+-----------+-----------------------------+----------+--------+-------+
| **        |                             |          |        |       |
| Milestone |                             |          |        |       |
| (ID#):**  |                             |          |        |       |
| Deploy    |                             |          |        |       |
| Security  |                             |          |        |       |
| Infra     |                             |          |        |       |
| structure |                             |          |        |       |
| for ASC   |                             |          |        |       |
| Tri-Lab   |                             |          |        |       |
| (#39)     |                             |          |        |       |
+-----------+-----------------------------+----------+--------+-------+
| *         |                             |          |        |       |
| *Level**: |                             |          |        |       |
| 2         |                             |          |        |       |
+-----------+-----------------------------+----------+--------+-------+
| **Fiscal  |                             |          |        |       |
| Year**:   |                             |          |        |       |
| FY06      |                             |          |        |       |
+-----------+-----------------------------+----------+--------+-------+
| **DOE     |                             |          |        |       |
| Area/Ca   |                             |          |        |       |
| mpaign**: |                             |          |        |       |
| ASC       |                             |          |        |       |
+-----------+-----------------------------+----------+--------+-------+
| **C       |                             |          |        |       |
| ompletion |                             |          |        |       |
| Date**:   |                             |          |        |       |
| FY06-Q3   |                             |          |        |       |
+-----------+-----------------------------+----------+--------+-------+
| **ASC     |                             |          |        |       |
| nWBS      |                             |          |        |       |
| Subp      |                             |          |        |       |
| rogram**: |                             |          |        |       |
| Comp      |                             |          |        |       |
| utational |                             |          |        |       |
| Systems   |                             |          |        |       |
| and       |                             |          |        |       |
| Software  |                             |          |        |       |
| En        |                             |          |        |       |
| gineering |                             |          |        |       |
+-----------+-----------------------------+----------+--------+-------+
| **Part    |                             |          |        |       |
| icipating |                             |          |        |       |
| Sites:**  |                             |          |        |       |
| LANL,     |                             |          |        |       |
| LLNL, SNL |                             |          |        |       |
+-----------+-----------------------------+----------+--------+-------+
| **Descr   |                             |          |        |       |
| iption**: |                             |          |        |       |
| A new ASC |                             |          |        |       |
| tri-lab   |                             |          |        |       |
| security  |                             |          |        |       |
| infra     |                             |          |        |       |
| structure |                             |          |        |       |
| is        |                             |          |        |       |
| deployed  |                             |          |        |       |
| to        |                             |          |        |       |
| replace   |                             |          |        |       |
| the       |                             |          |        |       |
| existing  |                             |          |        |       |
| DCE       |                             |          |        |       |
| security  |                             |          |        |       |
| infras    |                             |          |        |       |
| tructure. |                             |          |        |       |
| This      |                             |          |        |       |
| milestone |                             |          |        |       |
| is        |                             |          |        |       |
| complete  |                             |          |        |       |
| when the  |                             |          |        |       |
| i         |                             |          |        |       |
| nter-site |                             |          |        |       |
| authe     |                             |          |        |       |
| ntication |                             |          |        |       |
| and       |                             |          |        |       |
| directory |                             |          |        |       |
| service   |                             |          |        |       |
| are       |                             |          |        |       |
| generally |                             |          |        |       |
| available |                             |          |        |       |
| and       |                             |          |        |       |
| support   |                             |          |        |       |
| authe     |                             |          |        |       |
| ntication |                             |          |        |       |
| and       |                             |          |        |       |
| auth      |                             |          |        |       |
| orization |                             |          |        |       |
| to        |                             |          |        |       |
| p         |                             |          |        |       |
| roduction |                             |          |        |       |
| ASC       |                             |          |        |       |
| compute   |                             |          |        |       |
| resources |                             |          |        |       |
| by        |                             |          |        |       |
| tri-lab   |                             |          |        |       |
| users.    |                             |          |        |       |
| Addi      |                             |          |        |       |
| tionally, |                             |          |        |       |
| the new   |                             |          |        |       |
| security  |                             |          |        |       |
| infra     |                             |          |        |       |
| structure |                             |          |        |       |
| will      |                             |          |        |       |
| support   |                             |          |        |       |
| an        |                             |          |        |       |
| i         |                             |          |        |       |
| nter-site |                             |          |        |       |
| ap        |                             |          |        |       |
| plication |                             |          |        |       |
| to        |                             |          |        |       |
| de        |                             |          |        |       |
| monstrate |                             |          |        |       |
| the       |                             |          |        |       |
| cap       |                             |          |        |       |
| abilities |                             |          |        |       |
| are       |                             |          |        |       |
| f         |                             |          |        |       |
| unctional |                             |          |        |       |
| for       |                             |          |        |       |
| tran      |                             |          |        |       |
| sitioning |                             |          |        |       |
| and       |                             |          |        |       |
