1. UNITED IN SERVICE TO OUR NATION
UNCLASSIFIED
The Information Assurance Support Environment (IASE)
of Today and Tomorrow
Program Manager
June, 2017
UNCLASSIFIED
UNITED IN SERVICE TO OUR NATION

2. What is the ?
The Information Assurance Support Environment (IASE) provides one-stop access to Cybersecurity information, policy, guidance and training for cybersecurity professionals throughout the DoD, and general public.
DISA is mandated to sustain IASE by:
DoDI
DoDD
IASE stands for Information Assurance Support Environment
“Family of Portals” provides 24x7 access to the most current and up to date cybersecurity resources such as policy, guidance, and training to
Federal Agencies
The Services
Mission Partners
Foreign Coalition Partners
Academia
And the general public
-DISA mandated to support and sustain IASE by DoDI and DODD

3. Key Accomplishments
Recipient of the 2015 Department of Defense Chief Information Officer (DOD CIO) Award for Cyber and Information Technology Excellence for 40% operational cost-savings
Over 99.9% availability with extremely limited unplanned outages
7th most visited DoD site (out of ~175) of those reporting to the Digital Analytics Program sponsored by Google
Portal hosts mandatory annual training for 5.1M DoD personnel to include military, civilians and contractors
Recipient of the 2015 Department of Defense Chief Information Officer (DOD CIO) Award for Cyber and Information Technology Excellence for 40% operational cost-savings
First to pilot Cloud Security Information Impact Level 4 FOUO data in the Amazon Web Services GovCloud within DoD IP Space
7th most visited DoD site (out of 175*) of those reporting to the Digital Analytics Program sponsored by Google
Over 99.9% availability with extremely limited unplanned outages
Portal hosts mandatory annual training for 5.1M DoD personnel to include military, civilians and contractors

4. Subject Matter Areas Over 39 Subject Matter Areas including:
Application Security
Common Criteria, Computer Network Defense (CND)
Cross Domain Solutions (CDS)
Risk Management Framework (RMF)
Global Directory Service (GDS)
IA Education, Training, and Awareness (ETA)
IA Classroom Training
DoD Cyber Tools Training
IA Tools and DoD IA Enterprise Tools
IA Policy & Guidance
Mobile Code Policy
Public Key Infrastructure/Enabling (PKI/PKE) and PKI ECA
Security Technical Implementation Guides (STIGs)
Ports, Protocols, and Services Management (PPSM)
Enterprise Mission Assurance Support Service (eMASS)
Tactics, Techniques, and Procedures (TTPs)
Wireless Security
Over 39 Subject Matter Areas including:
Application Security
Common Criteria, Computer Network Defense (CND)
Cross Domain Solutions (CDS)
Risk Management Framework (RMF)
Global Directory Service (GDS)
IA Education, Training, and Awareness (ETA)
IA Classroom Training
DoD Cyber Tools Training
IA Tools and DoD IA Enterprise Tools
IA Policy & Guidance
Mobile Code Policy
Public Key Infrastructure/Enabling (PKI/PKE) and PKI ECA
Security Technical Implementation Guides (STIGs)
Ports, Protocols, and Services Management (PPSM)
Enterprise Mission Assurance Support Service (eMASS)
Tactics, Techniques, and Procedures (TTPs)
Wireless Security

5. The Family Today IASE PUBLIC IASE NIPR IASE SIPR IASE Releasable
- CAC/PIV Required
39 Content Areas
DECC OKC
- Transition to AWS GovCloud Level 4 (pilot)
IASE PUBLIC
IASE NIPR
- All Internet Users
- PAO Approved Content
- AWS GovCloud Level 2
- SIPR Token Required
- 39 Content Areas
- DECC OKC (or MilCloud)
IASE SIPR
IASE Releasable
- Foreign Partners
- DECC OKC
The “IASE Family of Portals” consists of:
IASE Public, which is accessible to all Internet users,
IASE NIPRNet, which requires Public Key Infrastructure (PKI) credentials for access,
IASE SIPRNet, which requires a SIPR token for access, and
IASE REL, which is accessible by Five Eye (FVEY) foreign partners.
IASE REL is currently being assessed for formal decommissioning to achieve mission and resource efficiencies; FVEY partners will continue to have access to relevant cybersecurity guidance via IASE SIPRNet.

