Naval Information Warfare Systems Command plans to deploy technology that will certify a ship\u2019s compliance with cybersecurity requirements to 180 vessels by fiscal 2022.<\/p>\n\n\n\n
The cyber baseline system \u2014 deployed by FRD 300, which is short for the Cybersecurity Office of the command\u2019s Fleet Readiness Directorate \u2014 is a web-based application. It allows the directorate to ensure a ship\u2019s systems comply with cybersecurity requirements set by the departments of Defense and the Navy prior to departure, according to a June 29 news release from NAVWAR.<\/p>\n\n\n\n
A baseline \u201coffers a searchable, easy-to-use, platform-specific record of all Navy networks, including hosted and connected, afloat and ashore systems, enabling the ability to independently manage and maintain a ship\u2019s information technology capabilities,\u201d the release said.<\/p>\n\n\n\n
Cyber baselines have been deployed aboard 40 ships in fiscal 2019, the release said. The program, which started in January 2018, has implemented cyber baselines on 80 Navy ships as of June 2020, according to the release.<\/p>\n\n\n\n
\u201cDelivering cyber baselines allows us to identify capability risks during a ship\u2019s availability or scheduled modernization, assuring a cyber-ready platform prior to departure,\u201d FRD 300 Director Duane Phillips said. \u201cWe are using an end-to-end approach, ensuring that all hosted and connected systems, including the Consolidated Afloat Networks and Enterprise Services (CANES) and Integrated Shipboard Network System (ISNS), comply with DoD and DoN requirements and are approved to meet cyber security technical authority standards.\u201d<\/p>\n\n\n\n
The tool is delivered and installed in coordination with NAVWAR Headquarters, Naval Information Warfare Center Pacific and Naval Information Warfare Center Atlantic.<\/p>\n\n\n\n
According to the release, FRD 300 supports 10 to 15 platforms at any given time. It is currently working on ships in Bahrain, Japan, California, Washington \u201cand more,\u201d the release said. Because of the coronavirus pandemic, FRD 300 is providing both distance and in-person training on the system.<\/p>\n\n\n\n
\u201cDespite today\u2019s current circumstances, our Navy and our nation are continuing to experience an unprecedented degree of competition in the maritime environment,\u201d FRD 300 Executive Director Mike Spencer said. \u201cAs the technical leader for Navy cybersecurity we must continue to drive implementation of cyber standards, creating a secure, defensible information domain. By delivering, installing and managing cyber baselines, we are able to provide a validated end-to-end cyber compliant network improving cyber readiness across the fleet.\u201d<\/p>\n\n\n\n
NAVWAR is also working with NIWC Pacific and Program Executive Office Command, Control, Communications, Computers and Intelligence and Space Systems to create a C4I certification by the end of fiscal 2021 that assess a system\u2019s cyber readiness. According to the release, the certification process will confirm \u201call warfighter tools and capabilities are cyber secure through consistent and pervasive implementation of cybersecurity specifications and standards.\u201d<\/p>\n\n\n\n