(U) NSGD3201_GFMSA_Program_Directivew.pdf

UNCLASSIFIED

DIRECTIVE

The Geospatial Intelligence (GEOINT) Functional Manager Standards Assessment (GFMSA) Program

References: See Enclosure.

1. PURPOSE. This directive establishes the National System for Geospatial Intelligence (NSG) GEOINT Functional Manager Standards Assessment (GFMSA) program. The GFMSA defines and implements NSG methods and processes to assess and assert Information Technology (IT) and National Security Systems (NSS), referred to as IT, conformance with GEOINT data and service standards within the Department of Defense (DoD) and/or the Intelligence Community (IC) (Authorities d, e, and h).

Standards conformance is a critical contributing factor in attaining Interoperability Certification (Reference f) based on achievement of validated capability requirements defined in the Net Ready Key Performance Parameter (NR KPP) (Reference j).

2. AUTHORITIES

a. 10 USC §442

b. 50 USC §§3003(4), 3021, and 3038

c. Executive Order (EO) 12333, “United States Intelligence Activities,” 04 December

1981, as amended, 30 July 2008

d. Intelligence Community Directive (ICD) 113, “Functional Managers,” 19 May 2009

e. ICD 115, “Intelligence Community Capability Requirements Process,”

21 December 2012

f. ICD 801, “Acquisition,” 16 August 2009

g. Department of Defense Directive (DoDD) 5000.02, “Operation of the Defense

Acquisition System,” 25 November 2013

h. DoDD 5105.60, “National Geospatial-Intelligence Agency,” 29 July 2009

NSGD 3201

01 June 2015

OPR: NGA/T-CIO

i. National System for Geospatial Intelligence Directive (NSGD) 1100, “Geospatial Intelligence (GEOINT) Functional Management,” 02 August 2014

j. Office of the Secretary of Defense (OSD) memorandum directing Combat Support

Agency (CSA) alignment with charter for the Joint Enterprise Standards Committee (JESC), 28 March 2014

3. APPLICABILITY. This Directive applies to:

a. Elements of the NSG that are responsible for the operation, acquisition and/or development of systems and applications that collect, procure, produce, serve, exchange or use GEOINT content.

b. New Start Information Technology (IT) and National Security Systems (NSS), including all Acquisition Category (ACAT) and non-ACAT activities, e.g. Urgent Need Statement/Quick Reaction Capability/Joint Urgent Operational Need (JUON) and Urgent Operational Need (UON) activities that collect, procure, produce, serve, or exchange GEOINT content for which specifications are defined by standards for imagery, imagery intelligence, and geospatial information. These GEOINT standards are cited in the Defense Information Technology Standards Registry (DISR) (Reference s) and/or the Intelligence Community Enterprise Standards Baseline (IC ESB) (Reference t).

c. Existing systems, e.g. Urgent Need Statement/Quick Reaction Capability/JUON and UON activities that collect, procure, produce, serve, or exchange GEOINT content when an Incremental Upgrade involves the implementation of new data, products or services defined by GEOINT standards cited in the DISR or IC ESB.

d. Those new or existing programs, systems, or acquisitions that are users/consumers of GEOINT (imagery, imagery intelligence, or geospatial information) that is defined by GEOINT standards cited in the DISR or IC ESB.

4. ACRONYMS AND DEFINITIONS. See Glossary.

5. POLICY. The GEOINT Functional Manager (GEOINT FM), in coordination with the heads of the IC/DOD components and federal and civilian agencies with GEOINT functions or support requirements, promotes the interoperability of GEOINT systems, services and data that support the creation and dissemination of GEOINT by developing, prescribing, and enforcing GEOINT technical architectures and standards across the GEOINT enterprise (Authorities 2.d, e, and h). Therefore, it is GEOINT FM policy that:

a. Standards implementation and conformance shall be assessed and asserted through the GFMSA methods and processes derived from References e, f, j, and k.

