In order to face the challenges posed by great power competition in the digital age, the Defense Intelligence Enterprise (DIE) must adapt its mindset and approach by embracing digital transformation. The DIE must accelerate digital transformation efforts to efficiently and effectively share data, information, and intelligence among Military Services, Defense Agencies, and Combatant Commands. A critical enabler of digital transformation is a seamless digital foundation. The Digital Foundation includes the services comprising the digital substructure that enables rapid deployment, scaling, testing, and optimization of intelligence software as an enduring capability. A digital foundation will achieve a simplified, synchronized, and integrated multi-cloud environment that can adopt innovation at scale and promote good cloud hygiene. The delivery of a Digital Foundation ensures DIE data, architecture, and infrastructure are integrated and ready to enable: Joint Warfighting Concepts, Innovation at Scale, AI, Augmentation, and Automation, and Zero Trust.

As the agency has begun its journey to transitioning to Zero Trust, we have been meeting with industry partners to discuss best practices in order to support the objectives identified in National Security Memorandum 8; Improving the Cybersecurity of National Security, Department of Defense, and Intelligence Community Systems.  We have initiated a prototype effort exploring innovation opportunities in order to enhance core service offerings contributing to the Zero Trust journey.  This brief will highlight areas we are collaborating with community and industry partners to adapt our environments to be positioned for supporting future mission requirements with a secure data-centric enterprise.

Defense Counterintelligence and Security Agency (DCSA) is collaborating across the Defense/Intelligence Communities to advance application of artificial intelligence (Ai), to thwart the rapid pace of threats posed by our adversaries. This presentation will show our efforts on the structuring of data and consolidation of unique Ai and cloud tools, and enterprise cross domain services to manage cost, mitigate risk, and increase mission effectiveness.

The ability to access data necessary to make battlefield decisions at the speed of relevance is critical to the Nation’s defense and tactical advantage. The Common Data Fabric (CDF) fast data broker is an evolution in data sharing across silos, organizational and mission boundaries making data available to any consumer machine that can enforce data policy.  The CDF is a cloud-based commercial software data brokering capability that functions anywhere a connection can be established and easily integrates with existing and legacy architectures to make data available to U.S., Joint Taskforce Warfighters, US Allies and Mission Partners. CDF is deployed by the Defense Intelligence Agency (DIA) and is a foundational pillar of the data sharing vision of the Secretary of Defense as we transform the digital ecosystem towards an Enterprise Construct.

CIO has applied Service Delivery Modernization to improve the customer experience. We have implemented large efforts to stand up In Person Service Centers, integrated Live Chat on the desktop, ensured our Knowledge Articles and IT Equipment Catalog are 508 compliant, Service Central automated workflows, @CIOTechTips, and small initiatives to improve IT training/lab sessions for our new officers, and play jazz music for our listeners as they wait for a technician to answer their questions.  This presentation will be an opportunity to share the advanced services that have been implemented, share our journey map, and to hear from our customers in a question and answer session about what improvements they would like to see.  We’ll introduce the 13 December 2021 Executive Order on Transforming Federal Customer Experience and Service to Rebuild Trust in the Government and time permitting, explore self-help options that are available (Self-service-password-reset, go words, cross domain dialing, extension mobility, virtual desktops, etc.)

In 2018, there were more than 31,000 cybersecurity incidents affecting government agencies. In 2019, the U.S. government accounted for 5.6 percent of data breaches and 2.1 percent of all exposed records.  It is imperative the US Government secures citizens’ information and federal agencies must continue to deliver services, regardless of cyber-attacks seeking disruption of those services.  Fortunately, significant strides have been made to ensure just that.  The Biden Administration’s budget request includes roughly $10.9 billion for civilian cybersecurity-related activities, which represents an 11% increase compared to 2022. To date, over a billion dollars has been awarded through NITAAC for cybersecurity solutions including training and awareness programs, professional and technical support services, and IT modernization for the Department of Defense, Department of Veterans Affairs, Department of Agriculture, Department of Justice, and more.  In fact, all aspects of cybersecurity products, services, and commoditized services are readily available under the three Best in Class GWACs that NITAAC administers: CIO-SP3, CIO-SP3 Small Business, and CIO-CS.  NITAAC’s federal customers can quickly obtain cybersecurity solutions without the tedious processes under FAR Part 15; instead using FAR Part 16.5 to issue task and delivery orders quickly and easily for mission requirements. Customers also have access to NITAAC’s secure electronic government ordering system (e-GOS) to further streamline competition, management, and award.  During this session, NITAAC Deputy Director Ricky Clark will provide an overview of the NITAAC GWACs and discuss how as the U.S. government continues to roll out mandatory cybersecurity standards for government agencies, NITAAC can help agency partners raise the bar for cybersecurity beyond the first line of defense.

Starting in FY23, the National Ground Intelligence Center (NGIC) must rapidly respond to exponential growth in Modeling and Simulation (M&S) requirements. As a key initiative nested in its Modernization Strategy, the NGIC is shifting its reliance from on-premises infrastructure to focusing on mission solutions using cloud services to anticipate, adapt, and respond to fluctuating mission demands.  This briefing will describe the Army Military Intelligence (MI) Cloud Computing Service Provider (AC2SP) M&S environment  as the scalable solution to meet these mission requirements for the Army Intelligence and Security Enterprise (AISE) across three operational networks.

Present DIA’s current Identity Credential and Access Management modernization effort and ask for industry best practices for the future of the field.  Present how well we are doing and describe our journey.

The DIA Platform-as-a-Service (DPaaS) is an enterprise container management platform enabling application developers to build to a single standard that provides advanced and commonly used technical enterprise services necessary to decrease development time while achieving strategic competition goals.

DPaaS enhances a developer’s ability to focus on functionality, enabling mission applications to be rapidly prototyped and move at the speed of mission by reducing technical overhead.

This functionality coupled with DevSecOps and the Capability Delivery Pipeline (CDP) enables applications to be developed and deployed securely, quickly, and easily no matter the location or infrastructure, freeing up development teams from tedious and complicated deployments.

The DoD and the US more generally is increasingly dependent on commercial products that provide crucial elements of our cybersecurity. Located in NSA’s Cybersecurity Collaboration Center (CCC), Standards and Certifications plays a significant role in shaping the marketplace for these products across the lifecycle of development. Through its leadership in standards bodies (ensuring that critical security requirements are built into the standards that commercial products implement) and its leadership of the National Information Assurance Partnership (which sets the testing requirements for commercial products that will protect classified information and systems), Standards and Certifications establishes a baseline that products will be built to and tested against. The placement of Standards and Certifications in the CCC enables it to bring to bear relationships with Defense Industrial Base companies as well as NSA’s enormous capacity for threat intelligence to inform and strengthen the standards and certifications mission. This talk will provide the audience with an overview of NSA’s standards and certifications programs, give examples of how the programs raise the level of security in commercial products that protect DoD systems and describe how our DoD customers can help us by providing concrete requirements that strengthen our bargaining position in standards development organizations.

This panel will consist of experts from DIA’s Academy for Defense Intelligence and industry to discuss how extended reality technologies (augmented reality, virtual reality, etc.) can impact the workforce by enhancing everything from training to daily operations.  Bring your curiosity, questions, and vision for the future as we examine the art of the possible!

Develop Network Infrastructure More Rapidly, and Operate It More Securely and Effectively.

Using model-driven DevOps and the Infrastructure as Code (IaC) paradigm, teams can develop and operate network infrastructure more quickly, consistently, and securely–growing agility, getting  to market sooner, and delivering more value.  This is a pragmatic talk about implementing model-driven

DevOps for infrastructure. It contains insight in to lessons learned and illuminates key differences between DevOps for infrastructure and conventional application-based DevOps.

Whether you are a network or cybersecurity engineer, architect, manager, or leader, this talk will help you suffuse all your network operations with greater efficiency, security, responsiveness, and resilience.

This session will describe how to leverage graph database technology to enhance analysts’ ability to fuse together and interact with extensive volumes of data from disparate intelligence feeds, both controlled/protected and publicly available/open source. These disruptive graph-based views can be integrated into most existing analysis platforms, extending and providing more immersive views and experiences with data and the ability to extract meaningful and actionable insights as data volumes increase in size and complexity.

Through these new graph database views, analysts interact with data represented by nodes and edges. This flexible data architecture allows for rapid filtering of data layers, producing a truly immersive environment filled with color, highlighting, line thickness, borders, icons, badges, and more, allowing the analyst to fully leverage graph database node and edge methodology. These visual cues help the analyst to find and link critical pieces of data together, providing highly reliable information that the analyst uses to see data more clearly, make more accurate predictions, and be confident in their decision-making.

Join the DIA Chief Information Officer, Mr. Doug Cossa, as he moderates a discussion on the future of CIO considering the ever-evolving landscape of Information Technology. Panel members will feature junior civilian personnel across DIA CIO—the forces on the ground implementing DIA CIO’s key initiatives and riding the waves of  the latest technological advancements. Through this session, attendees will gain a better understanding of DIA CIO’s current successes and challenges from the action officer viewpoint. Further, attendees will gain insight into how the Intelligence Community and Department of Defense must continue to evolve to enable mission.

The IC treats data and software as strategic assets. The IC transcends strategic competitors through innovation, adaptation, and collaboration by facilitating a shared environment for software modernization. We set the foundation for success via common software environments, which provides a mature, versatile DevSecOps environment for internal and external teams. This game-changing tool  suite and associated approach provides the fastest way to deliver mission-specific software — independent of the underlying data and infrastructure. It enables teams to have quick delivery to operations, security early on, and the benefit of code sharing and reuse. This presentation will provide an overview of that ecosystem and will focus on how:

Internal and external DoD and IC teams are provided with:

• Industry leading DevSecOps capabilities.
• Parity of tools on all security domains.
• Low to high automated movement of code and artifacts.
• Maturity of capabilities

How to onboard:

• Completion of the external team questionnaire hosted on Intelink at https://go.intelink.gov/ku5ZQH2
• Coordination of a service agreement and funding.

Challenges

• Reciprocity
• People/Process

This panel will provide insights from DIA’s Chief Financial Office, Future Capabilities and Innovation, and the DIA representative to InQTel on how DIA is working to leverage contractual vehicles to best support the adoption, purchase, and curation of innovative solutions and emerging technologies needed to address enterprise challenges.  Come with your questions and notebooks to learn more about these unique partnership opportunities in the critical emerging technology and innovation spaces!

