UNITED IN SERVICE TO OUR NATION UNCLASSIFIED The Information Assurance Support Environment (IASE) of Today and Tomorrow Program Manager June, 2017 UNCLASSIFIED UNITED IN SERVICE TO OUR NATION

What is the ? The Information Assurance Support Environment (IASE) provides one-stop access to Cybersecurity information, policy, guidance and training for cybersecurity professionals throughout the DoD, and general public. DISA is mandated to sustain IASE by: DoDI 8500.01 DoDD 8140.01 IASE stands for Information Assurance Support Environment “Family of Portals” provides 24x7 access to the most current and up to date cybersecurity resources such as policy, guidance, and training to Federal Agencies The Services Mission Partners Foreign Coalition Partners Academia And the general public -DISA mandated to support and sustain IASE by DoDI 8500.01 and DODD 8140.01

Key Accomplishments Recipient of the 2015 Department of Defense Chief Information Officer (DOD CIO) Award for Cyber and Information Technology Excellence for 40% operational cost-savings Over 99.9% availability with extremely limited unplanned outages 7th most visited DoD site (out of ~175) of those reporting to the Digital Analytics Program sponsored by Google Portal hosts mandatory annual training for 5.1M DoD personnel to include military, civilians and contractors Recipient of the 2015 Department of Defense Chief Information Officer (DOD CIO) Award for Cyber and Information Technology Excellence for 40% operational cost-savings First to pilot Cloud Security Information Impact Level 4 FOUO data in the Amazon Web Services GovCloud within DoD IP Space 7th most visited DoD site (out of 175*) of those reporting to the Digital Analytics Program sponsored by Google Over 99.9% availability with extremely limited unplanned outages Portal hosts mandatory annual training for 5.1M DoD personnel to include military, civilians and contractors

Subject Matter Areas Over 39 Subject Matter Areas including: Application Security Common Criteria, Computer Network Defense (CND) Cross Domain Solutions (CDS) Risk Management Framework (RMF) Global Directory Service (GDS) IA Education, Training, and Awareness (ETA) IA Classroom Training DoD Cyber Tools Training IA Tools and DoD IA Enterprise Tools IA Policy & Guidance Mobile Code Policy Public Key Infrastructure/Enabling (PKI/PKE) and PKI ECA Security Technical Implementation Guides (STIGs) Ports, Protocols, and Services Management (PPSM) Enterprise Mission Assurance Support Service (eMASS) Tactics, Techniques, and Procedures (TTPs) Wireless Security Over 39 Subject Matter Areas including: Application Security Common Criteria, Computer Network Defense (CND) Cross Domain Solutions (CDS) Risk Management Framework (RMF) Global Directory Service (GDS) IA Education, Training, and Awareness (ETA) IA Classroom Training DoD Cyber Tools Training IA Tools and DoD IA Enterprise Tools IA Policy & Guidance Mobile Code Policy Public Key Infrastructure/Enabling (PKI/PKE) and PKI ECA Security Technical Implementation Guides (STIGs) Ports, Protocols, and Services Management (PPSM) Enterprise Mission Assurance Support Service (eMASS) Tactics, Techniques, and Procedures (TTPs) Wireless Security

The Family Today IASE PUBLIC IASE NIPR IASE SIPR IASE Releasable - CAC/PIV Required 39 Content Areas DECC OKC - Transition to AWS GovCloud Level 4 (pilot) IASE PUBLIC IASE NIPR - All Internet Users - PAO Approved Content - AWS GovCloud Level 2 - SIPR Token Required - 39 Content Areas - DECC OKC (or MilCloud) IASE SIPR IASE Releasable - Foreign Partners - DECC OKC The “IASE Family of Portals” consists of: IASE Public, which is accessible to all Internet users, IASE NIPRNet, which requires Public Key Infrastructure (PKI) credentials for access, IASE SIPRNet, which requires a SIPR token for access, and IASE REL, which is accessible by Five Eye (FVEY) foreign partners.   IASE REL is currently being assessed for formal decommissioning to achieve mission and resource efficiencies; FVEY partners will continue to have access to relevant cybersecurity guidance via IASE SIPRNet.

