***NWCG***

**Guide for Interconnecting Information Technology Systems**

Version 1.3

May 2003

This document is a publication of the NWCG IRM Program Management
Office. Questions or comments regarding this document should be directed
to:

**IRM Program Management Office**\
National Wildfire Coordinating Group\
3833 S. Development Avenue\
Boise, ID 83705

Barry Mathias, Program Manager\
(208) 947-3740\
barry_mathias@blm.gov

Allen Deitz, Repository Manager\
(208) 947-3742\
allen_deitz@blm.gov

Judy Crosby, Data Architect\
(208) 947-3741\
judy_crosby@blm.gov

Al Borup, Applications Architect\
(208) 947-3743\
al_borup@blm.gov

# Introduction

The *National Wildfire Coordinating Group* (NWCG) charters the
development, implementation, and deployment of information technology
systems for use by the entire wildland fire community. NWCG-chartered
systems are designed to provide service to specific business areas of
wildland fire management and may require some form of data exchange with
other information technology (IT) systems. Federal policy requires
federal agencies to establish agreements for systems that interconnect.
Guidance for planning, establishing, maintaining, and terminating
interconnections with NWCG-chartered IT systems is necessary.

> A *system interconnection* (also referred to as a *system interface*)
> is the direct connection of two or more IT systems for the purpose of
> sharing data or other information resources.
>
> The *overseeing business group* is an NWCG system's sponsoring
> business community and usually consists of one or more NWCG working
> teams or advisory groups.

The NWCG goals when interconnecting systems are to minimize costs and
impacts to existing NWCG systems and resources while allowing enhanced
functionality for the wildland fire community. The objective of these
guidelines is to describe and establish a standardized and repeatable
process for interconnecting NWCG-chartered IT systems. Conditions
include: 1) Interconnection to an NWCG system shall not compromise its
security or adversely affect system performance or delivery to the end
user; 2) NWCG shall be informed of all impacts to an existing project's
resources and timeline due to an interconnection request; 3) Generic and
reusable application program interfaces shall be used whenever possible.

NWCG recommends the following five-phase approach for requesting,
planning, and maintaining an interconnection with an NWCG-chartered
system:

> **Phase 1: Advancing the Concept**
>
> **Phase 2: Creating the Interconnection Investment Proposal**
>
> **Phase 3: Developing a Business Case and Planning for the
> Interconnection**
>
> **Phase 4: Establishing the Interconnection**
>
> **Phase 5: Maintaining the Interconnection**

The following pages describe each phase in more detail. Because the
requirements for each interconnection vary, the NWCG Information
Resource Management Program Management Office (IRM-PMO) is available to
provide assistance and guidance.

This guidance document [supersedes]{.underline} any previous NWCG
direction for establishing interconnections.

**Phase 1 - Advancing the Concept**

At this phase, the initial concept is identified and presented to the
affected business groups for their concurrence. Preliminary technical
issues are examined.

1.  Anyone requesting an interconnection to an NWCG system shall send a
    letter requesting conceptual consideration to either of the affected
    systems' overseeing business groups or to the NWCG Information
    Resource Management Working Team (IRMWT) who will forward the
    request to the appropriate business group.

2.  If the business group agrees with the concept of interconnecting the
    systems, the business group shall send a letter of intent
    identifying the business need to the IRMWT chair.

3.  The IRMWT and IRM-PMO will review the conceptual proposal and
    respond by identifying preliminary technical issues, concerns and
    recommendations to all affected business groups.

4.  The business groups representing the systems to be interconnected
    shall review the technical feedback from the IRMWT.

5.  The business groups shall *jointly* approve or disapprove moving
    forward to the next phase.

**Phase 2 - Creating the Interconnection Investment Proposal**

During this phase, justification for the proposed interconnection is
developed, along with estimates of the cost, schedule and funding
necessary to develop a Business Case and Interconnection Plan. (See
appendix A for a template to be used when creating the *Interconnection
Investment Proposal*.)

1.  The business groups shall jointly develop the *Interconnection
    Investment Proposal* and submit it to the IRMWT chair.

2.  The IRMWT shall review the *Interconnection Investment Proposal* and
    assure concurrence from stakeholders that will be affected by the
    proposed interconnection.

3.  The IRMWT shall forward the *Interconnection Investment Proposal*
    with its recommendations to the NWCG parent group.

