1. DOD Mobility TEM Army CIO/G-6 Mobile Electronic Device (MED) Working Group 18 July 2011 LTC Matthew Dosmann Matthew.R.Dosmann.mil@mail.mil O: 703-545-1619

2. Cybersecurity Perceptionof Mobile Electronic Devices on Our Networks 2 = 2011-06-16T08:00Z // MED WG Brief LANDWARNET 2011

3. 3 MED Working Group Overview Begun September 2010 ID pilots and ensure they do not put Army networks at risk. Support, evaluate, and analyze Guide pilots in identifying and mitigating risks Plans of Action & Milestones (POA&M) NETCOM Designating Approval Authority (DAA) review Share lesson learned between pilots Generate collaboration within Army and between Services/Agencies

4. 4 MED WG Background Inopportune Timing of Pilots (20+ discovered) WikiLeaks data spillage & increased scrutiny regarding Government spending Not leveraging lessons learned across pilots Major Cultural Issues within Army Improper & unapproved acquisition processes being used Disregard for information security is generally acceptable PD-CHESS waiver loophole allowed procurement of unapproved mobile devices Mitigated with policy requiring purchases to be on the Approved Products List (UC APL) MED Operating Systems (OS) and the physical devices have a lifecycle shorter than the average acquisition process Currently, the only approved mobile device solutions are BlackBerry & Windows Mobile (6.x) 2011-06-16T08:00Z // MED WG Brief LANDWARNET 2011

5. 5 Key Facts Bearing on the Issue Mobile Electronic Devices (MED) offer potential for significant efficiencies Demand Rapid civilian adoption of mobile devices Key leaders demanding tablet type device Inordinate risks associated with use of personal devices No approved tablets Complicated by combination of multiple form factors, OS, and device management frameworks Stressing acquisition processes Army and DoD policies not suited to MED Key aspects of mobile apps (e.g. geo-loc, camera) prohibited or restricted by policy Approved MED locked down to the extrem 2011-06-16T08:00Z // MED WG Brief LANDWARNET 2011

6. Required Solution Sets Mobile Device Management Remote Wipe Configuration Management Patch Management Data-At-Rest CAC/PKI Enablement Bluetooth Wifi Physical Connection Application Lifecycle Management App Software Assurance App Store App Maintenance and Retirement Secure Voice 6 2011-06-16T08:00Z // MED WG Brief LANDWARNET 2011

7. Current “Mobile” LANDWARNET 2011 2011-03-23T08:00Z // Presentation Title Goes Here 7 BES BES BES

8. Where We Are Headed LANDWARNET 2011 2011-03-23T08:00Z // Presentation Title Goes Here 8 MDM Y BES MDM X

9. Next Step After That LANDWARNET 2011 2011-03-23T08:00Z // Presentation Title Goes Here 9 Enterprise Data Management Layer MDM Y BES MDM X

10. MED COI Synchronization

11. Way Ahead Integrated DOD approach MED Communities of Interest (COI) Deep Dive, DISA TEM meetings Comprehensive (i.e. DOTMLPF) changes needed Participation from USA, USAF, USMC, USCG, DISA, OSD, DARPA, NSA and FBI Leverage existing efforts to provide continuity in policy and support from tactical edge to “garrison edge”; address new technologies and associated risks Maintain communication with industry to provide different MED solutions Army is engaging with NSA, DISA and Services to create an Enterprise Secure Mobility solution Use commercial standards, platforms, & applications as a foundation An architected solution/service and not a portfolio of products Stronger partnerships with government and industry partners Continue to support, analyze, and evaluate MED pilots Various devices in pilots Developing Medical and Logistics community pilots 11 2011-06-16T08:00Z // MED WG Brief LANDWARNET 2011

12. 12 Questions? 2011-06-16T08:00Z // MED WG Brief LANDWARNET 2011 LTC Matthew Dosmann Matthew.R.Dosmann.mil@mail.mil O: 703-545-1619