b. NSG members and partners who acquire and/or operate IT systems that produce, provide, or use GEOINT shall ensure that those data and data services are compliant with DoD, IC, and NSG policies specified in this Directive. Producers and providers shall do so using standards cited in the DISR and/or the IC ESB. Users shall employ/consume GEOINT products and services using those same standards.

c. NSG-wide use of authoritative, consistent methods and processes to assess and assert conforming implementation of GEOINT standards, as authorized in References d, e, and f, shall occur throughout the development cycle.

d. GFMSA self-assessment results shall be provided to the GFMSA Manager(s) for review in accordance with (IAW) References f and j.

e. GFMSA self-assessment results and assertions shall inform requirements and interoperability certification authorities, including NR KPP and Interoperability Certification for DoD components.

f. Precise, transparent, and participatory program oversight shall be defined in a GFMSA Manual and executed to assure program managers that IT systems and/or components conform to GEOINT standards and GFMSA qualification criteria.

6. ROLES AND RESPONSIBILITIES

a. GEOINT FM

(1) Promotes collaboration among the NSG to create authoritative and consistent methods and processes to assess and assert conforming use and implementation of GEOINT data and service standards.

(2) Oversees the GFMSA process to ensure common NSG-wide standards conformance and interoperability assessments of IT systems and services that implement GEOINT.

(3) Incorporates appropriate GFMSA-specific assessment results into the GEOINT FM’s Annual Report, required by Authority b, to inform the Secretary of Defense (SecDef), the Director of National Intelligence (DNI), and the NSG on the state of GEOINT standards conformance and achievement of NSG-wide interoperability of GEOINT data and services in IT.

(4) Advises the SecDef and DNI on DoD and IC enterprise GEOINT standards and management of related resources for U.S. and internationally-collaborative IT.

(5) Resolves GEOINT standards conformance and interoperability conflicts in accordance with international treaties, Memoranda of Agreement (MOAs)/Memoranda of Understanding (MOUs), and national laws, orders, and directives.

(6) Designates a GFMSA Manager(s).

b. Heads of DoD and IC components

(1) Manage and integrate GFMSA into development and acquisition cycles for use in New Start and Existing Programs undergoing Incremental Upgrade of GEOINT capabilities.

(2) Ensure that the planning, conduct and reporting of development activities include Test and Evaluation (T&E) of system conformance against GEOINT standards and GFMSA criteria.

(3) Submit self-assessment documentation as follows:

(a) Acquisition Activities 1: NR KPP draft and JCIDS documents for review IAW References f and k.

(b) Acquisition Activities 2: Data format, data content and data service interfaces, Test and Evaluation Master Plan (TEMP), and Information Support Plan IAW References f and k.

(c) Acquisition Activities 3: Provide self-assessment of Development T&E results that substantiate IT system conformance with GEOINT standards and performance against GFMSA qualifications to the GFMSA Manager(s).

(d) Acquisition Activities 4: Provide self-assessment of Operational T&E results that substantiate IT system conformance with GEOINT standards and performance against GFMSA qualifications to the GFMSA Manager(s).

(4) Provide the GFMSA Manager(s), within 180 days of directive signature, a list of all systems (fielded, in development, and/or planned) that collect, procure, produce, or serve GEOINT content (data). In the list, include the following information.

(a) Program name.

(b) System name (if different).

(c) Point of Contact: name, telephone number, email address.

(d) Capability and function provided; i.e., collect, procure, produce, or serve.

(e) Fielding, modernization, update, interoperability certification status, and retirement plans for the next five (5) years, including dates if known.

(5) Complete the following actions upon Incremental Upgrade or expiration of interoperability certifications, as future improvements and modifications add to or affect GEOINT capabilities (Reference f).

(a) Evaluate a system’s as-built GEOINT standards baseline against the current

DISR/IC ESB and the current Reference Architecture for that specific program;

(b) Update that system in accordance with DoD and IC policies to ensure continued and future interoperability across the enterprise; and

(c) Re-assert GEOINT standards conformance to the GFMSA Manager(s).