The ongoing strategic power competition along with the adversarial implementation of innovative technology, such as Artificial intelligence (AI), has emphasized the need for increased awareness and strategic warning in nearly every warfighting domain. Increased use of this technology provides a unique challenge and strategic avenue for the U.S. Intelligence Community and its partners as they seek to maintain their competitive edge in the era of near-peer adversary competition.

This research project addresses Edge AI technology affecting the U.S. strategic defense posture in the Space Domain. The use of this dynamic technology in one of the most influential and uncharted mission spaces lends an insightful discussion on the cascading effects of AI advancement. This project has the potential to lend itself to further engagement with the private sector, as well as future substantive research projects.

To address our methodology, we will divide this research into a discussion on the existing technologies that would be impacted given the event of a flash war in space. Discussion on the interconnectivity and vulnerabilities of these systems, the way Edge AI would be able to potentially augment or damage the intended functionality of these systems, as well as the legal ramifications for the use of edge AI in the space domain. It would include communications satellites, GEOINT constellations, ground nodes, and cloud data storage.

It is important to note that though policy capabilities and funding specific to each military branch are important considerations regarding AI employment within the Joint All Domain Command and Control (JADC2) architecture, expanding these topics in detail would extend beyond the scope of our project.

As the enterprise modernizes the CIP/COP, it does so on the classified domains. As an alternative, EDA is a secure, virtual environment on the UNCLASSIFIED domain where SOUTHCOM, interagency, and allied/foreign partners can collaborate and share information on security challenges affecting the SOUTHCOM AOR – strategic competition, IUUF, migration, illegal mining, etc. The program ingests and standardizes multiple datasets (PAI, CAI, academia, non-traditional partners, etc.) for participants to exploit and develop their own intelligence. The shared environment also enables the creation of Communities of Interest (COI) for further collaboration between entities. EDA is resonating amongst the OUSD I&S, OASD R&E, JADC2, JS J28, Cogent Way, Thunderstorm, and other programs/organizations as the future enterprise prototype solution for information sharing and knowledge graph capabilities.

In partnership through the Desktop Environment (DTE) Integrated Program Office, DIA CIO is collaborating to extend components of its TS/SCI Common Operating Environment (COE) domain as a service offering. The CIO StoreFront concept will meet current and emerging requirements centered on deliberate, efficient and repeatable processes for an unmatched customer experience.

This session will describe and clarify DIA’s Cyber strategy aligning our priorities with the DIA Director and CIO.

Topics of discussion/clarification will include our alignment and way forward pertaining to the National Security Manager (NSM-8) and the Cyber Executive Order 14028 improving the Nation’s Cybersecurity.  1. Modification of Cyber Security Tools 2. Risk Management Framework (RMF) 3. Zero Trust, 4. Agile DevSecOps pipeline 5. Information System Security Manager (ISSM) and Continuous Monitoring.

For a number of years, strategic competitors have exploited and subverted vulnerabilities in the DoD/IC supply chain. These adversarial efforts, which includes stealing U.S. intellectual property, results in decreased confidence in securing critical solutions, services and products delivered to the DoD. Contractor facilities supporting hardware/software design, development, and integration are frequently targeted as cyber pathways to access, steal, alter, or destroy system functionality. Since malfeasant activities can compromise government programs or fielded systems, DIA continues to evaluate and implement efforts to harden its supply chain commensurate with the risk to national security. Within DIA’s implementation of the Risk Management Framework, DIA has aligned cyber supply chain risk management with the acquisition process and engineering strategies. These efforts enable DIA to create a framework for cybersecurity due diligence – influencing the Intelligence Advantage.

This session will describe and clarify DIA’s implementation of the DoD/IC supply chain risk management program. Specifically, the briefers will discuss how Cyber supply chain risk management has been integrated within cybersecurity, engineering, and DIA’s acquisition strategy. Both internal and external customers will also obtain knowledge of: (1) How to obtain DIA’s SCRM Services, and (2) best practices to actively and pre-emptively address supply chain threats.

While detailed information would normally be provided on a need-to-know basis at classified levels, our session will not cover any details that would expose classified information.  Since this conference is unclassified, we are only going to speak to large trends, concepts, and generic activities.  There will not be any details provided to attendees about any particular agency’s status, and we will not be discussing vulnerabilities that could be exploited by adversaries.

The convergence of new networking paradigms including 5G cellular and satellite constellations with global coverage provides novel opportunities for defense innovation, leveraging commercial technologies for failsafe communications and collaboration.  Overlay technologies such as SD-WAN enable adaptive, highly available networks to be established on-demand for strategic advantage, securely connecting over any available paths.  These capabilities transcend traditional architectures, delivering continuous transmission for mission-critical applications and real-time decision-making, benefitting connected devices and command and control alike.

Service mesh can play an important role providing a zero-trust networking foundation, however, it also poses a few operational and security challenges. First, in current implementations, a service mesh is opt-in by deploying a sidecar process with the secured resource. Second, tying infrastructure components into application deployments makes it more difficult to patch and upgrade when vulnerabilities are discovered. Lastly, current service mesh implementations can be difficult to extend to existing workloads. In this talk, we dive into an “ambient” service mesh that runs without sidecars and addresses these previous issues without trading off zero-trust properties.

The Public Sector must deliver on ever-expanding missions while battling against siloed legacy applications and vast, untold volumes of information. This session will explore how Defense Logistics Agency, a 26,000-person combat support agency for the U.S. Department of Defense, has treated AI-powered content management as a strategic tool to save time and energy to supply the warfighter. Learn how DLA has gained an information advantage in supplying the U.S. military with its equipment needs.

Topics covered will include military moves, supply chain and audit readiness, content services, intelligent capture, password complexities, and unstructured content.

Enabling classified communications and situational awareness can be difficult and expensive for deployed, remote, collaborative, and contingency use cases.

Following guidelines from NSA’s Commercial Solutions for Classified (CSfC) program can overcome many challenges associated with legacy systems for classified communications and can help organizations benefit from the fast pace of commercial innovation in mobile devices.

Using CSfC, organizations have options for enabling executive mobility and remote work (e.g., using laptops and smartphones), site-to-site extensions of classified networks (e.g., for remote tactical teams, branch offices, home offices, or multi-building campuses), and classified campus-area Wi-Fi networks.

This session covers how to design and deploy systems conformant to the CSfC program and illustrates specific real-world examples of systems in use today for federal enterprise and tactical use cases. This session also covers emerging technologies and solutions that address the newly updated CSfC requirements such as continuous monitoring, as well as complexity challenges inherent in these solutions.

NMEC will provide an overview of their approach and capabilities to process and enrich large volumes of data to enable effective search, discovery, and correlation across large unstructured data sets while overcoming the unique challenge of being separated from enterprise networks and tools. NMEC will also share their approach to utilizing data science capability to derive maximum value from data in order to address high priority intelligence requirements.

The session will provide insight into the Intelligence Community’s IT and mission needs.  Industry attendees will learn how to utilize the Joint Architecture Reference Model (JARM) to address requirements on IC elements acquisitions.  IC attendees will learn how to align priorities into mission resource needs across the Doctrine, Organization, Training, Materiel, Leadership and Education, Personnel, Facilities, and Policy (DOTMLPF-P) moving down from their strategy to define capabilities and their enabling technical services.  The session will demonstrate how the JARM can be utilized to make invest/divest decisions, develop IC Service Provider catalogs, and discover IC services.  JARM supported capability gap analysis will also be demonstrated by using heat maps to align investment to capability and service needs.  DoD attendees will learn how to define their architecture to integrate with the IC.

The US Army National Ground Intelligence Center (NGIC) is exercising a portfolio-based approach to transition its mission capabilities to the cloud through rationalization, integration, and modernization.  A key strategic focus is human capital and talent management that holistically invests in its workforce shifting from declining IT responsibilities to focus on emerging skills and disciplines such as cloud computing, data engineering and modern application development.  This briefing will describe the human capital and talent management strategy and implementation plan to drive operational readiness of its IT workforce to meet the current and future demands of the NGIC mission. This will also include a demonstration of the tooling used to visualize the IT workforce’s skills and disciplines mapped to mission needs and capacity.

The space domain requires analysis in four dimensions (x, y, z, t).  Unlike the other warfighting domains, space planning, wargaming, and decision making must be done using tools capable of multi-dimensional visualization and simulation of near-Earth orbits (e.g., Analytical Graphics/Ansys Incorporated Systems Tool Kit, or STK).  Such tools have proliferated over the last decade across a vast array of government and non-government space users.  Much like the Microsoft Office 365 suite of productivity tools, or Adobe’s Acrobat/Creative Suite, Systems Tool Kit has become the modeling and simulation software of choice for those involved in the national security space arena.  In the area of orbital warfare training specifically, STK is used an instructional aid to make tangible the realities of space flight, systems engineering, astrodynamics, and orbit propagation.  Organizations like the US Space Force’s National Security Space Institute, US Space Command, rely on STK to perform computations and analyses to inform real-world decision making during critical moments of space launch, orbit maneuver determination, and other activities in space.  In this regard, modeling and simulation technologies for the space domain have become as ubiquitous as Microsoft-type productivity software deployed on a standard desktop configuration.  Therefore, STK or other software tools like it, must be treated as a productivity tool and not as a special-use case to be found in a high-performance computational center or battle lab.  Licensing arrangements, deployable efficiency, and proliferation must continue to be made advantageous to the average space user.

The National Ground Intelligence Center (NGIC) is exercising a portfolio-based approach to transition its mission capabilities to the cloud through rationalization, integration, and modernization.  A key strategic focus is the holistic transition of NGIC’s portfolio from application “data silos” to a data-centric architecture with supporting services to align to its modernization goals, increase operational efficiencies, and adapt to customer requirements. This briefing will describe the NGIC team’s target architecture, cloud-based solutions, enhanced processes, approach, and lessons learned.

The Defense Intelligence Agency is developing the Machine-assisted Analytic Rapid-repository System (MARS) to transform the management and production of intelligence on foreign military capabilities. This briefing will provide an update on MARS’s journey to initial operating capability, status of interoperability efforts and how they enable JADC2, and plans for edge implementation of MARS.

As part of NGA’s greater multi-tier Edge Strategy, the JREN is being deployed to Combatant Commands. This highly scalable capability is designed to position significant storage, compute, transport bandwidth, and applications closer to the Tactical edge. JREN will support expanding Department of Defense, Intelligence Community and Coalition customer requirements with content specific to their area of operations, GEOINT/partner applications and high-performance compute. Design considerations include: increased resiliency in Denied, Degraded, Intermittent, Limited (DDIL) communications environments via direct satellite downlink, reduced transport latency, and the use of the NGA CORE software development method to develop, deploy, and sustain modern GEOINT software. All designed to facilitate the movement of critical intelligence and data sharing.

