t).

k. Review monthly continuity readiness metrics program reports within the CPT and ensure metrics comply with performance standards.

l. Work with HD to ensure that all positions and personnel who are essential to continuing NGA’s MEF are appropriately identified; entered into NGA’s PeopleSoft database; are aware that they have been identified as mission-critical, emergency, or emergency-essential personnel; and are required to be available for recall in the event of a contingency and/or

COOP event IAW Reference (d).

m. Meet with primary and alternate appointed Directorate or Agency Element Component

BC Lead Planner annually to discuss the over-all health of their Continuity Program to include a review of EFs, single points of failure, mission risks, essential records, identification of non-essential and essential personnel, workforce communications capabilities, and staff augmentation requirements.

n. Collaborate with C/NOC MA and their respective BC Lead Planners to ensure essential records are identified and available at planned alternate facilities IAW Reference (ae).

o. Works with EXCOM and the CFE to recommend realignment of funds to support contingency requirements in support of resilience planning and response, recovery, and reconstitution operations IAW Reference (d) and (ai).

p. Responsible for the cost to procure new Iridium satellite phones through the secure voice and video office.

q. In coordination with the C/NOC MA, D/SI, EXCOM, and Directorate and Agency Element Component BC Lead Planners, help identify alternate facilities and work spaces based on requirements. Planning should consider scenarios that include relocation from any facility at which the Directorate Component Heads and Agency Element Leads work/provide

33 31. Directorate and Agency Element Component BC Lead Planners.

a. Support the development and management of the day-to-day operation of the Directorate or Agency Element Component continuity program, ensuring timely, effective, and efficient response, recovery, and reconstitution of Directorate or Agency Element Component EFs, Fs, ESAs, and SAs that enable the MEF following a disruption.

b. Lead and coordinate development of Directorate and Agency Element Component EF, F, ESA, and SA BCPs that enable the MEF following a disruption.

(1) Identify, document, and establish recovery priorities for all Directorate or Agency Element Component EFs, Fs, ESAs, and SAs performed at each NGA or mission partner facility within the NGA CPT.

(2) Develop and maintain BCPs that address continuity of Directorate or Agency Element Component EFs, Fs, ESAs, and SAs within the NGA CPT IAW References (d), (g),

(h) through (p), (r) through (u), and (y).

(3) Ensure the appropriate identification and documentation of ISCPs within the BCPs that support the continuity of Directorate or Agency Element Component EFs, Fs, ESAs, and SAs within the NGA CPT IAW References (d), (g), and (h) through (p), and (r) through (u), and (y).

(4) Coordinate with the ISOs to ensure the system RTC supports associated BCP

RTO; document risk acceptance or mitigation of the RTC is not properly aligned with enabled missions. Document risk acceptance or mitigation in the CPT.

(5) Address the four continuity plan operational phases (Readiness and Preparedness, Activation, Continuity Operations, and Reconstitution) for each BCP. Provide step-by-step direction that enables response to a disruption of Directorate or Agency Element Component

EFs and Fs to ensure continuation of the MEF. If a business process is shared among two or more Directorate Component Heads or Agency Element Leads, one Directorate or Agency Element Component assumes primary responsibility and creates the shared BC procedure(s), roles, and responsibilities IAW References (d) and (y).

(6) Ensure lists of key personnel, their responsibilities, and procedures for recovering

Directorate or Agency Element Component EFs, Fs, ESAs, and SAs following a natural or man-made disruption are included in the continuity plans. The NGA COOP Plan, Directorate or Agency Element Component BCPs, ISCPs, and other available plans may be referenced or included as needed (e.g., pandemic influenza and infectious disease, devolution, and crisis communications plans) IAW References (d) and (al).

(7) In coordination with D/SI, C/NOC MA, EXCOM, and Directorate Component Heads and Agency Element Leads, help identify alternate facilities and work spaces based on requirements.