1. ARCHITECTURE ● ENGINEERING ● COMMUNICATIONS TECHNOLOGY AVIATION | CIVIL | CONSTRUCTION SERVICES | DATA SYSTEMS | ENVIRONMENTAL FACILITIES ENGINEERING | GEOSPATIAL | NETWORKS | PUBLIC SAFETY | TRANSPORTATION A Strategic Roadmap for NG9-1-1 Don Nagle & Jeremy L. Smith, CISSP L.R. Kimball

2. ARCHITECTURE ● ENGINEERING ● COMMUNICATIONS TECHNOLOGY AVIATION | CIVIL | CONSTRUCTION SERVICES | DATA SYSTEMS | ENVIRONMENTAL FACILITIES ENGINEERING | GEOSPATIAL | NETWORKS | PUBLIC SAFETY | TRANSPORTATION Agenda L.R. Kimball Overview NG9-1-1 State of Union – What it is / What it is isn’t – Case Studies – How do I get there? Cyber Security (deep dive) – Why is important to NG9-1-1? – What is NENA’s new NG-SEC Cyber Security standard? – How do I comply? Tying it all together

3. ARCHITECTURE ● ENGINEERING ● COMMUNICATIONS TECHNOLOGY AVIATION | CIVIL | CONSTRUCTION SERVICES | DATA SYSTEMS | ENVIRONMENTAL FACILITIES ENGINEERING | GEOSPATIAL | NETWORKS | PUBLIC SAFETY | TRANSPORTATION L.R. Kimball facts Formed in 1953 HQ in Ebensburg, PA Today - 4 Divisions / 500 + employees – Civil and Environmental – Architectural and Engineering – Transportation – Communications Technology Communications Technology – 120 + employees, 38 ENP’s, 12 PMP’s, 2 CAPM’s, 1 CISSP – HQ in State College, PA

4. ARCHITECTURE ● ENGINEERING ● COMMUNICATIONS TECHNOLOGY AVIATION | CIVIL | CONSTRUCTION SERVICES | DATA SYSTEMS | ENVIRONMENTAL FACILITIES ENGINEERING | GEOSPATIAL | NETWORKS | PUBLIC SAFETY | TRANSPORTATION Communications Technology Communications Technology started in 1996 with focus on Public Safety communications – 6 Operational units Networks GIS, Data and Managed Services Radio Operations and GRS Federal Security

5. ARCHITECTURE ● ENGINEERING ● COMMUNICATIONS TECHNOLOGY AVIATION | CIVIL | CONSTRUCTION SERVICES | DATA SYSTEMS | ENVIRONMENTAL FACILITIES ENGINEERING | GEOSPATIAL | NETWORKS | PUBLIC SAFETY | TRANSPORTATION What is NG9-1-1?

6. ARCHITECTURE ● ENGINEERING ● COMMUNICATIONS TECHNOLOGY AVIATION | CIVIL | CONSTRUCTION SERVICES | DATA SYSTEMS | ENVIRONMENTAL FACILITIES ENGINEERING | GEOSPATIAL | NETWORKS | PUBLIC SAFETY | TRANSPORTATION

7. ARCHITECTURE ● ENGINEERING ● COMMUNICATIONS TECHNOLOGY AVIATION | CIVIL | CONSTRUCTION SERVICES | DATA SYSTEMS | ENVIRONMENTAL FACILITIES ENGINEERING | GEOSPATIAL | NETWORKS | PUBLIC SAFETY | TRANSPORTATION NENA NG9-1-1 Architecture

8. ARCHITECTURE ● ENGINEERING ● COMMUNICATIONS TECHNOLOGY AVIATION | CIVIL | CONSTRUCTION SERVICES | DATA SYSTEMS | ENVIRONMENTAL FACILITIES ENGINEERING | GEOSPATIAL | NETWORKS | PUBLIC SAFETY | TRANSPORTATION Its not just the Network / CPE NG9-1-1 is often considered a network, but it doesn’t stop there – it is the culmination of converging many applications into a common platform. It’s not just CPE either NG9-1-1 is a journey, that involves having a vision for the future beyond just a network. It contains all of the functions of the legacy 9-1-1 system while allowing for greater interoperability, convergence and better utilization of technology, financial and human resource

