ACES_Industry_Day_Slides_draft_2__01DEC2015.pptx

CIO-G/6 Cybersecurity Directorate Industry Day

UNCLASSIFIED / FOUO

UNCLASSIFIED / FOUO

OFFICE OF THE CHIEF INFORMATION OFFICER/G-6

AMERICA’S ARMY: THE STRENGTH OF THE NATION

December 02, 2015 Agenda Admin Announcements Rules of Engagement Introductions DCIO Comments Cybersecurity Directorate Overview Performance Work Statement Review Points of Emphasis

- Competition Strategy

- Recent Changes to the PWS

- Input from Industry Written Question/Answer Dialogue Wrap up

OFFICE OF THE CHIEF INFORMATION OFFICER/G-6

AMERICA’S ARMY: THE STRENGTH OF THE NATION

UNCLASSIFIED / FOUO

UNCLASSIFIED / FOUO

December 02, 2015 Administrative Announcements Parking Emergencies Exits Restrooms Break

Contracting Rules of Engagement

- Relevant questions may be submitted electronically to the Contract Specialist, Danette Wilson, at danette.d.wilson.civ@mail.mil no later than 1200 hrs Central Time.

- Questions shall be limited to the requirements documents received and the information discussed at this Industry Day event, and shall not involve the Source Selection Team, their roles or responsibilities

- All questions and answers, including questions asked during this forum, will be posted on FedBizOpps with identifying vendor data removed.

UNCLASSIFIED / FOUO

UNCLASSIFIED / FOUO

December 02, 2015 Contracting Rules of Engagement Cont.

- No cameras or recording devices of any kind are allowed during the event

- Please turn all electronic devices to silent or off

- Discussions between vendors are permitted for purposes of teaming arrangements; however please refrain from doing so during briefings

- Company material, capability briefs, etc… will not be accepted during or after this event

UNCLASSIFIED / FOUO

UNCLASSIFIED / FOUO

December 02, 2015 Introductions Army CIO/G6 Personnel

- Mr. Gary Wang (SES, Deputy CIO/G6)

- Ms. Essye Miller (SES, Cybersecurity Director)

- Mr. Desmond Adams (Chief, CAC/PKI Branch & COR)

- Ms. Victoria Strom (Chief, Identity & Access Mgmnt Division)

- Mr. Steven Roscoe (Chief, Interoperability, Acquisition & Certification Division)

- Mr. Ken McNeil (Chief, Current Operations Division)

- COL Michael Ngo (Chief, Integration & Training Division)

- COL Kenneth Lawrence (Chief, Network Capabilities Division)

ACC-RI Personnel (Contracting)

- Mr. Brian Donovan (Branch Chief)

- Ms. Trisha Polfliet (Contract Specialist Team Lead)

- Ms. Danette Wilson (Contract Specialist)

UNCLASSIFIED / FOUO

UNCLASSIFIED / FOUO

DCIO Comments

Mr. Gary Wang Deputy, Chief Information Officer/G-6 SAIS-ZB

SGM Earl Allen Sergeant Major SAIS-ZS

SFC Latacha Rhodes-Thomas Executive Assistant

SAIS-ZS

MAJ Simon McKenzie Assistant Executive Officer SAIS-ZX

Mr. Dean Pfoltzer Director/CFO Policy & Resources (P&R)

