![](media/image1.png){width="2.498611111111111in"
height="2.0965277777777778in"}

**NASA Headquarters**

**Information Technology & Communications Division**

**Information Technology Tactical Plan**

**FY2009, FY2010 and FY2011**

**October 2008**

**Prepared by**

**Headquarters Information Technology and Communications Division**

**and Indyne Corporation**

**TABLE OF CONTENTS**

1 Purpose [1](#purpose)

2 Strategic Vision [1](#strategic-vision)

2.1 Adapt to Emerging Technologies [1](#adapt-to-emerging-technologies)

2.2 Common Tools and Services [2](#common-tools-and-services)

2.3 Mission and Customer Focus [3](#mission-and-customer-focus)

2.4 Security [3](#security)

2.5 Unified Investment Portfolio [4](#unified-investment-portfolio)

2.6 Effective Work Force [4](#effective-work-force)

3 Scope [5](#scope)

4 Tactical Plan Initiatives in Context
[5](#tactical-plan-initiatives-in-context)

4.1 Infrastructure [5](#infrastructure)

4.2 Continuous Improvement and Maintenance Projects
[5](#continuous-improvement-and-maintenance-projects)

4.3 Telecommunications [6](#telecommunications)

4.4 Security [6](#security-1)

4.5 Application Services [6](#application-services)

5 Tactical Plan Initiatives in Detail
[6](#tactical-plan-initiatives-in-detail)

5.1 Voice Services [6](#voice-services)

5.1.1 Agency "Class" VoIP Disaster Recovery/Avoidance Solution
Continuity of Operations Plan (COOP)
[6](#agency-class-voip-disaster-recoveryavoidance-solution-continuity-of-operations-plan-coop)

5.1.2 Design and Implementation of VoIP Intercluster Trunking
[7](#design-and-implementation-of-voip-intercluster-trunking)

5.1.3 Assess the Benefit Associated with Unity and NOMAD
Interoperability
[7](#assess-the-benefit-associated-with-unity-and-nomad-interoperability)

5.1.4 Implement 1 Gig to Select Headquarters Desktops
[7](#implement-1-gig-to-select-headquarters-desktops)

5.1.5 Cisco Unified Personal Communicator SoftPhone
[7](#cisco-unified-personal-communicator-softphone)

5.1.6 VoIP Hardware Life Cycle Replacement
[8](#voip-hardware-life-cycle-replacement)

5.2 Wide Area Network (WAN) [8](#wide-area-network-wan)

5.2.1 Secure Remote Access [8](#secure-remote-access)

5.3 Local Area Networks (LAN) [8](#local-area-networks-lan)

5.3.1 Upgrade the HQ Network Trunk Interconnect to 10G
[8](#upgrade-the-hq-network-trunk-interconnect-to-10g)

5.3.2 Life Cycle Replacement of the HQ Wireless Network
[9](#life-cycle-replacement-of-the-hq-wireless-network)

5.4 Video Infrastructure Services [9](#video-infrastructure-services)

5.4.1 Implement IPTV [9](#implement-iptv)

5.5 Workstations [9](#workstations)

5.5.1 Enhance Desktop Recovery Tivoli Storage Manager (TSM)
[10](#enhance-desktop-recovery-tivoli-storage-manager-tsm)

5.6 Data Center [10](#data-center)

5.6.1 Life Cycle Replacement of Servers
[10](#life-cycle-replacement-of-servers)

5.6.2 Enhance Enterprise Storage [10](#enhance-enterprise-storage)

5.6.3 Enhance Enterprise Backup [10](#enhance-enterprise-backup)

5.6.4 Restructure and Consolidation of HQ VLANs
[11](#restructure-and-consolidation-of-hq-vlans)

5.6.5 Implementation of DHCP across the HQ Private Network
[11](#implementation-of-dhcp-across-the-hq-private-network)

5.6.6 Disk-to-Disk Enterprise Backup
[11](#disk-to-disk-enterprise-backup)

5.6.7 Investigate Server Virtualization
[12](#investigate-server-virtualization)

5.7 Application Services [13](#application-services-1)

5.7.1 Continuation of ColdFusion Upgrade
[13](#continuation-of-coldfusion-upgrade)

5.7.2 Continuation of Oracle Upgrade to 10G
[13](#continuation-of-oracle-upgrade-to-10g)

5.7.3 Update Multimedia Offsite Support Capabilities
[13](#update-multimedia-offsite-support-capabilities)

5.7.4 Update Multimedia Architecture/Web Streaming
[13](#update-multimedia-architectureweb-streaming)

5.7.5 Customer Service Enhancements [14](#customer-service-enhancements)

5.7.6 Implement Automated Requirements, Test Suite, and Test Data
Development
[14](#implement-automated-requirements-test-suite-and-test-data-development)

5.7.7 Common Set of Development/DBA tools
[15](#common-set-of-developmentdba-tools)

5.7.8 MicroPact entelliTrak COTS Tool
[15](#micropact-entellitrak-cots-tool)

5.7.9 Update HQ Based Search Engine [15](#update-hq-based-search-engine)

5.7.10 COTS Survey Tool [16](#cots-survey-tool)

5.7.11 Service-Oriented Architecture (SOA)
[16](#service-oriented-architecture-soa)

5.7.12 Application Architecture Modeling Tools
[17](#application-architecture-modeling-tools)

5.7.13 Implement Web Link Checker/Crawler
[17](#implement-web-link-checkercrawler)

5.7.14 Investigate New Web Application Reporting Tools
[17](#investigate-new-web-application-reporting-tools)

5.8 IT Management [18](#it-management)

5.8.1 Enhanced Configuration Management Services for HQ IT Assets
[18](#enhanced-configuration-management-services-for-hq-it-assets)

5.8.2 IPv6 Capability for Perimeter and Core
[18](#ipv6-capability-for-perimeter-and-core)

5.9 IT Security [18](#it-security)

5.9.1 Data Encryption Capability for Enterprise Storage
[19](#data-encryption-capability-for-enterprise-storage)

5.9.2 Caching Proxy/Reverse Proxy Architecture
[19](#caching-proxyreverse-proxy-architecture)

5.9.3 Life Cycle Replacement of HQ Firewall Systems HW
[20](#life-cycle-replacement-of-hq-firewall-systems-hw)

5.9.4 Implement Policy Compliance Scanning
[20](#implement-policy-compliance-scanning)

5.9.5 Improve Monitoring Capabilities with NETIQ Security Manager
[20](#improve-monitoring-capabilities-with-netiq-security-manager)

5.9.6 Improve IDS Infrastructure [21](#improve-ids-infrastructure)

5.9.7 Improve Forensic Capabilities [21](#improve-forensic-capabilities)

5.9.8 Security Content Automation Tools S-CAP
[21](#security-content-automation-tools-s-cap)

6 Project Priority and Resource Allocation
[22](#project-priority-and-resource-allocation)

7 Appendix 1 - CPIC IT Portfolio Definitions
[26](#appendix-1---cpic-it-portfolio-definitions)

7.1 Information Technology (IT) [26](#information-technology-it)

7.2 Portfolios [26](#portfolios)

7.2.1 Voice Services [26](#voice-services-1)

7.2.2 Wide Area Network (WAN) [26](#wide-area-network-wan-1)

7.2.3 Local Area Networks (LAN) [27](#local-area-networks-lan-1)

7.2.4 Video Infrastructure Services
[27](#video-infrastructure-services-1)

7.2.5 Workstations [27](#workstations-1)

7.2.6 Data Center [28](#data-center-1)

7.2.7 Application Services [28](#application-services-2)

7.2.8 Web [28](#web)

7.2.9 Messaging and Collaboration [29](#messaging-and-collaboration)

7.2.10 IT Management [29](#it-management-1)

7.2.11 IT Security [30](#it-security-1)

7.2.12 Implementation of Agency IT Initiatives & Other IT Services
[30](#implementation-of-agency-it-initiatives-other-it-services)

# Purpose

This document provides the National Aeronautics and Space Administration
(NASA) Headquarters (HQ) Information Technology (IT) Tactical Plan for
fiscal years 2009, 2010, and 2011. It serves as the basic planning
document for the HQ IT infrastructure and services including
enhancements, upgrades, new initiatives, and compliance resolution.

The Tactical Plan comprises the known and significant customer services,
Agency and Federal initiatives, infrastructure efficiencies, and
sustaining maintenance activities. These are listed with descriptions
and estimates of core labor and other direct costs (ODC) to communicate
a clear idea of the activities to HQ Information Technology and
Communications Division (ITCD) customers and stakeholders. A summary
table is presented at the end of the plan that depicts each activity by
Capital Planning and Investment Control (CPIC) priority, functional
category, and strategic alignment.

This Tactical Plan is devised as a planning document to help the HQ
customers and ITCD focus manpower and plan budgets, address the
requirements of our community, and maintain compliance with Agency and
Federal mandates. The plan proposes and provides a basic priority,
benefits, rationale, and approximate cost for each proposed project
supporting the customers of HQ IT services. However, the Tactical Plan
is not an exhaustive list of every activity that the HQ ITCD is engaged
in, nor is it a complete list of all projects considered. Rather, it is
a list of projects bounded by and contained within a specific ITCD
budget.

# Strategic Vision

Guiding principles and business drivers influence the selection and
ranking of initiatives in this plan, many of which are derived from the
NASA Information Resources Management Strategic Plan as mandated by NPD
2800.1A. These principles are described below.

## Adapt to Emerging Technologies {#adapt-to-emerging-technologies .Style-Heading-2-+-Times-New-Roman}

> ***"Provide an IT infrastructure that can evolve and adapt to emerging
> technologies and service models."***

IT has evolved largely through a bottom-up approach, with many related
parallel efforts emanating from Centers and programs. This has resulted
in an architecture that (as a whole) is slow to adapt and interoperates
only at great expense.

NASA has facilities around the world, and mobile computing eliminates
the concept of business hours. It is HQ's goal to provide IT services
that are available at all times and the technology to access those
services from any location. As a design discipline, our services must be
provided in a way to assure that they are always available. Highly
available architectures reduce the cost of maintenance and service, and
position us favorably to have our services mirrored at multiple sites
for continuity of operations.

NASA has huge repositories of information and institutional knowledge
that it is unable to fully leverage, due in part to limitations in
information technology. As these technology barriers are lifted, NASA HQ
must continue to press forward with initiatives to free this knowledge,
so it can be productively used. Fundamental changes are required in the
way we acquire, process, and manage data in order to assure that
information and data assets can be discovered, trusted, and repurposed.