(6) Ensure subordinates inform the GFMSA Manager(s) by email no less than 45 days before making a formal application for Interoperability Certification waiver(s) to GEOINT standards conformance for those systems that do not have joint, multi-national or interagency exchanges (Reference f).

(7) Identify standards needs not addressed in the current standards baseline and communicate those gaps to the GFMSA Manager(s) as requirements for future work.

(8) Collaborate with the GFMSA Manager(s) to create NSG manuals and other documents published under this Directive that define authoritative and consistent methods and processes to assert and assess conforming implementation of GEOINT standards.

c. GFMSA Manager(s)

(1) Evaluates and assesses IC/DOD compliance with established/approved GEOINT standards and provides an annual Report of GEOINT Standards and Interoperability to the GEOINT FM.

(2) Administers the GFMSA process to assure common NSG-wide standards conformance and interoperability assessments of IT systems and services that implement GEOINT capability requirements.

(3) Leads the NSG, on behalf of the GEOINT FM, to create and promulgate authoritative and consistent methods and processes to assess and assert conforming use and implementation of GEOINT data and service standards.

(4) Defines or provides processes for submitting documentation of standards conformance IAW paragraph 6.b.(3)(4) of this document, reviews that information and provides feedback to the submitting components and the appropriate validation and certification authorities, including NR KPP and Interoperability Certification.

(5) Provides a recommendation to Interoperability Certification waiver requests (Reference f) identified in paragraph 6.b.(6) within 14 days of receiving notification.

(6) Develops, coordinates, and maintains GEOINT standards conformance manuals and other documents under this Directive via National Geospatial Intelligence Committee (GEOCOM) procedures.

(7) Adjudicates issues, for GEOINT FM review and approval, that result from an absence of and/or conflict between established/approved standards.

(8) Ensures that all processes, documentation and activities are coordinated with the appropriate GEOCOM subcommittees.

(9) Identifies tools and processes that can be used by systems to validate standards conformance and can be used for self-evaluation.

d. Non-DoD/IC Federal agency members of the NSG

(1) Follow Geospatial, Geographic, and Spatial Data standards implementation policies published in the Office of Management and Budget Circulars (OMBC). The GFMSA processes described in manuals and other documents published under this Directive may be used as a means to confirm GEOINT IT interoperability with NSG organizations throughout the U.S. federal government.

(2) Collaborate with the GFMSA Manager(s) on GEOINT standards conformance policies, manuals and documents published under this Directive that prescribe authoritative and consistent methods and processes to assess and assert conforming implementation to GEOINT standards.

(3) Develop internal policy to promote and advance standards implementation and compliance in coordination with the GFMSA Manager(s).

e. International partners, state/local municipalities, and tribal organizations with

GEOINT functions. Follow Geospatial, Geographic, and Spatial Data standards implementation policies published in the Office of Management and Budget Circulars (OMBC), if receiving U.S. federal funds. Participation in GFMSA processes, though voluntary, is nonetheless critical to sustain the interoperability of GEOINT.

7. DISPUTE RESOLUTION. Disputes concerning the provisions of this Directive and/or information requested by the GEOINT FM shall be resolved by the DNI or USD(I).

8. ADMINISTRATION. The NGA Office of Geospatial Intelligence Management (OGM) is responsible for administration and maintenance of this Directive in conjunction with the GFMSA Manager(s).

9. RELEASABILITY. This Directive is approved for public release.

10. EFFECTIVE DATE. This Directive is effective immediately.

Robert Cardillo

GEOINT Functional Manager

Enclosure:

References Glossary

ENCLOSURE

REFERENCES

a. ICD 501, “Discovery And Dissemination Or Retrieval Of Information Within The Intelligence Community,” 21 January 2009 http://www.dni.gov/files/documents/ICD/ICD_501.pdf

b. DoD Directive 5000.01, “The Defense Acquisition System,” 20 November 2007 http://www.dtic.mil/whs/directives/corres/pdf/500001p.pdf

c. DoD Instruction 3115.15, “Geospatial Intelligence,” 06 December 2011 http://www.dtic.mil/whs/directives/corres/pdf/311515p.pdf

d. DoD Instruction 8310.01, “Information Technology Standards in the Department of

