# Presentation: 415702

## Agency Web Registration System (AWRS) Overview

- Emma Antunes
- August 23, 2007

## Agency Web Site Registration System (AWRS)(Part of the NASA Integrated Information Infrastructure Program)

- AWRS is a centralized, Web-based system for conducting
- Web site* registration and Web/FTP server inventory. Functions include:

***Generic term referring to static Web sites, dynamic Web applications, and FTP sites**

**Registration** of public and private Web sites with NASA content (whether hosted by NASA or by external partners) and not fully integrated in the NASA Web Portal Infrastructure

**Inventory** of NASA Web and FTP servers (hosts) located anywhere in the Agency that serve Web sites which require AWRS registration

**3rd party** **Web site** **reviews **for policy compliance and site content

**Agency- and Center-level reports**

- _Goals_:
- (1) Manage NASA’s Web space and information
- (2) Track Web information and compliance

- Periodic
- Renewal

## What is AWRS?

- AWRS = Agency Web Registration System
- Inventory of NASA web sites
- Replaces Goddard’s Web Registry
- Does NOT replace Web Port Waiver process
- Includes **internal** as well as **external** sites + **FTP**
- Provides for common reporting across the agency
- Managed by LaRC
- In the works for 4+ years
- Goddard is in Wave 1 of implementation
- Which means SOON

## Requirement

- Jonathan Pettus, NASA Chief Information Officer (CIO), issued a memo 6/21/07 mandating registration of Web sites:
- “Static and dynamic web sites, sites hosting Web-based applications, and File Transfer Protocol (FTP) sites on NASA’s network or delivering NASA information must be registered in AWRS...This requirement includes public, internal, external, or extranet sites.”

## Approach

- Minimize what Goddard users have to do!
- Migrate Center Web Data
- Pre-populated from scans, IPAMS & Web Registry
- Includes internal & external Web sites
- Does not include FTP
- 1500+ sites, 913 hosts, ~960 users
- Batch user account requests
- Still working this with LaRC ITSM
- Reviews: up to site owners
- Go-live date: October 1, 2007
- Training this week, more being planned for September

## AWRS Structure

- 4 levels of user access
- Agency Administrator (AA)
- LaRC & HQ
- Center Administrator (CA)
- Emma Antunes and Carla Ridgeway
- Technical POC
- Registrant

## AWRS Structure

- Web hosts
- Maintained by technical POCs
- Require 2-factor authentication (RSA tokens)
- CSOs assigned this role because they:
- Already maintain same host data in IPAMS
- Have RSA tokens
- Web sites
- Maintained by registrants
- Initial registrant will be **CSO**
- Webmaster, curator, technical contact could all be registrants

## Procedures

- When a **Technical POC** user logs in for the first time:
- Search for Web **host** records assigned to account
- Delete any records no longer needed
- Edit and save records, update any incorrect or out-of-date information and input missing data
- Add new Web **host** records as needed
- When a **Registrant** user logs in for the first time:
- Search for Web **site** records assigned to account
- Delete any records no longer needed
- Edit records, updating any incorrect or out-of-date information, inputting missing data, *responding to site policy compliance statements, and answering questions regarding site content*
- Add new Web **site** records as needed

## AWRS Login Processes

**AAs / CAs / TPOCs / SuperCAs**

**RSA Servers**

**Registrants / Mgmt. Approvers /**
**Site Reviewers**

**AWRS**

- Enter with RSA two-factor authentication account linked to AWRS login ID
_**Centers cross-realmed with LaRC**_**:**
**User’s Center provides RSA token**
- _Centers not cross-realmed with LaRC_:
- Langley provides RSA token

- Enter with AWRS login ID and password (no RSA token required)

- etc.

- “single sign-on” to AWRS

## Policy Compliance	

- Policy/Content questions cover:
- Children’s Online Privacy Protection Act (COPPA)
- Internet Publishing Content Requirements (from 2810)
- OMB Cookie Use Guidelines for Federal Government Web Sites
- Privacy Act-PIA
- Public Information Collection Guidelines-E-Gov Act
- Public Information Collection Guidelines-Paperwork Reduction Act
- Section 508 Accessibility Guidelines
- Classified National Security Information (CNSI)
- Copyright
- Export Control (including ITAR and EAR)
- Potentially Patentable
- Proprietary & Trade Secret Information
- Sensitive But Unclassified (SBU)
- Space Act Agreement
- Unclassified Controlled Nuclear Information (UCNI)

## GOTCHAS

- Email notifications aren’t grouped
- Some Technical POCs will receive 50+ emails from the system at Go-Live
- Language is in “IT-ese”
- Email notifications, Help text, etc
- Example:
- “Site content categories” vs. “policy titles”
- Some GSFC facilities separated out, some not
- Review requirement

## Registration Deadlines

| External Web Sites 
(accessible outside Center firewalls) | 120 days after Go Live(Feb 1 2008) |
| --- | --- |

| Internal Web Sites
(accessible inside Center firewalls only) | 180 days after Go Live date
(April 1 2008) |
| --- | --- |

| FTP Sites
(internal and external) | 6 months after deadline for registration of internal Web sites |
| --- | --- |

- Note: Simply having data migrated into AWRS does not satisfy the Web site registration requirement; Registrant must verify and complete all required information and submit the registration record for review and approvals

- These **deadlines** **translate into expire/renewal dates**. We negotiated extensions to help spread out the work over time. If you wait until the deadline to complete registration, **all of your records will expire at the same time next year.**

## Next Steps

- Integrate FTP Sites
- Find sites & identify owners
- How do rules for FTP differ from HTTP?
- More training
- Webex & general walk-throughs
- Batch user accounts
- DCSO’s will approve users for their directorates

## Resources

- AWRS Informational Web Site
- _[http://insidenasa.nasa.gov/ocio/information/_x000b_info_home/webregister.html](http://insidenasa.nasa.gov/ocio/information/%0Binfo_home/webregister.html)_
- AWRS Application
- _[https://webregistration.larc.nasa.gov](https://webregistration.larc.nasa.gov/)_