Tactical initiatives included in the FY2009-2011 plan that support this
strategic driver include:

-   Cisco Unified Personal Communicator SoftPhone

-   Secure Remote Access

-   Upgrade the HQ Network Trunk Interconnect to 10G

-   Life Cycle Replacement of the HQ Wireless Network

-   Implement IPTV

-   Enhance Desktop Recovery Tivoli Storage Manager (TSM)

-   Life Cycle Replacement of Servers

-   Enhance Enterprise Storage

-   Enhance Enterprise Backup

-   Restructure and Consolidation of HQ VLANs

-   Disk-to-Disk Enterprise Backup

-   Investigate Server Virtualization

-   Continuation of ColdFusion Upgrade

-   Continuation of Oracle Upgrade to 10G

-   Update Multimedia Offsite Support Capabilities

-   Update Multimedia Architecture/Web Streaming

-   Customer Service Enhancements

-   Implement Automated Requirements, Test Suite, and Test Data
    Development

-   MicroPact entelliTrak COTS Tool

-   Update HQ Based Search Engine

-   COTS Survey Tool

-   Service-Orientated Architecture (SOA)

-   Implement Web Link Checker/Crawler

-   Investigate New Web Application Reporting Tools

-   IPv6 Capability for Perimeter and Core

-   Life Cycle Replacement of HQ Firewall Systems HW

-   Improve Monitoring Capabilities with NETIQ Security Manager

## Common Tools and Services {#common-tools-and-services .Style-Heading-2-+-Times-New-Roman}

> ***"Optimize investments in mission and program-unique IT systems by
> utilizing common infrastructure tools and services where
> practical."***

An over-arching goal at NASA, and the inspiration for many ongoing
projects, is the objective of enabling NASA to work as a single team
without regard to geography or organizational affiliation. In an effort
to reduce costs, Agency consolidation has motivated numerous projects to
migrate infrastructure and operations to a central provisioner, with
more to come in the future.

Tactical initiatives included in the FY2009-2011 plan that support this
strategic driver include:

-   Agency "Class" VoIP Disaster Recovery/Avoidance Solution Continuity
    of Operations Plan (COOP)

-   Design and Implementation of VoIP Intercluster Trunking

-   Assess the Benefit Associated with Unity and NOMAD Interoperability

-   Implementation of DHCP across the HQ Private Network

-   Continuation of Oracle Upgrade to 10G

-   Implement Automated Requirements, Test Suite, and Test Data
    Development

-   Common Set of Development/DBA Tools

-   MicroPact entelliTrak COTS Tool

-   Update HQ Based Search Engine

-   COTS Survey Tool

-   Service-Orientated Architecture (SOA)

## Mission and Customer Focus {#mission-and-customer-focus .Style-Heading-2-+-Times-New-Roman}

> ***"Provide a mission and customer focus to the provisioning of common
> IT services across NASA."***

IT is never an end in itself, but rather a tool for fulfilling NASA
missions and meeting its objectives. We maintain a customer focus to
guide us to the correct solution for a given situation, then work to
deliver that solution with quality and reliability. User outreach will
be provided to make sure our customers are aware of our valuable
services.

Tactical initiatives included in the FY2009-2011 plan that support this
strategic driver include:

-   Design and Implementation of VoIP Intercluster Trunking

-   Implement 1 Gig to Select Desktops to Support Digital Asset
    Management

-   Cisco Unified Personal Communicator SoftPhone

-   Upgrade the HQ Network Trunk Interconnect to 10G

-   Life Cycle Replacement of the HQ Wireless Network

-   Enhance Desktop Recovery Tivoli Storage Manager (TSM)

-   Life Cycle Replacement of Servers

-   Enhance Enterprise Storage

-   Restructure and Consolidation of HQ VLANs

-   Disk-to-Disk Enterprise Backup

-   Update Multimedia Offsite Support Capabilities

-   Update Multimedia Architecture/Web Streaming

-   Customer Service Enhancements

-   COTS Survey Tool

-   Implement Web Link Checker/Crawler

-   Caching Proxy/Reverse Proxy Architecture

## Security {#security .Style-Heading-2-+-Times-New-Roman}

> ***"Protect and secure the Agency's information assets."***

IT Security is not something you buy, but rather a discipline that must
be integrated into every service provided to NASA. We must believe in
our data and ensure that it is both credible and available. The more
widely and pervasively IT is deployed, the greater the need to have
security "built in" and not "bolted on" as an afterthought. NASA must
explore mechanisms to drive down the increasing costs of security
assurance plans, equipment, and reporting, while maintaining compliance
with Federal and Agency mandates.

Tactical initiatives included in the FY2009-2011 plan that support this
strategic driver include:

-   Secure Remote Access

-   Data Encryption Capability for Enterprise Storage

-   Caching Proxy/Reverse Proxy Architecture

-   Life Cycle Replacement of HQ Firewall Systems HW

-   Implement Policy Compliance Scanning

-   Improve Monitoring Capabilities with NETIQ Security Manager

-   Improve IDS Infrastructure

-   Improve Forensic Capabilities

-   Security Content Automation Tools S-CAP

## Unified Investment Portfolio {#unified-investment-portfolio .Style-Heading-2-+-Times-New-Roman}

> ***"Maintain an Agency-wide IT investment portfolio in alignment with
> missions and business needs."***

As always, we must be good stewards of NASA resources by reducing cost
and increasing efficiency and automation. We continue the move away from
manual processing and towards fully automated or "lights out"
operations. We also seek to reduce cost by adopting common architectures
and leveraging NASA's vast economies of scale. Finally, managing our
services as an integrated portfolio is a required step in migration to
Service Orientated Architectures and assuring alignment with the
Agency's Enterprise Architecture.

Tactical initiatives included in the FY2009-2011 plan that support this
strategic driver include:

-   Assess the Benefit Associated with Unity and NOMAD Interoperability

-   Enhance Desktop Recovery Tivoli Storage Manager (TSM)

-   Restructure and Consolidation of HQ VLANs

-   Disk-to-Disk Enterprise Backup

-   Investigate Server Virtualization

-   Continuation of ColdFusion Upgrade

-   Continuation of Oracle Upgrade to 10G

-   Update Multimedia Offsite Support Capabilities

-   Update Multimedia Architecture/Web Streaming

-   Implement Automated Requirements, Test Suite, and Test Data
    Development

-   Common Set of Development/DBA Tools

-   MicroPact entelliTrak COTS Tool

-   Update HQ Based Search Engine

-   COTS Survey Tool

-   Service-Orientated Architecture (SOA)

-   Investigate New Web Application Reporting Tools

-   Life Cycle Replacement of HQ Firewall Systems HW

-   Improve Monitoring Capabilities with NETIQ Security Manager

## Effective Work Force {#effective-work-force .Style-Heading-2-+-Times-New-Roman}

> ***"Maintain a strong IT workforce through effective human capital
> management."***

NASA's most important resource is its people, therefore the greatest
gains are to be found from enabling communication and collaboration
among people. Whether it is efficient broadcast of information,
collaborative workgroups, or reliable person-to-person communications,
the reliability, capabilities, and quality of collaboration tools must
continuously be improved. We will promote designs and approaches that
will enable our customers to discover information relevant to their
activities, communities of similar interests, and more automated
mechanisms for obtaining and sharing information.

Virtually all tactical initiatives included in the FY2009-2011 plan
support this strategic driver. Those activities with direct support
include: customer driven workstation file back up and restore; building
wide DHCP; wireless upgrades; improved remote access; improved search;
and a streamlining of new action tracking and custom applications (SOA).

# Scope

In general, this plan proposes improvements to HQ-wide IT services
provided and managed by ITCD, which reports to the HQ Office of
Infrastructure and Administration (OIA). Services sited at HQ that are
not part of the ITCD-provided and managed infrastructure (e.g. Mission
directorate IT systems) may influence but are not a part of this plan.

# Tactical Plan Initiatives in Context

This section provides an overview of the tactical plan initiatives and
discusses them in the context of their business and strategic drivers.
Many initiatives are based on recurring common themes; this is a
reflection of HQ's unified approach to architecture and management, as
well as Agency consolidation initiatives.

## Infrastructure {#infrastructure .Style-Heading-2-+-Times-New-Roman}

The most significant recurring theme in the area of infrastructure
improvement is redundancy and high-availability. The requirements for
fault tolerance and high availability include: (a) no downtime; (b)
lower maintenance and repair costs; and (c) continuity of operations.
Our approach to addressing these requirements has evolved steadily. We
once relied on hardened server components and later on "high
availability" servers with redundant components. This trend must
continue: we must build reliable services that do not rely on a single
server and ultimately provide geographically distributed services that
do not rely on the availability of a specific building or geographic
region. The expansion and direct use of high-availability storage will
greatly improve service availability. The high-availability Intranet,
Extranet, and database services also address this need.

Additional themes are security and ease of use. These concepts often
compete with one another if not carefully designed. This will be
accomplished through the redesign and implementation of simplified
network Virtual Local Area Network (VLAN) architecture. Network security
technology adds intelligence to the network and enables the network to
automatically configure and provision the proper service to the devices
that attach to it.

## Continuous Improvement and Maintenance Projects {#continuous-improvement-and-maintenance-projects .Style-Heading-2-+-Times-New-Roman}

The large array of HQ systems and services already deployed require
ongoing maintenance, as well as upgrades to meet evolving needs. These
continuous improvement projects are described separately from new
initiatives, although there is often overlap and interdependence between
the two. Several projects attend to system and infrastructure upgrades
that are necessary to keep pace with technology and evolving
requirements. These projects include enhancements to enterprise-wide
enterprise storage and backup services.

## Telecommunications {#telecommunications .Style-Heading-2-+-Times-New-Roman}

Regardless of their location, HQ customers require reliable and secure
access to Agency services and services hosted in our computer facility.
Our telework capabilities will receive continuous upgrades and
improvements that will provide additional functionality, increased
capacity, and redundancy to ensure service availability.

## Security {#security-1 .Style-Heading-2-+-Times-New-Roman}

Security initiatives will provide system monitoring and auditing
improvements that will facilitate automated reactions to possible
security incidents, thus reducing response time and meeting
ever-increasing incident reporting requirements.

## Application Services {#application-services .Style-Heading-2-+-Times-New-Roman}

This plan describes many projects that are the result of our renewed
focus on the importance of integrating data and information. Some of our
customers require access to many similar or related pieces of
information that reside in different databases or data repositories. It
is difficult to discover where all these related pieces of data are and,
once discovered, difficult to collect the needed pieces and combine them
together. We intend to apply the same type of Web Services deployed in
Web-based business applications to tie logical pieces of data together
and conform to multiple workflows. Treating the Web as a platform we can
leverage current applications and strategies to create richer content
and meaning and sharing outside the boundaries of traditional databases.
We will look to current Web service and machine discoverable (semantic)
technologies to turn data sources into reusable resources that can be
harvested through browsing and queries. This effort will achieve
increases in efficiency and will reduce analytic compilation time for
data calls, budget formulations, and program decision support.

# Tactical Plan Initiatives in Detail

This section describes each project in the portfolio of projects that
may be executed within the next thirty-six months.

## Voice Services {#voice-services .Style-Heading-2-+-Times-New-Roman}

All IT investments required for providing voice services to users.

### Agency "Class" VoIP Disaster Recovery/Avoidance Solution Continuity of Operations Plan (COOP) {#agency-class-voip-disaster-recoveryavoidance-solution-continuity-of-operations-plan-coop .Style-Heading-3-+-Times-New-Roman}

This project will enable inbound and outbound trunk failover between
NASA centers. If one center were to have a Public Switched Telephone
Network (PSTN) trunk failure, traffic could be re-routed to another NASA
Voice over Internet Protocol (VoIP) center and inbound and outbound
dialing could be largely unaffected.

