Department of Energy FY 2012 Congressional ... - The FIRE Place

The entire NNSA workforce will recognize the importance of cyber security, understand their
role in it, and will be constantly vigilant.
• Processes – Methods for creating and sustaining trusted information environments that do not
impose undue burdens on missions and resources.
NNSA processes and governance principles in a networked environment, will be improved
continually, and will be sufficiently dynamic and agile to accommodate rapidly changing needs
and mission accomplishment.
NNSA’s secure enterprise architecture will allow appropriate sharing of information and
knowledge throughout the NNSA and enable multiple levels of information sharing across
security environments.
NNSA’s cooperative relationships with academia, industry, and research and development
organizations will allow rapid integration of available technologies and embed enhanced
hardware and software assurance solutions in future capabilities.
• Technology – The information environment is enabled by technologies that facilitate secure
information sharing, collaboration opportunities, and cost-effective cyber security initiatives directly
supporting mission effectiveness.
Cyber security capabilities will be dynamic, sufficiently robust, available, agile, reconfigurable
on demand, consistently controlled at all points of access, and have a reduced possibility for
human and machine error.
Develop a comprehensive cyber security infrastructure to support the transformation of the
nuclear security enterprise.
Cutting-edge protection, detection, and response technologies will be rapidly deployed across all
NNSA systems and networks, outpacing the efforts of our adversaries to exploit vulnerabilities.
Annual Performance Results and Targets
The Department is in the process of updating its strategic plan, and has been actively engaging
stakeholders including Congress. The draft strategic plan is being released for public comment
concurrent with this budget submission, with the expectation of official publication this spring. The
draft plan and FY 2012 budget are consistent and aligned. Updated measures will be released at a later
date and available at the following link http://www.mbe.doe.gov/budget/12budget/index.htm.
FY 2010 Accomplishments
The Cyber Security program maintained a flexible, comprehensive, and risk-based cyber security
program that protects NNSA information and information assets. To ensure that the program met
OCIO requirements, the OCIO conducted site assessments of program activities.
Completed the DOE Office of Health, Safety and Security (HSS) independent oversight inspection at
NNSA sites with 100 percent effective ratings.
Developed the draft Risk Management Framework and Risk Management Approach for Cyber
Security. This new policy will change the way that Federal and contractor personnel work together
to implement cyber security requirements enterprise-wide. The process enables the contractor to
manage risk of lower level systems with limited Federal oversight.
Weapons Activities/
Cyber Security Page 304
FY 2012 Congressional Budget