NMCI Release, Upgrades and Patches & the NRDDG

Transcription

1 NMCI, Upgrades and Patches the NRDDG Don Biedermann,, SPAWAR PMW-164 (858) don.biedermann Version 1.0 dtd 16 June 2003

2 Three Steps to Placing a in NMCI 1. Authorization FAM Authorization 2. Development Develop the for NMCI 3. Request To Deploy (RTD) Deploy the in NMCI A New Way of Doing Business Page 1

3 Management Requirement POR CDA Spt Ech II FAM Ech II Develop Approval Authorization POR Develop CDA Spt Ech II Request to Deploy (RTD) Approval to Deploy NRPM () NMCI Management Requirements Determination Certification and Approval Authorization Prioritization and NRPM/NRSM () Schedule ISF CDA NMCI Application Solution Final Approval V1.3 25Apr03 = Government / Navy Responsibility = Joint Responsibility (Govt ISF) Approval Prioritization ECCB to ISF NMCI CDA Ech II ISF CDA Ech II Operations Page 2

4 Authorization Requirements determination CDA, Echelon II, POR determine need for release DADMS questionnaire DoN Application Database Management System website FAM review and approval DADMS Authorization to develop DADMS Get the Authorization Page 3

5 Development

6 NMCI Development Navy IO (NADTF) Ruleset Standard set of rules for applications within NMCI. Defense-In-Depth Boundary Protection Public Key Infrastructure (PKI) Server Security Desktop Security Microsoft Development Standards Windows 2000 Active Directory GPO Windows Installer (MSI) Application Programming Interfaces (API) Operating Environment Desktop Lockdown Policy Gold Disk Interoperability Browser MS Internet Explorer Netscape Navigator Software Distribution Automated Novadigm Radia Advanced Packager Page 5

7 Development Hints and Tips NMCI Seats are Near Consumable Resources Quickly Replaceable IT Resources Only configuration or temporary data should be stored on the seat Application data should be stored on Network File Shares Enterprise Standards for Client/Server Applications Use DNS Naming Standards vice Static IPs Compliant with Security Protocols NMCI Infrastructure Communicates over IP SPX, IPX, NetBIOS protocols are not supported in NMCI Standard acceptable Ports are listed in the NRDDG Build your Plan Things that are planned, typically go smoother! MS Access is not Intended for Multi-user Utilization NMCI is a Single Homogenous Environment Think Enterprise Development Read the NRDDG! Page 6

8

9 Types Annual Application Plan -- Planned Business Changes -- Plan at least one year ahead -- Part of the Annual Technology Refresh Plan-- Full Accreditation / ATO Required -- Versions major releases -- No more than 2 normal releases per year Planned Point Plan -- Business Changes, Technical Changes -- Plan with six month notice -- Done quarterly with no more than 4 per year -- IA Assessment w/ Monthly Report -- Minor changes, patches, modifications, upgrades, updates Emergency / Urgent Plan -- Not planned, Technical Changes -- IA Assessment w/ Monthly Report -- Minor changes, patches, modifications, fixes -- Runs normal process with urgent priorities assigned in a shortened timeframe A Plan for All Occasions Page 8

10 Request to Deploy (RTD) Entry Point for the Purpose of RTD Approval to Deploy Prioritization for of Who uses: Central Design Activities, Program of Record, Echelon II When to use: is near completion of development and is prepared to deploy within next three quarters Where to Submit: NMCI Prioritization Manager (NRPM) () Page 9

11 Planned Authorization, Prioritization and Complete Develop Prioritization and Submit No No Ready to deploy within 3 quarters? Yes Complete Request To Deploy (RTD) Form ECH II CDA/POR RTD submitted to Prioritization Manager ECH II CDA/POR RTD reviewed ECH II CDA/POR RTD No Yes approved for deployment? Yes RTD submitted to Prioritization Manager priority established Verify release information is complete RTD forwarded to Manager Yes is assigned a scheduled submission date EDS CDA is notified of schedule submission date CDA/POR PMO NMCI Request to Deploy Prioritization (Planned ) Prioritization Planned releases are processed as part of the quarterly prioritization and scheduling process RTD Review and Approval NOIS Database ISF Tools Database Testing (Certification) v Apr 2003 Page 10