Defense,” 02 February 2015

e. DoD Instruction 8320.02, “Sharing Data, Information, and Information Technology (IT) Services in the Department of Defense,” 05 August 2013 http://www.dtic.mil/whs/directives/corres/pdf/832002p.pdf

f. DoD Instruction 8330.01, “Interoperability of Information Technology (IT), Including

National Security Systems (NSS),” 21 May 2014 http://dtic.mil/whs/directives/corres/pdf833001p.pdf

g. DoD Instruction 8500.01, “Cybersecurity,” 14 March 2014 http://dtic.mil/whs/directives/corres/pdf/850001_2014.pdf

h. ICS 500-20, “Intelligence Community Enterprise Standards Compliance,” 16 December 2010

i. CJCSI 3170.01I, “Joint Capabilities Integration and Development System,” 25 January 2015 http://www.dtic.mil/cjcs_directives/cdata/unlimit/3170_01.pdf

j. Net Ready Key Performance Parameter (NR KPP) Guide https://intelligedia.intelink.gov/wiki/Net_Ready_Key_Performance_Parameter_(NR_KPP)_Manual

k. CJCSI 5123.01G, “Charter of the Joint Requirements Oversight Committee (JROC),” 12 February 2015 http://www.dtic.mil/cjcs_directives/cdata/unlimit/6212_01.pdf

l. Joint Publication 1-02, “Department of Defense Dictionary of Military and

Associated Terms,” 08 November 2010, as amended, 15 April 2014 http://www.dtic.mil/doctrine/new_pubs/jp1_02.pdf http://www.dni.gov/files/documents/ICD/ICD_501.pdf http://www.dtic.mil/whs/directives/corres/pdf/500001p.pdf http://www.dtic.mil/whs/directives/corres/pdf/311515p.pdf http://www.dtic.mil/whs/directives/corres/pdf/832002p.pdf http://dtic.mil/whs/directives/corres/pdf833001p.pdf http://dtic.mil/whs/directives/corres/pdf/850001_2014.pdf http://www.dtic.mil/cjcs_directives/cdata/unlimit/3170_01.pdf https://intelligedia.intelink.gov/wiki/Net_Ready_Key_Performance_Parameter_(NR_KPP)_Manual http://www.dtic.mil/cjcs_directives/cdata/unlimit/6212_01.pdf http://www.dtic.mil/doctrine/new_pubs/jp1_02.pdf

m. Joint Publication 2-03, “Geospatial Intelligence in Joint Operations,” 31 October 2012 http://www.dtic.mil/doctrine/new_pubs/jp2_03.pdf

n. NSG Pub 1-0, “Geospatial Intelligence (GEOINT) Basic Doctrine,” September 2006

o. Department of Defense Net-Centric Services Strategy (DoD NCSS), March 2007 http://dodcio.defense.gov/Portals/0/documents/DoD_NetCentricServicesStrategy.pdf

p. DoD Acquisition Guidebook https://dag.dau.mil/Pages/Default.aspx

q. DAU Glossary of Defense Acquisition Acronyms and Terms, 15th Edition, December 2012

r. Office of the Secretary of Defense (OSD) Memorandum directing Combat Support Agency (CSA) alignment with charter for the Joint Enterprise Standards Committee (JESC), 28 March 2014

s. * Department of Defense Information Technology Standards Registry (DISR) (Includes content of IC Enterprise Standards Baseline) NIPRNET: https://gtg.csd.disa.mil/disr/standards/search/simple.html