in the AWS GovCloud IASE Public was the first DISA-accredited application to be hosted in the AWS GovCloud. With the move to the cloud, IASE public gained quicker download speeds and access efficiencies by storing files off web servers and onto a scalable solution repository. The IASE gained COOP capabilities providing load balancing and real-time content replication, virtually eliminating downtime and unplanned outages. Commercial Cloud IASE was DISA’s first pilot and successful commercial cloud implementation We migrated our public facing information to Amazon Web Services public commercial cloud in August 2014 Our move to the cloud has shown an improvement in our overall efficiencies and access and download speeds to our customers. The portal as a whole has gained efficiencies more internal to the program, however we also wanted to make sure that our customers saw a change for the better We use what amazon refers to as their “S3” which is their simple scalable solution repository for all of our large files. We use the same technology as Netflix uses to serve up their streaming videos With the cost savings we’ve been able to absorb – we were able to stand up a fully functioning hot site with a load balancer – which has almost eliminated unscheduled downtime. IASE Users

Celebrating 20 Years May 2017, IASE celebrated 20 Years of Service to the IA/Cybersecurity community!

Tomorrow Redesign of IASE Learning Management System 10/9/2017 8:20 AM Tomorrow Redesign of IASE “New Look and Feel” for IASE Public, NIPR, SIPR websites Improved User Experience & User Interface Content Management System with HTML5 / Mobile Compatibility Learning Management System Course catalogue & automated course registration (manual registration today) Adds SCORM = stop & start course Metrics, Analytics & Student Training transcript Capability: scenario based exercises in a simulated environment using HTML5 Virtual Training Environment Capability: scenario based exercises/labs in a virtual environment Remote access from the students desktop Integrated into LMS IASE Tomorrow Redesign of IASE “New Look and Feel” for IASE Public, NIPR, SIPR websites Improved User Experience & User Interface Content Management System with HTML5 / Mobile Compatibility Learning Management System Course catalogue & automated course registration (manual registration today) Adds SCORM = stop & start course Metrics, Analytics & Student Training transcript Capability: scenario based exercises in a simulated environment using HTML5 Virtual Training Environment Capability: scenario based exercises/labs in a virtual environment Remote access to the students desktop Integrated into LMS

The Family Tomorrow IASE PUBLIC IASE NIPR IASE SIPR - CAC/PIV Required - 39 Content Areas - AWS GovCloud - Site Redesign - LMS & VTE IASE PUBLIC IASE NIPR ~30% Content 100% Content - All Internet Users - PAO Approved Content - AWS Public Cloud - Site Redesign LMS & VTE - SIPR Token Required - 39 Content Areas - DECC OKC (or MilCloud) - Site Redesign IASE SIPR 100% Content This is the future view of IASE with a focused approach on delivering content to the DoD community (hence 100% availability of content on IASE NIPR and IASE SIPR). Note, current plans are to implement the LMS and VTE on IASE NIPR only.

So when is “Tomorrow”? Next 12 -18 months Funding dependent Incremental roll-out So when is “Tomorrow” Next 12 -18 months Funding dependent Incremental roll-out

Cyber(security) is a Team Sport IMPACT SHARE TRUST GROWTH CONTENT COLLABORATE INFORM The site's content is provided by cybersecurity subject matter area content owners across the DoD through a change request and approval process coordinated and managed by the IASE web team. IASE is only as good as content offerings, and we rely on content owners to partner with us to provide subject matter expertise. As the one-stop shop for cybersecurity resources, the mission of DoD is dependent on the workforce being informed. If you notice content gaps and/or would like to contributed content to IASE, contact the IASE HelpDesk.

How to find and contact Visit us on the web: Public and NIPRNet: IASE.DISA.MIL SIPRNet: IASE.DISA.SMIL.MIL For IASE programmatic questions or technical support, contact: DISA IDC2 IASE Help Desk / IASE Program Manager Email: disa.meade.re.mbx.iase-website@mail.mil Visit us on the web: Public and NIPRNet: IASE.DISA.MIL SIPRNet: IASE.DISA.SMIL.MIL For programmatic questions, technical support or to begin a partnership with us, contact: IASE Help Desk Email: disa.meade.re.mbx.iase-website@mail.mil