dmg tem2011-0718-10 dosmann--disa tem slides

LANDWARNET 2011AMERICA’S ARMY: THE STRENGTH OF THE NATION UNCLASSIFIED

UNCLASSIFIED

DOD Mobility TEM

Army CIO/G-6 Mobile Electronic Device (MED)

Working Group

18 July 2011LTC Matthew [email protected]: 703-545-1619

mailto:[email protected]


UNCLASSIFIED 2

=

2011-06-16T08:00Z // MED WG Brief LANDWARNET 2011


UNCLASSIFIED 3

Begun September 2010

ID pilots and ensure they do not put Army networks at risk.

Support, evaluate, and analyze

Guide pilots in identifying and mitigating risks• Plans of Action & Milestones

(POA&M)

• NETCOM Designating Approval Authority (DAA) review

• Share lesson learned between pilots

Generate collaboration within Army and between Services/Agencies

0

5

10

15

20

25• USACE (1) • USAREC (1) •PM-AKO•MEDCOM (1+)

• USAR/OCAR (1)• AMC/RDECOM(1)• HQDA (1)• USAAC (1)

• PEO-C3T • ASA(ALT) (1)• DARPA• G-2

• TRADOC• Army War College


UNCLASSIFIED 4

Inopportune Timing of Pilots (20+ discovered)• WikiLeaks data spillage & increased scrutiny regarding Government spending

• Not leveraging lessons learned across pilots

Major Cultural Issues within Army• Improper & unapproved acquisition processes being used

• Disregard for information security is generally acceptable

PD-CHESS waiver loophole allowed procurement of unapproved mobile devices• Mitigated with policy requiring purchases to be on the Approved Products List

(UC APL)

MED Operating Systems (OS) and the physical devices have a lifecycle shorter than the average acquisition process

Currently, the only approved mobile device solutions are BlackBerry & Windows Mobile (6.x)



UNCLASSIFIED 5

Mobile Electronic Devices (MED) offer potential for significant efficiencies

Demand• Rapid civilian adoption of mobile devices

• Key leaders demanding tablet type device

• Inordinate risks associated with use of personal devices

No approved tablets• Complicated by combination of multiple form factors, OS, and device

management frameworks

• Stressing acquisition processes

Army and DoD policies not suited to MED • Key aspects of mobile apps (e.g. geo-loc, camera) prohibited or restricted by

policy

• Approved MED locked down to the extrem



UNCLASSIFIED

Mobile Device Management• Remote Wipe

• Configuration Management

• Patch Management

• Data-At-Rest

CAC/PKI Enablement• Bluetooth

• Wifi

• Physical Connection

Application Lifecycle Management• App Software Assurance

• App Store

• App Maintenance and Retirement

Secure Voice62011-06-16T08:00Z // MED WG Brief LANDWARNET 2011


UNCLASSIFIEDLANDWARNET 20112011-03-23T08:00Z // Presentation Title Goes Here 7

BES BES BES



BES MDM YMDM X



BES MDM YMDM X

Enterprise Data Management Layer


UNCLASSIFIED


UNCLASSIFIED

Integrated DOD approach• MED Communities of Interest (COI) Deep Dive, DISA TEM meetings• Comprehensive (i.e. DOTMLPF) changes needed• Participation from USA, USAF, USMC, USCG, DISA, OSD, DARPA, NSA

and FBI• Leverage existing efforts to provide continuity in policy and support

from tactical edge to “garrison edge”; address new technologies and associated risks

Maintain communication with industry to provide different MED solutions

Army is engaging with NSA, DISA and Services to create an Enterprise Secure Mobility solution• Use commercial standards, platforms, & applications as a foundation• An architected solution/service and not a portfolio of products• Stronger partnerships with government and industry partners

Continue to support, analyze, and evaluate MED pilots• Various devices in pilots• Developing Medical and Logistics community pilots



UNCLASSIFIED 122011-06-16T08:00Z // MED WG Brief LANDWARNET 2011

LTC Matthew [email protected]: 703-545-1619

mailto:[email protected]

dmg tem2011-0718-10 dosmann--disa tem slides

Technology