9. ARCHITECTURE ● ENGINEERING ● COMMUNICATIONS TECHNOLOGY AVIATION | CIVIL | CONSTRUCTION SERVICES | DATA SYSTEMS | ENVIRONMENTAL FACILITIES ENGINEERING | GEOSPATIAL | NETWORKS | PUBLIC SAFETY | TRANSPORTATION NG9-1-1… Is the next evolutionary step in the development of the 9-1-1 emergency communications system known as E9-1-1 since the 1970s. Is a system comprised of managed IP-based networks and elements that augment present-day E9-1-1 features and functions and add new capabilities. Will eventually replace the present E9-1-1 system. Designed to provide access to emergency services from all sources, and to provide multimedia data capabilities for PSAPs and other emergency service organizations. (NENA.org)

10. ARCHITECTURE ● ENGINEERING ● COMMUNICATIONS TECHNOLOGY AVIATION | CIVIL | CONSTRUCTION SERVICES | DATA SYSTEMS | ENVIRONMENTAL FACILITIES ENGINEERING | GEOSPATIAL | NETWORKS | PUBLIC SAFETY | TRANSPORTATION NG9-1-1 Objectives Emergency Help – Anytime, anywhere, any device Emergency Services IP Enabled Network (ESInet) Built in a hierarchical fashion to combine the local, regional and national emergency needs Faster response times Greater interoperability Standardization Call delivery Security Transition support Disaster planning Flexibility

11. ARCHITECTURE ● ENGINEERING ● COMMUNICATIONS TECHNOLOGY AVIATION | CIVIL | CONSTRUCTION SERVICES | DATA SYSTEMS | ENVIRONMENTAL FACILITIES ENGINEERING | GEOSPATIAL | NETWORKS | PUBLIC SAFETY | TRANSPORTATION NG9-1-1: Your Target LEGACY 9-1-1

12. ARCHITECTURE ● ENGINEERING ● COMMUNICATIONS TECHNOLOGY AVIATION | CIVIL | CONSTRUCTION SERVICES | DATA SYSTEMS | ENVIRONMENTAL FACILITIES ENGINEERING | GEOSPATIAL | NETWORKS | PUBLIC SAFETY | TRANSPORTATION USDOT Example Built a proof of concept of NG9-1-1 using COTS hardware, software and existing network facilities Designed a number of Call Use cases Architected an IP based network and SIP delivery system to demonstrate calls Deployed LIS and LoST functionality Demonstrated a closed, controlled NG9-1-1 functional system

13. ARCHITECTURE ● ENGINEERING ● COMMUNICATIONS TECHNOLOGY AVIATION | CIVIL | CONSTRUCTION SERVICES | DATA SYSTEMS | ENVIRONMENTAL FACILITIES ENGINEERING | GEOSPATIAL | NETWORKS | PUBLIC SAFETY | TRANSPORTATION Texas Example Statewide Master Plan advocating the functional requirements of NG9-1-1 and the configuration of ESInets Regional ESInets – Built as an IP enabled network to support individual Council of Governments – Strategically aligned with the State Master Plan to ensure that interconnectivity can be achieved – Growing from the ground up to support the State wide initiative – Areas of consideration Governance Policy Technical and functional requirements

14. ARCHITECTURE ● ENGINEERING ● COMMUNICATIONS TECHNOLOGY AVIATION | CIVIL | CONSTRUCTION SERVICES | DATA SYSTEMS | ENVIRONMENTAL FACILITIES ENGINEERING | GEOSPATIAL | NETWORKS | PUBLIC SAFETY | TRANSPORTATION Indiana Example Prepare PSAPs for future technologies Decrease potential points of failure in the wireless E9-1-1 network Streamline wireless E9-1-1 service in terms of costs, operations, entities Encourage cooperation between and among PSAPs, wireless carriers and LECs Increased reliability and disaster recovery Provide a pathway to NG 9-1-1