| deploying |                             |          |        |       |
| app       |                             |          |        |       |
| lications |                             |          |        |       |
| and       |                             |          |        |       |
| infra     |                             |          |        |       |
| structure |                             |          |        |       |
| services. |                             |          |        |       |
| The       |                             |          |        |       |
| d         |                             |          |        |       |
| eployment |                             |          |        |       |
| of the    |                             |          |        |       |
| tri-lab   |                             |          |        |       |
| security  |                             |          |        |       |
| infra     |                             |          |        |       |
| structure |                             |          |        |       |
| will      |                             |          |        |       |
| require   |                             |          |        |       |
| in        |                             |          |        |       |
| tegration |                             |          |        |       |
| and       |                             |          |        |       |
| co        |                             |          |        |       |
| operation |                             |          |        |       |
| between   |                             |          |        |       |
| the       |                             |          |        |       |
| Comp      |                             |          |        |       |
| utational |                             |          |        |       |
| Systems   |                             |          |        |       |
| and User  |                             |          |        |       |
| En        |                             |          |        |       |
| vironment |                             |          |        |       |
| at LLNL,  |                             |          |        |       |
| LANL, and |                             |          |        |       |
| SNL.      |                             |          |        |       |
| Tri-lab   |                             |          |        |       |
| personnel |                             |          |        |       |
| will also |                             |          |        |       |
| work      |                             |          |        |       |
| closely   |                             |          |        |       |
| with      |                             |          |        |       |
| d         |                             |          |        |       |
| evelopers |                             |          |        |       |
| of        |                             |          |        |       |
| i         |                             |          |        |       |
| nter-site |                             |          |        |       |
| ap        |                             |          |        |       |
| plication |                             |          |        |       |
| and       |                             |          |        |       |
| Nuclear   |                             |          |        |       |
| Weapons   |                             |          |        |       |
| Complex   |                             |          |        |       |
| plant     |                             |          |        |       |
| sites to  |                             |          |        |       |
| ensure    |                             |          |        |       |
| s         |                             |          |        |       |
| uccessful |                             |          |        |       |
| adoption  |                             |          |        |       |
| of the    |                             |          |        |       |
| new       |                             |          |        |       |
| security  |                             |          |        |       |
| infras    |                             |          |        |       |
| tructure. |                             |          |        |       |
| Further,  |                             |          |        |       |
| close     |                             |          |        |       |
| in        |                             |          |        |       |
| teraction |                             |          |        |       |
| with ICSI |                             |          |        |       |
| is        |                             |          |        |       |
| essential |                             |          |        |       |
| to ensure |                             |          |        |       |
| the ICSI  |                             |          |        |       |
| ESN       |                             |          |        |       |
| directory |                             |          |        |       |
| service   |                             |          |        |       |
| can be    |                             |          |        |       |
| utilized  |                             |          |        |       |
| for       |                             |          |        |       |
| i         |                             |          |        |       |
| nter-site |                             |          |        |       |
| autho     |                             |          |        |       |
| rization. |                             |          |        |       |
+-----------+-----------------------------+----------+--------+-------+
| **LANL    |                             |          |        |       |
| Work      |                             |          |        |       |
| Scope**:  |                             |          |        |       |
|           |                             |          |        |       |
| **LLNL    |                             |          |        |       |
| Work      |                             |          |        |       |
| Scope**:  |                             |          |        |       |
|           |                             |          |        |       |
| **SNL     |                             |          |        |       |
| Work      |                             |          |        |       |
| Scope**:  |                             |          |        |       |
+-----------+-----------------------------+----------+--------+-------+
| **LANL    |                             |          |        |       |
| C         |                             |          |        |       |
| ompletion |                             |          |        |       |
| Cr        |                             |          |        |       |
| iteria:** |                             |          |        |       |
|           |                             |          |        |       |
| **LLNL    |                             |          |        |       |
| and SNL   |                             |          |        |       |
| C         |                             |          |        |       |
| ompletion |                             |          |        |       |
| Cr        |                             |          |        |       |
| iteria:** |                             |          |        |       |
| De        |                             |          |        |       |
| monstrate |                             |          |        |       |
| that SNL, |                             |          |        |       |
| LLNL, and |                             |          |        |       |
| LANL      |                             |          |        |       |
| users can |                             |          |        |       |
| suc       |                             |          |        |       |
| cessfully |                             |          |        |       |
| aut       |                             |          |        |       |
| henticate |                             |          |        |       |
| and       |                             |          |        |       |
| access    |                             |          |        |       |
| major ASC |                             |          |        |       |
| c         |                             |          |        |       |
| lassified |                             |          |        |       |
| p         |                             |          |        |       |
| roduction |                             |          |        |       |