#### Project Priority: *M*

### Design and Implementation of VoIP Intercluster Trunking {#design-and-implementation-of-voip-intercluster-trunking .Style-Heading-3-+-Times-New-Roman}

This will allow for CallManager to CallManager communications across the
Wide Area Network (WAN). Calls can be originated and received by any
NASA center that has implemented Cisco VoIP across the NASA network
infrastructure bypassing the PSTN and implementing features such as
direct call forwarding, 5 digit dialing and advanced VoIP features.

#### Project Priority: *P*

### Assess the Benefit Associated with Unity and NOMAD Interoperability {#assess-the-benefit-associated-with-unity-and-nomad-interoperability .Style-Heading-3-+-Times-New-Roman}

This project will include an analysis to determine the benefit, if any,
related to the potential interoperability between NASA HQ voicemail and
NASA Agency Email included in the NASA Operational Messaging and
Directory Service (NOMAD).

#### Project Priority: *P*

### Implement 1 Gig to Select Headquarters Desktops {#implement-1-gig-to-select-headquarters-desktops .Style-Heading-3-+-Times-New-Roman}

Currently, network bandwidth to the desktop is limited by the model of
the Cisco VoIP phone deployed to all users at NASA HQ. The current VoIP
phone limits network bandwidth to the end users at 100Mb/s. The new 7975
Cisco phones will increase bandwidth to end-users by an order of
magnitude (1Gb/s). The NASA HQ network infrastructure is capable of
providing 1Gb/s to a limited number of customers. This initiative will
replace the current 7970 VoIP telephones with the 7975 VoIP telephones
for customers that require 1Gb/s service to the desktop.

#### Project Priority: *M*

### Cisco Unified Personal Communicator SoftPhone {#cisco-unified-personal-communicator-softphone .Style-Heading-3-+-Times-New-Roman}

The implementation of the Cisco Unified Personal Communicator SoftPhone
allows easy access to voice, video, instant messaging, Web conferencing,
voice mail, and presence information from a single, multimedia interface
on a PC or Mac. An integral component of the Cisco Unified
Communications family of products, Cisco Unified Personal Communicator
is a powerful desktop computer application that uniquely integrates the
most frequently used communications applications and services.

#### Project Priority: *P*

### VoIP Hardware Life Cycle Replacement {#voip-hardware-life-cycle-replacement .Style-Heading-3-+-Times-New-Roman}

A service as critical as the telephone requires assurance that current
levels of support in both hardware and software VoIP infrastructure
components are maintained promptly. This effort covers servers and
gateways needed to make sure that our voice services remain at high
levels of availability and service.

#### Project Priority: *M*

## Wide Area Network (WAN) {#wide-area-network-wan .Style-Heading-2-+-Times-New-Roman}

All Information Technology (IT) investments required for supporting
network communications between NASA Local Area Networks (LANs), NASA
data centers, and external partners.

### Secure Remote Access {#secure-remote-access .Style-Heading-3-+-Times-New-Roman}

The HQ Public IPsec Virtual Private Network (VPN) service is implemented
using a pair of redundant Cisco VPN 3080 concentrators. Separate
profiles are utilized for NASA HQ employees, general-support
contractors, and operations support. Different resources are available
to these different customer communities. The Cisco 3080 hardware is
approaching End of Life (EOL) and end of vendor support and will
possibly have to be replaced. With this project, NASA HQ will evaluate
different options for replacing the IPSec VPN service.

#### Project Priority: *M*

## Local Area Networks (LAN) {#local-area-networks-lan .Style-Heading-2-+-Times-New-Roman}

Local Area Network (LAN) components refer to all Information Technology
(IT) investments required to provide networking services within a
building, campus, data center or Center, including hardware, software,
and services.

### Upgrade the HQ Network Trunk Interconnect to 10G {#upgrade-the-hq-network-trunk-interconnect-to-10g .Style-Heading-3-+-Times-New-Roman}

The throughput capacity of the HQ network backbone was recently upgraded
from 1Gbps to 2Gbps in order to provide sufficient bandwidth to support
the Desktop Computer Backup project. This trend toward greater peak
network utilization is expected to continue with future developments
such as:

-   Ability to support 1 Gbps throughput to desktop computers

-   Increasing use of large network-based storage such as the 100TB
    NetApp 3070

-   Increasing use of video, real-time collaboration, and "rich client"
    real-time applications

This project will upgrade the NASA HQ network infrastructure
sufficiently to support a 10-gigabit network backbone and 1 gigabit to
all LAN ports.

#### Project Priority: *M*

### Life Cycle Replacement of the HQ Wireless Network {#life-cycle-replacement-of-the-hq-wireless-network .Style-Heading-3-+-Times-New-Roman}

Currently, the NASA HQ wireless network is composed of two components: a
Wireless Guest Network and a Private Network Wireless Network. A single
set of wireless access points is used to provide connectivity for both
networks.

Both the hardware and software infrastructure supporting the HQ wireless
network is approaching end-of-life and end-of-vendor support, and life
cycle replacement will be done as part of this project. Additionally,
new technology enhancements will reduce maintenance.

Each network is implemented as VLANs on wireless access points that are
trunked to the HQ switches. NASA HQ utilizes autonomous access points.
Guest Wireless is controlled using a captive portal implemented on an
appliance. Private Wireless is implemented using WiFi Protected Access
(WPA) and requires a SecurID RSA token for access. "Wireless roaming for
guest" works HQ building wide. Roaming for private wireless currently
works on a per-floor basis. The wireless network is managed using a
Wireless LAN Solution Engine (WLSE) and monitored using HP OpenView.
NASA HQ will examine the possibility of enhancing the roaming capability
for the private wireless network. At this time, the vendor (Cisco) is
recommending a Wireless Controller based network solution which uses
'dumb' access points. NASA HQ will determine if it should move in this
direction for future iterations of its wireless network.

#### Project Priority: *M*

## Video Infrastructure Services {#video-infrastructure-services .Style-Heading-2-+-Times-New-Roman}

Information Technology (IT) investments required for supporting video
distribution and video conferencing services used by NASA including
hardware, software and support services.

### Implement IPTV {#implement-iptv .Style-Heading-3-+-Times-New-Roman}

A pilot of Internet Protocol Television (IPTV) will be implemented to a
select number of end users to demonstrate the feasibility of scaling to
a more robust video architecture. Involvement from NASA TV will be
necessary in order to complete the pilot. An additional pilot of
streaming to new media platforms such as PDA, Google Gadgets, and Apple
Widgets will be investigated and prototyped.

#### Project Priority: *P*

## Workstations {#workstations .Style-Heading-2-+-Times-New-Roman}

IT investments required to provide desktop computing services to users:
hardware and software (operating systems, applications, and utilities)
and services (including design, build, operations, multipurpose help
desks, support, and maintenance services). Includes peripherals/printers
(networked and local attached), workstation virus protection.

### Enhance Desktop Recovery Tivoli Storage Manager (TSM) {#enhance-desktop-recovery-tivoli-storage-manager-tsm .Style-Heading-3-+-Times-New-Roman}

The Desktop Recovery project is based on Tivoli Storage Manager (TSM).
This effort will upgrade the TSM software to the latest stable release.
In addition, capacity planning will be used to optimize server and
storage hardware. Network bandwidth will be examined to ensure users can
be backed up and restored during the shortest window. Ad-hoc customer
driven backup and restore for select files will be implemented as well
as secure remote backup services for those customers on travel. IBM's
Continuous Data Protection (CDP) will be investigated.

#### Project Priority: *M*

## Data Center {#data-center .Style-Heading-2-+-Times-New-Roman}

Includes data storage (mass storage systems, digital data storage
services, supercomputers, computing clusters such as Beowulf) including
hardware, software, services, etc.), database management and
administration services, data/document management systems, and disaster
recovery services. In addition, the Data Center category includes
server/hosting hardware and associated operating system software and
system administration, which are not part of a shared Data Center.

### Life Cycle Replacement of Servers {#life-cycle-replacement-of-servers .Style-Heading-3-+-Times-New-Roman}

This initiative proposes to evaluate legacy server platforms and upgrade
the hardware and operating systems to newer technology where
appropriate. There are servers in the NASA HQ Infrastructure that have
reached end-of-life, and are no longer fully supported by the vendor.
These servers will be upgraded or replaced by current technology.
Servers in need of upgrade will also be evaluated to determine whether
their services can be consolidated. The deployment of current operating
system software is essential to increase security, provide reliability,
and simplify administration of the NASA HQ server infrastructure.

#### Project Priority: *M*

### Enhance Enterprise Storage {#enhance-enterprise-storage .Style-Heading-3-+-Times-New-Roman}

This project will employ capacity planning techniques to ensure that the
enterprise disk storage, the NetApp 3070 and NetApp 2050, are of
sufficient storage and throughput capacity to meet current and projected
3-year requirements. The objective of this initiative is to replace any
storage components approaching end-of-life. Procure any additional
Serial Attached Technology Attachment (SATA) or Fiber Channel (FC-AL)
drives to augment or replace existing storage as indicated by capacity
planning.

#### Project Priority: *M*

### Enhance Enterprise Backup {#enhance-enterprise-backup .Style-Heading-3-+-Times-New-Roman}

This project will employ capacity planning techniques to ensure that the
enterprise tape storage is of sufficient storage and throughput capacity
to meet current and projected 3-year requirements. The objective of this
initiative is to replace any storage components approaching end-of-life.
The 8 LTO 2 drives in the Advanced Digital Information Corporation
(ADIC)/Quantum I2000 do not provide the storage capacity or throughput
required for the NASA HQ enterprise backup solution. The new generation
of LTO4 drives will provide the storage density and throughput required.

#### Project Priority: *M*

### Restructure and Consolidation of HQ VLANs {#restructure-and-consolidation-of-hq-vlans .Style-Heading-3-+-Times-New-Roman}

By restructuring NASA HQ VLANs into a facility-based architecture, VLANS
will be aligned with core business functions and services that do not
change frequently. The VLAN design could extend this segregation to
things that can logically and functionally be separated, regardless of
whether they are changeable. This restructuring and consolidation of
VLANs will result in reduced administrative overhead.

The redesign of the network from an organization-based VLAN architecture
to a facility-based VLAN architecture will greatly simplify the network
and permit the implementation of features designed to minimize
disruption of service in the event of a component failure.

#### Project Priority: *M*

### Implementation of DHCP across the HQ Private Network {#implementation-of-dhcp-across-the-hq-private-network .Style-Heading-3-+-Times-New-Roman}

Currently, most NASA HQ workstations use static Internet Protocol (IP)
addressing. There is currently an Agency project, IPAM, (IP Address
Management) that will "develop and deploy IP address management
architecture for the Agency to support enterprise IP address
management". This project encompasses Agency-wide Dynamic Host
Communications Protocol (DHCP) and Domain Naming Services (DNS)
services. NASA HQ will participate in the IPAM project and implement the
Agency IPAM (DHCP) solution.

The benefits of DHCP include minimized configuration errors caused by
manual IP address configuration, such as typographical errors, as well
as address conflicts caused by a currently assigned IP address
accidentally being reissued to another computer. Transmission Control
Protocol (TCP)/IP configuration is centralized and automated,
potentially reducing errors and reducing the level of effort managing IP
address assignments. Network administrators can centrally define global
and subnet-specific TCP/IP configurations. Address changes for client
configurations that must be updated frequently, such as remote access
clients that move around constantly, can be made efficiently and
automatically when the client restarts in a new location.

