Information Systems Security Program

Mission — Information Assurance Development source

Project 491: Information Assurance (IA) Development. Supports the implementation of National Security Agency (NSA) developed Communications Security (COMSEC) technologies within the Army enterprise and tactical networks by ensuring COMSEC devices/systems are cryptographically interoperable and standard based. This entails architecture studies, technology assessments, secured devices testing, system integration and installation kits development to provide protections for fixed infrastructure post, camps, and station networks as well as tactical networks. The cited work is consistent with Army's Mission Command Implementation Plan LOE 1, Network Enable Functions. IA Development funding Implements, establishes functional and technical boundaries of cryptographic, key management and IA capabilities In Coordination With (ICW) the NSA, the Defense Information Systems Agency (DISA), and Joint Services, to secure National Security Systems (NSS), and National Security Information (NSI). Technical evaluations assess the security, operational effectiveness and network interoperability of advanced concepts/technologies to develop policies, standards, and fundamental building blocks for Army COMSEC capabilities that reduce the risk of future materiel solutions that could underperform and disrupt classified operations. Develop and publish COMSEC and key management implementation planning guidance to identify, standardize, and govern the insertion of IA capabilities that will bridge operational gaps and support the DoD and NSA mandated requirements to enhance network capacity while providing secure information exchange of voice, video, and data IAW the Army Network Campaign Plan. This will be accomplished by interoperability test and evaluation, standards development, technology roadmap development and System of System Network Vulnerability Assessments (SoS NVA) to provide protections for the Army Integrated Tactical Networks.

Mission — Information Systems Security Program source

This project supports the Army's Command Control (C2) Infrastructure strategy. A portion of this funding line is a key enabler of the Army Modernization Priorities in support of the Communications Security (COMSEC) Key Management Infrastructure (KMI) program. Project 491: Army Chief Information Officer/Deputy Chief of Staff, G-6 manages Information Assurance Development. Project 491: IA Development. Supports the implementation of the National Security Agency (NSA) developed Communications Security (COMSEC) Modernization and Key Management (KM) technologies within the Army. This includes current and next generation encryption techniques, current and future Key Management Infrastructure (KMI) and technology migrations. This program provides oversight in developing policies, guidance, standard operating procedures and recommendations in integrating COMSEC and KM techniques into specific systems in support of securing the Army Tactical and Enterprise Networks. This entails architecture studies, system integration and testing, developing installation kits, and technological collaborations with NSA, DISA and other Services for enterprise and last mile implementations. The program assesses, develops and integrates Cyber Security (CS)/COMSEC tools (hardware and software) which provide protection for fixed infrastructure post, camp and station networks as well as tactical networks. The cited work is consistent with Strategic Planning Guidance (SPG) and the Army Modernization and Strategy Plan (AMSP). IA Development funding implements and establishes functional and technical boundaries of cryptographic, key management and IA capabilities in coordination with the NSA, the DISA, and Joint Services, to secure National Security Systems (NSS), and National Security Information (NSI). Technical evaluations assess the security, operational effectiveness and network interoperability of advanced concept technologies to develop policies, standards, and fundamental building blocks for Army COMSEC capabilities that reduce the risk of future material solutions that could underperform and disrupt classified operations. Develop and publish the COMSEC Implementation Planning Guidance to identify, standardize, and govern the insertion of CS capabilities to bridge operational gaps and support the DoD and NSA mandated requirements to enhance network capacity while providing for secure information exchange of voice, video, and data in accordance with the Army Network Campaign Plan. This will be accomplished by interoperability evaluation, standards testing, and CS, System of System Network Vulnerability Assessments (SoS NVA) for Army Capability Sets for CS/COMSEC capabilities that provide protections for tactical and fixed infrastructure post, camp, and station networks. The program enables the continuation of oversight for the executions of the Army's COMSEC Modernization initiatives including major Advanced Cryptographic Capabilities (ACC) updates and replacements of existing devices and systems to meet NSA mandates. Continue to support the evaluation and testing of new technologies to support DoD Cryptographic Moderation 2 (CM2) Army implementations including Transmission Security (TRANSEC), EKMS to KMI migration and tactical network/architecture future Capability Set developments. Provide proof of concepts to provide updated end-to-end, tactical-to-strategic COMSEC standardization and implementation guidance to meet Army's operational requirements. Continuous funding will enable the evaluations and maturity assessment of new COMSEC and key management capabilities developed by DoD joint KMI program for Army fielding to protect and strengthen the Army Network posture, with reduced cryptographic interoperability issues for both embedded and standalone systems. This funding also supports the risk reduction testing to document operational value of commercial products prior to insertion for Army use. Provide timely test and evaluate results to enable the Army to make sound investment strategic decisions and to reduce or eliminate duplications. Also supports efforts to update and develop policies to posture Army's operations to implement innovative cryptographic and key management tools and services. The Defensive Cyberspace Operations (DCO) program provides initial capabilities that enable passive and active cyberspace defense operations to preserve friendly cyberspace capabilities and protect data, networks, net-centric capabilities, and other designated systems. Big Data Pilot provides an advanced analytics capability capable of ingesting structured, semi-structured, and unstructured data from multiple data sources (e.g., Joint Regional Security Stacks (JRSS), intrusion detection systems, intrusion prevention systems, network device log files, trouble tickets, firewalls, proxies, web and applications server log files, etc) and proves situational awareness of cyberspace battlefield. It provides the computer network defense provider with common analytic platform which informs and reduces risk associated with future material solutions and forms a blueprint for future Big Data Analytics. Big Data (analysis-of-all DoD Information Network sensor data) provides two optimized and accredited clusters deployed in support of JRSS and Defense Research and Engineering Network (DREN) with a tools suite accessible to Cyber Mission Forces via secure remote access. The Army's DCO activities are a construct of active cyberspace defenses which provide synchronized, real-time capability to discover, detect, analyze, and mitigate threats to and vulnerability of DoD networks and systems. COMSEC is governed by the Chairman of the Joint Chiefs of Staff Instruction (CJCSA) 6510. In order to ensure Warfighters continue to have secured voice and data communications. Per National Security Agency (NSA) requirements, Army communications systems are required to support modern cryptographic capabilities by implementing continually enhanced communications security technologies. These efforts are consistent with Strategic Planning Guidance (SPG) and are key enablers of the Army Modernization in support of Army 2030/2040. Project DV5 Cryptographic Modernization (Crypto Mod): This project supports the Army's Command Control (C2) Infrastructure strategy. Crypto Mod performs test, evaluation, development, and configuration management for cryptographic devices that receive NSA communications security key and allow for secure communication through Army devices such as In Line Network Encryptors Family (INE), Link/Trunk Encryptors Family (LEF), and Secure Voice Family (SV). This program utilizes NSA developed Communications Security (COMSEC) technologies encryption, memory -safe software and physical separation, integrating these mechanisms into specified systems in support of securing all echelons of the Army Network. This effort supports network operations from end-to-end throughout the force structure thus mitigating networked vulnerabilities to Army information security systems. In order to ensure Warfighters continue to have secured voice and data communications, Army communications systems are required to be upgraded to security technologies including modern algorithms to meet emerging threat developed by our adversaries. Crypto Modernization necessitates the utilization of the latest NSA cryptographic capabilities in order to defeat adversarial efforts to decrypt, disrupt, or exploit US Army networks. COMSEC is the Army's implementation of NSA protections to create a unified network that is protected, resilient, and survivable against cyber security threats. The FY 2026 request was reduced by $0.691 million for Advisory and Assistance Services to promote efficiencies and advance the policies of the Administration in alignment with Executive Order 14222, "Implementing the President's Department of Government Efficiency Cost Efficiency Initiative."