15. ARCHITECTURE ● ENGINEERING ● COMMUNICATIONS TECHNOLOGY AVIATION | CIVIL | CONSTRUCTION SERVICES | DATA SYSTEMS | ENVIRONMENTAL FACILITIES ENGINEERING | GEOSPATIAL | NETWORKS | PUBLIC SAFETY | TRANSPORTATION State of Montana Example Defined an NG9-1-1 roadmap (strategy) Conducted a State wide feasibility study to assess current environment Completed Competitive Procurement of CPE and Network Implemented an IP-enabled network with IP-capable CPE solution State-Wide

16. ARCHITECTURE ● ENGINEERING ● COMMUNICATIONS TECHNOLOGY AVIATION | CIVIL | CONSTRUCTION SERVICES | DATA SYSTEMS | ENVIRONMENTAL FACILITIES ENGINEERING | GEOSPATIAL | NETWORKS | PUBLIC SAFETY | TRANSPORTATION NG9-1-1 New Challenges Challenges abound From fixed Local networks To Regional dispersed networks Distributed Architecture Servers / Systems not controlled by local policies Policies and practices must change Control becomes centralized Strategic Alignment (Regional, State, National) Network Management Monitoring and network operations oversight ESInet functions Cyber Security

17. ARCHITECTURE ● ENGINEERING ● COMMUNICATIONS TECHNOLOGY AVIATION | CIVIL | CONSTRUCTION SERVICES | DATA SYSTEMS | ENVIRONMENTAL FACILITIES ENGINEERING | GEOSPATIAL | NETWORKS | PUBLIC SAFETY | TRANSPORTATION NG9-1-1: Your Target Cyber Security

18. ARCHITECTURE ● ENGINEERING ● COMMUNICATIONS TECHNOLOGY AVIATION | CIVIL | CONSTRUCTION SERVICES | DATA SYSTEMS | ENVIRONMENTAL FACILITIES ENGINEERING | GEOSPATIAL | NETWORKS | PUBLIC SAFETY | TRANSPORTATION Cyber Security / NG-SEC Deep Dive…

19. ARCHITECTURE ● ENGINEERING ● COMMUNICATIONS TECHNOLOGY AVIATION | CIVIL | CONSTRUCTION SERVICES | DATA SYSTEMS | ENVIRONMENTAL FACILITIES ENGINEERING | GEOSPATIAL | NETWORKS | PUBLIC SAFETY | TRANSPORTATION Cyber Security - Defined Protection of information / property from theft, corruption, or natural disaster, while allowing the information and property to remain accessible and useful to its users. Collective processes and mechanisms by which sensitive and valuable information and services are protected from publication, tampering or collapse by unauthorized activities or untrustworthy individuals and unplanned events respectively Translation: – Keeping your mission critical infrastructure or systems and the information stored on them safe and available!

20. ARCHITECTURE ● ENGINEERING ● COMMUNICATIONS TECHNOLOGY AVIATION | CIVIL | CONSTRUCTION SERVICES | DATA SYSTEMS | ENVIRONMENTAL FACILITIES ENGINEERING | GEOSPATIAL | NETWORKS | PUBLIC SAFETY | TRANSPORTATION Why do we need Cyber Security in NG9-1-1? Legacy 9-1-1 was typically not connected to other networks Barriers to attack were high – Logistics – Easier targets elsewhere In NG9-1-1, we are all connected Barriers to attack dramatically decrease 9-1-1 is attractive target Need for cyber security never been greater

21. ARCHITECTURE ● ENGINEERING ● COMMUNICATIONS TECHNOLOGY AVIATION | CIVIL | CONSTRUCTION SERVICES | DATA SYSTEMS | ENVIRONMENTAL FACILITIES ENGINEERING | GEOSPATIAL | NETWORKS | PUBLIC SAFETY | TRANSPORTATION NENA & Cyber Security NENA is actively involved in ensuring that 9-1-1 stays secure during & after transition to NG9-1-1 Established a Joint Working Group: “Security for NG9-1-1” – Responsible for all things security in NG9-1-1 – Co-chaired by Jeremy Smith & Gordon Vanauken – Broad industry representation (e.g. State, PSAP, Vendor, telco, consultant, etc) – Officially released standards on 2/6/10 NENA Document 75-001 – Standards are known as NG9-1-1 Security ( NG- SEC )