#### Project Priority: *M*

### Disk-to-Disk Enterprise Backup {#disk-to-disk-enterprise-backup .Style-Heading-3-+-Times-New-Roman}

Historically, magnetic tape has been the backup medium of choice, in
part because traditionally it has been less expensive than other storage
options. However, the cost gap between inexpensive disk technologies and
tape is narrowing. In addition, tape is slower, sometimes substantially,
than disk. As the amount of data that organizations have and need to
back up has grown, the amount of time it takes to back up all that data
to tape has become increasingly expensive. Likewise, retrieving data on
tape can be a time-consuming process.

Currently, NASA HQ is consuming approximately 50 new tapes per week to
meet the data retention and backup rotation scheme. This results in a
yearly tape cost of approximately \$130,000. This does not include the
human costs of maintaining and labeling the tapes, sending tapes off
site for data vaulting, or the costs of expensive enterprise tape
libraries and robotics.

Tape breaks, it's vulnerable to environmental factors such as humidity
and heat, and it loses tension. Tape drive heads require periodic
cleaning, and data isn't always restored perfectly due to these and
other factors. Some experts estimate that from 25% to 50% of tape
restorations fail, at least partially.

Disks are more durable than tape: they last longer, and they hold up
under more frequent overwriting. Because they are contained in a sealed
environment, there is less chance of the media being affected by
external environmental factors.

While tape may still be the medium of choice for off-site data vaulting,
disk may be the backup medium of choice for on-site data.

Virtual tape libraries (VTLs) offer an excellent method of integrating
disk-based backup into an established enterprise tape-backup system.
Under this project, a form of enterprise disk-based backup or VTL will
be implemented to augment the current ADIC/Quantum I2000 enterprise tape
library.

#### Project Priority: *P*

### Investigate Server Virtualization {#investigate-server-virtualization .Style-Heading-3-+-Times-New-Roman}

There has been a proliferation of servers within the production, SEF,
and development environments. Additional servers require additional
power, cooling, and management.

Server virtualization is the masking of server resources, including the
number and identity of individual physical servers, processors, and
operating systems, from server users. The server administrator uses a
software application to divide one physical server into multiple
isolated virtual environments. The virtual environments are sometimes
called virtual private servers, but they are also known as partitions,
guests, instances, containers, or emulations.

There are three popular approaches to server virtualization: the virtual
machine model, the paravirtual machine model, and virtualization at the
operating system layer. Server virtualization within the NASA HQ
production, SEF, and development environments will be investigated as a
strategy to reduce the overall number of physical servers and achieve
increased efficiencies.

The focus of this project will be on the cost savings associated with
reduced investment requirement, reduced administrative overhead, and
reduced maintenance costs associated with server virtualization.

#### Project Priority: *P* 

## Application Services {#application-services-1 .Style-Heading-2-+-Times-New-Roman}

This category provides a service to Information Technology (IT)
end-users, and includes the development, operations and maintenance of
applications that are not science and engineering workstations.

### Continuation of ColdFusion Upgrade {#continuation-of-coldfusion-upgrade .Style-Heading-3-+-Times-New-Roman}

The Intranet and Extranet application servers must be upgraded to a more
current version of the ColdFusion applications development environment.
NASA HQ is running version 6.0 of ColdFusion, which is known to have
problems. ColdFusion version 6 has reached end-of-life. In order to
mitigate these issues, this project will upgrade ColdFusion to version
8.

#### Project Priority: *M*

### Continuation of Oracle Upgrade to 10G {#continuation-of-oracle-upgrade-to-10g .Style-Heading-3-+-Times-New-Roman}

While some applications have been migrated to Oracle 10g, Oracle Version
(9i) is still running on some production servers. This version is not
supported on newer server hardware and operating systems. Further, it is
more costly to maintain and test across multiple versions of Oracle. As
the life cycle replacement of server hardware and server OS continues,
the version of Oracle needs to be upgraded to remain "in-sync." This
project will complete the migration to Oracle 10g. The applications will
be migrated one at a time to minimize risk, and compatibility issues
will be addressed on a case-by-case basis.

#### Project Priority: *M*

### Update Multimedia Offsite Support Capabilities {#update-multimedia-offsite-support-capabilities .Style-Heading-3-+-Times-New-Roman}

A core capability of the HITSS contract is to be able to provide offsite
presentation support to the NASA customer. This includes providing
executive level support for launch events at KSC, symposia sponsored by
the NASA History Office, and retreats requested by the NASA
Administrator.

This project will provide a refresh of the software and hardware
required for this type of support. Technologies that will be refreshed
include laptops, projectors, portable projection screens, and other
necessary hardware and software needed to perform agile support
capabilities.

#### Project Priority: *M*

### Update Multimedia Architecture/Web Streaming {#update-multimedia-architectureweb-streaming .Style-Heading-3-+-Times-New-Roman}

The multimedia capabilities within NASA HQ have evolved to a point where
the customer receives cutting-edge content for their Web sites,
applications, videos, and outreach products. Enabling this type of
enhanced experience allows NASA to attract talent to the science field
and helps to accomplish the Agency's strategic vision of communicating
to the younger generation.

This project will allow for increasing the capabilities in the area of
3-D animation, rich graphical interface development, integration of
standards based protocols into Web development methodologies, and
enhanced desktop and online visualization capabilities. The goal of this
project is to implement an accessible means for the NASA customer to
achieve a rich multimedia experience for any presentation or
communication platform.

The Web streaming infrastructure at NASA HQ supports the live 24/7
streaming of NASA TV. The content produced from HQ ranges from shuttle
launches to press conferences and can be viewed from NASA.gov as well as
other sites throughout the Agency. The current streaming infrastructure
supports Windows Media and RealMedia formats.

This project will provide enhancements to the types of media formats
that can be streamed from NASA HQ. This will include updating the
software and hardware needed to support the encoding and data delivery
of the video content. Maintenance agreements for all software and
hardware will be addressed.

#### Project Priority: *M*

### Customer Service Enhancements {#customer-service-enhancements .Style-Heading-3-+-Times-New-Roman}

This project will examine ways to continuously enhance the customer
service experience by examining the following;

-   Getting out in front of issues and creating solutions

-   Better understanding the environment, as this sets the context for
    success and contribution

-   Creating a vision, a view on the future and how it will be realized

-   Shaping and informing expectations, as they are the criteria by
    which results are measured

-   Creating clear IT governance

-   Weaving together NASA business and IT strategy

-   Building new IT organizations as appropriate

-   Building high performing IT teams as appropriate

-   Managing IT risks

-   Communicating performance

#### Project Priority: *M*

### Implement Automated Requirements, Test Suite, and Test Data Development {#implement-automated-requirements-test-suite-and-test-data-development .Style-Heading-3-+-Times-New-Roman}

Stress and functional testing against new and modified applications is
currently a manual, time-consuming, and labor-intensive process prone to
human error. This initiative proposes introduction of tools and
procedures to automate the testing of applications for functionality,
validity, performance, and other criteria as stated in the HITSS
Software Management Guide. This effort builds upon previous assessments
of tools and existing procedures to automate the creation of meaningful
test data.

This project will implement an automated test suite that will predict
system behavior with load testing, reduce resource requirements and the
duration of test activities, and standardize test methodology.
Furthermore, it will facilitate the troubleshooting of defects, whether
application, logic, or performance related. As part of this initiative,
a standardized requirements tool will be integrated into the application
development process. This will ensure the maximum efficiency and benefit
of the automated test suite. The residual benefit will be a central
repository of standardized application requirements available for reuse.

#### Project Priority: *M*

### Common Set of Development/DBA tools {#common-set-of-developmentdba-tools .Style-Heading-3-+-Times-New-Roman}

In order to improve developer and Database Administrator (DBA)
productivity, a common set of tools/software will be deployed across the
developer and DBA communities. The proper standardized software toolset
will foster collaboration, reduce errors, and increase productivity.

#### Project Priority: *M*

### MicroPact entelliTrak COTS Tool {#micropact-entellitrak-cots-tool .Style-Heading-3-+-Times-New-Roman}

EntelliTrak™ is an enterprise-level, Web-based data tracking application
that enables meaningful data management, tracking, retrieval and
reporting without custom development. Additionally, entelliTrak affords
faster processing of information, improved information assurance,
enhanced operational efficiency, and better security. It is said to
provide a rapid return on investment based on lower cost of ownership
and immediate results. Purported to be both efficient and effective,
entelliTrak satisfies data tracking needs.

EntelliTrak will be investigated to determine the feasibility and
desirability of integrating this tool into the NASA HQ environment.

#### Project Priority: *M*

### Update HQ Based Search Engine {#update-hq-based-search-engine .Style-Heading-3-+-Times-New-Roman}

Searching HQ Web sites and Web applications has the potential of
bringing the NASA user relevant information about their program in an
expedient manner. Today's Web viewers tend toward search-based browsing
as opposed to navigating through hyperlinks.

This project will look at the implementation of relevant metadata within
HQ-based Web sites and applications. This study will include, but will
not be limited to, the standards and methodologies for the development
of interoperable online metadata standards as recommended by the Dublin
Core Metadata Initiative and the Agency Enterprise Architecture. In
addition, a current and robust implementation of a search engine will be
researched and implemented at HQ to allow for meaningful search results.

#### Project Priority: *M*

### COTS Survey Tool {#cots-survey-tool .Style-Heading-3-+-Times-New-Roman}

Many HQ service-providing organizations (from the I&M offices, General
Counsel\'s office, Legislative Affairs Office, etc.) would like to
survey the Federal employees and organizations they serve. Providing a
generic Government employee survey tool that can be easily tailored and
adapted to meet organization needs will be a cost-effective way to
improve customer service throughout HQ.

This project will build upon research and analysis previously done, and
it will include a pilot implementation of a COTS solution for customers
to easily create and conduct surveys.

This project, upon acceptance of the recommendation and upon successful
completion of the pilot, will include the procurement and implementation
of the COTS Survey Tool.

#### Project Priority: *M*

### Service-Oriented Architecture (SOA) {#service-oriented-architecture-soa .Style-Heading-3-+-Times-New-Roman}

Unfortunately, each application requires a custom interface to satisfy
its particular requirements, resulting in numerous point-to-point
information flows. These flows are neither well understood by the
enterprise as a whole, nor explicitly managed by server operations. Many
of the applications at NASA HQ lack shared data and services among
machines. This lack of transparency in the inherent dependencies among
infrastructure components negatively affects the overall supportability
of the infrastructure and the ability to plan effectively for high
availability and disaster contingencies.

This project will recommend and, as appropriate, implement a
Service-Oriented Architecture (SOA) model for NASA HQ applications. SOA
atomizes IT services and aligns the IT architecture with the business
architecture, so that applications can leverage one another via a
published standard interface in business-to-business (B2B) fashion. This
drives the re-use model from the code library level up to the service
level, so that each IT function need only be designed, deployed, and
supported once. Because the interfaces are standardized, they are easy
to offer securely to both external and internal clients.

This effort will include a short study on the most capable and
compatible SOA gateway candidates for the legacy HQ infrastructure. The
technical approach envisions starting a SOA gateway service in the SEF
that would a) create a registry of available services, b) manage the
security of data sources, and c) provide a common data exchange
mechanism for subscribed applications.