4.  The NWCG parent group shall approve or disapprove moving forward to
    the next phase.

**Phase 3 -- Developing a Business Case and Planning for the
Interconnection**

**NIST Special Publication 800-47**, *Security Guide for Interconnecting
Information Systems,* produced by the National Institute of Standards
and Technology provides fundamental guidance for this phase. The
guidelines are consistent with the requirements specified in the Office
of Management and Budget (OMB) Circular A-130, Appendix III, for system
interconnection and information sharing. The NIST publication can be
downloaded from the Internet at:
**http://csrc.nist.gov/publications/nistpubs/800-47/sp800-47.pdf**. It
provides a methodology for developing a business case for a proposed
interconnection, identifying costs and risks, examining security needs,
detailing requirements, and documenting the interconnection agreements
required by federal policy. In addition to security guidance, the NIST
procedures and processes provide a comprehensive approach for dealing
with issues related to the general interconnection between systems. NWCG
has adopted this NIST guide.

The NWCG publication *Principles, Guidelines, and Standards for Data
Exchange Between Applications* also contains principles and guidelines
to be followed in the development of data exchange mechanisms between
NWCG applications. This document can be downloaded from the NWCG website
at
**http://www.nwcg.gov/teams/pmo/products/documents/Data_Exchange_Principles.pdf**.

The NWCG IRM-PMO should be contacted for assistance in interpreting how
the NIST and other guidelines should be applied to NWCG system
interconnection efforts.

1.  The business groups, working together, shall assemble a Joint
    Planning Team (JPT). (See appendix B for further information about
    the Joint Planning Team).

2.  The JPT shall develop an *Interconnection Plan*, including:

    a.  A fully developed business case for the proposed
        interconnection. The justification section of the completed
        *Interconnection Investment Proposal* should already contain
        foundation information for developing the business case. **OMB
        Circular No. A-11, Part 7, Section 300** (available at
        **http://www.whitehouse.gov/omb/circulars/a11/2002/part7.pdf**)
        provides further considerations for building the business case.

    b.  Assurance that security requirements are met for each system.

    c.  Definition of all requirements for the proposed interconnection.
        Each issue listed in **NIST Special Publication 800-47 Section
        3.4** *must* be addressed.

    d.  Identification and development of NWCG standards for data that
        will be exchanged via the interconnection.

    e.  Development of all appropriate agreement documents that will
        govern the proposed interconnection.

3.  The JPT shall forward the completed *Interconnection Plan* to the
    IRMWT.

4.  The IRMWT shall review the *Interconnection Plan* and assure
    concurrence from the business community.

5.  The IRMWT shall forward the *Interconnection Plan* with its
    recommendations to the NWCG parent group.

6.  The NWCG parent group shall approve or disapprove establishing the
    interconnection.

**Phase 4 -- Establishing the Interconnection**

During this phase, the JPT shall develop and execute a comprehensive
plan for establishing the interconnection. This plan centralizes all
aspects of the interconnection into a single document.

1.  The JPT shall develop an *Implementation Plan* following the
    guidance listed in Section 4 and appendix C of **NIST Special
    Publication 800-47**.

2.  The JPT shall review and approve the *Implementation Plan*.

3.  The *Implementation Plan* shall be executed to establish and
    activate the interconnection.

**Phase 5 -- Maintaining the Interconnection**

This open-ended phase constitutes actively maintaining the
interconnection and associated agreements to assure that it operates
correctly and securely. **Section 5** of **NIST Special Publication
800-47** describes recommended activities that shall be used during the
life of the interconnection.

The following diagram illustrates the process described in Phases 1
through 3.

#   {#section .unnumbered}

# ![](media/image2.wmf)

# 

# 

# 

# 

# 

# 

# Appendix A

# *Interconnection Investment Proposal* Template 

**\[Proposal Name\]**

**Interconnection Investment Proposal**

**Submission Date \[xx/xx/xx\]**

**1.0 Interconnection Investment Proposal Information**

Proposal Name:

Proponent (Name):

Proponent contact information:

**2.0 Interconnection Summary**

*Provide a brief description of the interconnection and why it is being
proposed. Describe the interconnection's concept, what is inside or
outside of the project scope, and summarize functional requirements.
Explain qualitative benefits versus the status quo of not doing the
interconnection.*

**3.0 Justification and Considerations**

*Describe how the interconnection supports NWCG's mission and strategic
goals and objectives.*