22. ARCHITECTURE ● ENGINEERING ● COMMUNICATIONS TECHNOLOGY AVIATION | CIVIL | CONSTRUCTION SERVICES | DATA SYSTEMS | ENVIRONMENTAL FACILITIES ENGINEERING | GEOSPATIAL | NETWORKS | PUBLIC SAFETY | TRANSPORTATION But, NG9-1-1 isn’t here yet…can I wait?? True, but many entities are currently planning NG9-1-1 deployment, migrations, etc – And some are even deploying networks and other NG9-1-1 foundational elements The systems that are being bought today will likely be migrated to NG9-1-1 as opposed to fork lifted Entities need to start the planning process now – New Costs, new Operations, new Processes, new Technology – Security must be built into NG9-1-1 from the outset, not bolted on later

23. ARCHITECTURE ● ENGINEERING ● COMMUNICATIONS TECHNOLOGY AVIATION | CIVIL | CONSTRUCTION SERVICES | DATA SYSTEMS | ENVIRONMENTAL FACILITIES ENGINEERING | GEOSPATIAL | NETWORKS | PUBLIC SAFETY | TRANSPORTATION What does NG-SEC Address? 4.Security Policies 5.Information Classification & Protection 6. General Security (network connectivity, multi-homed devices, wireless, and more) 7. Safeguarding Information Assets (user ID and authentication, passwords, system access, certificates, access control, rights and permissions, encryption, viruses, patching, auditing, and more) 8.Physical Security 9. Network and Remote Access (includes firewalls, VPNs, etc) 10.Change Control and Documentation 11.Compliance Audits and Reviews 12.Exception Approval and Risk Acceptance Process 13.Incident Response Plan *Section titles map to actual NG-SEC sections

24. ARCHITECTURE ● ENGINEERING ● COMMUNICATIONS TECHNOLOGY AVIATION | CIVIL | CONSTRUCTION SERVICES | DATA SYSTEMS | ENVIRONMENTAL FACILITIES ENGINEERING | GEOSPATIAL | NETWORKS | PUBLIC SAFETY | TRANSPORTATION How do I comply with NG-SEC? Where do I begin if I am a:  PSAP /Dispatch Center  State Agency  Vendor / Maintenance Provider  Content Provider  Other?

25. ARCHITECTURE ● ENGINEERING ● COMMUNICATIONS TECHNOLOGY AVIATION | CIVIL | CONSTRUCTION SERVICES | DATA SYSTEMS | ENVIRONMENTAL FACILITIES ENGINEERING | GEOSPATIAL | NETWORKS | PUBLIC SAFETY | TRANSPORTATION The most important thing you can do now… Begin the planning process!

26. ARCHITECTURE ● ENGINEERING ● COMMUNICATIONS TECHNOLOGY AVIATION | CIVIL | CONSTRUCTION SERVICES | DATA SYSTEMS | ENVIRONMENTAL FACILITIES ENGINEERING | GEOSPATIAL | NETWORKS | PUBLIC SAFETY | TRANSPORTATION How does NG-SEC affect PSAPs? 1.Get educated 2.Conduct a gap analysis / readiness assessment – How far away are you from compliance? – People, Processes, and Technology 3.Start planning / budgeting now 4.Current and future procurements should include NG-SEC compliance as an element – Put it into your RFPs If you are building an ESINet, make NG-SEC compliance a requirement to connect to it Seek out new funding – Inform your government entities / leaders – Grants Don’t wait until NG9-1-1 gets here or is deployed

27. ARCHITECTURE ● ENGINEERING ● COMMUNICATIONS TECHNOLOGY AVIATION | CIVIL | CONSTRUCTION SERVICES | DATA SYSTEMS | ENVIRONMENTAL FACILITIES ENGINEERING | GEOSPATIAL | NETWORKS | PUBLIC SAFETY | TRANSPORTATION How does NG-SEC affect State Agencies/board? Some things to consider: – NG-SEC compliance a requirement for inclusion on state contract? – Include it in pilot programs to see how agencies will handle it? – Statewide Audit program? – Only fund centers who are NG-SEC compliant? – State-funded penetration/vulnerability assessments? – Others?