This effort includes documenting the as-is application architecture,
developing and documenting the go-to architecture, and completion of a
documented gap analysis between the as-is and the go-to application
architectures. The effort also includes development of a plan to fill
the gap and achieve the goal of the SOA for applications.

The SOA approach is to create many loosely coupled interoperable
services that are organized around business practices; the services
communicate with each other via a business-to-business (B2B) model. The
power of SOA is in leveraging the use of these building-block services,
rather than writing many large, monolithic applications that do many of
the same things.

#### Project Priority: *M*

### Application Architecture Modeling Tools {#application-architecture-modeling-tools .Style-Heading-3-+-Times-New-Roman}

Movement to a model-driven application architecture is essential in view
of shrinking budgets and mandates for greater efficiency. The
development of component-model technologies that pull together the
heterogeneous computing environments will make it easier to maintain and
integrate new applications with a planned and controlled view toward
enterprise management.

Initial tasks will center on the identification of core models that will
represent the common features of NASA HQ applications within identified
categories. Maximizing automation of the mapping step is a goal. Early
efforts will simplify development projects and represent a significant
gain through the use of consistent architectures.

The benefits of a model-based architecture begin at the time of service
request submittal. New SRs could be examined to determine if a full or
partial capability exists within the architecture and could net a cost
avoidance in selected cases. A second benefit of a model-based
architecture would be a reuse within the development process. Another
benefit of a model-based architecture would be a maximized efficiency in
streamlining, downsizing, or merging applications or capabilities.

#### Project Priority: *P*

### Implement Web Link Checker/Crawler {#implement-web-link-checkercrawler .Style-Heading-3-+-Times-New-Roman}

A Web crawler (also known as a Web spider or Web robot) is a program or
automated script that browses Web sites in a methodical, automated
manner. Crawlers/Checkers can also be used for automating maintenance
tasks on a Web site, such as checking links or validating HTML code.

Web Link Checker/Crawler will be implemented to validate links and HTML
code on NASA HQ--hosted Web sites.

#### Project Priority: P

### Investigate New Web Application Reporting Tools {#investigate-new-web-application-reporting-tools .Style-Heading-3-+-Times-New-Roman}

Current NASA HQ reporting tools are based on the Crystal Reports version
10 COTS product and related proprietary data formats. This has resulted
in Web applications requiring desktop installations of plug-ins to
operate properly, thus reducing the portability and accessibly of Web
applications.

This project will recommend and, as appropriate, implement a new
reporting mechanism and standard for NASA HQ that addresses the
shortcomings of Crystal Reports. The recommendation will include the
recommended support model, an analysis of the one-time and recurring
costs for maintenance, and a survey of the availability of personnel in
the marketplace with the skill set required to support the new standard.

This project will review multiple vendor offerings and open-source
options for providing large-scale reporting capabilities. Portable
Document Format (PDF) and open-standards data formats will be
investigated for HQ compatibility. If recommended, new reporting
system(s) will be prototyped on development systems, tested in the SEF,
and adopted as the replacement for Crystal Reports.

It should be noted that Crystal 11, which has been partially
implemented, may meet all the above requirements.

#### Project Priority: *O*

## IT Management {#it-management .Style-Heading-2-+-Times-New-Roman}

This category provides CIO functions including management of information
assets and implementation of NASA and federal IT-related policies,
procedures, regulations, and legislation.

### Enhanced Configuration Management Services for HQ IT Assets  {#enhanced-configuration-management-services-for-hq-it-assets .Style-Heading-3-+-Times-New-Roman}

NASA HQ requires a Configuration Management (CM) repository and service
that provides query capabilities across our IT assets. These assets
include network components, voice services, appliances, servers,
applications, software and affiliated documentation. Moreover the
interrelationships and interdependencies of these components must be
easily visible to support Business Impact Analysis, portfolio alignment,
service outages, and reporting. Building on the groundwork of an
aggregation service and the integration of a document repository, a
Standard Operations Procedure repository, and DNS, this effort will be
further enhanced to integrate monitoring services such as Patchlink to
assure inventories are automatically updated. The service will be
further enhanced to integrate a software library where production
versions of applications reside. Data entry screens will be provided for
BIA and Change Requests will be integrated. An update to HQ IT Work
Management System to enable both efficiencies and integration will be
incorporated as well as CPIC integration. A well designed, easy-to-use
CM repository and service will increase reuse, and therefore reduce cost
to the Government.

#### Project Priority: *M*

### IPv6 Capability for Perimeter and Core {#ipv6-capability-for-perimeter-and-core .Style-Heading-3-+-Times-New-Roman}

The Office of Personnel Management has mandated that all Federal
Agencies transition their networks to support the routing, and use of
Internet Protocol Version 6 (IPv6). This initiative is a continuation of
prior year Tactical Plan initiatives that were focused on the upgrades
of Headquarters core network systems necessary to support dual stack
(IPv4 & IPv6) operations as well as native IPv6. These upgrades have
been completed and the Headquarters network is fully capable of
supporting IPv6 in a dual stack or native configuration. This initiative
is to develop, in coordination with the Agency IPv6 working group and
migration team, the Headquarters project implementation plans and
schedules ensuring Headquarters remains in alignment with the Agency
project team.

#### Project Priority: *M*

## IT Security {#it-security .Style-Heading-2-+-Times-New-Roman}

This category includes Center-wide core IT security activities, for
example, coordination of IT Security planning, Certification and
Accreditation Official, Center perimeter firewall operations, patch
management (Patchlink, and CIS), vulnerability scanning an reporting,
FISMA reporting, incident response, penetration testing.

### Data Encryption Capability for Enterprise Storage {#data-encryption-capability-for-enterprise-storage .Style-Heading-3-+-Times-New-Roman}

Based on the June 23, 2006 OMB Executive Memo, "Encrypt all data on
mobile computers/devices which carry Agency data unless the data is
determined to be non-sensitive, in writing, by your Deputy Secretary or
an individual he/she may designate in writing" and "In those instances
where personally identifiable information is transported to a remote
site, implement NIST Special Publication 800-53 security controls
ensuring that information is transported only in encrypted form."
Additionally, "In those instances where personally identifiable
information is being stored at a remote site, implement NIST Special
Publication 800-53 security controls ensuring that information is stored
only in encrypted form."

This guidance from the June 23 2006 OMB Executive Memo has been broadly
interpreted to include off-site tape storage. Currently, NASA HQ uses a
data vaulting vendor to store enterprise backup tapes. It is likely that
these tapes contain PII data and currently these tapes are not
encrypted.

This project will implement data encryption either on the primary
enterprise data storage or on the enterprise backup tapes that are
vaulted offsite.

#### Project Priority: *M*

### Caching Proxy/Reverse Proxy Architecture {#caching-proxyreverse-proxy-architecture .Style-Heading-3-+-Times-New-Roman}

This project will study the best target architecture and technical
approach, then prototype and deploy caching proxy and reverse proxy
services at NASA HQ.

A proxy service will act as an interim agent when HQ customers access
the Internet. The proxy examines the communications protocols (e.g.,
HTTP) to ensure they are correct and that they are not being used for an
unintended purpose (e.g., buffer overflow, remote login). This has
significant security benefits, and the use of proxies is becoming more
prevalent.

Conversely, a reverse proxy service will act as an interim agent on
behalf of HQ servers, as they are accessed internally and externally.
The reverse proxy protects the servers from malformed protocols and
intrusion attempts, thus improving their security.

Caching is the interim storage of frequently retrieved data for the
immediate use of the next requester. To the extent that HQ customers
browse the same Web sites, a caching proxy will "replay" the text and
images already fetched by a previous requester. This greatly improves
apparent access speeds while reducing Internet bandwidth utilization.
Conversely, a caching reverse proxy for servers will reduce the burden
on those servers by re-playing repetitive requests. This will extend
useful server life and delay the need for upgrades.

The scope of this project includes: determining how best to integrate
Proxy, Reverse Proxy, and caching into the HQ environment; identifying
and acquiring the best products to meet NASA HQ requirements; and
installing, testing, piloting, and deploying the hardware and software.

#### Project Priority: *M*

### Life Cycle Replacement of HQ Firewall Systems HW {#life-cycle-replacement-of-hq-firewall-systems-hw .Style-Heading-3-+-Times-New-Roman}

The current NASA HQ firewall infrastructure is running Checkpoint
Firewall-1 NG AI R55. The end-of-life date for this software was in late
2006. In order to properly maintain the firewall management and
enforcement points within the NASA HQ network, all platforms must be
upgraded to Checkpoint Firewall-1 NGX Release 6.1. This initiative is in
process. Existing network firewall hardware will need to be replaced in
FY 2009 when the hardware will reach end-of-life and end-of-vendor
support.

#### Project Priority: *M* 

### Implement Policy Compliance Scanning {#implement-policy-compliance-scanning .Style-Heading-3-+-Times-New-Roman}

This project will investigate the available tool sets for implementing
policy compliance scanning. These will include tools such as Watchfire®
AppScan®, which automates Web application security audits to help ensure
Web site security and compliance, or Web Inspect 7, a Web application
security assessment tool re-architecture that analyzes complex Web
applications built on emerging Web 2.0 technologies. This initiative
will investigate the feasibility and practicality of implementing such
technologies at NASA HQ.

> This project will identify a set of tools that can assist in our
> efforts to ensure compliance with NIST SP 800-53 controls across all
> applications within the NASA HQ infrastructure. The main selling point
> for SCAP compatible products is that they provide automated features
> which allow HITSS Security to measure current NASA HQ security
> controls against federal information security guidelines (specifically
> NIST SP 800-53). In addition, SCAP compliant products will allow for
> more granular assessments of NASA HQ conformance to federal
> information security guidelines since each security configuration
> check will be mapped to a corresponding NIST SP 800-53 control. The
> intention is to identify SCAP compatible products that can be used to
> ensure a more effective way to enforce policy compliance within the
> NASA HQ.

#### Project Priority: *M*

### Improve Monitoring Capabilities with NETIQ Security Manager {#improve-monitoring-capabilities-with-netiq-security-manager .Style-Heading-3-+-Times-New-Roman}

NetIQ Security Manager automates security activity reviews, log
preservation, threat management, incident response, and change auditing.
It provides strong protection of data residing on host systems,
including servers, workstations, databases and the Active Directory
infrastructure.

NetIQ Security Manager enhances the value of an existing security
infrastructure by consolidating and archiving log and event data from
across the organization. This solution provides a comprehensive built-in
security knowledge base for analysis and remediation.

This project will build upon the existing production instances to
continue implementation of NETIQ Security Manager at HQ.

#### Project Priority: *M*

### Improve IDS Infrastructure {#improve-ids-infrastructure .Style-Heading-3-+-Times-New-Roman}

Intrusion detection systems (IDSs) detect malicious activity such as
denial of service attacks, port scans, or host compromises by monitoring
network traffic by reading network traffic and for suspicious patterns.
If, for example, a large number of Transmission Control Protocol (TCP)
connection requests to a very large number of different ports are
observed, it could be evidence of a malicious port scan.