SIPRNET: http://gtg.csd.disa.smil.mil

t. Intelligence Community Enterprise Standards Baseline (IC ESB)

u. DoD CIO Memorandum, “DoD Net-Centric Data Strategy,” 09 May 2003 http://dodcio.defense.gov/Portals/0/documents/Net-Centric-Data-Strategy-2003-05-092.pdf

v. DoD CIO, DoD Net-Centric Services Strategy, March 2007 http://dodcio.defense.gov/Portals/0/documents/DoD_NetCentricServicesStrategy.pdf

w. Intelligence Community Information Technology Enterprise Strategy 2012-2017 http://www.dni.gov/files/documents/IC_ITE_Strategy.pdf

x. Joint Interoperability Test Command (JITC) Interoperability Process Guide (IPG) http://jitc.fhu.disa.mil/isg/downloads/IPG_Version_1_Change_1_April14.pdf

y. NSG Standards Registry http://nsgreg.nga.mil/overview.jsp

* Requires .mil or .gov domain to access. To get a copy, send an e-mail to:

GFMSA_Team@nga.mil.

http://www.dtic.mil/doctrine/new_pubs/jp2_03.pdf http://dodcio.defense.gov/Portals/0/documents/DoD_NetCentricServicesStrategy.pdf https://dag.dau.mil/Pages/Default.aspx https://gtg.csd.disa.mil/disr/standards/search/simple.html http://gtg.csd.disa.smil.mil/ http://dodcio.defense.gov/Portals/0/documents/Net-Centric-Data-Strategy-2003-05-092.pdf http://dodcio.defense.gov/Portals/0/documents/DoD_NetCentricServicesStrategy.pdf http://www.dni.gov/files/documents/IC_ITE_Strategy.pdf http://jitc.fhu.disa.mil/isg/downloads/IPG_Version_1_Change_1_April14.pdf http://nsgreg.nga.mil/overview.jsp mailto:GFMSA_Team@nga.mil

GLOSSARY

PART I. ACRONYMS

ACAT Acquisition Category

CJCSI Chairman Joint Chiefs of Staff Instruction

DISA Defense Information Systems Agency

DISR Department of Defense Information Technology Standards Registry

DNI Director of National Intelligence

DoD Department of Defense

DoDD Department of Defense Directive

DoDI Department of Defense Instruction

FM Functional Manager

GEOCOM National Geospatial Intelligence Committee

GEOINT Geospatial Intelligence

GFMSA GEOINT Functional Manager Standards Assessment

IAW In Accordance With

IC Intelligence Community

IC ESB IC Enterprise Standards Baseline (Intelligence Community)

ICD Intelligence Community Directive

ICS Intelligence Community Standard

IT Information Technology

KPP Key Performance Parameter

MOA Memorandum of Agreement

MOU Memorandum of Understanding

NGA National Geospatial-Intelligence Agency

NR KPP Net Ready Key Performance Parameter

NSG National System for Geospatial Intelligence

NSGD National System for Geospatial Intelligence Directive

NSS National Security Systems

OMBC Office of Management and Budget Circular

SecDef Secretary of Defense

USD(I) Under Secretary of Defense for Intelligence

PART II. DEFINITIONS

Acquisition Activities: The breadth of the NSG precludes the use of nomenclature from any existing development cycle. The stages are defined for this GFMSA as: 1.

Requirements definition and validation; 2. Standards selection and system design; 3.

Standards implementation and development testing; and 4. Operational and interoperability testing. It can be generically mapped to any schedule, including standard and agile development (NSGD 8103).

Acquisition Status: Paragraph 3. Applicability, sub paragraph b. delineates which acquisition programs are subject to this directive. The definitions for new, existing, and Incremental Upgrade to an existing system are:

New Start (Program): An item or effort appearing in the President’s Budget (PB) for the first time… A new start program for Procurement is a new procurement line item, or major component thereof, as determined by specific supporting information provided in the procurement budget line item exhibits not previously justified… (DAU Glossary)

Existing Program: Any program not a New Start.

Incremental Upgrade (to an existing system): An increment is a militarily useful, logistically supportable, and technically mature increase in operational capability that can be developed, produced, deployed and sustained. Each increment will have its own set of threshold and objective values set by the user.

Increments include block upgrades, pre-planned product improvements, and similar efforts providing an increase in operational capability (NR KPP Manual).

Assessment: An assessment performed by the system sponsor or program manager in consonance with the assessment processes and methods established by the GFMSA program; also described as self-assessment.