Deployment has started at USINDOPACOM with additional COCOMs receiving delivery in the upcoming outyears.

With more than 15% of the world’s population experiencing some form of disability, DIA understands accessibility is more than an adherence to Section 508 standards. It’s about inclusive design – developing digital solutions to meet a broad spectrum of intersectional needs, perspectives, and behaviors, rather than solely creating accommodations for specific disabilities. This presentation will describe resourceful ways DIA is expanding its IT accessibility expertise across the Enterprise and how to utilize collaborations with Industry to develop innovative solutions like a speech recognition application for its Deaf and Hard of Hearing community. This presentation will share DIA’s plan to integrate accessibility and inclusivity into its software development lifecycle rather than adding it on as an afterthought.

The IC Security Coordination Center (SCC) is the Federal Cybersecurity Center for the IC and coordinates the integrated defense of the IC Information Environment (IC IE) with IC elements, DoD, and other U.S. Government departments and agencies.  Working with the other defense-oriented Federal Cyber Centers—the Joint Force Headquarters (JFHQ) Department of Defense Intranet Information Network (DoDIIN) and the Cybersecurity and Infrastructure Security Agency (CISA)—the IC SCC facilitates accelerated detection and mitigation of security threats and vulnerabilities across the IC by providing situational awareness and incident case management within the shared IT environment.

In FY ’23 the IC SCC is enabling a better IC cyber defense posture through the procurement of IC-wide enterprise licenses of commercial Cyber Threat Intelligence from multiple vendors, an Endpoint Detection and Response (EDR) pilot program for IC-wide adoption, and an enhanced patch repository for prioritizing patch management and driving down shared risk across the enterprise. Join us as we detail these initiatives and how they can help secure your environment!

The session will provide an opportunity to hear from Chief Architects from NRO, NSA, NGA, DHS Coast Guard, DNI, and DoD.  The panel will be hosted by the Intelligence Community Chief Information Office (IC CIO), Architecture and Integration Group (AIG).  The panelists will respond to questions on how they are shaping their agency’s technology roadmap and how they coordinate and drive mission integration within their element and across the IC and DoD.  Attendees will gain understanding of programs and initiatives across the IC that are modernizing systems that support the intelligence lifecycle and improve integration. The panel will leave the attendees with a better understanding of the role of the Chief Architect within each represented organization.

At DoDIIS 2021, the Army Military Intelligence (MI) Cloud Computing Service Provider (AC2SP) briefed the mission outcomes realized by leveraging its cloud-based Data Science Environment (DSE) to rapidly respond to a mission requirement in less than two weeks from problem to solution. This briefing will build upon the prior successes and describe the AC2SP Data Science Product Line to include its core product offerings and underlying cloud services supporting Artificial Intelligence and Machine Learning (AIML) to enable multi-tenancy and respond to the variability in data science requirements across the Army Intelligence and Security Enterprise and multiple operational networks.

We hear that promoting and maintaining a healthy work environment is important. Cyber and physical security threats from trusted insiders are on the rise and there is evidence that what happens in the workplace impacts motivation for and mitigation of possible attacks. This interactive presentation introduces research and case studies to highlight the complex role the work environment and the resulting work culture play in deterring and mitigating risks that can lead to attacks that harm national security and result in loss or degradation of vital resources and capabilities. The presentation includes promising practices for those who want to improve their respective work environments and reminders for those already doing the work. The topic offers an opportunity to engage, reflect and specific examples of ways to innovate, adapt and collaborate to improve and protect work settings that are increasingly targeted by our adversaries.

Technological innovation is disrupting societies with serious implications for the era of Strategic Competition. AI is rapidly emerging as a powerful technology with the ability to illuminate tactical and strategic advantages against our competitors. Federal mandates, such as the National Security Commission on Artificial Intelligence’s mandate that all Intelligence Community (IC) and Department of Defense (DoD) entities be AI-Ready by 2025, reinforce the urgency and imperative of leveraging AI.

In response to this mandate, DIA’s Chief Technology Office (CTO) was named as the office of primary responsibility for DIA Strategy Line of Effort (LOE) 2.9 – AI Readiness, outlining how the Agency can reach AI readiness, AI competitiveness, and AI maturity. The purpose of LOE 2.9 Is to transform culture and capabilities, creating an AI ready workforce that enables DIA officers and organizations to innovate, incorporate and advance AI throughout Agency missions and processes to meet the demands of Strategic Competition and obtain data driven dominance. CTO is collaborating with partners across industry, academia, IC, DoD, and Five Eye (FVEY) to create a strategy that will ensure we meet this purpose.

Learn about the DIA AI Strategy goals and objectives and the key pillars for transforming DIA into an AI Ready organization.

The DIA Data Hub’s (DDH) objective is to offer an Agency data platform that ensures easy discovery of and secure, automated access to DIA data assets. The DDH concept will modernize the DIA’s data handling, storage, and delivery by using best-of-breed technology and treating data as an enterprise-wide asset. DDH will both provide a place for new data to reside, as well as free existing data from process and technologically driven silos. By treating data as an enterprise-wide asset, it will give mission and business analysts the full range of information necessary to provide insights to stakeholders ranging from the warfighter all the way to congress. DDH’s strategy is to meet customers where they are, enabling customers to keep data and services where they need it. This capability will allow data scientists to comingle data to derive new insights, and let developers quickly build applications by leveraging DDH as their data store. When data is treated as an asset, it opens the door to new efficiencies, insights, and capabilities. By providing all DIA users the data they need, DDH creates a foundational capability that will be key to maintaining a strategic and competitive advantage over our adversaries.

Discussion of the transformative digital infrastructure services and platforms being matured by the Air Force Intel Community in support of ISR and broader DAF.  The Air Force Intelligence Community’s Digital Infrastructure leverages IC cloud capabilities, integrating them across the enterprise, from transport to analytic tools, to provide an agile, resilient and scalable information environment at unclassified, secret and top-secret SCI levels, to enable transformation today, toward the future we need.

The Transport Services Directorate Senior Technologist at the Defense Information Systems Agency (DISA) provides a strategic outlay of future enabling technologies, initiatives and capabilities that will deliver the next generation of global resilient communications capabilities to the warfighter.  He will provide a strategic roadmap on the DISN core global transport evolution – from the barriers, to modernization areas, and information sharing approaches – to deliver a no-fail long haul transport architecture for DoD, Intelligence Community, US and Allied Government capabilities.  Additional discussion on the need for joint mission integration to ensure the operational status of the underlying environments can be seamlessly integrated with the different domain owners, such as DIA, to assure end-to-end mission delivery and performance.

Understanding Artificial Intelligence in IT Operations (AIOps) can be a daunting task given the various definitions of the term. IT Operations teams are seeking the advantages of Machine Learning (ML) and Artificial Intelligence (AI) to unlock better decision-making and to drive automation and self-healing to support mission essential applications. AIOps is not a single product, rather a journey where key components intersect and leverage machine intelligence and speed to drive outcomes. Join Lee Koepping from ScienceLogic as he de-constructs the essential elements of AIOps and how context driven observability and automated workflows can accelerate mission results to optimize IT service delivery.

For years, operations squadrons across the globe used whiteboards and printed crew binders to execute global missions. A handful of aircrew members teamed up with Platform One to revolutionize the way crew management and distributed operations are done using a commercial-off-the-shelf (COTS) solution hardened and hosted on government servers. We discovered a fast and secure way to pass mission data from operations centers to crew members enhancing safety and mission velocity. This collaborative command and control flow enabled the early recognition of issues allowing us to maximize crew effectiveness on the road. The team used a Small Business Innovation Research (SBIR) grant to work with Mattermost to make defense enhancements focused on Air Operations Center workflows and needs. We realized that these types of collaborative capabilities allowed us to build a shared reality outside of our silos and solve issues before they occurred. This capability was demonstrated during the Kabul evac where stage managers took full advantage of the ability to self-organize and collaborate during the Kabul evac enabling the largest Noncombatant Evacuation Operations (NEO) in U.S. history. This talk gives an in-depth look at how innovation and technology laid the ground work for success.

This talk will present an overview of DNS cyber attacks over the past several years by Advanced Persistent Threats (APTs) and how the types of attacks and mitigations have evolved over time.  It will discuss why DNS continues to be a commonly used vector for adversaries and how cyber defenders can innovative to strategically defend against the most sophisticated APT using complex DNS techniques for malicious activity.

As strategic competitors continue to adopt AI as a disruptive technology used to advance warfighting and intelligence gathering capabilities, it is imperative that the defense community come together to develop solutions for leveraging human-machine teaming to achieve decision advantage and dominate our strategic competitors. This panel will address how the Intelligence Community (IC) and Department of Defense (DoD) utilizes AI to continue to revolutionize the way we maintain strategic and tactical advantage in an era of Strategic Competition. Attendees will hear from AI experts spearheading efforts within their agencies to adopt AI as a means to outpace our strategic competitors and ultimately prevent and decisively win wars. Agencies include: the National Security Agency, the Central Intelligence Agency, and the Chief Digital and Artificial Intelligence Office. This panel will be moderated by DIA’s Chief Technology Officer and AI Champion.

Many compliance officers inherit the negative reputation of, “wearing the black hat,” generating fear of involving them early and often in discussing current architecture, planning new infrastructure, or establishing programs. Strategic competition requires compliance officers and programs to participate early in the planning processes to streamline development and thereby ensure a reduction in incidents. Compliance officers must pursue opportunities to evolve their reputation and work with innovation leaders in a collaborative relationship that shifts outcomes to the benefit of the community, government, foreign partners, and taxpayers.

In this environment teeming with data, it is impossible for individuals to review all information available. This increases the difficulty of ensuring effective compliance measures and unhampered sharing across the enterprise. Missed information leads to missed opportunities. Secure and compliant machine analytics can alleviate these gaps by automating production cycles in circumstances where specific, templated parameters exist.

Engineering teams struggle to, “keep the lights on,” while updating architecture, ingesting more data, and attempting to plan for the future. On top of this mountain, it is also necessary to secure the enterprise, secure the network, and manage all of the data without running into oversight issues. Collaboratively seeking to overcome these hurdles and roadblocks while providing customers with the best services and products will benefit every program manager and leader in the defense enterprise. Analyzing and correcting pitfalls will ensure that future warfighters, leaders, and policymakers have the actionable information needed while reducing the number of incidents and/or loss of capabilities or information.