Current IDS sensors are approaching end-of-life and do not support IPv6.
This initiative will determine whether the current NASA HQ IDSs are
optimally placed within the network infrastructure and whether they
should be upgraded or replaced. This project will also determine the
applicability and feasibility of using Intrusion Prevention Systems
(IPSs).

#### Project Priority: *M*

### Improve Forensic Capabilities {#improve-forensic-capabilities .Style-Heading-3-+-Times-New-Roman}

Computer forensics focuses on finding digital evidence after a computer
security incident has occurred. The goal of computer forensics is to do
a structured investigation and find out exactly what happened on an
information system or network and who was responsible. There are
essentially three phases for recovering evidence from an information
system: acquire, analyze, and report.

An analysis of available hardware and software forensic tools will be
conducted, and the hardware and software needed to establish forensic
capabilities for responding properly to security incidents will be
procured.

#### Project Priority: *M*

### Security Content Automation Tools S-CAP {#security-content-automation-tools-s-cap .Style-Heading-3-+-Times-New-Roman}

This is a method for using specific tools to enable automated management
and measurement of vulnerabilities and evaluation of associated policy
compliance.

The Security Content Automation Protocol (SCAP) is essentially a large
framework for managing known vulnerabilities and providing metrics for
policy compliance. The intention of this project is to utilize a SCAP
compliant tool that can leverage our ability to assure NASA HQ
compliance with federal information security regulations.

A security tool is SCAP compatible if it complies with a minimum of
three of the SCAP Standards.

The specific SCAP specifications are:

-   Common Vulnerabilities and Exposures (CVE) Compatibility

-   Common Configuration Enumeration (CCE)

-   Common Platform Enumeration (CPE) Compatibility

-   Common Vulnerability Scoring System (CVSS) Compatibility

-   Extensible Configuration Checklist Description (XCCDF) Format

#### Project Priority: *M*

# Project Priority and Resource Allocation

**Sorted by Tactical Plan Priority**

[Priority Definitions:]{.underline}

> M = Mandatory
>
> P = Preferred
>
> O = Optional

[Portfolio Definitions:]{.underline}

> Voice Services = A
>
> WAN = B
>
> LAN = C
>
> Video Infrastructure Services = D
>
> Workstations = E
>
> Data Center = F
>
> Application Services = G
>
> IT Management = H
>
> IT Security = I

PROJECT TITLE INCLUDES A HYPERLINK TO THE SECTION OF THE DOCUMENT
DESCRIBING THE INITIATIVE.

TO ACCESS, PLACE MOUSE OVER PROJECT TITLE - PRESS CTRL KEY AND CLICK
MOUSE.