SAIS-PR

Mr. Kary Sanders IT Investments SAIS-PRI

Ms. Jackie Rustigian Career Program Mgmt SAIS-PRC

Mr. Keith Dean Policy & Governance SAIS-PRG

Mr. Gregg Judge Enterprise Licensing SAIS-PRL

Mr. Peter Dulniawka Enterprise Svcs Cap SAIS-PRU

Mr. Kevin Coakley Deputy

SAIS-PR

Mr. John Matthews Deputy Chief Financial Officer SAIS-PR

COL Paul Fredenburgh Network Integration SAIS-AON

COL Mark Orwat Info Infrastructure Integ

SAIS-AOI

Mr. Richard DeSalvo Spectrum Management SAIS-AOS

Mr. AJ Bognar Data Center Consolidation

SAIS-AOC

Mr. John Trujillo DAA/Security SAIS-AOA

Mr. Rick Sirney

SAIS-AO

COL John Rozsnyai (A) LandWarNet Arch Integ SAIS-AOB

Mr. Cliff Daus Information Architecture SAIS-AOD

COL John Rozsnyai Enterprise Architecture SAIS-AOE

COL Linda Jantzen Plans & Goverance SAIS-AOP

Ms. Victoria Strom Identity Management SAIS-CBM

Mr. Kenneth McNeill Current Operations SAIS-CBP

Vacant Tech & Business Processes

SAIS-CBB

Mr. Steven Roscoe Interop, Acq & Cert SAIS-CBC

Ms. Carol Assi Info Assurance Programs

SAIS-CBA

LTC Carl Hollister Assistant to the DCIO/G-6 SAIS-ZX

COL Bradford Davis StratComm/SIG SAIS-ZBS

David W. Czzowitz HR/Management Support SAIS-ZBM

Ms. Essye Miller Director Cybersecurity SAIS-CB

COL Robert Edmonson Executive Officer

SAIS-ZX

Mr. LeRoy Lundgren

SAIS-CB

COL Linda Jantzen Acting Director Army Arch Integration Center (AAIC)

SAIS-AEA

CW5 Derrick Edwards

CTO & STA

SAIS-ZX

COL Michael Ngo Program Integ & Training SAIS-CBI

LTC Paul Henry Resource Integration SAIS-PRR

BG Randy Taylor Director Arch, Ops, Networks & Space (AONS) SAIS-AO

LTG Robert S. Ferrell Chief Information Officer/G-6

SAIS-ZA

MG Garrett Yee Deputy Cybersecurity & NetMod

SAIS-CB

Army CIO/G-6

Provide Signal Capabilities to the Force

Enhance Cyber Security Capabilities Increase Network Throughput and Ensure Sufficient Computing Infrastructure Deliver IT Services to the Edge Lines of Effort

1.1 Align force structure

1.3 Update doctrine

1.4 Align training and training support capability

1.2 Equip

force

2.1 Minimize attack surface, establish physical path diversity, strengthen data defense

2.2 Deploy passive

& active cyberspace defense capabilities

2.3 Improve cyber-sensing infrastructure, harness big data & increase info sharing

3.3 Standardize suite of centrally managed EUDs

3.1 Implement End-to-end transport infrastructure

3.2 Transition from disparate data processing

3.4 Sync deployable

& fixed network

4.1 Plan for global Unified Capabilities

4.3 Integrate into

tactical network

4.2 Transition to Unified Capabilities

5.1 Converge to single IT enterprise, reduce complexity

5.2 Define spectrum analytic

reqts

5.3 Centralize oversight of critical assets, integrate mgmt/ execution decisions

5.4 Enhance & extend incident response, audit, cybersecurity mgmt & SA services

5.5 Develop CONOPS

Strengthen Network Operations (NetOps)

INTEGRATED

NETWORK

COMMON OPERATING

ENVIRONMENT

SIMPLIFIED,

PROTECTED AND

JOINT INTEROPERABLE

NETWORK

AGILE

EXPEDITIONARY

COMMAND POSTS

ENHANCED

HOME STATION,

TRAINING &

READINESS

Cyber Security Directorate

Information Assurance Policy (AR 25-2), Certification and Accreditation Federal Information Security Management (FISMA) Army Cross Domain Solutions (CDA) Office Privacy Impact Assessments (PIA) System of Systems Vulnerability Program

Interoperability, Acquisition, and Certification Program for System Interoperability Testing Infrastructure and Certification Acquisition Certification Process Coalition Interoperability Assurance Validation Technology and Business Processes Army Commercial Mobile Program Information Security Continuous Monitoring (ISCM) Supply Chain Risk Management Program Integration and Training Manage and Coordinate Cyber Integration and Cyberspace initiatives IA/Cyber Security Risk Management Process IA Training and Certification Program NetOps/Program Management Program Management Support NetOps/ Security Domain IA/Cyber Security Program Support and Management

Identity Management End to End Identity and Access Management Public Key Infrastructure COMSEC and COMSEC Modernization Key Management Infrastructure (KMI)

Current Operations IT support to Combatant Commands Worldwide Spectrum supportability and certification support Support for OCO C5ISR requirements