Learn how CIO caters to the needs of the Defense Enterprise customers. The Defense Intelligence Agency (DIA) Chief Information Office (CIO) Senior Representatives (CSR) are “the CIO – Forward Element” deployed around the world. These senior DIA civilian officers are CIO’s IT regional commanders deployed throughout your theater to serve federal government agencies, Department of Defense (DoD), Intelligence Community (IC), and International Partners. CIO delegated authority to the CSRs to engage with customers and partners on the integrated and comprehensive mix of CIO IT functions, to include governance, operations, and cyber defense activities. The IT infrastructure requirements of DoD, IC, and larger Federal government are uniquely complex and crucial to national interests and security, and require a holistic approach to effectively understand and fulfill customer requirements. CSRs are postured by authority and responsibility to provide CIO’s full catalog of IT capabilities and services to each supported mission. In so doing, the CSRs lead a lean process of functional handoffs and decision points. As capabilities and services move up the development chain toward delivery, service delivery is designed to simplify as it approaches customer touchpoints. The integrated CSR model regionalizes functional support under one strategic umbrella and puts the full CIO enterprise capabilities at the core of the customers mission space.

In collaboration with The Open Group, NASA SEWP (Solutions for Enterprise-Wide Procurement) helped develop the first International Organization for Standards (ISO)standards dedicated to SCRM. As a member of the government acquisition community serving federal technology buyers, the program brought together a team of SCRM Subject Matter Experts to help provide clarity to some of what many find very confusing, and to identify actionable efforts that agency personnel can take today into account for SCRM within their processes, workflows, and requirements.

Data, Data Science, Machine Learning, and Artificial Intelligence capabilities are key to equipping the Defense Intelligence Enterprise for Strategic Competition. It is essential DIA has a data science environment that is adaptable to new and emerging needs with modern tools that can be used for a multitude of data science use cases. DIA CIO is collaborating with multiple partners to deploy a Self-Provisioning Data Analytics Environment (SPDAE) utilizing existing GOTS products to deliver capabilities. This environment will optimize the use of containerization to easily adapt the environment with new GOTs or COTs tools. SPDAE will establish processes to move data science capabilities and products through Development and Test, to quickly transition to production. SPDAE will deliver an easy-to-use environment for analysts, engineers, and data scientists increasing productivity by eliminating hours spent installing and configuring applications in the cloud. It will also decrease costs associated with developing and maintaining multiple environments and enable the use of PII and other caveated data, thereby fostering secure data driven decisions.

The IC Data Strategy positions the IC in a “future ready” stance with the ability to respond to evolving needs, threats, and challenges. The IC Data Strategy aligns with other IC and Federal data strategies, and draws on recent progress to galvanize continual improvements in the discovery of IC’s data, expand data sharing and safeguarding, increase the speed of intelligence delivery, and improve tracking of data assets and needs. By implementing the strategy across the community, and in coordination with our partners, we can further advance discovery, access, and use of data at mission speed to meet our missions and maintain decision advantage.

As an emerging and disruptive technology, quantum computing is increasingly important to national security as the Defense Intelligence Agency focuses on Strategic Competition. The quantum panel includes perspectives from industry, Intelligence Community, and research and development quantum experts with a focus on quantum safe encryption, applications of quantum computing, major players in the quantum realm, and how we can collaborate to enhance quantum technology to meet the demands of Strategic Competition. Panelists will include subject matter experts from the National Security Agency, MITRE, and In-Q-Tel.  This panel will be moderated by DIA’s Chief Technology Officer, Mr. Ramesh Menon.

Intro to DIA provides small businesses information on interacting with DIA, an overview of DIA’s small business goals, programs such as 8(a) and Mentor Protégé, where to find opportunities, and upcoming conferences or events.

IC Information Technology (IT) Accessibility Community of Interest (COI) developed a maturity model to assess and improve IT accessibility programs across the IC. This model was designed to help the Director of National Intelligence (DNI), IC CIO and IC elements determine effectiveness of their current IT accessibility programs, as well as to identify gaps and help develop capabilities that are needed to improve future performance.

The COI used this model to assess and compare key areas of IT accessibility programs across IC elements. The analysis and insights from this assessment were presented to IC senior leadership to foster awareness of the challenges and help implement best practices for IT accessibility within the IC. Program maturity levels can be used to define progress or process development for a new or established program. The IC IT Accessibility COI identified five levels to indicate the maturity for an IT Accessibility program organized within an IC agency/element.  IC CIO will be presenting the model at the conference.

An assessment of the maturity of IC IT accessibility programs will enable the IC CIO to strengthen the IC workforce by ensuring accessibility for all employees. In turn, this assessment will further promote diversity, equity, inclusion, and accessibility (DEIA) as described in Executive Order 14035 and IC compliance with standards from Section 508 of the Rehabilitation Act of 1973, as amended.

This session will discuss DIA’s preliminary vision for the desktop of the future to include IT peripherals, wireless, multi-domain access with enhanced security filters, and asking for industry recommendations to enhance the user experience.

With the explosion in data collection and sophistication in the past twenty years, Intelligence Units are increasingly struggling to utilize desktop applications that are poorly suited to deal with data at scale and from multiple, disparate sources. Even worse, many will attempt to use one tool to drive all their analyses but not every tool is architected for every type of data. These approaches can lead to a hodgepodge of intelligence silos, tools, and practices that make it difficult for those without extensive technical knowledge to navigate their data. To address these problems and make analysis quicker and easier, many departments are turning to creating data warehouses or data lakes, only to be frustrated with the eventual result.

This presentation seeks to provide a path forward to any intelligence unit that is struggling with data volume, disparate data, dirty data, slow analyses or standing up an analytical unit from scratch. We will discuss three key topics in transitioning to a current best practices intelligence platform. These topics include transitioning from desktop to enterprise, from Bi analytics to network analytics and from relational databases to integrated graph databases. This presentation seeks to be accessible for all levels of technical capability, but is designed for those seeking a way to improve their current intelligence practices.

In an increasingly data-heavy multi-domain battlespace, the operational needs of today’s warfighter have become more critical. This means accessing best-in-class technologies to feed that need for speed during mission-critical events to rapidly move enormous volumes of data to where it is needed for AI/ML processing, storing, and decision-making. Join us as we discuss the keys to deliver advanced new tactical capabilities.

To provide an update on Torch and CIO’s accomplishments integrating Second Party Integree (2PI) partners.

The Baseline Service Central initiative reset the platform to baseline configuration, creating a sustainable platform with minimal technical debt.  Join us as we share our journey and show you how rationalizing applications put us on the path to save millions of dollars for our stakeholders and freed their Officers to concentrate on important intelligence work instead of managing manual processes.

The Army Intelligence and Security Enterprise (AISE) continues to execute on the strategic lines of effort within its Information Management and Information Technology (IM/IT) Strategy.  Strategic intent is translated into implementation and reality often requires concerted efforts to push through inertia, tackle obstacles, and manage risk to holistically drive organizational change. This briefing from the Army Intelligence CIO will provide his perspective on the progress by the AISE towards the strategic goals to modernize its Information Technology and Information Management portfolio.  He will provide his lessons learned and priorities for its future given the continually evolving operating environment.

In FY22, the Army Intelligence and Security (AISE) Enterprise was faced with a critical decision. Faced with potential failure of acquisition and operational fielding requirements, do they continue on the current path of fielding a critical mission system to an on-premises datacenter on multiple operational networks or look for an alternative solution?  Despite resourcing and organizational investments in the on-premises plan, the leadership made the swift decision to redirect the mission capability to the cloud.  This briefing will describe the seven-month journey to accelerate the mission capability onboarding into the cloud across multiple networks, the cloud enterprise foundation that enabled the swift transition, the lessons learned gained by the AISE and capability stakeholders, and the evidence of its security posture resulting in Department of Defense (DoD) level recognition.

Date: Wednesday, December 8
Time: 1315-1415
Location: Room 225
Speaker: Christopher Folchi, DIA

Session Description:
The new Chief Information Officer announced CIO Reshape as the next iteration of aligning the organization to drive customer centricity and optimize services, enabling customer mission success. One of CIO’s lines of effort to achieve these outcomes is a Service Central (SC) review to optimize it as a primary customer service requirements interface. A three-month study into the CIO requirements process identified SC as an improvement opportunity. In 2018, the Chief Information Office (CIO) implemented Service Central (SC) as a replacement for an aging ticket management system. Since adoption, SC has grown from an IT Service Management (ITSM) tool to a corporate service platform that serves a wide variety of IT, facility, logistics, administrative, and human resource functions. However, SC growth and adoption by other stakeholders was faster than expected. Attendees will gain an understanding of CIO’s effort to reset SC to baseline configuration with emphasis on customer experience, aligning the organization to industry standard workflows and processes, and strengthening SC data holdings to provide holistic visibility over the health of CIO’s networks.

Date: Wednesday, December 8
Time: 1115-1215
Location: Room 221
Speaker: Carl “Justin” Key, DIA

Session Description:
CIO operates and manages multiple laboratory environments to facilitate the projects of solutions engineers. This is a capability that not enough people know about in CIO, DIA, or the IC in general. The labs that CIO operate include both a sandbox environment and implementation/integration environments. In building a digital eco-system, it’s critical that engineers have a way to test the latest products, solutions, and innovations in a way that protects the production networks from unforeseen issues. And that is exactly what CIO Lab Services provides. This presentation will explain what the current capabilities are in CIO Lab Services, what our future capabilities will be, share some success stories and what Lab Services can do to add your project to that list of success stories.

Date: Tuesday, December 7
Time: 1600-1700
Location: Room 226
Speaker: Michael Bomba, Kemp Technologies

Session Description:
Mission accomplishment by US federal agencies depends on the performance, availability, and security of IT applications. The primary technology deployed to meet these requirements is called an application delivery controller (ADC) more commonly known as a load balancer. There are several key issues to consider when comparing top load balancer manufacturers for federal government use and ownership strategy that can significantly impact Total Cost of Ownership (TCO) and Return on Investment (ROI).

Date: Tuesday, December 7
Time: 1315 – 1410
Location: Room 224
Speakers: Craig Gladu, DIA; Alex Harvey, DIA

Session Description:
The current data portfolio within DIA is stove-piped across disparate locations making discovery and wrangling of data sets, resource intensive. This brief will focus on DIA’s shift to data-centricity for mission, business, and IT operations data sets. It will discuss the security expectations of Data Services related to the DoDIIS modernization, as the Enterprise shifts to its Zero Trust Architecture to enable trusted data movement throughout the Enterprise.

