1 DISA and the Evolving DoD Enterprise 11 June 2014 Major General Alan R. Lynn Vice Director, Defense Information Systems Agency
20th Century Circuit & Dial tone Delivery UNCLASSIFIED DISA is Changing 21st Century Enterprise Service Delivery DISA is an Organization that is Undergoing Continual Evolution 2
Why We Must Evolve Mission Partners Budgetary Constraints People DoDIN Ops Offensive Cyber Ops Cyber Domain Defensive Cyber Ops Joint Information Environment The Joint Information Environment = Reduced Total Cost of Ownership & Attack Surface Area 3
Defense Enterprise Email On 5 Sep 2013, the DoD CIO mandated that all services transition to Defense Enterprise E-mail (DEE). DEE offers greater capabilities at a lower cost. The Army s adoption of DEE has already resulted in a projected cost savings of $76M annually 1.6M Users across the DoD and Counting 4
Enterprise Email Security Gateway USCYBERCOM mandated that all DoD entities utilize the EEMSG capability as the first line of defense for email security. EEMSG will also compliment any existing enclave email protection regardless of email domain. EEMSG Statistics for a 30-Day Snapshot Period Message Category Number of Messages Percentage Stopped by Reputation Filtering Stopped as Invalid Recipients 421M 74.6% 6,186 ~0% Spam Detected 9.9M 1.8% Virus Detected 6,724 ~0% Total Threat Messages Stopped: 431,770,507 76.3% Marketing Messages 37.4M 6.6% Clean Messages 96.6MM 17.1% Total Attempted Messages: 566M 100% 2.7M Email boxes and 744 Domains protected across the DoD and Counting 5
Defense Enterprise Portal Service DEPS provides a scalable, cloud-based collaboration capability that enables mission partners to share information through independently managed community and missionfocused sites. Using a common platform, DEPS enhances enterprise-wide collaboration and increases operational efficiency by leveraging highly secure Defense Enterprise Computing Centers (DECCs), which consolidate administrative, hardware, and software resources One Standard (Currently Microsoft SharePoint) DEPS is Integrated with DEE, DEM and Unified Capabilities 6
Defense Enterprise Mobility Mobile devices will provide access to the DoD Information Networks (DoDIN), allowing warfighters to operate within the JIE when and where needed. DISA is charged with deploying an unclassified enterprise Application Store that will deliver, update and delete apps on mobile devices without having to return the device for service. Department of Defense Mobile Devices Apple ios Devices iphone 4, 4S iphone 5, 5S ipad 3, ipad 4 ipad Mini ipad Mini-R ipad Air Android Devices Department of Defense App Store Deployed 28 Deployed Mobile Iron 26 In Review/Testing 21 *Motorola RAZR MAXX *Samsung Galaxy S4 Requested 44 The JIE will Eliminate the Barriers allowing Mobile Access to C2 and Decision Support Data 7
milcloud In support of JIE and Core Data Center (CDC) hosting, DISA has established an initial CDC service offering -- milcloud - Comparable to an industry offering (e.g., Amazon EC2) - Provides the lowest barrier of entry for migrating Apps to a CDC IOC: Jan 2014 (NIPR) & Jun 2014 (SIPR) 8
JIE Single Security Architecture, Big Data & Identity Access Management are the Foundation 101010101010100010101010101010101010111010110001001010101011 110010101010101010101010101010101011010010101100110110101001 101010101001010101010101010101010100111010101010101101001011 001101010101010101010101010010101001101010101010110110101101 111111110001100000010101010110101111111110000000011111101010 101010101111111011010011111100000000010010010101011101001010 111010101111111111111111101010101011010101011010010101010101 010101010110111000101010101101010101010101011110000000000001 010100101010101010101010101010101010101010101010101010100101 Identify aggregate Identify patterns and 000101010101010110101010101010101001010101011111111111111111 Access to all the raw Mine and Fuse data anomalous behaviors indicators that are data into observations that fit a malicious 111101001010100010101010100001010101011100010101100101011010 out of the norm profile 101010101010010110010100101011001101010100101010110100000111 9
IP Velocity: (Unified Capabilities) Includes a broad set of voice-, video- and data-sharing capabilities that enable joint collaboration across the DoD. IP-based solutions enable DoD users to better collaborate via instant messaging, chat, enterprise voice-over-ip (VoIP), global video services, Web conferencing and unified messaging. Unified Capabilities is Key to Agility in Cyberspace 10
11 A COMBAT SUPPORT AGENCY