UNCLASSIFIED / FOUO

UNCLASSIFIED / FOUO

Briefer: Ms Essye Miller, Army CIO/G-6 Cyber Security Event: Small Business Breakfast

December 02, 2015 Task Outline PWS Tasks Task 1 – Program Management, Administration and Quality Assurance Service Task 2 – Executive Assistance Support Task 3 – PKI Operations Task 4 – IdAM Support Task 5 – COMSEC Task 6 – Network Operations Analysis Task 7 – Network 2025 Support Task 8 – ICAM Engineering Support Task 9 – Continuous Monitoring and ID Analytics Task 10 – Cyber Integration, Risk Assessment Task 11 – Biometrics Task 12 – Plans and Operations Task 13 – Interoperability Assessment and Certification Task 14 – Coalition Interoperability Task 15 – CIAV Technical Services Task 16 – CIAV Fort Hood, TX Technical Services

UNCLASSIFIED / FOUO

UNCLASSIFIED / FOUO

December 02, 2015 Task 1 Program Management (PM) Services Provide program management to ensure efficient and effective accomplishment of all work detailed in this PWS.

Track costs at the contract level showing labor, travel and material costs separately and showing monthly labor budgets, monthly labor expenditures, monthly labor invoices, and amounts funded, and Estimates at Completion in the Monthly Cost and Performance Report.

Prepare a Task Order Management Plan describing the technical approach, organizational resources and management controls to be employed to meet the cost, performance and schedule requirements throughout TO execution.

Summarize significant events and findings, activities, cost or funding concerns, performance that exceeds contract requirements, performance that fails to meet contract requirements and corrective actions in Monthly Status Reports. In the event of cumulative cost under-runs or over-runs exceeding 3% of budgeted cost, contractor shall e-mail the Contracting Officer (KO), COR, & PM to explain corrective action plan.

Accomplish Contractor Manpower Reporting monthly until the end of the contract. Contractor shall perform all supervisory tasks concerning the contractor’s employees.

UNCLASSIFIED / FOUO

UNCLASSIFIED / FOUO

December 02, 2015 Task 1 continued… Program Management (PM) Services

Manage, oversee, and supervise the activities of all contracted personnel serving on this contract to include task management, time card and leave approval.

Ensure support for the creation, review and editing of staff packages, reports and taskers (i.e. SACO/JACO), and other written documents IAW AR 25-50 (Preparing and Managing Correspondence), DA Memo 25-52 (Staff Action Process and Correspondence Policies) and/or other applicable Army publications and policies.

Provide Quality Assurance services to ensure that all deliverables and products are of the highest quality and meet the standards established by the contract Quality Assurance Surveillance Plan (QASP).

UNCLASSIFIED / FOUO

UNCLASSIFIED / FOUO

December 02, 2015 Task 2 Executive Assistance Support

Support the Army CIO/G-6 Director for Cyber Security and two (2) Cyber Security Divisions by providing highly skilled executive and administrative support services for in-depth information workflow management, staff action expertise, administrative support, records management and process continuity.

UNCLASSIFIED / FOUO

UNCLASSIFIED / FOUO

December 02, 2015 Task 3 Public Key Infrastructure (PKI) Advancement

Analyze the Army’s Public Key Infrastructure while concurrently tracking emerging authentication technologies (i.e. technologies that have not been fielded).

Conduct studies and analyses and develop recommendations concerning technologies and developments across three layers - an assessment layer, a technology layer, and a guidance layer.

Maintain an existing electronic library of Identity Management Division program documents by adding pertinent documents, removing documents that are no longer relevant and amending/updating current library documents.

Analyze the Army’s Cyber Security posture as it relates to the DoD PKI/PKE infrastructure and program.

Research current-state technologies and develop analyses, recommendations and solutions for implementation, bridging existing capabilities with future capabilities allowing Army CIO/G6 to transform Army PKI software/hardware-based certificate technologies.

UNCLASSIFIED / FOUO

UNCLASSIFIED / FOUO

December 02, 2015 Task 4 Identity and Access Management (IdAM)

Research and document current state technologies and processes existing in the Army IdAM portfolio.

Assist Army identity stakeholders with requirements generation as well as the development of reference and operational architectures to support the creation of an Enterprise Identity Directory Service (EIDS).