<table>
<colgroup>
<col style="width: 6%" />
<col style="width: 7%" />
<col style="width: 19%" />
<col style="width: 6%" />
<col style="width: 5%" />
<col style="width: 6%" />
<col style="width: 7%" />
<col style="width: 5%" />
<col style="width: 6%" />
<col style="width: 7%" />
<col style="width: 4%" />
<col style="width: 6%" />
<col style="width: 7%" />
<col style="width: 4%" />
</colgroup>
<thead>
<tr class="header">
<th><p><strong>Tactical</strong></p>
<p><strong>Plan</strong></p>
<p><strong>Priority</strong></p></th>
<th><strong>Initiative</strong></th>
<th><strong>Project Title</strong></th>
<th><strong>Priority</strong></th>
<th><p><strong>FY09</strong></p>
<p><strong>FTE</strong></p></th>
<th><p><strong>FY09</strong></p>
<p><strong>ODC$</strong></p>
<p><strong>(1,000s)</strong></p></th>
<th><p><strong>FY09</strong></p>
<p><strong>ODC$</strong></p>
<p><strong>Running</strong></p></th>
<th><p><strong>FY10</strong></p>
<p><strong>FTE</strong></p></th>
<th><p><strong>FY10</strong></p>
<p><strong>ODC$</strong></p>
<p><strong>(1,000s)</strong></p></th>
<th><p><strong>FY10</strong></p>
<p><strong>ODC$</strong></p>
<p><strong>Running</strong></p></th>
<th><p><strong>FY11</strong></p>
<p><strong>FTE</strong></p></th>
<th><p><strong>FY11</strong></p>
<p><strong>ODC$</strong></p>
<p><strong>(1,000s)</strong></p></th>
<th><p><strong>FY11</strong></p>
<p><strong>ODC$</strong></p>
<p><strong>Running</strong></p></th>
<th><p><strong>Port-</strong></p>
<p><strong>folio</strong></p></th>
</tr>
</thead>
<tbody>
<tr class="odd">
<td>1</td>
<td>5.7.1</td>
<td>Continuation of ColdFusion Upgrade</td>
<td>M</td>
<td>4</td>
<td>0</td>
<td>0</td>
<td>0</td>
<td>0</td>
<td>0</td>
<td>0</td>
<td>0</td>
<td>0</td>
<td>G</td>
</tr>
<tr class="even">
<td>2</td>
<td>5.7.2</td>
<td>Continuation of Oracle Upgrade to 10G</td>
<td>M</td>
<td>1</td>
<td>0</td>
<td>0</td>
<td>0</td>
<td>0</td>
<td>0</td>
<td>0</td>
<td>0</td>
<td>0</td>
<td>G</td>
</tr>
<tr class="odd">
<td>3</td>
<td>5.6.5</td>
<td>Implementation of DHCP across the HQ Private Network</td>
<td>M</td>
<td>0.3</td>
<td>0</td>
<td>0</td>
<td>0.2</td>
<td>0</td>
<td>0</td>
<td>0.1</td>
<td>0</td>
<td>0</td>
<td>F</td>
</tr>
<tr class="even">
<td>4</td>
<td>5.7.8</td>
<td>MicroPact entelliTrak COTS Tool</td>
<td>M</td>
<td>1</td>
<td>225</td>
<td>225</td>
<td>1</td>
<td>150</td>
<td>150</td>
<td>1</td>
<td>150</td>
<td>150</td>
<td>G</td>
</tr>
<tr class="odd">
<td>5</td>
<td>5.8.2</td>
<td>IPv6 Capability for Perimeter and Core</td>
<td>M</td>
<td>0.5</td>
<td>50</td>
<td>275</td>
<td>1</td>
<td>75</td>
<td>225</td>
<td>1</td>
<td>150</td>
<td>300</td>
<td>I</td>
</tr>
<tr class="even">
<td>6</td>
<td>5.9.4</td>
<td>Implement Policy Compliance Scanning</td>
<td>M</td>
<td>0.5</td>
<td>75</td>
<td>350</td>
<td>0.25</td>
<td>0</td>
<td>225</td>
<td>0.5</td>
<td>0</td>
<td>300</td>
<td>I</td>
</tr>
<tr class="odd">
<td>7</td>
<td>5.9.3</td>
<td>Life Cycle Replacement of HQ Firewall Systems HW</td>
<td>M</td>
<td>0.2</td>
<td>200</td>
<td>550</td>
<td>0</td>
<td>0</td>
<td>225</td>
<td>0</td>
<td>0</td>
<td>300</td>
<td>I</td>
</tr>
<tr class="even">
<td>8</td>
<td>5.3.1</td>
<td>Upgrade the HQ Network Trunk Interconnect to 10G</td>
<td>M</td>
<td>1</td>
<td>50</td>
<td>600</td>
<td>0</td>
<td>0</td>
<td>225</td>
<td>1</td>
<td>0</td>
<td>300</td>
<td>C</td>
</tr>
<tr class="odd">
<td>9</td>
<td>5.5.1</td>
<td>Enhance Desktop Recovery Tivoli Storage Manager (TSM)</td>
<td>M</td>
<td>0.5</td>
<td>50</td>
<td>650</td>
<td>0.5</td>
<td>50</td>
<td>275</td>
<td>0.5</td>
<td>50</td>
<td>350</td>
<td>E</td>
</tr>
<tr class="even">
<td>10</td>
<td>5.7.9</td>
<td>Update HQ Based Search Engine</td>
<td>M</td>
<td>0.5</td>
<td>75</td>
<td>725</td>
<td>0</td>
<td>0</td>
<td>275</td>
<td>0</td>
<td>0</td>
<td>350</td>
<td>G</td>
</tr>
<tr class="odd">
<td>11</td>
<td>5.7.10</td>
<td>COTS Survey Tool</td>
<td>M</td>
<td>0.25</td>
<td>130</td>
<td>855</td>
<td>0</td>
<td>0</td>
<td>275</td>
<td>0</td>
<td>0</td>
<td>350</td>
<td>G</td>
</tr>
<tr class="even">
<td>12</td>
<td>5.9.7</td>
<td>Improve Forensic Capabilities</td>
<td>M</td>
<td>0.5</td>
<td>30</td>
<td>885</td>
<td>0.3</td>
<td>20</td>
<td>295</td>
<td>0.5</td>
<td>50</td>
<td>400</td>
<td>I</td>
</tr>
<tr class="odd">
<td>13</td>
<td>5.7.11</td>
<td>Service-Oriented Architecture (SOA)</td>
<td>M</td>
<td>0.5</td>
<td>100</td>
<td>985</td>
<td>0.25</td>
<td>60</td>
<td>355</td>
<td>0.25</td>
<td>50</td>
<td>450</td>
<td>G</td>
</tr>
<tr class="even">
<td>14</td>
<td>5.9.5</td>
<td>Improve Monitoring Capabilities with NETIQ Security Manager</td>
<td>M</td>
<td>0.2</td>
<td>30</td>
<td>1015</td>
<td>0.2</td>
<td>30</td>
<td>385</td>
<td>0.2</td>
<td>30</td>
<td>480</td>
<td>I</td>
</tr>
<tr class="odd">
<td>15</td>
<td>5.6.1</td>
<td>Life Cycle Replacement of Servers</td>
<td>M</td>
<td>0.5</td>
<td>225</td>
<td>1240</td>
<td>0.5</td>
<td>225</td>
<td>610</td>
<td>0.5</td>
<td>250</td>
<td>730</td>
<td>F</td>
</tr>
<tr class="even">
<td>16</td>
<td>5.1.6</td>
<td>VoIP Hardware Life Cycle Replacement</td>
<td>M</td>
<td>0.75</td>
<td>175</td>
<td>1415</td>
<td>0.75</td>
<td>250</td>
<td>860</td>
<td>0</td>
<td>0</td>
<td>730</td>
<td>A</td>
</tr>
<tr class="odd">
<td>17</td>
<td>5.6.2</td>
<td>Enhance Enterprise Storage</td>
<td>M</td>
<td>0.5</td>
<td>200</td>
<td>1615</td>
<td>0.5</td>
<td>200</td>
<td>1060</td>
<td>0.5</td>
<td>600</td>
<td>1330</td>
<td>F</td>
</tr>
<tr class="even">
<td>18</td>
<td>5.9.2</td>
<td>Caching Proxy/Reverse Proxy Architecture</td>
<td>M</td>
<td>0.5</td>
<td>75</td>
<td>1690</td>
<td>0</td>
<td>0</td>
<td>1060</td>
<td>0</td>
<td>0</td>
<td>1330</td>
<td>I</td>
</tr>
<tr class="odd">
<td>19</td>
<td>5.9.6</td>
<td>Improve IDS Infrastructure</td>
<td>M</td>
<td>0.5</td>
<td>50</td>
<td>1740</td>
<td>0.3</td>
<td>50</td>
<td>1110</td>
<td>0.1</td>
<td>0</td>
<td>1330</td>
<td>I</td>
</tr>
<tr class="even">
<td>20</td>
<td>5.6.4</td>
<td>Restructure and Consolidation of HQ VLANs</td>
<td>M</td>
<td>0.5</td>
<td>50</td>
<td>1790</td>
<td>0</td>
<td>0</td>
<td>1110</td>
<td>0</td>
<td>0</td>
<td>1330</td>
<td>F</td>
</tr>
<tr class="odd">
<td>21</td>
<td>5.8.1</td>
<td>Enhanced Configuration Management Services for HQ IT Assets</td>
<td>M</td>
<td>1</td>
<td>60</td>
<td>1850</td>
<td>0.4</td>
<td>50</td>
<td>1160</td>
<td>1</td>
<td>70</td>
<td>1400</td>
<td>H</td>
</tr>
<tr class="even">
<td>22</td>
<td>5.7.7</td>
<td>Common Set of Development/DBA tools</td>
<td>M</td>
<td>0.25</td>
<td>40</td>
<td>1890</td>
<td>0.25</td>
<td>40</td>
<td>1200</td>
<td>0.25</td>
<td>75</td>
<td>1475</td>
<td>G</td>
</tr>
<tr class="odd">
<td>23</td>
<td>5.3.2</td>
<td>Life Cycle Replacement of the HQ Wireless Network</td>
<td>M</td>
<td>1</td>
<td>30</td>
<td>1920</td>
<td>0</td>
<td>150</td>
<td>1350</td>
<td>1</td>
<td>0</td>
<td>1475</td>
<td>C</td>
</tr>
<tr class="even">
<td>24</td>
<td>5.2.1</td>
<td>Secure Remote Access</td>
<td>M</td>
<td>0</td>
<td>0</td>
<td>1920</td>
<td>1</td>
<td>80</td>
<td>1430</td>
<td>1</td>
<td>0</td>
<td>1475</td>
<td>B</td>
</tr>
<tr class="odd">
<td>25</td>
<td>5.6.3</td>
<td>Enhance Enterprise Backup</td>
<td>M</td>
<td>0.5</td>
<td>50</td>
<td>1970</td>
<td>0</td>
<td>0</td>
<td>1430</td>
<td>0.75</td>
<td>300</td>
<td>1775</td>
<td>F</td>
</tr>
<tr class="even">
<td>26</td>
<td>5.7.4</td>
<td>Update Multimedia Architecture/Web Streaming</td>
<td>M</td>
<td>0.5</td>
<td>0</td>
<td>1970</td>
<td>0.5</td>
<td>0</td>
<td>1430</td>
<td>0.5</td>
<td>100</td>
<td>1875</td>
<td>G</td>
</tr>
<tr class="odd">
<td>27</td>
<td>5.7.6</td>
<td>Implement Automated Requirements, Test Suite, and Test Data
Development</td>
<td>M</td>
<td>0.5</td>
<td>185</td>
<td>2155</td>
<td>0.25</td>
<td>30</td>
<td>1460</td>
<td>0</td>
<td>0</td>
<td>1875</td>
<td>G</td>
</tr>
<tr class="even">
<td>28</td>
<td>5.1.1</td>
<td>Agency “Class” VoIP Disaster Recovery/Avoidance Solution Continuity
of Operations Plan (COOP)</td>
<td>M</td>
<td>0.25</td>
<td>50</td>
<td>2205</td>
<td>0</td>
<td>0</td>
<td>1460</td>
<td>0.25</td>
<td>100</td>
<td>1975</td>
<td>A</td>
</tr>
<tr class="odd">
<td>29</td>
<td>5.7.5</td>
<td>Customer Service Enhancements</td>
<td>M</td>
<td>1</td>
<td>160</td>
<td>2365</td>
<td>1</td>
<td>160</td>
<td>1620</td>
<td>1</td>
<td>160</td>
<td>2135</td>
<td>G</td>
</tr>
<tr class="even">
<td>30</td>
<td>5.1.4</td>
<td>Implement 1 Gig to Select Headquarters Desktops</td>
<td>M</td>
<td>0.1</td>
<td>50</td>
<td>2415</td>
<td>0.1</td>
<td>50</td>
<td>1670</td>
<td>0.1</td>
<td>50</td>
<td>2185</td>
<td>A</td>
</tr>
<tr class="odd">
<td>31</td>
<td>5.7.3</td>
<td>Update Multimedia Offsite Support Capabilities</td>
<td>M</td>
<td>0.5</td>
<td>40</td>
<td>2455</td>
<td>0.5</td>
<td>40</td>
<td>1710</td>
<td>0.5</td>
<td>75</td>
<td>2260</td>
<td>G</td>
</tr>
<tr class="even">
<td>32</td>
<td>5.9.1</td>
<td>Data Encryption Capability for Enterprise Storage</td>
<td>M</td>
<td>0</td>
<td>0</td>
<td>2455</td>
<td>0.5</td>
<td>200</td>
<td>1910</td>
<td>0.5</td>
<td>200</td>
<td>2460</td>
<td>I</td>
</tr>
<tr class="odd">
<td></td>
<td></td>
<td></td>
<td></td>
<td></td>
<td></td>
<td></td>
<td></td>
<td></td>
<td></td>
<td></td>
<td></td>
<td></td>
<td></td>
</tr>
<tr class="even">
<td></td>
<td></td>
<td><strong>Total Priority M</strong></td>
<td></td>
<td><strong>19.8</strong></td>
<td><strong>2455</strong></td>
<td><strong>2455</strong></td>
<td><strong>10.25</strong></td>
<td><strong>1910</strong></td>
<td><strong>1910</strong></td>
<td><strong>13</strong></td>
<td><strong>2460</strong></td>
<td><strong>2460</strong></td>
<td></td>
</tr>
<tr class="odd">
<td></td>
<td></td>
<td></td>
<td></td>
<td></td>
<td></td>
<td></td>
<td></td>
<td></td>
<td></td>
<td></td>
<td></td>
<td></td>
<td></td>
</tr>
<tr class="even">
<td>33</td>
<td>5.6.7</td>
<td>Investigate Server Virtualization</td>
<td>P</td>
<td>0.25</td>
<td>35</td>
<td>2490</td>
<td>0.5</td>
<td>120</td>
<td>2030</td>
<td>0.25</td>
<td>200</td>
<td>2660</td>
<td>F</td>
</tr>
<tr class="odd">
<td>34</td>
<td>5.7.13</td>
<td>Implement Web Link Checker/Crawler</td>
<td>P</td>
<td>1</td>
<td>75</td>
<td>2565</td>
<td>0.2</td>
<td>0</td>
<td>2030</td>
<td>0</td>
<td>0</td>
<td>2660</td>
<td>H</td>
</tr>
<tr class="even">
<td>35</td>
<td>5.1.5</td>
<td>Cisco Unified Personal Communicator SoftPhone</td>
<td>P</td>
<td>0.25</td>
<td>25</td>
<td>2590</td>
<td>0.5</td>
<td>25</td>
<td>2055</td>
<td>0</td>
<td>0</td>
<td>2660</td>
<td>A</td>
</tr>
<tr class="odd">
<td>36</td>
<td>5.7.12</td>
<td>Application Architecture Modeling Tools</td>
<td>P</td>
<td>1</td>
<td>150</td>
<td>2740</td>
<td>0.5</td>
<td>50</td>
<td>2105</td>
<td>0</td>
<td>0</td>
<td>2660</td>
<td>G</td>
</tr>
<tr class="even">
<td>37</td>
<td>5.1.2</td>
<td>Design and Implementation of VoIP Intercluster Trunking</td>
<td>P</td>
<td>0.25</td>
<td>50</td>
<td>2790</td>
<td>0.25</td>
<td>50</td>
<td>2155</td>
<td>0</td>
<td>0</td>
<td>2660</td>
<td>A</td>
</tr>
<tr class="odd">
<td>38</td>
<td>5.6.6</td>
<td>Disk-to-Disk Enterprise Backup</td>
<td>P</td>
<td>1</td>
<td>400</td>
<td>3190</td>
<td>0.2</td>
<td>50</td>
<td>2205</td>
<td>0</td>
<td>0</td>
<td>2660</td>
<td>F</td>
</tr>
<tr class="even">
<td>39</td>
<td>5.4.1</td>
<td>Implement IPTV</td>
<td>P</td>
<td>0</td>
<td>0</td>
<td>3190</td>
<td>0</td>
<td>250</td>
<td>2455</td>
<td>0</td>
<td>0</td>
<td>2660</td>
<td>D</td>
</tr>
<tr class="odd">
<td>40</td>
<td>5.1.3</td>
<td>Assess the Benefit Associated with Unity and NOMAD
Interoperability</td>
<td>P</td>
<td>0.25</td>
<td>0</td>
<td>3190</td>
<td>0</td>
<td>0</td>
<td>2455</td>
<td>0</td>
<td>0</td>
<td>2660</td>
<td>A</td>
</tr>
<tr class="even">
<td></td>
<td></td>
<td></td>
<td></td>
<td></td>
<td></td>
<td></td>
<td></td>
<td></td>
<td></td>
<td></td>
<td></td>
<td></td>
<td></td>
</tr>
<tr class="odd">
<td></td>
<td></td>
<td><strong>Total Priority P</strong></td>
<td></td>
<td><strong>4</strong></td>
<td><strong>735</strong></td>
<td><strong>3190</strong></td>
<td><strong>2.15</strong></td>
<td><strong>545</strong></td>
<td><strong>2455</strong></td>
<td><strong>0.25</strong></td>
<td><strong>200</strong></td>
<td><strong>2660</strong></td>
<td></td>
</tr>
<tr class="even">
<td></td>
<td></td>
<td></td>
<td></td>
<td></td>
<td></td>
<td></td>
<td></td>
<td></td>
<td></td>
<td></td>
<td></td>
<td></td>
<td></td>
</tr>
<tr class="odd">
<td>41</td>
<td>5.7.14</td>
<td>Investigate New Web Application Reporting Tools</td>
<td>O</td>
<td>0.75</td>
<td>85</td>
<td>3275</td>
<td>0.25</td>
<td>100</td>
<td>2555</td>
<td>0</td>
<td>0</td>
<td>2660</td>
<td>H</td>
</tr>
<tr class="even">
<td></td>
<td></td>
<td></td>
<td></td>
<td></td>
<td></td>
<td></td>
<td></td>
<td></td>
<td></td>
<td></td>
<td></td>
<td></td>
<td></td>
</tr>
<tr class="odd">
<td></td>
<td></td>
<td><strong>Total Priority O</strong></td>
<td></td>
<td><strong>0.75</strong></td>
<td><strong>85</strong></td>
<td><strong>3275</strong></td>
<td><strong>0.25</strong></td>
<td><strong>100</strong></td>
<td><strong>2555</strong></td>
<td><strong>0</strong></td>
<td><strong>0</strong></td>
<td><strong>2660</strong></td>
<td></td>
</tr>
<tr class="even">
<td></td>
<td></td>
<td></td>
<td></td>
<td></td>
<td></td>
<td></td>
<td></td>
<td></td>
<td></td>
<td></td>
<td></td>
<td></td>
<td></td>
</tr>
<tr class="odd">
<td></td>
<td></td>
<td><strong>Grand Total</strong></td>
<td></td>
<td><strong>24.55</strong></td>
<td><strong>3275</strong></td>
<td><strong>3275</strong></td>
<td><strong>12.65</strong></td>
<td><strong>2555</strong></td>
<td><strong>2555</strong></td>
<td><strong>13</strong></td>
<td><strong>2660</strong></td>
<td><strong>2660</strong></td>
<td></td>
</tr>
</tbody>
</table>

# Appendix 1 - CPIC IT Portfolio Definitions

## Information Technology (IT) {#information-technology-it .Style-Heading-2-+-Times-New-Roman}

"Information Technology, as defined by the Clinger-Cohen Act of 1996,
sections 5002, 5141, and 5142, means any equipment or interconnected
system or subsystem of equipment used in the automatic acquisition,
storage, manipulation, management, movement, control, display,
switching, interchange, transmission, or reception of data or
information. For purposes of this definition, equipment is \"used\" by
an agency whether the agency uses the equipment directly or it is used
by a contractor under a contract with the agency that (1) requires the
use of such equipment or (2) requires the use, to a significant extent,
of such equipment in the performance of a service or the furnishing of a
product. Information technology includes computers, ancillary equipment,
software, firmware and similar procedures, services (including support
services), and related resources. It does not include any equipment
acquired by a Federal contractor incidental to a Federal contract."
Incidental Information Technology (IT) resources are IT resources owned
by a contractor but not "used by NASA."

