1. Operated by Los Alamos National Security, LLC for NNSA U N C L A S S I F I E D Operated by Los Alamos National Security, LLC for NNSA U N C L A S S I F I E D Slide 1 Laptops on Foreign Travel (LoFT) Vera Vigil - LANL Operated by Los Alamos National Security, LLC for DOE/NNSA U N C L A S S I F I E D LA-UR 08-2886

2. Operated by Los Alamos National Security, LLC for NNSA U N C L A S S I F I E D Operated by Los Alamos National Security, LLC for NNSA U N C L A S S I F I E D Slide 2 Laptops on Foreign Travel (LoFT) By Vera Vigil DCAC team, CTN-2 Los Alamos National Laboratory

3. Operated by Los Alamos National Security, LLC for NNSA U N C L A S S I F I E D Operated by Los Alamos National Security, LLC for NNSA U N C L A S S I F I E D Slide 3 Introduction Background Development Implementation Loan Process Walk-thru Customer Feedback Future Improvements

4. Operated by Los Alamos National Security, LLC for NNSA U N C L A S S I F I E D Operated by Los Alamos National Security, LLC for NNSA U N C L A S S I F I E D Slide 4 Background Government laptops taken on foreign travel pose special risks –Data and/or equipment loss or stolen Risk Mitigation –Federal information security requirements for protecting Sensitive Unclassified Information (SUI)

5. Operated by Los Alamos National Security, LLC for NNSA U N C L A S S I F I E D Operated by Los Alamos National Security, LLC for NNSA U N C L A S S I F I E D Slide 5 LoFT Development Chief Security Officer (CSO) tasked Computing, Telecommunication (CTN), and Networking Division to create a lending pool Consulted with Sandia National Laboratory Consulted with LANL Partners –Property –Cyber Security –Office of Counterintelligence (OCI) –Foreign Travel Office –Technical Surveillance Countermeasures (TSCM) –Customs Office –CTN-2 Organizational Computer Security Representative (OCSR)

6. Operated by Los Alamos National Security, LLC for NNSA U N C L A S S I F I E D Operated by Los Alamos National Security, LLC for NNSA U N C L A S S I F I E D Slide 6 LoFT Development Acquired hardware, software, other misc items Configured two servers Developed LoFT Database Created on-line Request Form

7. Operated by Los Alamos National Security, LLC for NNSA U N C L A S S I F I E D Operated by Los Alamos National Security, LLC for NNSA U N C L A S S I F I E D Slide 7 LoFT Development Laptops maintained in an access controlled environment Mac Address Control (MAC) Customer Information Packet LoFT Technician Operations Guide

8. Operated by Los Alamos National Security, LLC for NNSA U N C L A S S I F I E D Operated by Los Alamos National Security, LLC for NNSA U N C L A S S I F I E D Slide 8 LoFT Implementation System Configuration –Standard Images –Sanitization –User Accounts

9. Operated by Los Alamos National Security, LLC for NNSA U N C L A S S I F I E D Operated by Los Alamos National Security, LLC for NNSA U N C L A S S I F I E D Slide 9 LoFT Implementation Data Protection –Partner with OCI –Partner with TSCM –Encryption –Wireless and Bluetooth are turned off when system is on-site

10. Operated by Los Alamos National Security, LLC for NNSA U N C L A S S I F I E D Operated by Los Alamos National Security, LLC for NNSA U N C L A S S I F I E D Slide 10 LoFT Implementation Data Protection continued –CTN Managed Firewall –Only information that is necessary for the specific trip should be placed onto the laptop –Current Anti-virus software with auto- protection option enabled –Current Ad-Aware and Window Defender

11. Operated by Los Alamos National Security, LLC for NNSA U N C L A S S I F I E D Operated by Los Alamos National Security, LLC for NNSA U N C L A S S I F I E D Slide 11 Loan Process Walk-thru Customer initiates request using on-line request form

12. Operated by Los Alamos National Security, LLC for NNSA U N C L A S S I F I E D Operated by Los Alamos National Security, LLC for NNSA U N C L A S S I F I E D Slide 12 Loan Process Walk-thru LoFT issue created

13. Operated by Los Alamos National Security, LLC for NNSA U N C L A S S I F I E D Operated by Los Alamos National Security, LLC for NNSA U N C L A S S I F I E D Slide 13 Loan Process Walk-thru LoFT Technician –contacts customer with LoFT Information Packet –notifies Property Agents of new loan request –schedules scanning of system going to sensitive country with OCI –configures and test system, applications, and user accounts

14. Operated by Los Alamos National Security, LLC for NNSA U N C L A S S I F I E D Operated by Los Alamos National Security, LLC for NNSA U N C L A S S I F I E D Slide 14 Loan Process Walk-thru LoFT Technician continued – meets with customer after OCI scanning of systems –update information in LoFT Database –notifies Property Agents each time system changes hands –updates issue in issue tracking system

15. Operated by Los Alamos National Security, LLC for NNSA U N C L A S S I F I E D Operated by Los Alamos National Security, LLC for NNSA U N C L A S S I F I E D Slide 15 Loan Process Walk-thru Check-in Process –LoFT Technician schedule system return with customer complete check-in form verify system is in good working order checks event logs

16. Operated by Los Alamos National Security, LLC for NNSA U N C L A S S I F I E D Operated by Los Alamos National Security, LLC for NNSA U N C L A S S I F I E D Slide 16 Loan Process Walk-thru Check-in Process –LoFT Technician continued if system was taken to sensitive country takes it to both OCI and TSCM for scanning Updates LoFT Database and closes LoFT issue

17. Operated by Los Alamos National Security, LLC for NNSA U N C L A S S I F I E D Operated by Los Alamos National Security, LLC for NNSA U N C L A S S I F I E D Slide 17 Customer Feedback Provide light weight systems Image should have Complete install of software instead of Typical Provide a mouse with system

18. Operated by Los Alamos National Security, LLC for NNSA U N C L A S S I F I E D Operated by Los Alamos National Security, LLC for NNSA U N C L A S S I F I E D Slide 18 Future Improvements On-site forensic scanning of systems Customized images for frequent travelers On-site wireless access for testing and training Make available Linux Configurations and VMware

19. Operated by Los Alamos National Security, LLC for NNSA U N C L A S S I F I E D Operated by Los Alamos National Security, LLC for NNSA U N C L A S S I F I E D Slide 19 Questions? Vera Vigil 505.665.4444 ext 06012 LoFT@lanl.gov Thank you for attending this presentation!!