Date: Wednesday, December 8
Time: 1315-1415
Location: Exhibit Hall, Mountain Theater
Speakers: Esther Woods, DIA; Kimberly Posey, DIA; Mishelle Miller, DIA; John Pistolessi, DIA

Session Description:
This session will provide the Contracting Officer’s overview and discussion of the SITE III Contract, as well as provide an opportunity for industry to interact with the lead Contracting Officers who support the DIA CIO. Industry will have a chance to ask questions about upcoming procurements.

Date: Wednesday, December 8
Time: 1315-1415
Location: Room 227
Speakers: Maj Wilfred Noel, DIA; Sayeed Mahmud, DIA

Session Description:
The Machine-assisted Analytic Rapid-repository System (MARS) is a critical tool to enable the Defense Intelligence Enterprise (DIE) to maintain a competitive strategic advantage over our adversaries. Since the mid-1990s, the DIE has stored foundational military intelligence (FMI) in numerous databases, most notably the Modernized Integrated Database (MIDB). FMI supports every aspect of global military operations, including acquisitions, combat operations, and joint force planning. MIDB’s architecture cannot handle the volume of data required for today’s military operations. In 2018, the Defense Intelligence Agency (DIA) launched the MARS Program to build a new, data-driven architecture to transform how consumers access FMI. DoD released its Data Strategy in Fall of 2020, with a vision of a data-centric organization that uses data at speed and scale for operational advantage and increased efficiency. The strategy clearly recognizes the need for open data standards and architecture to achieve this vision. MARS’s approach to data and architecture aligns to the DoD strategy and will provide FMI support to joint all domain operations and decision makers. MARS currently pulls data from multiple DIE repositories. The MARS architecture is scalable and will allow for the incorporation of additional data feeds. It also will enable the distribution of data from MARS to other systems. As the transition from MIDB to MARS progresses, one of the biggest challenges is ensuring interoperability with the various DIE systems, each with its own architecture and data governance. This presentation will explore that challenge and what the MARS Program is doing to address it.

Date: Wednesday, December 8
Time: 1315-1415
Location: Room 228
Speaker: Scot Wilson, Forward Networks

Session Description:
Agencies are tasked with implementing zero-trust across complex networks that include legacy equipment. Establishing a single source of truth that delivers full visibility into network behavior, all possible traffic paths, topology, and searchable configuration and state information for all devices is critical to achieving the mission. Attend this session to learn how continually validating that network behavior adheres to security policy makes it possible to implement and prove zero trust.

Date: Wednesday, December 8
Time: 1315-1415
Location: Room 221
Speaker: LTC Stacy Graham, DIA

Session Description:
The Common Data Fabric (CDF) is a 100% commercial solution. CDF is a USD(I&S) sponsored, directed and funded capability currently being implemented and deployed across the Defense Intelligence Information Enterprise (DI2E) by the DIA for all DoD. The CDF provides a ‘machine-to-machine’ data brokering capability for the Intelligence Community (IC) by taking data providers’ data with policy along with the data consumers’ machine policy (using Authority to Operate (ATO) Risk Management Framework (RMF) information) into the CDF baseline architecture where data brokering decisions are made at the speed of relevance. The CDF provides value to data owners because it allows them to share their data with all DoD through a single ATO’d connection and eliminates the need to manage multiple ATO’d connections. Likewise, for data consumers, CDF eliminates the need to maintain multiple connections and ATO boundary changes. The USD(I&S) directed the DIA CDF implementation effort begin with the Distributed Common Ground System (DCGS) family of systems. The CDF is operating on NIPR (T&E), and SIPR (w/ATO) and plans to have an SCI instance around Sept. 2021

Date: Wednesday, December 8
Time: 1315-1415
Location: Room 222
Speaker: David Pearah, Spideroak Mission Systems

Session Description:
Secure multi-theatre communication and collaboration are key enablers to defense and intelligence mission success worldwide. Our ability to safely secure land, air, sea, and more and more “space” communication and control is vital to our national security and protecting people and assets in any field of operation. Secure comms in these environments means safely operating over ad hoc, indigenous, commercial, and often untrusted network infrastructure that is not always under our control despite intermittent, low bandwidth, and resource-constrained use-cases. Our adversaries know this and are dedicated to exploiting human and technological vulnerabilities to infiltrate, exfiltrate, disrupt and exploit this flow of information. Robust network defense tools and approaches exist – and are rightfully employed. Unfortunately, traditional network-centric protection is not suited to such contested environments and creates attack vectors limiting the ability to federate data and enable decision-making. Popular “Business First” COTS offerings have been tried but lack the requisite security focus required to protect the confidentiality and integrity of the mission-vital information being exchanged. SpiderOak Mission Systems is pleased to invite you to this important breakout session where Spideroak CEO David Pearah will discuss looming threats to mission communication and collaboration systems, the consequences of failure, and how new categories of “Security-First” software leveraging Zero-Trust/No-Knowledge encryption, distributed ledger technology, and novel key management systems protect data from the tactical-to-strategic in these contested environments – agnostic to the transport modality, network, and infrastructure viability.

Date: Wednesday, December 8
Time: 1315-1415
Location: Room 224
Speaker: Tim Wade, Vectra AI

Session Description:
What do APTs, Ransomware, and Supply-chain breaches all have in common? They’re top of mind for both the strategic decision makers and tactical operators charged with defending our nation’s most critical missions. Unfortunately, with respect to these threats, traditional cybersecurity tools and methods continue to fail to deliver the modern resilience necessary to confidently support the ongoing mission of the warfighter. Fortunately, the successful use of AI and data science has proven to be one of the most significant advancements to address these shortcomings and offers an opportunity to reshape our nation’s cybersecurity architecture. This briefing will dive into the AI and data-science methods necessary to regain the initiative and turn the tables on modern threats to assert cyber-domain dominance. Tim Wade, Technical Director & Landen Brown, NSS Senior Security Architect w/ Vectra AI will calibrate the audience on how to strategically integrate and operationalize AI cyber-capabilities, breaking down key considerations of assessing AI cyber-efficacy, and how to identify which approaches provide the greatest yields.

Date: Wednesday, December 8
Time: 1115-1215
Location: Room 225
Speakers: Johnathan Abolins, DIA; Stephen Snow, DIA

Session Description:
The use of container solutions and service mesh’s is becoming industry standard in the private sector. DIA has elected to adopt this methodology for our reference IT architecture, called DPaaS. DIA is using DPaaS to provide greater flexibility, enhance security, and expand data storage by beginning this transformation. The Analytic Development Office has championed this approach, and even has a segment of the new structure that is set aside for its analytic support applications. This provides for the decentralized mobility that is necessary to create new applications that meet specific organizational requirements while at the same time providing a coherent and to a more federated standard approach to DIA systems administration. We will present the initial migration efforts, the migration challenges, the lessons learned, the current enhancements, and our anticipated benefits and execution timelines.

Date: Wednesday, December 8
Time: 1115-1215
Location: Room 228
Speakers: Dr. Michele Gable, DIA; Ajay Kodali, DIA

Session Description:
This session will provide practical recommendations for asking the critical questions about the data that is presented, and gives examples of DIA CDO’s techniques for enhancing the discovery, protection and sharing of information in order to maximize the value and integrity of Agency data holdings.

Data forms the building blocks of all digital ecosystems. This presentation highlights the importance of good data hygiene, from data inception, where proper identification, labeling and data provenance is associated with the data set, to data analysis, where the receiver must critically question the data to ensure that issues, such as bias, aggregation and context do not skew the conclusions.

For both the consumer and the collector, it is essential to understand the purpose of a particular data set, the context of its acquisition, and its components. Many statistics and data visualizations obscure these key attributes, leading to inaccurate decisions based on missing or misleading data points. This session will provide impactful practices for both consumers and managers of data.

Date: Wednesday, December 8
Time: 1115-1215
Location: Room 229
Speaker: Satya Gupta, Virsec

Session Description:
Sophisticated software cyberattacks are the norm with runtime and memory-based attacks proving near impossible to protect against with traditional solutions. Couple this with the complexity within every DoD organization—legacy, GOTS, cloud, or hybrid environments. Determined adversaries have found this exposure and are successfully exploiting these vulnerabilities. The key? Defenders must fully understand their software to fully protect it. Learn more about absolute threat interdiction and how to protect software as it’s running. Virsec Security Platform maintains true runtime protection of enterprise applications by ensuring attacker provided “data” cannot turn into “malicious code,” thereby enabling Virsec to disrupt attackers’ kill chains in microseconds. Rather than detecting malicious activity after it takes place, Virsec works to secure software whenever and whenever it runs. DoD recently concluded a Hackathon with 218 red team hackers attacked Virsec using nearly 15,000 different types of exploits, zero-days and remote code execution. None of the intrusion attempts were successful in defeating Virsec’s capability.

Date: Wednesday, December 8
Time: 1115-1215
Location: Room 227
Speakers: Katie Lipps, DIA; Jojo Leasiolagi, DIA; Elcie Dinch-McKnight, DIA

Session Description:
In this session we will discuss technologies and high-level concepts that are shaping our future JWICS architecture and the timing to deliver. Come join us to learn how you might partner with us on this journey.

Date: Wednesday, December 8
Time: 1115-1215
Location: Room 226
Speaker: Terri Peebles-Hunt, DIA; Leslie Bennett, DIA

Session Description:
In this breakout, “Employee-Centric Workplace” we will explore CIO’s evolution of the employee experience, where we’re headed and how we will know when we get there.

Date: Wednesday, December 8
Time: 1115-1215
Location: Room 224
Speaker: Ken Davis, Pexip

Session Description:
Data networks have long been designed to keep “bad guys” out while allowing “good guys” in, yet stories continue about data leaks, credential hijacking, ransomware, or worse. Organizations are increasingly unaware of who is using their systems and where their data is flowing. Network administrators, vendors, and IT managers are constantly putting out fires, just as new threats emerge. How can you get ahead of the game, much less win? We will discuss how Zero-Trust (ZT) architectures answer this question by envisioning networks as a series of data policy rules and decision gates, rather than a combination of components and traffic zones. We will share examples of leading commercial and government enterprises that are harnessing the power of AI and Software-Defined Networks (SDNs) to create networks that act as applications, and we will illustrate how network and A/V system sensors and behavioral analytic tools combine to create a continuously adaptive trust score for each user. Finally, we will describe how core ZT principles resonate with traditional A/V, UC, and IoT system control workflows, and we will propose an integrated trustless framework for the communications industry that aligns with the NIST SP 800-207 ZT reference architecture.