6. in the AWS GovCloud
IASE Public was the first DISA-accredited application to be hosted in the AWS GovCloud.
With the move to the cloud, IASE public gained quicker download speeds and access efficiencies by storing files off web servers and onto a scalable solution repository.
The IASE gained COOP capabilities providing load balancing and real-time content replication, virtually eliminating downtime and unplanned outages.
Commercial Cloud
IASE was DISA’s first pilot and successful commercial cloud implementation
We migrated our public facing information to Amazon Web Services public commercial cloud in August 2014
Our move to the cloud has shown an improvement in our overall efficiencies and access and download speeds to our customers.
The portal as a whole has gained efficiencies more internal to the program, however we also wanted to make sure that our customers saw a change for the better
We use what amazon refers to as their “S3” which is their simple scalable solution repository for all of our large files.
We use the same technology as Netflix uses to serve up their streaming videos
With the cost savings we’ve been able to absorb – we were able to stand up a fully functioning hot site with a load balancer – which has almost eliminated unscheduled downtime.
IASE Users

7. Celebrating 20 Years
May 2017, IASE celebrated 20 Years of Service to the IA/Cybersecurity community!

8. Tomorrow Redesign of IASE Learning Management System
10/9/2017 8:20 AM
Tomorrow
Redesign of IASE
“New Look and Feel” for IASE Public, NIPR, SIPR websites
Improved User Experience & User Interface
Content Management System with HTML5 / Mobile Compatibility
Learning Management System
Course catalogue & automated course registration (manual registration today)
Adds SCORM = stop & start course
Metrics, Analytics & Student Training transcript
Capability: scenario based exercises in a simulated environment using HTML5
Virtual Training Environment
Capability: scenario based exercises/labs in a virtual environment
Remote access from the students desktop
Integrated into LMS
IASE Tomorrow
Redesign of IASE
“New Look and Feel” for IASE Public, NIPR, SIPR websites
Improved User Experience & User Interface
Content Management System with HTML5 / Mobile Compatibility
Learning Management System
Course catalogue & automated course registration (manual registration today)
Adds SCORM = stop & start course
Metrics, Analytics & Student Training transcript
Capability: scenario based exercises in a simulated environment using HTML5
Virtual Training Environment
Capability: scenario based exercises/labs in a virtual environment
Remote access to the students desktop
Integrated into LMS

9. The Family Tomorrow IASE PUBLIC IASE NIPR IASE SIPR - CAC/PIV Required
- 39 Content Areas
- AWS GovCloud
- Site Redesign
- LMS & VTE
IASE PUBLIC
IASE NIPR
~30% Content
100% Content
- All Internet Users
- PAO Approved Content
- AWS Public Cloud
- Site Redesign
LMS & VTE
- SIPR Token Required
- 39 Content Areas
- DECC OKC (or MilCloud)
- Site Redesign
IASE SIPR
100% Content
This is the future view of IASE with a focused approach on delivering content to the DoD community (hence 100% availability of content on IASE NIPR and IASE SIPR).
Note, current plans are to implement the LMS and VTE on IASE NIPR only.

10. So when is “Tomorrow”? Next 12 -18 months Funding dependent
Incremental roll-out
So when is “Tomorrow”
Next months
Funding dependent
Incremental roll-out

11. Cyber(security) is a Team Sport
IMPACT
SHARE
TRUST
GROWTH
CONTENT
COLLABORATE
INFORM
The site's content is provided by cybersecurity subject matter area content owners across the DoD through a change request and approval process coordinated and managed by the IASE web team. IASE is only as good as content offerings, and we rely on content owners to partner with us to provide subject matter expertise. As the one-stop shop for cybersecurity resources, the mission of DoD is dependent on the workforce being informed. If you notice content gaps and/or would like to contributed content to IASE, contact the IASE HelpDesk.

12. How to find and contact Visit us on the web:
Public and NIPRNet: IASE.DISA.MIL
SIPRNet: IASE.DISA.SMIL.MIL
For IASE programmatic questions or technical support, contact:
DISA IDC2
IASE Help Desk / IASE Program Manager
Visit us on the web:
Public and NIPRNet: IASE.DISA.MIL
SIPRNet: IASE.DISA.SMIL.MIL
For programmatic questions, technical support or to begin a partnership with us, contact:
IASE Help Desk