Information Systems Security Program

This program provides research and development, conducts technology assessments, and provides data to drive real time automation integration decisions and enterprise solutions, ultimately improving the user experience. As DISA moves towards a shared transparency of understanding, automation of technical solutions promotes increased information sharing and improved understanding of interdependencies underlying service operations and mission activities. Emerging information technology must support the current and next-generation warfighters to ensure systems are protected while also leveraging advances in automation to deliver capabilities. Ultimately, these efforts support the achievement of an optimized IT environment to protect against threats in cyberspace that remain dynamic and persistent.

The ZTA project supports the effort to create a Zero Trust Commercial Cloud Lab (ZTCCL). The ZTCCL is an environment that provides an integration space to develop, test, and mature concepts, capabilities, and technology to benefit the DoD Information Network (DoDIN). These concepts, capabilities, and technologies will increase the DoDIN’s ability to prevent, detect, respond, and recover from malicious cyber activities while proving scalability to enterprise levels. The ZTCCL will: • Provide a test and development environment to test ZT capabilities within a cloud lab environment. • Provide automations for customer research and development with an activity template to include standard IT domain builds, three tiered applications that improve scalability and availability, and "Gold images" that provide a consistent system baseline for common Operating Systems deployments. The ZT project stemmed from a FY 2018 initial Zero Trust Reference Architecture effort with US Cyber Command, NSA, and DoD-CIO.

Provide non-reputable digital identities of users, devices, applications, and services for both DoD and external mission partners using hardware and software-based certificate/key pairs, and a suite of capabilities that uses interoperable industry standards (OCSP/CRLs) to enable real-time revocation status of those identities. Enable secure communication at OSI 5/6.

DISA, at the request of the United States Strategic Command (USSTRATCOM) and in support of National Security goals established by the President, has purchased a capability from industry that takes data from Endpoint tools and centralizes it for monitoring and roll up for all Endpoint Security System (ESS) solution(s). This solution will provide data points for network administrators and security personnel with intelligence to prevent, detect, track, report, and remediate malicious computer-related activities and incidents across all DoD networks and information systems.

DISA will provide an enterprise Unified Endpoint Management (UEM) suite of tools that will be available to the Department to help secure devices on the network. DISA will invest in people, processes and policy coordination and work with vendors, such as Microsoft and others, to bring Impact Level 5 (IL) security tools over to the Impact Level (IL6) environment that secures the SIPRNet. By porting tools supporting Unified Endpoint Management, DISA and the DoD gain advantages at scale by having a shared UEM solution that ensures endpoints are operating at a common security level across the SIPRNet domain. Without these tools, the enterprise is left to less efficient and disparate methods for updating devices which leads to varying software versions on the network.