| resources |                             |          |        |       |
| at LANL,  |                             |          |        |       |
| LLNL and  |                             |          |        |       |
| SNL using |                             |          |        |       |
| the       |                             |          |        |       |
| account   |                             |          |        |       |
| managed   |                             |          |        |       |
| by the    |                             |          |        |       |
| new       |                             |          |        |       |
| Kerberos  |                             |          |        |       |
| authe     |                             |          |        |       |
| ntication |                             |          |        |       |
| service.  |                             |          |        |       |
| De        |                             |          |        |       |
| monstrate |                             |          |        |       |
| that SNL, |                             |          |        |       |
| LLNL, and |                             |          |        |       |
| LANL      |                             |          |        |       |
| users can |                             |          |        |       |
| suc       |                             |          |        |       |
| cessfully |                             |          |        |       |
| aut       |                             |          |        |       |
| henticate |                             |          |        |       |
| and       |                             |          |        |       |
| access    |                             |          |        |       |
| major ASC |                             |          |        |       |
| c         |                             |          |        |       |
| lassified |                             |          |        |       |
| p         |                             |          |        |       |
| roduction |                             |          |        |       |
| resources |                             |          |        |       |
| using     |                             |          |        |       |
| cr        |                             |          |        |       |
| edentials |                             |          |        |       |
| a         |                             |          |        |       |
| ssociated |                             |          |        |       |
| with      |                             |          |        |       |
| their     |                             |          |        |       |
| account   |                             |          |        |       |
| managed   |                             |          |        |       |
| by the    |                             |          |        |       |
| Kerberos  |                             |          |        |       |
| authe     |                             |          |        |       |
| ntication |                             |          |        |       |
| service   |                             |          |        |       |
| at their  |                             |          |        |       |
| r         |                             |          |        |       |
| espective |                             |          |        |       |
| sites.    |                             |          |        |       |
| De        |                             |          |        |       |
| monstrate |                             |          |        |       |
| that SNL  |                             |          |        |       |
| users can |                             |          |        |       |
| suc       |                             |          |        |       |
| cessfully |                             |          |        |       |
| aut       |                             |          |        |       |
| henticate |                             |          |        |       |
| and       |                             |          |        |       |
| access a  |                             |          |        |       |
| generally |                             |          |        |       |
| available |                             |          |        |       |
| web-based |                             |          |        |       |
| SNL       |                             |          |        |       |
| i         |                             |          |        |       |
| nter-site |                             |          |        |       |
| app       |                             |          |        |       |
| lication, |                             |          |        |       |
| where     |                             |          |        |       |
| usage     |                             |          |        |       |
| cust      |                             |          |        |       |
| omization |                             |          |        |       |
| or an     |                             |          |        |       |
| auth      |                             |          |        |       |
| orization |                             |          |        |       |
| decision  |                             |          |        |       |
| involves  |                             |          |        |       |
| the       |                             |          |        |       |
| ap        |                             |          |        |       |
| plication |                             |          |        |       |
| accessing |                             |          |        |       |
| the ICSI  |                             |          |        |       |
| directory |                             |          |        |       |
| for user  |                             |          |        |       |
| at        |                             |          |        |       |
| tributes. |                             |          |        |       |
+-----------+-----------------------------+----------+--------+-------+
| **Cu      |                             |          |        |       |
| stomer**: |                             |          |        |       |
| All users |                             |          |        |       |
| of SNL,   |                             |          |        |       |
| LLNL, and |                             |          |        |       |
| LANL      |                             |          |        |       |
| computer  |                             |          |        |       |
| systems.  |                             |          |        |       |
+-----------+-----------------------------+----------+--------+-------+
| **        |                             |          |        |       |
| Milestone |                             |          |        |       |
| Cert      |                             |          |        |       |
| ification |                             |          |        |       |
| Method:** |                             |          |        |       |
|           |                             |          |        |       |
| 2 --      |                             |          |        |       |
| Pro       |                             |          |        |       |
| fessional |                             |          |        |       |
| docum     |                             |          |        |       |
| entation, |                             |          |        |       |
| such as a |                             |          |        |       |
| report or |                             |          |        |       |
| a set of  |                             |          |        |       |
| v         |                             |          |        |       |
| iewgraphs |                             |          |        |       |
| with a    |                             |          |        |       |
| written   |                             |          |        |       |
| summary,  |                             |          |        |       |
| is        |                             |          |        |       |
| prepared  |                             |          |        |       |
| as a      |                             |          |        |       |
| record of |                             |          |        |       |
| milestone |                             |          |        |       |
| co        |                             |          |        |       |
| mpletion. |                             |          |        |       |
|           |                             |          |        |       |
