[ Pobierz całość w formacie PDF ]

Successor Activities:
consistent with their mission and with the
BUS-10
overall Secret Fabric risk management
governance and technical
implementations.
BUS-04 Integrate requirements for hardware and Departments and Stage 1 Future
software upgrades needed to implement Agencies
Predecessor Activities:
FICAM on the Secret Fabric into overall
ENAB-04
information technology acquisition planning
Successor Activities:
and investment activities.
CRED-05, BUS-08
BUS-05 Coordinate and distribute budget guidance SISS SC, OMB Stage 1 Future
for implementing FICAM on the Secret
Predecessor Activities:
Fabric.
None
42
CNSS White Paper 01-14 FICAM Planning Guidance
For the Secret Fabric
Number Activity Responsible Party Dependencies
Successor Activities:
BUS-06
BUS-06 Incorporate budget guidance for Departments and Stage 1 Future
implementing FICAM on the Secret Fabric Agencies
Predecessor Activities:
into annual budget submission to fund the
BUS-01, BUS-05
implementation of FICAM on the Secret
Successor Activities:
Fabric.
BUS-07
BUS-07 Identify the on-going cost model for shared SISS SC, ISA IPC, Stage 2 Goal
services, including budget language for OMB
Predecessor Activities:
agencies providing shared services and for
BUS-06
agencies that will rely on shared services.
Successor Activities:
BUS-08, BUS-11
BUS-08 Refine agency budget estimates based on SISS SC, ISA IPC Stage 2 Goal
implementation and maintenance costs
Predecessor Activities:
defined in agency implementation plans.
BUS-04, BUS-07
Successor Activities:
BUS-09
BUS-09 Incorporate funding requirements for Departments and Stage 2 Goal
implementing FICAM on the Secret Fabric Agencies
Predecessor Activities:
into annual budget submission to fund the
BUS-08
implementation of FICAM on the Secret
Successor Activities:
Fabric.
BUS-12
BUS-10 Review trust model assumptions for SISS SC, ISA IPC Stage 3 Goal
management of attribute values for
Predecessor Activities:
employees and affiliates for all subject
BUS-03
attributes to ensure ability of all
Successor Activities:
departments and agencies to accept
CRED-12
attribute values from other departments
and agencies and update as required.
BUS-11 Review and update, as required, the on- SISS SC, ISA IPC, Stage 3 Future
going cost model for shared services, OMB
Predecessor Activities:
including budget language for agencies
BUS-07
providing shared services and for agencies
Successor Activities:
that will rely on shared services.
BUS-16
BUS-12 Refine agency budget estimates based on SISS SC, ISA IPC Stage 3 Future
implementation and maintenance costs
Predecessor Activities:
defined in agency implementation plans.
BUS-09
Successor Activities:
BUS-13
BUS-13 Incorporate funding requirements for Departments and Stage 3 Future
implementing FICAM on the Secret Fabric Agencies
Predecessor Activities:
into annual budget submission to fund the
BUS-12
implementation of FICAM on the Secret
Successor Activities:
Fabric.
BUS-14
BUS-14 Refine agency budget estimates based on SISS SC, ISA IPC Stage 4 Goal
implementation and maintenance costs
Predecessor Activities:
defined in agency implementation plans.
BUS-13
43
CNSS White Paper 01-14 FICAM Planning Guidance
For the Secret Fabric
Number Activity Responsible Party Dependencies
Successor Activities:
BUS-15
BUS-15 Incorporate funding requirements for Departments and Stage 4 Goal
implementing FICAM on the Secret Fabric Agencies
Predecessor Activities:
into annual budget submission to fund the
BUS-14
implementation of FICAM on the Secret
Successor Activities:
Fabric.
None
BUS-16 Review and update, as required, the on- SISS SC, ISA IPC, Stage 4 Goal
going cost model for shared services, OMB
Predecessor Activities:
including budget language for agencies
BUS-11
providing shared services and for agencies
Successor Activities:
that will rely on shared services.
None
C.4 CREDENTIALING ACTIVITIES
Number Activity Responsible Party Dependencies
CRED-01 Establish the NSS PKI CSP capability to PKI MGB Stage 1 Goal
issue certificates to entities from agencies
Predecessor Activities:
that are not operating their own NSS PKI
None
CA.
Successor Activities:
CRED-03
CRED-02 Establish agency NSS PKI CAs for those Departments and Stage 1 Goal
agencies that will not be obtaining Agencies
Predecessor Activities:
certificates from the NSS PKI CSP.
None
Successor Activities:
CRED-03
CRED-03 Establish registration infrastructure needed Departments and Stage 1 Goal
to support issuing certificates to entities Agencies
Predecessor Activities:
within the department or agency.
CRED-01, CRED-02
Successor Activities:
CRED-04, CRED-06,
CRED-10
CRED-04 Issue certificates to a minimum of 10% of Departments and Stage 1 Goal
employees and affiliates, focusing on those Agencies
Predecessor Activities:
who require access to resources hosted by
CRED-03
other departments and agencies.
Successor Activities:
CRED-07, ENAB-01,
ENAB-02
CRED-05 Install smart card readers and middleware Departments and Stage 1 Goal
on a minimum of 10% of Secret Fabric Agencies
Predecessor Activities:
workstations, including thin clients, that will
BUS-04, ENAB-05
be used by employees and affiliates who
Successor Activities:
receive NSS PKI hardware certificates on
CRED-08, ENAB-01,
smart cards.
ENAB-02
CRED-06 Issue certificates to web servers or other Departments and Stage 1 Goal
applications that host high sensitivity Agencies
Predecessor Activities:
resources that are currently shared with
CRED-03
other departments and agencies.
Successor Activities:
44
CNSS White Paper 01-14 FICAM Planning Guidance
For the Secret Fabric
Number Activity Responsible Party Dependencies
CRED-09, ENAB-01
CRED-07 Issue certificates to at least 90% of Departments and Stage 2 Goal
employees and affiliates who have fully Agencies
Predecessor Activities:
provisioned network accounts on the
CRED-04
Secret Fabric.
Successor Activities:
ENAB-07, ENAB-08,
CRED-11
CRED-08 Install smart card readers and middleware Departments and Stage 2 Goal
on all Secret Fabric workstations, including Agencies
Predecessor Activities:
thin clients, that will be used by employees
CRED-05
and affiliates who receive NSS PKI
Successor Activities:
hardware certificates on smart cards.
ENAB-07, ENAB-08
CRED-09 Issue certificates to web servers or other Departments and Stage 2 Goal
applications that host high and medium Agencies
Predecessor Activities:
sensitivity resources that are currently
CRED-06
shared with other departments and
Successor Activities:
agencies.
CRED-11, ENAB-07
CRED-10 Issue certificates to network domain Departments and Stage 2 Goal
controllers. Agencies
Predecessor Activities:
CRED-03
Successor Activities:
ENAB-08
CRED-11 Issue certificates to all employees, Departments and Stage 3 Goal
affiliates, and non-person entities (such as Agencies
Predecessor Activities:
web servers or other applications) that
CRED-07, CRED-09 [ Pobierz całość w formacie PDF ]