Mission — Crypto Modernization (Crypto Mod) source

This funding enables the Army's Next Generation Command and Control (NGC2) initiative to modernize Command and Control (C2) systems. This Program Element (PE) is a critical enabler of the Army Modernization Priorities including Cryptographic Modernization 2 (CM2) addressing current and emerging cyber security threats. Project DV5, Cryptographic Modernization (Crypto Mod) is a key enabler of the Army Modernization Priorities in support of Army 2030/2040. Communications Security (COMSEC) is governed by the Chairman of the Joint Chiefs of Staff Instruction (CJCSA) 6510. Crypto Mod performs test, evaluation, development, and configuration management for cryptographic devices that receive key through fill devices and allow for secure communication through Army devices such as In Line Network Encryptors (INE), Link/Trunk Encryptors (LEF), and Secure Voice (SV) families of systems. In order to ensure Warfighters continue to have secured voice and data communications, Army communications systems are required to be upgraded to the latest security technologies and modern algorithms to meet emerging adversarial threats. Crypto Modernization necessitates the utilization of the latest National Security Agency (NSA) cryptographic capabilities in order to defeat adversarial efforts to decrypt, disrupt, or exploit US Army networks. Communications Security (COMSEC) is the Army's implementation of NSA protections to create a unified network that is protected, resilient, and survivable against these threats. To accomplish this multi-faceted effort, consistent with Strategic Planning Guidance and the Army Modernization and Strategy Plan, Crypto Mod performs evaluation of emerging threats, development of advance protections to defeat these threats, testing of commercial and government off the shelf applications developed to provide protections against identified threats, and assessment of new software and hardware updates to these end user devices and software to ensure they remain hardened against cyber-attack. This ensures that all endpoints from workstations in the strategic Enterprise to Tactical vehicles and equipment utilized by dismounted personnel forward deployed are protected when processing the critical mission and voice data that provides the strategic overmatch required to accomplish the Army's mission. FY 2026 funds in the amount of $8.124 million will support the testing of all existing and emerging encryptors for Functionality, Security, and Interoperability. The program will continue testing and evaluation of COMSEC devices to confirm capability and interoperability on Army networks and tactical systems as well as identifying risk areas for compliance with COMSEC regulations and procedures.

Accomplishments & Planned Programs (5)