DoD Components: A collective reference to: the Office of the Secretary of Defense (OSD), the Military Departments, the Office of the Chairman of the Joint Chiefs of Staff (CJCS) and the Joint Staff, the Combatant Commands (CCMDs), the Office of the Inspector General of the Department of Defense, the Defense Agencies, the DoD Field Activities, and all other organizational entities within the DoD (referred to in this instruction as the “DoD Components”) (DoDI 8330.01).

DoD Information Technology Standards Registry (DISR): A registry of IT standards which are selected through a defined governance process. It contains the minimal set of rules governing the arrangement, interaction, and interdependence of IT system parts or elements, whose purpose is to ensure that a conformant system satisfies a specified set of requirements. It defines the service areas, interfaces, standards (DISR elements), and standards profiles applicable to all DoD systems. Use of the DISR is mandated for the development and acquisition of new or modified fielded IT systems throughout the DoD. The standards cited in the DISR replaced the Joint Technical Architecture (DoDI 8330.01).

GEOINT Enterprise: The GEOINT Enterprise (GE) is the ‘functional GEOINT subset’ of the DoD Information Enterprise Architecture (DoD IEA) for the Department of the Defense, the Intelligence Community Information Technology Enterprise (IC ITE), and equivalent concepts for the other elements of the NSG that use or provide any capability or service enabled by imagery, imagery intelligence, or geospatial information. By definition each of the systems of the GE is also a member of a larger enterprise (NSGD 8103).

GEOINT Functional Manager (GEOINT FM): Refers to the D/NGA in his/her role as the manager for U.S. GEOINT interests as prescribed by Executive Order 12333 and further delegated by the DNI and SecDef in ICD 113 and DoDD 5105.60.

Geospatial Intelligence (GEOINT): The exploitation and analysis of imagery and geospatial information to describe, assess, and visually depict features and geographically referenced activities on the earth. Geospatial Intelligence consists of imagery, imagery intelligence, and geospatial information (10 U.S.C. §467[5]).

Note: Geospatial information is comprised of dozens of products from NSG producers, including such things as hydrographic, navigation data, Safety of Navigation (SoN), digital elevation files, and topographic maps of multiple scales.

Information Technology (IT): Any equipment or interconnected system or subsystem of equipment, used in the automatic acquisition, storage, manipulation, management, movement, control, display, switching, interchange, transmission, or reception of data or information by the executive agency, if the equipment is used by the executive agency directly or used by a contractor under contract with the executive agency that requires the use of that equipment, or that equipment to a significant extent in the performance of a service or the furnishing of a product. “Equipment” includes computers, ancillary equipment, software, firmware and similar procedures, services, (including support service), and related resources, but IT does not include any equipment required by a federal contractor incidental to a federal contract (DoDD 5000.02). For the purposes of this Directive, IT includes NSS, IT acquisition programs, information systems, IT initiatives, IT services, software, electronic warfare devices, DBS, qualified prototypes, Commercial-Off-the-Shelf (COTS), Government Off-the-Shelf (GOTS), Rapid Acquisition, Joint Urgent Operational Needs (JUON), Special Access Program (SAP), Joint Capability Technology Demonstration (JCTD), Coalition Warrior Interoperability Demonstration, Combatant Command Initiatives Fund (CCIF) and non-program of record materiel solution efforts (NR KPP Manual).

Intelligence Community (IC): The IC and elements of the IC consist of (50 U.S.C.

§3003[4]):

The Office of the Director of National Intelligence.

The Central Intelligence Agency.

The National Security Agency.

The Defense Intelligence Agency.

The National Geospatial-Intelligence Agency.

The National Reconnaissance Office.

Other offices within the Department of Defense for the collection of specialized national intelligence through reconnaissance programs.

The intelligence elements of the Army, the Navy, the Air Force, the Marine Corps, the Coast Guard, the Federal Bureau of Investigation, the Drug Enforcement Administration, and the Department of Energy.

The Bureau of Intelligence and Research of the Department of State.