UNCLASSIFIED / FOUO

UNCLASSIFIED / FOUO

December 02, 2015 Task 5 Communications Security (COMSEC)

Assess cryptographic standards and procedures in accordance with Army priorities and cryptographic capabilities (devices, waveforms, algorithms, etc.) and produce studies on methods the Army CIO/G6 can employ to enhance the security, interoperability and appropriate protection of National Security Systems and National Information as mandated by the COMSEC Modernization Initiative.

Prepare detailed cost analysis in support of cryptographic modernization, divestiture and roadmap for sun-setting of legacy systems and circuits.

Analyze DoD, National Security Agency, Joint and Army IA and NetOps goals and initiatives to ensure Army CIO/G6 remains fully coordinated for all initiatives across the Army for both the generating and operating force.

Support the Army CIO/G-6 in coordination of Network 2025 initiatives across the Army for both the generating and operating force in the areas of Identity, Credential and Access Management, Information Assurance, Secure Mobile Computing, Cloud Computing, Network Operations, Continuous Monitoring, Risk Management and other capabilities identified to achieve improved Cyber Security.

Document, review and analyze the enterprise key management architecture to ensure management capabilities and services are supportable and conform to the Army CIO/G6’s enterprise key management architecture.

UNCLASSIFIED / FOUO

UNCLASSIFIED / FOUO

December 02, 2015 Task 6 Network Operations Analysis

Analyze DoD, National Security Agency, Joint and Army IA and NetOps goals and initiatives to ensure Army CIO/G6 remains fully coordinated for all initiatives across the Army for both the generating and operating force.

Make recommendations to synchronize Army network operation efforts and provide a road map for disparate initiatives so there is consistency, standardization, and efficiency.

UNCLASSIFIED / FOUO

UNCLASSIFIED / FOUO

December 02, 2015 Task 7 Network 2025 Support

Support the Army CIO/G-6 in coordination of Network 2025 initiatives across the Army for both the generating and operating force in the areas of Identity, Credential and Access Management, Information Assurance, Secure Mobile Computing, Cloud Computing, Network Operations, Continuous Monitoring, Risk Management and other capabilities identified to achieve improved Cyber Security.

UNCLASSIFIED / FOUO

UNCLASSIFIED / FOUO

December 02, 2015 Task 8 Identity, Credentialing, and Access Management (ICAM)

Provide Identity, Credentialing, and Access Management (ICAM) subject matter expertise to support the incorporation of ICAM services in Army network operations.

UNCLASSIFIED / FOUO

UNCLASSIFIED / FOUO

December 02, 2015 Task 9 Continuous Monitoring and Identity Analytics

Coordinate within the CIO/G6 and other Army organizations to develop plans to implement insider threat solutions to deter, detect and mitigate insider threats.

UNCLASSIFIED / FOUO

UNCLASSIFIED / FOUO

December 02, 2015 Task 10 Cyber Integration, Risk Assessment

Monitor and provide analysis of emerging Federal cyber security policy, trends and legislation that will help improve and solidify the Army’s cyber security strategy.

UNCLASSIFIED / FOUO

UNCLASSIFIED / FOUO

December 02, 2015 Task 11 Biometrics Develop information papers and briefings on biometric technologies and alternative authentication models to the current CAC enabled infrastructure Develop an analysis and recommendations based on the maturity of products, vendor support of, and emerging technologies; in accordance with the guidance that NIST published; to help shape biometric usage across the Army Provide oversight and engineering reviews with the PEO’s to evaluate existing and new biometric modalities and their applicability in the field.

Identify candidate applications to duplicate in a cloud PoC Identify key security requirements and security architecture solutions necessary to secure the application in the cloud instance Work with the hosting service to help develop an External Service Provider Review (ESPR)

UNCLASSIFIED / FOUO

UNCLASSIFIED / FOUO

December 02, 2015 Task 11 continued….

Biometrics

Create an application mapping to the cloud Help ensure the best placement of PKI repeaters and responders in the Tactical PKI Infrastructure Help ensure that bandwidth considerations are consistent with upcoming releases of WIN-T to minimize the network impact of Certificate Revocation List (CRL) distribution methods (e.g. full CRL, mini-CRL, delta-CRL) Help ensure that plans moving forward are in-line with tactical Identity and Access Management efforts.