*Describe how the interconnection will reduce costs or improve
efficiencies.*

*Identify which high-level business processes this proposal supports.*

*Identify and describe the type of data that the interconnection will
interchange.*

*Describe the extent of user involvement for this proposal; describe who
has been involved and how they have been involved. Describe how users
will be involved in future development.*

*Describe the known extent of support for this proposal.*

*Present a preliminary list of stakeholders that will be affected by the
proposed interconnection.*

**4.0 Cost, Schedule, and Funding Needed to Develop a Business Case and
*Interconnection Plan***

*Outline the work necessary to complete the planning phase for the
proposed interconnection. (The Planning Phase methodology is detailed*
in **NIST Special Publication 800-47, Security Guide for Interconnecting
Information Technology Systems***). The outline should include the work
needed to establish a joint planning team, to define the Business Case,
to perform any necessary Certification and Accreditation, to determine
interconnection requirements, and to document interconnection
agreements. The planning phase will result in a completed
**Interconnection Plan**.*

Major Activities/Milestones:

Activity/Milestone: Planned Start Date: Planned Complete Date:

Required Resources (who will be involved):

Name:

> Position: Agency: Grade/Step:

Estimated costs for developing the *Interconnection Plan*:

Labor:

Contract:

Travel:

Other (explain):

Total:

Is funding available to complete the *Interconnection Plan*?

If yes, identify source.

Estimated date for completion of the *Interconnection Plan*:

*Describe how you foresee using contractors in the
planning/implementation of this interconnection.*

*Provide a "best estimate" of total life cycle costs (include 5-year
operations and maintenance costs) and enter an estimated delivery date
for an implemented interconnection.*

*Address the risks of a "no-action" alternative and identify any other
known risks.*

The PMO is available to assist in the development of interconnection
proposals.

# 

# 

# 

# 

# 

# 

# Appendix B

# The Joint Planning Team 

**The Joint Planning Team**

The Joint Planning Team (JPT) is established to examine all relevant
technical, security, and administrative issues and forms agreements
governing the management, operation and use of the proposed
interconnection. The JPT shall be equally balanced with representatives
from each side of the proposed interconnection.

**Membership**

The membership and size of a Joint Planning Team will typically vary
from one interconnection investment proposal to another based on the
complexity of the issues to be examined. Candidates to consider should
include the following:

-   **Core team:**

    -   **Managerial:**

        -   Government Project Managers

        -   Contractor Project Managers

        -   Business Leads

        -   Security Officers

        -   System Administrators

    -   **Technical:**

        -   Network Administrators

        -   Database Administrators

        -   System Architects

        -   Software Engineers

-   **Consultants:**

    -   Business area Subject Matter Experts

    -   Agency or Department-level IT capital planning process
        specialists

    -   Agency IRM specialists

    -   Agency Fire IRM specialists

    -   Configuration management specialists from each system

    -   Contracting Officers

    -   NWCG Data Administration Working Group

    -   NWCG IRM-PMO

        -   Program Manager

        -   Data Architect

        -   Application Architect

        -   Repository Manager

**Deliverables**

The Joint Planning Team is responsible for developing an
*Interconnection Plan* and (if approved) an *Implementation Plan*.

The ***Interconnection Plan,*** at minimum, contains the following
components:

-   **Business Case**

> Documents the purpose of the interconnection, clearly demonstrates how
> it will support respective mission requirements, and identifies
> potential costs and risks

-   **Certification and Accreditation**

> Documents that the respective systems to be interconnected are
> properly certified and accredited in accordance with federal
> guidelines

-   **Interconnection Requirements**

> Documents all relevant data, technical, security, and administrative
> issues surrounding the proposed interconnection

-   **Interconnection Security Agreement**

> Documents the technical and security requirements for establishing,
> operating, and maintaining the proposed interconnection

-   **Memorandum of Understanding/Agreement**

> Documents the terms and conditions for sharing data and resources

-   **Other Agreements**

> Documents any other appropriate agreements (such as data quality, data
> exchange, cost sharing, etc.)

The ***Implementation Plan*:**

> Upon NWCG's approval of the *Interconnection Plan*, the JPT is then
> responsible for developing and executing an *Implementation Plan*.
> This plan, at minimum, must address all relevant sections of the
> template provided in **NIST Special Publication 800-47, Appendix C**
> -- *System Interconnection Implementation Plan*.