The Office of Intelligence and Analysis of the Department of the Treasury.

The Office of Intelligence and Analysis of the Department of Homeland Security.

Such other elements of any department or agency as may be designated by the department or agency concerned, as an element of the intelligence community.

Intelligence Community Enterprise Standards Baseline (IC ESB): The IC ESB is the formally identified minimal set of enterprise standards determined to align with and facilitate implementation of an organization’s enterprise architecture. Compliance with the organization’s enterprise architecture is measured, in part, by adherence of information resources and enterprise architecture-related IT items to relevant standards in the enterprise standards baseline (ICS 500-20).

Interface: The functional and physical characteristics required to exist at a common boundary or connection between people, between systems, or between people and systems. Interfaces include all systems external to the system being analyzed that provides a common boundary or service that is necessary for the system being analyzed to perform its mission in a non-degraded mode; e.g., a system that supplies power, cooling, heating, input signals, etc. (DAU-Glossary of Defense Acquisition Acronyms and Terms).

Interoperability: The ability of systems, units, or forces to provide data, information, materiel, and services to and accept the same from other systems, units, or forces and to use the data, information, materiel, and services so exchanged to enable them to operate effectively together. Information technology (IT) and NSS interoperability includes both the technical exchange of information and the operational effectiveness of that exchanged information as required for mission accomplishment (NR KPP Manual).

National Security System (NSS): Information system (including any telecommunications system) used or operated by an agency or by a contractor of an agency, or their organization on behalf of an agency, the function, operation, or use of which (1) involves intelligence activities; (2) involves cryptologic activities related to national security; (3) involves the command and control of military forces; (4) involves equipment that is an integral part of a weapon or weapons system; or (5) is critical to the direct fulfillment of military or intelligence mission. Subsection (5) in the preceding sentence does not include procurement of automatic data processing equipment or services to be used for routine administrative and business application (including payroll finance, logistics and personnel management application). The NSS includes any information system (including any telecommunications system) protected at all times by procedures established for information that have been specifically authorized under criteria established by an Executive order or an Act of Congress to be kept classified in the interest of national defense or foreign policy (DoDD 8000.01).

Net Ready Key Performance Parameter (NR KPP): The NR KPP documents a sponsor identified and Joint Requirements Oversight Council (JROC)* validated set of verifiable performance measures and metrics for interoperability engineering, design, and testing. To meet NR KPP attributes, IT must be able to support military operations, to be entered and managed on the network, and to effectively exchange information.

The NR KPP development process will help verify operationally effective provider to consumer, end-to-end information exchanges according to the sponsor’s stated capability requirements and applicable reference models and reference architectures. It informs the solution architecture according to the DOD Information Enterprise Architecture (NR KPP Manual).

*Note: DoD Instruction 8330.01 has since separated validation authority based on the presence of joint, multinational or interagency interoperability requirements: “Or the appropriate DoD Component for all IT with no joint, multinational, or interagency interoperability requirements as delegated by the CJCS.” This directive and its guiding manuals reflect that bifurcation.

The NR KPP assesses information requirements, information timeliness, and net ready attributes are required for both the technical exchange of information and the end-to-end operational effectiveness of that exchange. The NR KPP consists of measurable and testable performance measures and associated metrics required to evaluate the timely, accurate, and complete exchange and use of information to satisfy information needs for a given system (DoDI 8330.01).

NR KPP Certification: An authoritative act or process of supporting or corroborating whether IT interoperability requirements are appropriate and complete (DoDI 8330.01).

NR KPP Certification Authority: The office with the authority to certify the NR KPP verifies that the system sponsor has properly scoped, refined, and justified the interoperability requirements of the system. The CJCS is the NR KPP Certification Authority and may delegate this authority to the appropriate DoD Component for all IT with no joint, multinational, or interagency interoperability requirements (DoDI 8330.01).

National System for Geospatial Intelligence (NSG): A combination of technology, policies, capabilities, doctrine, activities, people, data and organizations necessary to produce GEOINT in an integrated, multi-discipline, multi-security domain environment.

