Department of Energy FY 2012 Congressional ... - The FIRE Place

Developed the draft NNSA Cyber Security Baseline Program Requirements. This baseline will
provide for the implementation of a risk based approach to cyber security and provide a clear
understanding of what can and cannot be done within the Program.
All Site Assessment Visits (SAV) conducted by the Cyber Security Program Manager (CSPM) at
NNSA sites resulted in an effective rating.
Maintained and improved the NNSA cyber security architecture for NNSA Headquarters and sites.
This documentation provides the Enterprise with the standard components for cyber infrastructure.
Designed and built Enterprise Secure Network (ESN)-SIPRNet Gateway. This component provides
for an interface between the DOE SIPRNet and NNSA Enterprise Secure Network, allowing for the
electronic transfer of files between DOE and NNSA. Testing of the Gateway and the integration
into ESN began in FY 2010.
Major Outyear Priorities and Assumptions
The outyear projections for Cyber Security total $507,638,000 for FY 2013 through FY 2016. This
level of funding provides for the day to day operation of cyber security within the nuclear security
enterprise.
The cyber security program investments must begin to focus on research in the foundations, design,
management, security, and usability of future computing and communications networks to help sustain
the nuclear security enterprise military, scientific, and technological preeminence. Specifically, the
Program will continue to actively coordinate and prioritize it activities with NNSA laboratories and
plants to ensure the development of a sustainability research and development (R&D) program.
The Cyber Security R&D Program will provide the necessary technologies to protect NNSA computer
based systems from actions that compromise or threaten to compromise the authentication, availability,
integrity, or confidentiality to NNSA systems and/or the information they contain. This program will
address any mission-relevant gaps identified and will emphasize coordination, leveraging the efforts of
all agencies and, where appropriate, use of coordinated multi-agency investments.
The Strategic R&D objectives are to support research, development, testing, and evaluation of cyber
security and information assurance technologies. It is aimed at preventing, protecting against, detecting,
responding to, and recovering from cyber attacks that may have large-scale consequences. It is also to
address cyber security and information assurance R&D needs that are unique to critical cyber
infrastructures, next generation secure information technology concept and architectures. It is to
develop and accelerate the deployment of new communication protocols that better assure the security of
information transmitted over networks. It is for the establishment experimental environments such as
test beds that allow government, academic, and industry researchers to conduct a broad range of cyber
security development and assessment activities. Additionally, it will provide a foundation for longrange
risk-based cyber security and information assurance decision making.
Weapons Activities/
Cyber Security Page 305
FY 2012 Congressional Budget