Date: Wednesday, December 8
Time: 1115-1215
Location: Room 222
Speaker: Maj. Ray Tierney, USAF

Session Description:
The U2 Federal Lab working with a small Consortium of Companies has developed a tactical edge GOTS software package (AVERA+) that has been deployed to the U2 Dragon Lady while in flight 6 times over a 9-month period. This deployment aims to prove that deploying software onto legacy/current and future platforms can reduce the kill chain, provide quicker acquisition cycles, and provide mission attainment in a more meaningful way.

Date: Tuesday, December 7
Time: 1500-1700
Location: Room 224
Speakers: Jay Phipps, DIA; Alexander Harvey, DIA; Matt Hodges, DIA

Session Description:
Along with the DoD, the IC, and the larger Federal Government, DIA is pursuing a journey to transition towards a Zero Trust Architecture. The DoDIIS Modernization Program is leading the way on that journey, focusing on the modernization of the DIA Local Area Network (LAN) and provisioned Information Technology services (e.g. infrastructure, applications, data services, etc.) that significantly improve mission and strengthen the cyber security posture across all classification enclaves. This brief will focus on how DoDIIS Modernization is designing a simpler and more secure IT architecture that does not impede operations or compromise security. This paradigm shift will allow DIA to innovate to simplify the way that we operate, while providing the optimization and security that mission demands. DIA is looking to connect with industry while pursuing our journey towards a Zero Trust Architecture, and this brief is intended to help frame those conversations for future growth and transformation.

Date: Tuesday, December 7
Time: 1600-1700
Location: Room 225
Speakers: Christopher Miranda, CACI; Scott Thompson, CACI

Session Description:
Gamification of traditional DoD training environments is not a new concept. Gamification has increased training audience engagement, performance, and satisfaction throughout the DoD by applying game mechanics to self-paced, individual training events. However, the application of the approach to complex cybersecurity systems and networks has proven more difficult, as cybersecurity concepts can be complex, abstract, and in some cases esoteric. Cybersecurity games depend heavily on automated attacks, which are simple in the case of “script kiddie” attacks, but much more challenging in the case of sophisticated cybersecurity attacks. Securing the Operational Technology (OT) that runs our nation’s critical infrastructure, including power, water, fuel, and manufacturing systems has become not just a best practice but increasingly critical to national security and a strong economy. Throughout the COVID-19 pandemic, self-training in OT cybersecurity has increased in importance, and gamification has been needed to increase the effectiveness of that training. Unlike traditional IT cybersecurity, the physical systems that are controlled by OT are very easy to visualize in game engines such as Unity and Unreal. By combining gamification concepts with modern game engines, OT is brought to life before the trainee’s eyes. The consequences of poor cybersecurity can be dramatically displayed, to include the system-wide effects of cyberattacks and the effects of attacked systems on other dependent systems. The presenters take a unique approach to extending gamification techniques to operational technology training environments to enhance the skillsets of DoD network defenders.

Date: Tuesday, December 7
Time: 1600-1700
Location: Room 228
Speaker: Art Gregory, Army

Session Description:
Army Military Intelligence (MI) has established an Information Technology governance model to enable technology insertion and modernization while balancing and understanding the enterprise risk management posture. As Army MI moves towards its multi-domain DevSecOps implementation, scalable IT governance will align risk management with prioritization of digital modernization efforts. This briefing will describe the current state of Army MI IT governance, future plans, and how this ecosystem postures Army MI to target its IT investments to support its critical mission and customers.

Date: Tuesday, December 7
Time: 1600-1700
Location: Room 226
Speaker: Katie Neset, DIA

Session Description:
DIA is committed to equipping the workforce with the tools and processes needed to achieve mission success within a Digital Ecosystem that fosters collaboration and a culture of innovation. To advance DIA’s use of Data Science, it is essential that Officers have access to a secure environment, equipped with the right tools for their data science use cases. Data Engineering is collaborating with multiple partners to deploy a Self-Provisioning Data Analytics Environment (SPDAE) utilizing existing GOTS and FOSS products to deliver capabilities. The environment will also provide the underlying infrastructure and cyber processes. SPDAE will partner with Cyber and DevOps to move data products through the development pipelines and into production. Finally, SPDAE will integrate with other enterprise offerings to catalog data products and publicize their capabilities to satisfy the data science needs of mission and business systems.

Date: Tuesday, December 7
Time: 1500-1555
Location: Room 226
Speakers: Gus Hunt, VAST Federal; James Dean, VAST Federal

Session Description:
Over the next decade, AI algorithms will be responsible for introducing new applications and services within environments while also infusing legacy applications with new insight and automation. The Cambrian explosion of AI processors is now being rivaled by an even larger explosion in the amount and sources of data that organizations must continually mine in order to refactor and refine next-generation AI models. To accomplish this, a new data access paradigm must be established.

Date: Tuesday, December 7
Time: 1500-1555
Location: Room 226
Speaker: Josh Brodbent, Beyond Trust

Session Description:
Agency modernization, expanding cloud deployments, and distributed workforces create new planes of privilege for adversaries to exploit. When designing the future state of The Defense Department’s complex enterprise network, a least-privilege approach is critical to keep pace with adversaries and lower your attack surface. With users and devices now accessing critical information, systems, and applications from anywhere, the mindset must be to never trust, always verify, and only allow privileged access when needed or contextual parameters are met. Join BeyondTrust to understand:
– Why Privileged Access Management (PAM) is integral to secure the adoption of initiatives like ICAM
– How Zero Trust, ICAM, and Enterprise Network Modernization correlate
– The Defense Department’s outlook on Enterprise Network Modernization
– The path to secure modernization using Least Privilege

Date: Tuesday, December 7
Time: 1500-1555
Location: Room 228
Speaker: La’Nala Jones, NSA

Date: Tuesday, December 7
Time: 1500-1555
Location: Room 226
Speaker: David Crow, OSD

Session Description:
Several years ago, the Defense Intelligence Information Enterprise (DI2E) DevTools Pilot was undertaken to establish a software development environment to promote technology innovation through a DevOps software delivery lifecycle. The objective was to promote enterprise-level software development while the community grew expertise and matured organic capabilities. After evaluating current software development environments and capabilities across the community, OUSD(I&S) made an educated decision during the FY23 Program Objective Memorandum to eliminate duplication of effort and smoothly transition UNCLASSIFIED and SIPR DI2E DevTool users to more secure and readily available DevSecOps environments.

Date: Tuesday, December 7
Time: 1500-1555
Location: Room 225
Moderator: Matt Conner, DIA; Panelists: Gulia Curcelli, DIA; Fadi Abu-Shaaban, DIA; Deborah Kircher, DIA; Shannon Paschel, DIA

Session Description:
The Defense Intelligence Agency is building an accessible digital ecosystem both internally and on behalf of the Intelligence Community. This panel discussion will address the Director of National Intelligence (DNI) efforts to improve diversity and inclusion. We need your help in enhancing value and inclusivity by optimizing access. Come hear how.

Date: Tuesday, December 7
Time: 1500-1555
Location: Room 222
Speaker: Brian Landry, Amazon

Session Description:
A Low-to-High Development Pipeline (L2H Pipeline) enables development in (unrestricted) Standard and GovCloud Regions and deployment in restricted AWS Regions using a secure, automated, scalable process to “build low, deploy high.” The L2H Pipeline scans, packages, and transfers payloads (objects, repositories, and container images) with automated approval steps (and can be augmented with manual approval steps). It can additionally enforce quality checks on payloads. Receipt of the payloads on the high side can automatically invoke high side deployment and test processes. The L2H Pipeline enables customers to push frequent, iterative commits of their low side code to their high side environment.

Date: Tuesday, December 7
Time: 1500-1555
Location: Room 221
Speaker: Brian Landry, Amazon

Session Description:
A Low-to-High Development Pipeline (L2H Pipeline) enables development in (unrestricted) Standard and GovCloud Regions and deployment in restricted AWS Regions using a secure, automated, scalable process to “build low, deploy high.” The L2H Pipeline scans, packages, and transfers payloads (objects, repositories, and container images) with automated approval steps (and can be augmented with manual approval steps). It can additionally enforce quality checks on payloads. Receipt of the payloads on the high side can automatically invoke high side deployment and test processes. The L2H Pipeline enables customers to push frequent, iterative commits of their low side code to their high side environment.

Date: Tuesday, December 7
Time: 1500-1555
Location: Room 221
Speaker: Cheri Benedict, ODNI

Session Description:
The IC SCC is the Federal Cybersecurity Center for the IC and coordinates the integrated defense of the IC Information Technology Environment (ITE) and the IC Information Environment (IC IE) with IC elements, DoD, and other U.S. Government departments and agencies. Working with the other defense-oriented Federal Cyber Centers—the Joint Force Headquarters (JFHQ) Department of Defense Intranet Information Network (DoDIIN) and the Cybersecurity and Infrastructure Security Agency (CISA)—the IC SCC facilitates accelerated detection and mitigation of security threats and vulnerabilities across the IC by providing situational awareness and incident case management within the shared IT environment. Additionally, the IC SCC monitors and coordinates the integrated defense of the greater IC IE. These capabilities support the security protections necessary to defend against threats to the IC and coordinate operational responses across the Federal Government.

Date: Tuesday, December 7
Time: 1315 – 1410
Location: Room 228
Speakers: Schatem Boyd, Microsoft; Stuart Kehr, Microsoft

Session Description:
This session will be targeted at Decision Makers and will educate attendees on Azure Government, Azure Government Secret and Azure Government Top Secret on key tools and services that help government leaders accelerate achievement of mission accomplishments by leveraging the cloud. This will include: Big picture on how the organizations can implement a secure and compliant cloud, how Azure will improve current security posture will reduce capital and operational expenditures, continuing to save money in the long run.

Date: Tuesday, December 7
Time: 1315 – 1410
Location: Room 227
Speaker: Leslie Beavers, OUSDI

Session Description:
OUSD(I&S) Intelligence, Surveillance and Reconnaissance Enterprise Capabilities (ISREC) Directorate provides oversight for NIP/MIP programs and provides guidance to DI2E programs on modernization. Last year, ISREC published the ISR Architecture Convergence Study to help inform Defense-level, Planning, Budgeting and Execution of the future modern enterprise. The study emphasized enterprise-level services of common concern that will comprise the Defense Intelligence Digital Foundation and free the Military Departments from responsibility to deliver end-to-end solutions, allowing them to focus on specific value-added capabilities, such as exquisite sensing, software applications, mission-unique workflows, and advanced algorithms. Defense Intelligence Digital Transformation Campaign Plan (currently in coordination) aims to put the study recommendations into action and serves as USD(I&S)’s plan for implementation of the Defense Intelligence Strategy.