Make recommendations for architecture security solutions based on best practices.

UNCLASSIFIED / FOUO

UNCLASSIFIED / FOUO

December 02, 2015 Task 12 Current Operations Division – Plans and Operations Provide C5ISR engineering expertise in pursuit of technical and policy solutions facing the Army’s current and future challenges.

Provide oversight of C4IT requirements, development, testing, operations, configuration management, and sustainment processes for compliance with net-centric and net-ready strategies, policies, regulations, directive, and standards.

Staff support to the Army Service Component Commands (ASCCs) within each Geographic Combatant Command regarding operational requirements and ensure the CIO/G-6 leadership has situational awareness of critical issues Monitor the C4/IT readiness and reset status of Total Army Signal/Cyber Units and the signal capability assigned to other Army units, which includes ac ting as the Army CIO/G-6 lead analyst to address funding requirements to include but not limited to Signal/Cyber related Operational Needs Statement (ONS) and Joint Urgent Operational Needs Statements (JUONS) actions submitted by Army units and Combatant Commanders for which the Army has Executive Agency responsibility Provide support in the area of Cyber tracking, analysis, trends, and reporting through request and receipt of information from Cyber organizations providing support to HQDA CIO/G-6.

UNCLASSIFIED / FOUO

UNCLASSIFIED / FOUO

December 02, 2015 Task 12 continued…..

Current Operations Division – Plans and Operations

Coordinate all C4I issues in response to any man-made or natural disaster in support of Defense Support to Civil Authorities (DSCA) missions

UNCLASSIFIED / FOUO

UNCLASSIFIED / FOUO

December 02, 2015 Task 13 Interoperability Assessment and Certification Coordinate with DoD agencies, other Services, and coalition partners to use joint interoperability events to reduce Army costs when seeking Joint Interoperability certifications Provide planning, policy, technical, operational, and analytical services supporting CIO/G6 execution of Title 10 and Title 40 roles and responsibilities Provide support ensuring interoperability for all systems in the acquisition lifecycle and interoperability certification support for all IT/NSS systems for all mission areas and domains Develop Army Interoperability Certification policy, goals, and strategies as they pertain to assessing and certification of interoperability Ensure Army acquisition programs meet interoperability requirements IAW Clinger-Cohen Act Provide support to the DISA GTG, ensuring Army users have access to authoritative information for ISPs

UNCLASSIFIED / FOUO

UNCLASSIFIED / FOUO

December 02, 2015 Task 13 continued….

Interoperability Assessment and Certification Provide Liaison support throughout the distributed Army and Joint testing network and support development, implementation and management of distributed interoperability assessments and certification Facilitate integration and support TRADOC during mission thread development process. Evaluate and provide analysis in support of interim certification to operate process ensuring compliance to achieve interoperability certification Provide system of systems (SoS) Configuration Management of IT/NSS systems of all mission areas and domains designated systems and baselines Facilitate Army IT/NSS Configuration Management processes Provide analysis and planning support to define modular organizational structures and systems and migrate current C2 and intelligence systems to future systems Review, approve, and provide recommendations for Information Support Plans (ISP)

UNCLASSIFIED / FOUO

UNCLASSIFIED / FOUO

December 02, 2015 Task 13 continued….

Interoperability Assessment and Certification

Coordinate with C2, BMA, Joint and Intel communities to ensure their portfolios are postured for interoperability Provide planning, technical, operational, and analytical services for FaNS interoperability Serve as FaNS accreditation and compliance officer

UNCLASSIFIED / FOUO

UNCLASSIFIED / FOUO

December 02, 2015 Task 14 Coalition Interoperability Technical Services

Provide planning, policy, technical, operational, and analytical services in support of the ongoing processing and methodology refinement of Afghanistan or Allied Mission Network (AMN) and development of Joint, Coalition, Mission Partner, Alliance Network, and Assurance & Validation (A&V) of mission thread interoperability

UNCLASSIFIED / FOUO

UNCLASSIFIED / FOUO

December 02, 2015 Task 15 CIAV Technical Services – HQ

Coordinate and support Joint Information Environment (JIE) for compliance with Army Network Campaign Plan 2025 and Beyond