12 Timeline 90 Day Notional Timeline 0 15 Days 60 Days 70 Days 80 Days 90 Days Submission Receipt, Packaging, Certification ARM ECCB Push ARDRA Submission 15 days Receipt, Packaging, Certification 45 days Accreditation and Risk Mitigation 10 days Engineering Change Control Board Review 10 days Application Readiness Activity 20 days Push / Load 10 days Disciplined Approach to Page 11

13 NMCI Management NMCI Application Patches / Modifications / Fixes / Upgrades / Updates / Revisions Preparation Collection Submission Point or Emergency Packaging Certification Annual Accreditation Risk Mitigation Pre NMCI Management ATO Legend ISF Tools Database Documentation Government/Site Responsibility ISF Responsibility Joint Responsibility ISF Tools Database v Page 12

14 NMCI Management Preparation Collection Submission Point or Emergency Preparation Plan Precertification ISF Tools Database Packaging Certification Annual Accreditation Risk Mitigation Documentation ATO Pre NMCI Management Legend Government/Site Responsibility ISF Responsibility Joint Responsibility ISF Tools Database v Collection Submission ISF Tools Database entries Collect Media and Documentation Submit to ISF Page 13

15 NMCI Management Preparation ISF Tools Database Collection Submission Packaging Certification Annual Point or Emergency Accreditation Risk Mitigation Pre NMCI Management Packaging Novadigm Radia Testing AIT Lab PIAN ISF Tools Database v Documentation ATO Legend Government/Site Responsibility ISF Responsibility Joint Responsibility ISF Tools Database Certification Page 14

16 NMCI Management Preparation Collection Submission Point or Emergency Packaging Certification Annual Accreditation Risk Mitigation Pre NMCI Management ATO Legend ISF Tools Database Documentation Government/Site Responsibility ISF Responsibility Joint Responsibility ISF Tools Database v Accreditation Risk Mitigation IA Review Risk Assessment of All s Annual requires Full Accreditation and ATO Page 15

17 NMCI Management Preparation Predeployment Finalize Plan Prepared for Collection Submission Packaging Certification Annual Point or Emergency Accreditation Risk Mitigation Documentation ATO Pre ISF Tools Database Application Readiness Activity (ARDRA) ARDRA used when needed v NMCI Management Legend Government/Site Responsibility ISF Responsibility Joint Responsibility ISF Tools Database Plan Page 16

18 NMCI Application Life-Cycle Guidance for Application Transition, Development and AOR Cutover Begins Cutover Ends LATG Guidance for the transition of existing applications into NMCI NRD 2 G NMCI application release development and deployment guidance NEADG Navy Enterprise Application Development Guidance Page 17

19

20

21 Backup Slides

22 Un- Planned Authorization, Prioritization and Complete Deploy as Planned Prioritization Develop and Submit No No RTD Is this an Emergency/ Urgent? ECH II CDA/POR Yes Complete Request To Deploy (RTD) Form ECH II CDA/POR RTD submitted to Prioritization Manager ECH II CDA/POR RTD reviewed RTD No Yes requires further prioritization? Yes Emergency/ Urgent status approved? Yes No RTD submitted to Prioritization Manager priority established RTD forwarded to Manager Yes is assigned a scheduled submission date EDS NMCI Request to Deploy Prioritization (Unplanned ) Unplanned s will be submitted on an as required basis and are not part of the quarterly prioritization and scheduling process Prioritization RTD Review and Approval NOIS Database ISF Tools Database Verify release information is complete CDA is notified of schedule submission date CDA/POR PMO Testing (Certification) v Apr 2003 Page 21