1. Digital Transformation & Compile to Combat in 24 Hours (C2C24)
Presented by:
Delores Washburn
NIWC Pacific Chief Engineer
“C2C24 Pilot Execution Lead”

2. Agenda Compile to Combat in 24 Hours (C2C24) Overview
Digital Transformation with DevSecOps
RMF Assess and Incorporate SW Engineering in a Day (RAISED)
Fast lanes (e.g. Other C2C24 Process improvement efforts)
Conclusion

3. Industry & Navy Example
First to market
Outpacing our adversary

4. Architecture Evolution
From Isolated Systems to Distributed Maritime Operations
Stovepipe
Systems
Data Centric, Shared, Actionable Awareness Across Units & Composite Warfare Structure
Shared Infrastructure – Compute and Storage
C2C24 Compliance
Shared Software Core Services
Data Centric – Exposing and Sharing of Data
User Centered – business logic and presentation
Moving to a data centric organization

5. Defense Innovation Board: Ten Commandments of Software
Industry Approach
“Adopt a DevOps culture for software systems.”
“Automate testing of software to enable critical updates to be deployed in days to weeks, not months or years.”
Source: Defense Innovation Board, “Ten Commandments of Software,” April 20, 2018

6. DevSecOps
DevSecOps is the combination of cultural philosophies, practices, and tools that increases an organization’s ability to deliver capability and services at high velocity without sacrificing Quality or Security

7. End State Vision – Enabling Speed to Capability
Current State
Dev
Ops
Future
Dev
Ops
Must Modernize the way we do business to achieve our End State Vision

8. C2C24 Implementation Standard V1.0
Provides the Compile-to-Combat in 24 Hours (C2C24) required implementation standard that system software application owners and developers shall use for migrating to modern software and data architectures and development methodologies.

9. Collaborative Software Armory Collaborative Staging Environment
Application Arsenal
Collaborative Software Armory
Collaborative Staging Environment
RMF
in a Day
Development and Testing “Toolkit” provided
Staging & Integration
24 hour Fast Lane
“App Store”
Tools, IOS, Data provided to develop and test your App
Integrate your app in Target Environment
Certify your app
App ready to be downloaded by user
RMF Control
Inheritance
New Application
ACS Common Services - PAAS
CANES
IAAS
VSE / STACC
Cloud
(Coming soon)
DJC2 / AFP
Aegis VT
App in development
PaaS DA CS
ACS Common
Services
Developers’
Tools
App Arsenal & Container Monitoring
Sky Desk
CAC enabled
App Store
Software
SDK
DATA LAKE
Representative
Authoritative Data
(Coming soon)
Deploy
Move red boxes to define area(s) of focus – likely only one box needed (or none if brief describes the whole process)
PaaS
IaaS
ACS
NOBLE
Flt NOC STACC/MOC VSE
PaaS
IaaS
ACS
CANES
PaaS
IaaS
ACS
DJC2/NETC2
PaaS
IaaS
ACS
Operational Cloud
Existing C2C24 DEVOPS environment to enable “first day, first dollar” development, integration, certification and deployment of capability
Distribution A: Approved for public release; distribution is unlimited.

10. C2C24 RAISED
RMF Assess and Incorporate SW Engineering in a Day (RAISED)
SW Architecture and Standards Compliance
Security Model for Apps meeting compliance
Apps
Platform as
a Service
Automated Security Testing and Automated RMF
Infrastructure
Security Control Model
Static Code Analysis
Dynamic Testing
Vulnerability scanning
Code Quality
Compliance Checking, etc.

11. C2C24 Fast Lanes Digital Transformations resulting in Fast Lanes
RMF Fast Lane
Rapid SW Insertion Fast Lane (in progress)
Rapid Development Fast Lane
Test and Integration Fast Lane
Rapid Delivery Fast Lane