UNCLASSIFIED / FOUO

UNCLASSIFIED / FOUO

December 02, 2015 Task 16 Interoperability Assessment and Certification

Support the System of Systems (SoS) engineering for CIAV requirements to formulate and implement the SoS architecture development for both CIAV federated environments Develop and implement SoS Configuration Management enforcement plan Provide configuration management of C5ISR Systems software within the CIAV environment

UNCLASSIFIED / FOUO

UNCLASSIFIED / FOUO

December 02, 2015 Geographic Locations Army Cybersecurity Enterprise Support (ACES) mission supported locations include:

Pentagon (primary) National Capital Region (NCR)

UNCLASSIFIED / FOUO

UNCLASSIFIED / FOUO

December 02, 2015 Duty Hours Normal Business Hours

- 0700 – 1800 M-F (Hours may be adjusted to support mission need)

On-Call Availability (infrequent and based on mission need)

UNCLASSIFIED / FOUO

UNCLASSIFIED / FOUO

December 02, 2015 Solicitation Overview The Acquisition Strategy and PWS still being finalized

Industry Day is a part of market research

Award is anticipated to be Firm-Fixed Price single contract, with Cost CLINs associated to Travel and Other Direct Costs (ODCs).

UNCLASSIFIED / FOUO

UNCLASSIFIED / FOUO

December 02, 2015 Solicitation Overview Cont.

This procurement is expected to be competed on a Full and Open basis, with a Subcontracting Plan to be incorporated in order to utilize Small Business participation

A 12 month base period with four (4) possible option years is anticipated

UNCLASSIFIED / FOUO

UNCLASSIFIED / FOUO

December 02, 2015 Industry Day Points of Emphasis

Potential Changes to the PWS Importance of Sections L & M Small Business Input from Industry

UNCLASSIFIED / FOUO

UNCLASSIFIED / FOUO

December 02, 2015 Small Business Teaming between Industry Partners (Small and Large Businesses) is highly encouraged; however please refrain from discussions during the briefings.

We anticipate an aggressive Small Business Utilization Plan for this acquisition

UNCLASSIFIED / FOUO

UNCLASSIFIED / FOUO

December 02, 2015 Question/Answer Rules of Engagement Questions shall be limited to the requirements documents received and the information discussed at this Industry Day event, and shall not involve the Source Selection Team, their roles or responsibilities

We are seeking industry input on all requirement documents released in preparation for or in conjunction with this Industry Day, particularly any concerns with alignment of information between documents

UNCLASSIFIED / FOUO

UNCLASSIFIED / FOUO

December 02, 2015 ACES Industry Day Don’t Forget to Write Down Your Questions and submit them to Ms. Danette Wilson at danette.d.wilson.civ@mail.mil.

UNCLASSIFIED / FOUO

UNCLASSIFIED / FOUO

December 02, 2015 ACES Industry Day Wrap up and Path Forward image2.jpeg image10.jpg image11.png image12.jpg image13.png image14.jpg image15.png image16.png image17.jpg image18.png image19.png image20.png image21.jpg image22.png image23.jpg image24.png image25.jpg image26.png image27.jpg image28.png image29.jpg image3.png image30.png image31.jpg image32.png image33.jpg image34.png image35.jpg image36.png image37.jpg image38.png image39.jpg image4.png image40.png image41.jpg image42.png image43.jpg image44.png image45.jpg image46.png image47.jpg image48.png image49.jpg image5.png image50.png image51.png image52.jpg image53.png image54.jpg image55.png image56.jpg image57.png image58.png image59.jpg image6.png image60.png image61.jpg image62.png image63.jpg image64.png image65.jpg image66.png image67.jpg image68.png image69.jpg image7.jpg image70.png image71.jpg image72.png image73.jpg image74.png image75.png image76.jpg image77.png image78.jpg image79.png image8.png image80.png image81.png image82.png image83.jpg image84.png image85.png image86.png image87.png image88.png image89.png image9.png image90.png image91.png image92.jpg image93.png image94.jpg image95.png image96.png image97.png image98.png image99.png image100.png image101.png image102.jpeg image103.png image1.jpeg