The geospatial intelligence-related members of the IC, Military Departments, Joint Staff, Combatant Commands, and other USG departments and agencies, including the Central Intelligence Agency, the Federal Bureau of Investigation, and the Department of Homeland Security, with contributions from international entities, private industry, academia, and defense or civil community service providers are part of the NSG Community. A list of NSG Community organizations follows (DoDD 5105.60).

GEOINT Functional Manager Standards Assessment (GFMSA): The systematic process of obtaining and evaluating evidence from documentation reviews, demonstrations, evaluations, examinations, tests, questionnaires, surveys and

Oversight Office of Director of National Intelligence

(ODNI)

Under Secretary of Defense for Intelligence

(USD[I])

Armed Services U.S. Army (USA) U.S. Marine Corps (USMC) U.S. Navy (USN) U.S. Air Force (USAF) U.S. Coast Guard (USCG) Joint Chiefs of Staff (JCS)

Combatant Commands U.S. Africa Command (USAFRICOM) U.S. Central Command (USCENTCOM) U.S. Cyber Command (USCYBERCOM) U.S. European Command (USEUCOM) U.S. Northern Command (USNORTHCOM) U.S. Pacific Command (USPACOM) U.S. Southern Command (USSOUTHCOM) U.S. Special Operations (USSOCOM) U.S. Strategic Command (USSTRATCOM) U.S. Transportation Command

(USTRANSCOM)

Intelligence Agencies Central Intelligence Agency (CIA) Defense intelligence Agency (DIA) National Geospatial-Intelligence Agency

(NGA)

National Reconnaissance Office (NRO) National Security Agency (NSA)

Federal Organizations U.S. Department of State (DOS) U.S. Department of Energy (DOE) U.S. Geological Survey (USGS) U.S. Treasury Department U.S. Department of Homeland Security (DHS) Federal Bureau of Investigation (FBI) Drug Enforcement Administration (DEA)

Allied Partners Australia Canada United Kingdom New Zealand United States collateral sources to make a substantiated assertion that a system (or its GEOINT components) conformingly implements GEOINT standards in a manner enabling interoperability across the NSG enterprise.

GEOINT User: A system or program that receives GEOINT from the NSG and stores, displays, visualizes, or exploits that data; any system or program that modifies the received-GEOINT for further dissemination, or adds geographic location to its own products or data.

Displays, visualizes or exploits: Any modification of the received GEOINT to accomplish any of these actions is the responsibility of the user.

Modifies: User storage of unchanged received-GEOINT is not subject to GFMSA. Modified GEOINT elements whether stored or not, must comply with GEOINT standards when exchanged.

Adds geographic location to its own products or data: The format and encoding of any GEOINT element is subject to GFMSA. (i.e. any intelligence report that includes a geographic coordinate, or a country, state, city name, can be stored in any format or fashion, but must comply with GEOINT standards when exchanged).

Partnerships: Relationships with organizations and entities inside and outside the federal government that improve access to sources of information and intelligence and ensure appropriate dissemination of GEOINT products and services (NSG Strategy).

Reference Architecture: An authoritative source of architecture information (within a domain) that guides and constrains the instantiation of solution architectures by providing rules, principles and holistic models and patterns of the abstract architectural elements together with a common vocabulary, and sets of technical standards/specifications (NR KPP Manual).

Self-Assessment: An assessment performed by the system sponsor or program manager in consonance with the assessment processes and methods established by the GFMSA program. (Also described as assessment).

Test and Evaluation (T&E): Process by which a system or components are exercised and results analyzed to provide performance-related information. The information has many uses including risk identification and risk mitigation and empirical data to validate models and simulations. T&E enables an assessment of the attainment of technical performance, specifications (GFMSA standards conformance), and system maturity to determine whether systems are operationally effective, suitable and survivable for intended use, and/or lethal. There are various types of T&E defined in statute or regulation. (DAU Glossary) Those relevant to GFMSA include Development T&E, Operational T&E, and Interoperability Certification.