140 likes | 229 Vues
Streamlining NMMSS Data Submission. James C. Crabtree Office of Health, Safety and Security U.S. Department of Energy May 20, 2009. Germantown Challenges. NMMSS Production System DOS/FoxPro to Windows/SQL Server Cyber Security Issues Office of Classification Request
E N D
Streamlining NMMSS Data Submission James C. Crabtree Office of Health, Safety and Security U.S. Department of Energy May 20, 2009
Germantown Challenges • NMMSS Production System • DOS/FoxPro to Windows/SQL Server • Cyber Security Issues • Office of Classification Request • Update Classification Methodology • New Set of Physical Security and Operations Procedures • New Personnel
Data Submission Germantown Transition Challenges • Some of the issues • Systems/Software/Equipment • Communicating new mailing addresses, phone numbers, SIMEX routing address, e-mail addresses • Distribution of UserIDs and Password • New Cyber Security Plans
Classified Mail Fax Bulletin Board System E-mail SecureNet SIMEX Unclassified Mail Fax Bulletin Board System Encrypted e-mail Current Data Submission Methods for Germantown
Mail and Faxfor Germantown • No real issues • New addresses – Call if you need the classified address or fax • Unclassified Mail Fax U.S. Department of Energy 301-903-1998 Attn: NMMSS Program, HS-1.22 Germantown Bldg. 1000 Independence Ave, SW Washington, DC 20585 • Mark packages – Media Enclosed Do Not X-Ray
E-mail • Classified • SecureNet, managed by NNSA • If your site/facility has SecureNet, you can submit data and receive reports using SecureNet • Unclassified, Encrypted • Entrust • Verisign • Encryption Software that meets Federal Information Processing Standard (FIPS) 140-2 Level 1 or higher • SafeNet – ProtectPack, one possibility
SIMEX • NMMSS SIMEX routing address “RHEGGTN “ • Sites moving away from using SIMEX • Many of the sites have old hardware and software • Older sites systems can’t print newer pdf files • Currently, Germantown is scanning in reports page by page to transmit them
Unclassified Bulletin Board System • Software and System Upgrade • Cyber Security Issues • Other Issues – Communications • No Problems at Present
Classified Bulletin Board System • Software and System Upgrade • Cyber Security Issues • Document Requirements • Other Issues - Connecting and Logging In
Classified Bulletin Board System • Documents we need from you • Formal letter requesting connection • Full names and clearance of users with access to the remote terminal • Accreditation letter by local approving official • Approved Interconnection Security Agreement (ISA) • Approved Information System Security Plan (ISSP) for your remote terminal
Classified Bulletin BoardSystem Issues • STE/STU configuration; Exchange STU/STE information • Getting New UserIDs and Passwords to Users • Getting connection to work • Speed of modem connection • Getting user logon screen to popup when user connects
Future Data Submissionto Germantown • SIPRNET. Let us know if you are interested. • TAC Lanes – for classified data • Direct Connection to NMMSS database for classified users • Direct internet connection for submitting unclassified data and downloading reports
Customer Input About Data Submission • Which methods work best? • What is feasible for you? • What do you see as the best long term options? • Contact me with your suggestions • Jim Crabtree, • 301-903-6008 • james.crabtree@hq.doe.gov