## Portfolios {#portfolios .Style-Heading-2-+-Times-New-Roman}

### Voice Services {#voice-services-1 .Style-Heading-3-+-Times-New-Roman}

All Information Technology (IT) investments required for providing voice
services to users not including server/hosting hardware included under
Data Center and services provided by Local Area Networks or Wide Area
Networks.

**Includes but is not limited to:**

Telephones, local and long distance services (provided through
Outsourcing Desktops Initiative for NASA and other sources), land mobile
radios, Facsimile Services (provided through outsourcing and other
sources), Federal Telephone Services (FTS), international services,
Voice Teleconferencing (VoTS), Calling cards, 800 number service, Voice
Over Internet Protocol (VOIP), PBXs, voice mail, Public Address (PA),
Emergency Warning System (EWS), Satellite Phones. VOIP Handsets are
included.

**Does not include:**

Wireless PDA/Handhelds and cell phones which provide both voice and
messaging and collaboration services, VOIP LAN, and servers.

### Wide Area Network (WAN) {#wide-area-network-wan-1 .Style-Heading-3-+-Times-New-Roman}

All Information Technology (IT) investments required for supporting
network communications between NASA Local Area Networks (LANs), NASA
data centers, and external partners.

**Includes but is not limited to:**

Commercial Internet Service Providers (ISP) WANs, NASA Prototyping
Network (NPN), and NISN.

**Does not include:**

N/A

### Local Area Networks (LAN) {#local-area-networks-lan-1 .Style-Heading-3-+-Times-New-Roman}

Local Area Network (LAN) components refer to all Information Technology
(IT) investments required to provide networking services within a
building, campus, data center or Center, including hardware, software,
and services.

**Includes but is not limited to:**

LAN provided by Outsourcing Desktops Initiative for NASA and other
sources, wireless LANs, remote access, domain naming services, network
management, X500/directory services and network, telephone and video
cable plant services, routers, switches, wireless access points,
wireless routers.

**Does not include:**

Server/hosting hardware included under Data Center, firewalls, and
intrusion detection, UPS.

### Video Infrastructure Services {#video-infrastructure-services-1 .Style-Heading-3-+-Times-New-Roman}

All Information Technology (IT) investments required for supporting
video distribution and video conferencing services used by NASA
including hardware, software and support services - not including Local
Area Networks or Wide Area Networks

**Includes but is not limited to:**

Video services provided through Outsourcing Desktops Initiative for
NASA, Administrator Video (i.e., Tanenburg), video distribution systems
(both local and NASA TV), video over Internet Protocol (IP) systems,
Digital Television (DTV) Project and High Definition television (HDTV),
and digital imaging equipment, digital video editing equipment.

**Does not include:**

Video production services e.g. script writing, direction, videography or
audio/visual services.

### Workstations {#workstations-1 .Style-Heading-3-+-Times-New-Roman}

#### Science and Engineering Workstations

This category includes science and engineering workstations. If an
employee's workstation is used primarily for engineering and research
and an administrative desktop is insufficient, unsuitable, or
incompatible for use in the Multi-Program/Project environment, then it
should be reported as S&E. This is also intended to capture IT equipment
and services in laboratories and other facilities. (Previously known as
Compute Engines)

#### General Purpose Workstations

General purpose workstation services provide for overall general purpose
computing in support of Center and Agency activities. (Previously known
as Desktop)

**Includes but is not limited to:**

Desktop computers, laptop computers, operating systems, general-purpose
software (e.g., word processing, spreadsheet, presentation, project
management, browser, etc.), and desktop portion of Outsourcing Desktops
Initiative for NASA.

IT investments required to provide desktop computing services to users:
hardware and software (operating systems, applications, and utilities)
and services (including design, build, operations, multipurpose help
desks, support, and maintenance services). Includes peripherals/printers
(networked and local attached), workstation virus protection.

**Does not include:**

E-mail and calendaring (which are included under Messaging and
Collaboration).

### Data Center {#data-center-1 .Style-Heading-3-+-Times-New-Roman}

A Data Center is a collection of IT hardware and software that is used
for multiple purposes and often related, computing services.
Furthermore, these resources are usually funded and operated as a shared
resource with labor dedicated to operating the Data Center. When
attributing costs to the Data Center, it is recommended that there is
further delineation (WBS categories defined a level below Data Center).
For example, if you are attributing servers to the data center that are
supporting applications, this is a Data Center cost, but these costs
should be tagged as Application Services as a subset to Data Center.
This will allow for overall insight into the other portfolio elements if
needed while capturing the cost of the consolidated efforts of the Data
Center.

**Includes but is not limited to:**

Includes data storage (mass storage systems, digital data storage
services, supercomputers, computing clusters such as Beowulf) including
hardware, software, services, etc.), database management and
administration services, data/document management systems, and disaster
recovery services. In addition, the Data Center category includes
server/hosting hardware and associated operating system software and
system administration, which are not part of a shared Data Center.
System software is typically used to develop end-user applications. Also
includes labor required to operate the system including system
administration. Examples of a Data Center are Agency and Center Services
(servers, mass storage, etc.), and Servers (provided through Outsourcing
Desktops Initiative for NASA and other sources), NASA Data Center (NDC),
Center's central web and application servers, distributed web and
application servers. This includes Marshall's Payload Operation
Integration Center servers, Kennedy's Launch Control Center and
Johnson's Mission Control Center. Database Administrators and system
administrators. Data Center virus protection software.

**Does not include:**

Hardware and software included under Workstations, Video, and Messaging
and Collaboration.

### Application Services {#application-services-2 .Style-Heading-3-+-Times-New-Roman}

This category provides a service to Information Technology (IT)
end-users, and includes the development, operations and maintenance of
applications that are not Science and Engineering workstations.

### Web {#web .Style-Heading-3-+-Times-New-Roman}

*For purposes of communicating the IT budget in Agency budgets, the Web
portfolio is combined with Application Services.*

**Includes but is not limited to:**

IT investments in software, specialized hardware (barcode scanner) and
services required to provide application services remote from a desktop
and not provided by a Data Center. Design, development, testing and
development support, help desk and other support associated with
application services, operations and maintenance of commercial off the
shelf (COTS) software as well as NASA-developed applications. This
includes integration or customization of COTS software for NASA use.
This category also includes content management of all Agency web sites,
whether internal or external. Examples of Application Services are
standard Agency-wide administrative systems, web-enabled applications,
Integrated Enterprise Management Program (IEMP), NASA Scientific and
Technical Information (STI) Program, WebTADS, and content management of
Center's web sites. This category includes content management of all
Agency web sites whose purpose is to disseminate information, whether
internal or external. Includes all sites that have a URL.

**Does not include:**

Web server/hosting hardware and associated operating system software and
system administration, which are included under Data Center. Printers
with Web Servers are excluded.

### Messaging and Collaboration {#messaging-and-collaboration .Style-Heading-3-+-Times-New-Roman}

This category includes all Information Technology (IT) investments not
already associated with a Data Center that are required to provide
E-mail, instant messaging, cell phones, mobile computing, collaborative
workgroup services, and data dictionary (XML and other) and directory
services focused on facilitating access to information.

**Includes but is not limited to:**

E-mail, calendaring, cell phones, wireless PDA/Handheld (i.e.,
Blackberry, Treo), pagers, WebEx, E-Room, and collaborative tools (e.g.,
Sharepoint, PBMA). Implementation of Agency IT Initiatives & Other IT
Services, Integrated Collaborative Environment (ICE).

**Does not include:**

N/A

### IT Management {#it-management-1 .Style-Heading-3-+-Times-New-Roman}

This category provides CIO functions including management of information
assets and implementation of NASA and federal IT-related policies,
procedures, regulations, and legislation.

**Includes but is not limited to:**

CIO and staff, Records Manager, Privacy Manager, Spectrum Management,
Enterprise Architect, and implementation of IT Capital Planning,
Investment, and Control (CPIC) process including collection of data for
OMB Exhibits 53 and 300. Also includes functional IT management, IT
budget formulation and execution, and administrative support that cannot
be easily assigned to a specific area, for example, a directorate,
division, or branch that provides services in several portfolio areas.

**Does not include:**

N/A

### IT Security {#it-security-1 .Style-Heading-3-+-Times-New-Roman}

This category includes Center-wide core IT security activities, for
example, coordination of IT Security planning, Certification and
Accreditation Official, Center perimeter firewall operations, patch
management (Patchlink, and CIS), vulnerability scanning an reporting,
FISMA reporting, incident response, penetration testing.

**Includes but is not limited to:**

Center IT Security Manager and staff. Computer Security Officials
embedded in organizations with IT systems, development of IT Security
Plans and/or third party C&A costs.

**Does not include:**

Services as system administration, database management, or other costs
associated with operating specific IT systems.

### Implementation of Agency IT Initiatives & Other IT Services {#implementation-of-agency-it-initiatives-other-it-services .Style-Heading-3-+-Times-New-Roman}

*For purposes of communicating the IT budget and Agency budgets,
Implementation of Agency IT Initiatives and Other IT Services is
reported separately from other portfolios.*

*For purposes of IT Investment Reporting, investments in this category
need to be included in an appropriate portfolio.*

This category covers IT expenditures not covered in other IT Portfolios
and also includes implementation budget (\>\$500K) for Agency-wide IT
projects and initiatives under purview of Agency CIO as well as for
major projects for development, modernization, or enhancement of Center
IT infrastructure. Does not include ongoing maintenance of IT
infrastructure even if maintenance cost exceeds \$500K/yr. Examples are
cable plant, network, voice system upgrade/replacement, HSPD-12
implementation, and NOMAD implementation.