| 3 -- The  |                             |          |        |       |
| "handoff" |                             |          |        |       |
| of the    |                             |          |        |       |
| developed |                             |          |        |       |
| c         |                             |          |        |       |
| apability |                             |          |        |       |
| (product) |                             |          |        |       |
| to a      |                             |          |        |       |
| nuclear   |                             |          |        |       |
| weapons   |                             |          |        |       |
| stockpile |                             |          |        |       |
| customer  |                             |          |        |       |
| is        |                             |          |        |       |
| do        |                             |          |        |       |
| cumented. |                             |          |        |       |
+-----------+-----------------------------+----------+--------+-------+
| **S       |                             |          |        |       |
| upporting |                             |          |        |       |
| Res       |                             |          |        |       |
| ources**: |                             |          |        |       |
| Multiple  |                             |          |        |       |
| projects  |                             |          |        |       |
| from both |                             |          |        |       |
| the       |                             |          |        |       |
| Comp      |                             |          |        |       |
| utational |                             |          |        |       |
| Systems   |                             |          |        |       |
| and       |                             |          |        |       |
| Software  |                             |          |        |       |
| En        |                             |          |        |       |
| vironment |                             |          |        |       |
| s         |                             |          |        |       |
| ubprogram |                             |          |        |       |
| and the   |                             |          |        |       |
| Facility  |                             |          |        |       |
| O         |                             |          |        |       |
| perations |                             |          |        |       |
| and User  |                             |          |        |       |
| Support   |                             |          |        |       |
| su        |                             |          |        |       |
| bprogram. |                             |          |        |       |
+-----------+-----------------------------+----------+--------+-------+
| **Codes/S |                             |          |        |       |
| imulation |                             |          |        |       |
| Tools     |                             |          |        |       |
| Em        |                             |          |        |       |
| ployed**: |                             |          |        |       |
| N/A       |                             |          |        |       |
+-----------+-----------------------------+----------+--------+-------+
| **Con     |                             |          |        |       |
| tribution |                             |          |        |       |
| to the    |                             |          |        |       |
| ASC       |                             |          |        |       |
| P         |                             |          |        |       |
| rogram**: |                             |          |        |       |
| Update to |                             |          |        |       |
| the       |                             |          |        |       |
| mandated  |                             |          |        |       |
| security  |                             |          |        |       |
| infra     |                             |          |        |       |
| structure |                             |          |        |       |
| software  |                             |          |        |       |
| for all   |                             |          |        |       |
| systems.  |                             |          |        |       |
| Supports  |                             |          |        |       |
| single    |                             |          |        |       |
| system    |                             |          |        |       |
| authe     |                             |          |        |       |
| ntication |                             |          |        |       |
| to        |                             |          |        |       |
| comp      |                             |          |        |       |
| utational |                             |          |        |       |
| resources |                             |          |        |       |
| across    |                             |          |        |       |
| the       |                             |          |        |       |
| tri-lab   |                             |          |        |       |
| complex.  |                             |          |        |       |
+-----------+-----------------------------+----------+--------+-------+
| **Con     |                             |          |        |       |
| tribution |                             |          |        |       |
| to        |                             |          |        |       |
| Stockpile |                             |          |        |       |
| Stewa     |                             |          |        |       |
| rdship**: |                             |          |        |       |
| Update to |                             |          |        |       |
| the       |                             |          |        |       |
| mandated  |                             |          |        |       |
| security  |                             |          |        |       |
| infra     |                             |          |        |       |
| structure |                             |          |        |       |
| software  |                             |          |        |       |
| for all   |                             |          |        |       |
| systems.  |                             |          |        |       |
| Supports  |                             |          |        |       |
| single    |                             |          |        |       |
| system    |                             |          |        |       |
| authe     |                             |          |        |       |
| ntication |                             |          |        |       |
| to        |                             |          |        |       |
| comp      |                             |          |        |       |
| utational |                             |          |        |       |
| resources |                             |          |        |       |
| across    |                             |          |        |       |
| the       |                             |          |        |       |
| tri-lab   |                             |          |        |       |
| complex.  |                             |          |        |       |
+-----------+-----------------------------+----------+--------+-------+
| **No.**   | **Risk Description**        | **Risk   |        |       |
|           |                             | As       |        |       |
|           |                             | sessment |        |       |
|           |                             | (low,    |        |       |
|           |                             | medium,  |        |       |
|           |                             | high)**  |        |       |
+-----------+-----------------------------+----------+--------+-------+
|           |                             | **Conse  | **     | **    |
|           |                             | quence** | Likeli | Expos |
|           |                             |          | hood** | ure** |
+-----------+-----------------------------+----------+--------+-------+
| 1         | ICSI fails to deliver       | Low      | Low    | low   |
|           | functional directory        |          |        |       |
|           | service                     |          |        |       |
+-----------+-----------------------------+----------+--------+-------+