Leader IPT1 - Architecture The Capability Maturity Model and Its Linkage to the Overarching Architecture June 2, 2006 Dr Tom Buckman NC3A Chief Architect Leader IPT1 - Architecture NATO / EAPC UNCLASSIFIED NATO UNCLASSIFIED

NATO / EAPC UNCLASSIFIED The Brief Covers Basic CMM Concepts / Initial Focus OA Features Supporting Development and Use of CMM Focus for utilization of CMM NATO / EAPC UNCLASSIFIED NATO UNCLASSIFIED

NNEC CMM Concept and The Overarching Architecture (OA) NNEC CMM inspired by work of Carnegie Mellon, Software Engineering Institute (SEI) Initial SEI work focused on software development processes SEI work characterized by a five-level model describing an evolutionary path for achieving a ‘goal’ NNEC CMM concept Focus is on Services Involves: Five-level model Areas identified in the NNEC Strategic Framework Overarching Architecture provides descriptions of Service needs and dependencies Information Integration Services Communication Functional User Missions Operations Sec- urity Ser- vices Mang- ement NATO / EAPC UNCLASSIFIED NATO UNCLASSIFIED

Initial Focus – NII CMM Four Service Areas Service Taxonomy TOA Communication Services Information Integration Services Governance Users Missions Operations Functional Services Security Services Mange-ment & Control Four Service Areas Service Taxonomy Service Areas Service Groups Service Categories Enterprise Services Maturity Levels Represent major improvements in capabilities within a Service Area Reflect technology and architectural trends Driven by Operational Needs Services identified from the perspective of ‘users’ Actors / Service components external to a Service Area NATO / EAPC UNCLASSIFIED NATO UNCLASSIFIED

OA Features Supporting CMM - Initial Listing of NII Services OA v2.5 provides an initial (partial) listing of NII Enterprise Services Services are based on results of the NNEC Feasibility Study (NNEC FS) Includes services identified in the NATO C3 Technical Architecture Reflects work on technology trends done by the Gartner Group and the Forrester Group Services are Identified by Areas : Groups : Categories Linked to Transformational Phases Service groupings provide starting point for identifying CMM Levels NATO / EAPC UNCLASSIFIED NATO UNCLASSIFIED

Working Example – Catalogue of NII Services from OAv2.5 Transport layer Radio Radio service Network layer Security IIS Core Services layer Discovery Personal Communication Storage Application Mediation Conferencing IIS Infrastructure layer Information structure Access Operating system Structured Information Exchange Unstructured Information Exchange Core IP External networks Transmission QoS Network Management Wireless Broadband service Satellite service service GSM Optical Wireless Fixed service QoS service IP service External Networks service IPx -> IPy service IP Multicast service IPv6 service IP Unicast service Tunneling service IP Gateway service Security service compoment Crypto Network Management service Concatenation Service Class Mapping Performance Exchange service Parameter File based exchange service Near real-time Information Exchange service Real-time Information Exchange service Non-secure Information Transfer service Secure Non-secure Information transport service Secure Information Transport service P2P service Property Based Gateway service Message Replication Robust Runtime Environment service MILS Environment service Remote access service Proxy service Network access service Dial-in Roaming User LAN WAN Web Directory Meta-data repository service Information object Framework service Object Framework Document Meta-data Business rules MILS service Runtime Robust Information service Service Provisioning service subscriber Service Publisher Catalogue Audio service Video service Streaming Video Audio Gateway Voice Mail service Text service Fax gateway Messaging Instant Telex Mail Storage service Storage access service Management Provider service Object environment Service Runtime Environment service Application service Portal service Service runtime Uninstaller Installer Portal Browser Video based service Audio based service Whiteboard service Video based Audio based Text Whiteboard Translator service Translator File transfer service File Based P2P service Satellite Fixed Repository Ontology Centralized storage service Distributed storage service Distributed Unstructured Storage service Centralized Unstructured Structured Storage service Structured Archiving Console MIP IP Anycast IP Broadcas servicet IPv4 service VHF Radio UHF Radio UWB MBWA Service Management Control Information Security assistance Notifier service Help support service User workspace Manager service Notifier manager Help support independent Device Console service Incident Event Help Online Tutorial Context-sensitive Enterprise management Management info service Info collector Info provider Info publisher COBIT/ITIL service Asset Management service Info Exchange assurance Authentication service Non-repudiation service repudiation Non- Security management service Strong Certificate Digital Signature service Key Chip Password Biometric Integrity service Integrity Auditing service Encryption service Encryption Public/Private Key service Malicious Detection service Code Stamping Time Auditing Detection Intrusion Confidentiality service Confidentiality Availability service Availability Labelling service Plug and Operate Cross-domani Sharing Border Protection service Border Protection Info subscriber Information Integration Personal efficiency Reporting service Reporting Generator service Report Personal productivity service productivity NATO / EAPC UNCLASSIFIED NATO UNCLASSIFIED

OA Features Supporting CMM – Association of Services with Systems The OA provides for inclusion of information on current and planned systems Focus is on NATO Common Funded Systems Includes information on potential Enterprise Services to be provided by systems This feature means that the OA can be used to assess ability of systems to support a CMM level Current system information limited to systems with published Reference Architectures Includes information on planned use of ‘Infrastructure’ Services NATO / EAPC UNCLASSIFIED NATO UNCLASSIFIED

Association of Services with Systems – Sample View from Current OA NATO / EAPC UNCLASSIFIED NATO UNCLASSIFIED

OA Features Supporting CMM - Operation Needs Linked To NII Services The OA contains models of the ‘mission space’ and associated ‘user’ information requirements Information requirements are linked to requirements for Functional and Infrastructure Services As a result OA can be used to formally identify NII Services required to support transformational maturity levels Do Things Better! Do Better Things! NATO / EAPC UNCLASSIFIED NATO UNCLASSIFIED

NATO / EAPC UNCLASSIFIED Utilization of CMM NII related, CP and Force planning Broad statement of requirements for NII Common language to sync NATO, national efforts Starting point for reference level architecture work Supports identification of required interoperability services Starting point for identifying changes to existing programs Basis for development of NII certification criteria Quality of Information (QoI) driven by mission objectives, linked to Quality of Service (QoS) constraints Constraints provide basis for development of metrics, which can be used in developing criteria NATO / EAPC UNCLASSIFIED NATO UNCLASSIFIED

NATO / EAPC UNCLASSIFIED Summary OA provides an architectural foundation to support CMM development Initial listing of NII Services Linking of operational needs to required NII Services Alignment of Services Across Service Areas OA can be used to map CMM levels to systems Limited information on current and planned systems available in OAv2.5 OA can support development of CMM certification criteria Criteria would be linked to Quality of Information and Quality of Service constraints Constraints would be based on operational needs NATO / EAPC UNCLASSIFIED NATO UNCLASSIFIED

NATO / EAPC UNCLASSIFIED CONTACTING NC3A NC3A Brussels Visiting address: Bâtiment Z Avenue du Bourget 140 B-1110 Brussels Telephone +32 (0)2 7074111 Fax +32 (0)2 7078770 Postal address: NATO C3 Agency Boulevard Leopold III B-1110 Brussels - Belgium NC3A The Hague Oude Waalsdorperweg 61 2597 AK The Hague Telephone +31 (0)70 3743000 Fax +31 (0)70 3743239 Postal address: NATO C3 Agency P.O. Box 174 2501 CD The Hague The Netherlands NATO / EAPC UNCLASSIFIED NATO UNCLASSIFIED