Capitalizing on Commercial Innovation

Transcription

1 DD CIO DD CIO Mbility Industry Day Mbility Update / Overview Department f Defense Chief Infrmatin Officer July 9, 2015

2 DD CIO DD CIO Mbility Industry Day Capitalizing n Cmmercial Innvatin 2 Majr Themes : Security and Applicatins 10:00 11:15 Panel 1: Streamlining Security Apprval Prcesses t Keep Pace with Industry 11:45 12:15 Keynte: Mbility t the Jint Warfighter 13:15 14:30 Panel 2: Imprving Prductivity thrugh Mbile Applicatins and Services 14:45 16:00 Panel 3: MILDEP CIO / CTO Perspectives n the Day 15:30 16:00 Clsing Keynte 2

3 DD CIO DD Cmmercial Unclassified Prtfli Over 500K Mbile Devices Under Carrier Cntract ($40/mnth)* Big Three: ARMY ~180K NAVY ~105K AIR FORCE ~90K Device Type: 190K Smart Phnes 40K Tablets 120K Feature Phnes 70K Air Cards and Htspts 7K Tw-Way Pagers 4 Mbile Device Management (MDM) Architectures 4 Mbile Operating Systems 3 Wireless Service Cntract Vehicles *Snapsht f cmmercial mbile device (CMD) cunts frm May 2015 OMB submissin 3

4 DD CIO DD Cmmercial Classified Prtfli GOTS Based Slutins COTS Based Slutins 2G 3G 4G/LTE S/TS/SCI Capability?? QSEC 800 QSEC 2700 SME PED Past - GOTS Based Slutins - Cellular 2G Only - Nt user friendly Drid Pr Razr Maxx BlackBerry Bld 9900 Cmmercial Slutins fr Classified (CSfC) Present - COTS Based Slutins - NIAP apprved cmpnents - Over the Air Updates Samsung S4 Future - Mre Capabilities - Data-at-rest (DAR) - Apps/widgets - TS/SCI capability - Other apprved devices 4

5 DD CIO DD Apprval Prcess Security Requirements Natinal Infrmatin Assurance Partnership (NIAP) Cmmn Criteria (CC) Evaluatin & Validatin Over 14 Mbile Related Prtectin Prfiles Majr Mbile Prfiles: Mbile Device Fundamentals (MDF) Mbile Device Management (MDM) Applicatin Sftware Current Mbile Device Vendrs Participate in the NIAP: 5

6 DD CIO DD Managed vs Persnal Mbility Finding The Right Balance DD Managed Gvernment Owned Persnal Applicatins Gvernment Prtectins (Maximum) BYOD User Owned Gvernment Applicatins Persnal Use (Maximum) Unslved: - Data Spills - Installed Malware - Certificate Management 6

7 DD CIO Authenticatin n Mbile Devices - Past Same needs as ur ffice cmputers Sign, send, and encrypt Web authenticatin Hardware challenge Cnnect smartphne t a smart card Cmmn Access Card (CAC) sled issues Cst Separate battery User expectatins 7

8 DD CIO Identity and Access Management (IdAM) - Present DD CIO Interim Guidance n Derived Credentials, 23 Sept 2014 Link t Cmmn Access Card (CAC) Eliminate smartcard readers Simplify credential management Hardware-backed encrypted keystres Derived DD CIO Manual issuance current ptins: Helpdesk manual prvisining via side-lading certs BlackBerry certificate ptin (May 2015) 8

9 DD CIO Identity And Access Management (IdAM) - Future Trusted Issuance Infrastructure Certificate authrity (CA) interfaces, fr ver-the-air (OTA) prvisining with trusted agents Purebred demnstratin ~ July 2015 Autmated OTA Factry t User prvisining Enrllment prtcl security (SCEP vs EST) EST Enrllment ver Secure Transprt SCEP Simple Certificate Enrllment Prtcl Bimetrics Integratin MDM agnstic

10 DD CIO DD Mbile Applicatin Envirnment Training Lgistics Cmbat Training Centers - DD Mbile App Stres (150+ Cmmercial Apps) - DD App Gallery - (50+ DD-Develped Apps) - NGA GEOINT App Stre (80 Apps) Army Field Inspectin Tl Tactical Operatins Andrid Tactical Assault Kit (ATAK) Air Frce Electrnic Flight Bag Tailred Applicatins Demnstrate the Advantages f Adapting t Military Needs 10

11 DD CIO Mbile Clud Cmputing Beynd Mbile Device Management (MDM) Clud adaptatins fr: Federated mbile management Applicatin Hsting Discnnected use case Clud Prviders t meet FEDRAMP requirements 11

12 DD CIO Help frm Industry: Wide Range f Operatins Operating Systems/MDM s/carrier: Multi vendr Plicy/Guidance: Security Guides t NIAP PPs Persnal use: Managed t BYOD Infrmatin Access: t Managed Clud Applicatins: Cmmercial and Custm Identity Management: Hard tken t derived credential SRG Security Requirements Guide NIAP Natinal Infrmatin Assurance Partnership PP Prtectin Prfile 12

13 DD CIO BACKUP 13

14 References DD CIO DD Mbile Device Strategy: DD Cmmercial Mbile Device (CMD) Implementatin Plan: CNSSP-17 Plicy n Wireless Systems: NSA Cmmercial Slutins fr Classified Prgram (CSfC) Prgram: DISA Mbility Prgram: DD Interim Guidance n the Use f DD PIV Derived PKI Credentials n Unclassified CMDs, 24 Sep 2014 DD Develpers Page: NIAP Prtectin Prfiles: DISA Mbile STIGs: DD Spectrum Strategy: DD Clud Cmputing Strategy: 14