28. ARCHITECTURE ● ENGINEERING ● COMMUNICATIONS TECHNOLOGY AVIATION | CIVIL | CONSTRUCTION SERVICES | DATA SYSTEMS | ENVIRONMENTAL FACILITIES ENGINEERING | GEOSPATIAL | NETWORKS | PUBLIC SAFETY | TRANSPORTATION How does NG-SEC affect Vendors? Build your systems NG-SEC compliant Prove that you are NG-SEC compliant by undergoing independent auditing Help your customers Includes Telcos / Maint Providers! – Sell NG-SEC solutions – Provide NG-SEC compliant maint.

29. ARCHITECTURE ● ENGINEERING ● COMMUNICATIONS TECHNOLOGY AVIATION | CIVIL | CONSTRUCTION SERVICES | DATA SYSTEMS | ENVIRONMENTAL FACILITIES ENGINEERING | GEOSPATIAL | NETWORKS | PUBLIC SAFETY | TRANSPORTATION Tying it all together Getting started…and building that strategic roadmap LEGACY 9-1-1

30. ARCHITECTURE ● ENGINEERING ● COMMUNICATIONS TECHNOLOGY AVIATION | CIVIL | CONSTRUCTION SERVICES | DATA SYSTEMS | ENVIRONMENTAL FACILITIES ENGINEERING | GEOSPATIAL | NETWORKS | PUBLIC SAFETY | TRANSPORTATION Where are the issues? Technology Network Radio Data Management Operations Obtaining Stakeholder buy in Achieving cost efficiencies Collaboration Security NG-SEC compliance Minimize threats

31. ARCHITECTURE ● ENGINEERING ● COMMUNICATIONS TECHNOLOGY AVIATION | CIVIL | CONSTRUCTION SERVICES | DATA SYSTEMS | ENVIRONMENTAL FACILITIES ENGINEERING | GEOSPATIAL | NETWORKS | PUBLIC SAFETY | TRANSPORTATION Where do I start? How long is this going to take? And what are my expectations? Cost / Benefit analysis – Can I afford to undertake this journey? - OR - can I afford not to begin this process? What are the impacts going to be on my staff, resources and how can I maximize efficiency during this process? What Operational changes do I need to be prepared for? What technology needs to change? What are my risks? Are there others who will join me? Do I need to make a Business case? How will I fund? Where do I start?

32. ARCHITECTURE ● ENGINEERING ● COMMUNICATIONS TECHNOLOGY AVIATION | CIVIL | CONSTRUCTION SERVICES | DATA SYSTEMS | ENVIRONMENTAL FACILITIES ENGINEERING | GEOSPATIAL | NETWORKS | PUBLIC SAFETY | TRANSPORTATION Step by Step 1.Planning and Assessment: – Identifying the strategy, setting the vision and defining the solution – Network and operational assessment, NG-SEC Assessments, Strategy formation, High level profile, Desired objectives 2.Design: – Strategic roadmap to achieve the optimal solution – Conceptual design based upon strategy, Functional requirements defined 3.Procurement: – Selection of preferred method of purchasing a solution – Direct purchase or competitive procurement process 4.Implementation – Project management of deployment to ensure and validate solution – Scheduling, Acceptance testing, Integration support

33. ARCHITECTURE ● ENGINEERING ● COMMUNICATIONS TECHNOLOGY AVIATION | CIVIL | CONSTRUCTION SERVICES | DATA SYSTEMS | ENVIRONMENTAL FACILITIES ENGINEERING | GEOSPATIAL | NETWORKS | PUBLIC SAFETY | TRANSPORTATION Holistic approach to NG9-1-1

34. ARCHITECTURE ● ENGINEERING ● COMMUNICATIONS TECHNOLOGY AVIATION | CIVIL | CONSTRUCTION SERVICES | DATA SYSTEMS | ENVIRONMENTAL FACILITIES ENGINEERING | GEOSPATIAL | NETWORKS | PUBLIC SAFETY | TRANSPORTATION Questions? Contact us: Don Nagle 321-277-7442 Donald.Nagle@lrkimball.com Jeremy L. Smith, CISSP 909-837-7807 Jeremy.Smith@LRKimball.com