Date: Tuesday, December 7
Time: 1315 – 1410
Location: Room 229
Speakers: Matt Thompson, Army; Gabriele “Gabe” Chiuli, Army

Session Description:
In early 2021, the Army Military Intelligence (MI) Cloud Computing Service Provider (AC2SP) released its cloud-based Data Science Environment (DSE) on multiple security domains supported by new policy from the HQDA G2 that streamlined usage of AIML cloud services and development of data science models in the DSE. In late 2021, the DSE service offering was put to the test by a quick reaction, cross-functional team in support of real-world operations. This briefing will describe the DSE service offering to include the cloud architecture, the tiered Risk Management Framework (RMF) shared security model, and enabling Army Intel IT policies. It will conclude with the mission outcomes enabled by cloud-based AIML managed services and the team’s lessons learned.

Date: Tuesday, December 7
Time: 1315 – 1410
Location: Room 226
Speaker: Kevin Goode, Thales Trusted Cyber Technologies

Session Description:
Zero Trust is not just another buzzword in a never-ending list of tech trends. The principles of zero trust eliminates the binary trust/don’t trust approach applied to users and assets in yesterday’s on-premise, perimeter-centric environments. According to a recent survey, 100% of U.S. Federal Government agencies are storing sensitive data in third-party cloud, mobile, social, big data and IoT platforms, which inherently makes data vulnerable. Traditional perimeter protection does not protect off-premise data, which speaks to the need to take a zero trust approach to data security. Attend this session discussion to learn about the best practices for implementing a zero trust architecture to protect your most sensitive data despite the dissolving perimeter. The speaker will discuss the top 6 things you need to know about zero trust:
1. The basics. What is zero trust and how does it apply to data security?
2. Setting the stage. How digital transformation can make data vulnerable but also more secure.
3. Getting to work. Tips for putting zero trust architecture into action.
4. What about the cloud? How does cloud make implementing zero trust faster but more complicated.
5. Pulling it all together. How to develop a long term strategy to protect data throughout its lifecycle.
6. Best Practices for Implementing the White House Executive Order on Improving the Nation’s Cybersecurity Infrastructure.

Date: Tuesday, December 7
Time: 1315 – 1410
Location: Room 225
Speaker: Heather Scarpato, DIA

Session Description:
The Defense Intelligence Agency’s (DIA) Chief Information Office is putting out a call for industry support to find a solution for seamless collaboration in a single active directory environment between DIA, National Geospatial Agency (NGA), and the nation’s Five Eyes (FVEY) partners. Topics of interest include email, collaboration tools, document sharing, and web browsing in a traditionally United States-only space.

Date: Tuesday, December 7
Time: 1315 – 1410
Location: Room 222
Speaker: Andrew Alexander, NSA

Session Description:
Words are important. Language is important, especially with a vernacular that is incomplete and, on the grander scale, juvenile. The fact that the language of cyber fits this bill is likely not a major revelation to our esteemed colleagues within this community. Furthermore, cyber experts and data from multiple cyber disciplines without context and lexicon does not lead to timely and relevant mission outcomes for NSA, DoD, the IC, and cybersecurity community. Complicating matters, language is only the beginning – collaboration, language, analysis, product, defense, strategy – all these topics should be in sync for a successful campaign. It is Fusion Operations’ intent and function to assist with a small piece of this equation. Fusion Operations sits at the nexus of NSA’s Cybersecurity Collaboration Center on one axis, industry and Government on a second, and most critically, at the nexus of unclassified and classified threat data. By fusing disparate data sources, we are able to gain a unique and holistic perspective on malicious adversary activity and position NSA and the Intelligence Community to more effectively prevent and eradicate threats to National Security Systems and the Defense Industrial Base. This presentation demonstrates the successes and lessons learned from our operations to date as well as ideas where we could possibly move forward in the future with the investment of other intelligence disciplines.

Date: Tuesday, December 7
Time: 1315 – 1410
Location: Room 221
Speaker: Clifford “Matt” Conner, ODNI

Session Description:
The Intelligence Community Information Environment (IC IE) remains one of the most secure Information Technology (IT) networks within the U.S. Government. However, adversaries have demonstrated the determination to mount cyber-attacks not only to steal our secrets, but to erode our confidence in, and the security of, national security systems. This trend will persist, if not accelerate. Due to the interconnected nature of the IC IE, risk to one IC Element poses a risk for all. Accordingly, improving the IC IE cybersecurity posture is a whole-of-IC imperative requiring the attention and support of senior leadership, cybersecurity and IT professionals, mission leadership, program managers, acquisition executives, supply chain and cyber threat analysts, counterintelligence experts, and industry partners. The I-Plan 2.0 is the result of the IC CIO and Chief Information Security Officer coordination across the IC IE and serves as a measurable guide to focus near-term cybersecurity efforts within the IC IE. I-Plan 2.0 builds on the 2019 I-Plan, which underscored the necessity for a whole-of-IC approach to enhance cybersecurity across the IC IE. The guidance and tasks within I-Plan 2.0 were formulated by assessing the current cybersecurity threat given today’s cyber landscape, which has evolved considerably as the IC has embraced new technologies, software, and policies and procedures to communicate, coordinate, and move and store data across the IC IE. I-Plan 2.0 focuses on the same fundamental cybersecurity principles of knowing, managing, and monitoring the enterprise, with the added dimension of sharing information about enterprise risks among the IC Elements.

Date: Monday, December 6
Time: 1600-1700
Location: Room 229
Speakers: Col Tri Trinh (Ret.), USAF; Jerrod Chong, USAF

Session Description:
Defense Department IT professionals traditionally rely upon a series of firewalls for security against predicted and known threats. However, attack vectors have changed as network access moves “perimeter”-based security to cloud-based security, leaving the former security strategy increasingly less effective. In this session, Jerrod Chong and Major Liaquat Ali will discuss the drivers for strong authentication and how usage of phishing-resistant hardware-based authentication better secured NY ANG.

Date: Monday, December 6
Time: 1600-1700
Location: Room 227
Speakers: Calleen Torch, DIA; Branden Kemp, DIA

Session Description:
This brief will provide insight into the new JWICS Connection Authorization service offering, which will ensure all connections to JWICS meet JWICS Connection Approval Program (JCAP) standards. It will also provide details on how JCAP is actively seeking to increase efficiencies and implement an ongoing authorization process. Recent program changes have reduced duplicative efforts between the Authorization to Operate (ATO) and the Authorization to Connect (ATC) while also maximizing automated monitoring capabilities to reduce manual data reporting requirements. Key topics of change will include the NIST Risk Management Framework (RMF), Essential Data Exchange (EDE), JCAP top areas of concern, and automated risk reporting.

Date: Monday, December 6
Time: 1600-1700
Location: Room 228
Speakers: Joe Whitaker, DIA; Sunaina Rekhi, DIA; Bruce Goldfeder, DIA; Rich McLean, DIA

Session Description:
TBA

Date: Monday, December 6
Time: 1600-1700
Location: Room 226
Speaker: Anu Subramanian, CloudChecker, Inc.

Session Description:
Cloud use continues to explode across all areas of government. How do you quickly and efficiently control and allocate cloud cost on a granular level? How do you make sure your organization is following security best practices? How do you make sure your subscribed cloud resources are getting the most bang for the buck? Smart cloud management using automation is the key!

Date: Monday, December 6
Time: 1600-1700
Location: Room 225
Speaker: Dr. Liza Briggs, USMC

Session Description:
Combating cybersecurity threats is not limited to technological solutions. As we advance our understanding of digital ecosystems, we recognize human behaviors as important components of understanding risks and threats to critical systems and our security profiles. Adding context to observable behaviors helps us more accurately assess risks and to mitigate threats. This presentation offers a user-friendly cultural framework and details how the framework can be paired with data to add meaning to behaviors and more intentionally include “culture” in threat assessment and response processes.

Date: Monday, December 6
Time: 1600-1700
Location: Room 224
Speaker: Natalie Yacoub-Pugh, DIA

Session Description:
Small businesses are an integral partner with DIA in creating innovative solutions to maintain a competitive strategic advantage over our adversaries. Learn how to do business at DIA and best practices. Topics included in this discussion are the role of the Office of Small Business Programs, the DIA Mentor Protégé Program, DIA’s 8(a) Business Development Program and other pertinent topics. There will be an opportunity for participants to ask small business and acquisition related questions.

Date: Monday, December 6
Time: 1300 – 1355
Location: Plenary Hall
Speakers: Esther Woods, DIA; Kimberly Posey, DIA; Mishelle Miller, DIA; John Pistolessi, DIA

Session Description:
This session will provide the Contracting Officer’s overview and discussion of the SITE III Contract, as well as provide an opportunity for industry to interact with the lead Contracting Officers who support the DIA CIO. Industry will have a chance to ask questions about upcoming procurements.

Date: Monday, December 6
Time: 1600-1700
Location: Room 222
Speaker: Theresa Campobasso, Exiger

Session Description:
USG Critical infrastructure systems are a pillar of competitive advantage for the US economy. Despite their criticality, previous high-profile attacks have shown that the infrastructure is under protected and exposed to cyberthreats, supply chain risks, operational risks, State adversaries, and criminal activity. The complexity involved with illuminating critical infrastructure risks is compounded by the scale of data, speed computing, the lack of visibility into certain threat vectors such as risk in hardware and software used by these entities, and integration with partners. Learn how both the U.S. government and the critical infrastructure community can leverage AI, ML, Natural Language Processing, cloud computing and emerging technologies to proactively identify, mitigate, and manage the risk of adversarial exploitation, fraud, or network compromise through advanced analytics and open-source information.

Date: Monday, December 6
Time: 1600-1700
Location: Room 221
Speaker: Michael Castelli, ODNI

Session Description:
The presentation will offer an overview of the IC ITE Strategy—which will be revised shortly before the DoDIIS Conference–and the IC’s vision of a secure enterprise that facilitates authorized information flow between multiple clouds, domains, and platforms supporting diverse missions. It will highlight four main goals of the strategy and how the IC uses a Service Provider model to realize those goals. The model presents the roles of IC IT Service Provider as the developer and maintainer of Services of Common Concern (SoCCs), the IC IT Service Consumer who uses services and capabilities, and IC IT Industry Partners who are instrumental in the design, buildout, and delivery of key capabilities. Essential to fulfilling the IC ITE Strategy is the designation and shaping of IT SoCCs for the future. This presentation will describe how the IC is modifying and maturing SoCC delivery to advance mission integration and information sharing across the IC. Practical service examples include the Commercial Cloud Enterprise (C2E), Identity, Credential, and Access Management (ICAM), and industry partners who play a vital role in achieving the goals of the revised IC ITE strategy. In addition, the speaker will touch on the IC CIO’s view of how SoCCs will likely evolve, the identification of community IT needs, and leveraging, reusing, and adapting existing IT capabilities.

Date: Monday, December 6
Time: 1500 – 1555
Location: Room 227
Speakers: Maj Wilfred Noel, DIA; Sayeed Mahmud, DIA

Session Description:
The Machine-assisted Analytic Rapid-repository System (MARS) is a critical tool to enable the Defense Intelligence Enterprise (DIE) to maintain a competitive strategic advantage over our adversaries. Since the mid-1990s, the DIE has stored foundational military intelligence (FMI) in numerous databases, most notably the Modernized Integrated Database (MIDB). FMI supports every aspect of global military operations, including acquisitions, combat operations, and joint force planning. MIDB’s architecture cannot handle the volume of data required for today’s military operations. In 2018, the Defense Intelligence Agency (DIA) launched the MARS Program to build a new, data-driven architecture to transform how consumers access FMI. DoD released its Data Strategy in Fall of 2020, with a vision of a data-centric organization that uses data at speed and scale for operational advantage and increased efficiency. The strategy clearly recognizes the need for open data standards and architecture to achieve this vision. MARS’s approach to data and architecture aligns to the DoD strategy and will provide FMI support to joint all domain operations and decision makers. MARS currently pulls data from multiple DIE repositories. The MARS architecture is scalable and will allow for the incorporation of additional data feeds. It also will enable the distribution of data from MARS to other systems. As the transition from MIDB to MARS progresses, one of the biggest challenges is ensuring interoperability with the various DIE systems, each with its own architecture and data governance. This presentation will explore that challenge and what the MARS Program is doing to address it.

Date: Monday, December 6
Time: 1500 – 1555
Location: Room 229
Speakers: Ramesh Menon, DIA; Peter Bronez, In-Q-Tel; Terry Halvorsen, IBM; Dr. Maheen Adamson, Veterans Agency/Standford University

Session Description:
TBA

Date: Monday, December 6
Time: 1500 – 1555
Location: Room 228
Speaker: Dean Economou, Appgate

Session Description:
The Network Access portion of a Zero Trust Architecture (ZTA) is a key component in the success of any Zero Trust strategy. The securing of access to the network and applications has become crucial in the effort to provide for the common defense. Organizations already have several of the requisite components for a ZTA, however, integrating these components into Network Access decisions is the next step towards the realization of a true Zero Trust Strategy.

Date: Monday, December 6
Time: 1500 – 1555
Location: Room 226
Speakers: Christopher Carrigan, DoD; Terry Carpenter, Jr., DoD

Session Description:
Provide an overview on how DCSA is driving consolidation of unique cloud tools, data strategies and enterprise cross domain services to improve cost structure, reduce risk and increase mission effectiveness.

Date: Monday, December 6
Time: 1500 – 1555
Location: Room 225
Speaker: William Hancock, DIA

Session Description:
The National Media Exploitation Center began its transformation initiative to deliver change across the entire center to align with National Intelligence Priorities. Come hear about how NMEC’s IT and Mission partnership is enabling the future.

Date: Monday, December 6
Time: 1500 – 1555
Location: Room 224
Speaker: James Dollar, Uplogix

Session Description:
When your network has been compromised, it’s all about speed to respond and recover. Planning for these situations can’t depend on the network itself and shouldn’t rely on “sneaker net” responses for deploying new configurations. What is needed is secure out-of-band automation that works both as a “panic button” to initiate a lockdown as well as provide the tools needed for a quick and deliberate recovery.

Date: Monday, December 6
Time: 1500 – 1555
Location: Room 222
Speakers: Dr. Sean Miles, NSA; Lawrence Reinert, NSA

Session Description:
Real time acceptance check for counterfeit devices, refurbished machines, and non-approved part substitutions using standards-based artifacts are available from many Original Equipment Manufacture’s (OEMs) of Trusted Platform Module (TPM) enabled devices (PCs, servers, routers). Using the Trusted Computing Group (TCG) defined Platform Certificate, an Acceptance Test can run using open source software prior to placing new devices into the network. Procurement processes can be modified to incorporate the requirements for these artifacts that are currently openly available from several OEMs.

Date: Monday, December 6
Time: 1500 – 1555
Location: Room 221
Speaker: David Salvagnini, ODNI

Session Description:
The Architecture and Integration Group (AIG) supports and advises the Intelligence Community Chief Information Office in the Office of the Director of National Intelligence (ODNI). AIG plans, organizes, coordinates, directs, and implements enterprise architecture, systems engineering, and integration practices to foster a secure, interoperable, and effective IC Information Environment. The team is functionally organized into the Enterprise Architecture Division (EAD), Integration Engineering Division (IED), Standards and Compliance Division (SCD), and the 5-Eyes Enterprise (5EE) Service Domain. AIG is adjusting the IC EA portfolio to enhance the IC/Department of Defense (DoD) value proposition and efficacy across IC Elements. The focus of this effort is to strengthen IC integration through:
• Authoritative Future Planning
• Architectural Consistency and Compliance
• Identification and Mitigation of Critical Gaps Attendees will learn how ODNI influences the IC EA portfolio and enhances IC, DoD, and partner integration. Use cases will be shared as examples of past and ongoing application of the IC’s EA practice.

Date: Monday, December 6
Time: 1300 – 1355
Location: Room 228
Speakers: Michael Epley, Red Hat; Jonathan Sturges, Red Hat

Session Description:
As we look to move containerized workloads to the edge, we must consider whether to take advantage of orchestration tools like kubernetes or swarm: a trade-off between reliability and simplicity vs flexibility and resilience. We’ll discuss use cases in an effort to elucidate considerations for each and when orchestration is needed. We’ll also examine limits of un-orchestrated solutions in addressing key use cases and how edge and cloud computing can collectively address others.

Date: Monday, December 6
Time: 1300 – 1355
Location: Room 227
Speakers: Dr. Qing Wu, AFRL; LTJG Alexis Bryant, DIA; Bruce Goldfeder, DIA; Ramesh Menon, DIA

Session Description:
This brief draws a comparison between the U.S. and its near peer competitors across the Artificial Intelligence (AI) stack. The brief identifies strengths and weakness in AI and advocates for a focused research into AI/ML. The brief highlights China as the first competitor since WWII with the where withal to supplant the U.S. as the global technological leader and innovation hub. Finally, the brief suggests ways to enable, facilitate, and effectively organize AI in the DoD enterprise.

Date: Monday, December 6
Time: 1300 – 1355
Location: Room 229
Speakers: Gary Schluckbier, Eqiq Solutions; Michael Monical, USSTRATCOM

Session Description:
The risks associated with commercial wireless devices such as smartphones, bluetooth, and wifi devices, including wireless hidden in common items are well known and are the reasons for no-wireless policies in SCIFs. In practice, how are these threats, ubiquitous in modern life, reliably kept out of some of the most sensitive spaces in the DoD? In this talk, the WIDS team at USSTRATCOM describes the technology and practices they use to defend against wireless threats.

Date: Monday, December 6
Time: 1300 – 1355
Location: Room 224
Speakers: Katie Lipps, DIA; Jojo Leasiolagi, DIA; Elcie Dinch-McKnight, DIA

Session Description:
In this session we will discuss technologies and high-level concepts that are shaping our future JWICS architecture and the timing to deliver. Come join us to learn how you might partner with us on this journey.

Date: Monday, December 6
Time: 1300 – 1355
Location: Room 225
Speaker: Dan Bono, CACI

Session Description:
The machines are on the rise, but they still can’t figure out how to cut your lawn and not your neighbors. As nations adopt autonomous systems, either Cyber or Cyber-Physical, how do we ensure correct operational behavior? They require training data sets that will be challenging to build. Modeling & Simulation and Digital Twins may enable rapid creation of Virtual Reality synthetic data sets to train autonomous systems and improve the trustworthiness of autonomous capabilities.

Date: Monday, December 6
Time: 1300 – 1355
Location: Room 222
Speaker: Leslie Beavers, OUSDI

Session Description:
OUSD(I&S) Intelligence, Surveillance and Reconnaissance Enterprise Capabilities (ISREC) Directorate provides oversight for NIP/MIP programs and provides guidance to DI2E programs on modernization. Last year, ISREC published the ISR Architecture Convergence Study to help inform Defense-level, Planning, Budgeting and Execution of the future modern enterprise. The study emphasized enterprise-level services of common concern that will comprise the Defense Intelligence Digital Foundation and free the Military Departments from responsibility to deliver end-to-end solutions, allowing them to focus on specific value-added capabilities, such as exquisite sensing, software applications, mission-unique workflows, and advanced algorithms. Defense Intelligence Digital Transformation Campaign Plan (currently in coordination) aims to put the study recommendations into action and serves as USD(I&S)’s plan for implementation of the Defense Intelligence Strategy.

Date: Monday, December 6
Time: 1300 – 1355
Location: Room 221
Speaker: Nancy Morgan, ODNI

Session Description:
The IC Chief Data Officer (IC CDO) leads the IC’s efforts to make information and data more discoverable. Learn about the next IC Information Environment Data Strategy and related efforts to drive data centricity in a new digital ecosystem; core principles to improve both information sharing and safeguarding; and the need for data acumen at every level of the organization. Discuss the need for robust data lifecycle management capabilities and data standards, the power of data services to manage data throughout the intelligence lifecycle, and preparing data for both a human and machine-enabled world as we incorporate more artificial intelligence, machine learning and other advanced technologies. Attendees will gain an understanding of the information and data landscape in a multi-INT, multi-cloud, multi-network world and information sharing between the IC, DoD and a range of external partners.

Date: Monday, December 6
Time: 1300 – 1355
Location: Room 226
Speaker: Mark Andress, NGA

Session Description:
Please join Mr. Mark Andress, NGA Chief Information Officer, as he discusses DevSecOps and preparing the NGA Software Way Ahead.