1. I n t e g r i t y - S e r v i c e - E x c e l l e n c e Headquarters U.S. Air Force 1 Lt Gen Bill Lord, SAF/CIO A6 Chief of Warfighting Integration and Chief Information Officer 1 September 2010 Air Force IT Conference 2010 Clifford.Mangum@serco-na.com

2. I n t e g r i t y - S e r v i c e - E x c e l l e n c e Our Shared Goal Mission assurance by providing joint force commanders network enabled operational capability to… See with clarity Navigate with accuracy Communicate with certainty Strike with precision Network with assurance 2 Improve Capabilities, Flexibility & Robustness of Forces Across the Domain

3. I n t e g r i t y - S e r v i c e - E x c e l l e n c e 3 Serve as AF’s Senior Communicator reporting to CSAF (A6) Manage and oversee AF-wide IT resources (CIO) Protect AF information (CIO) Manage AF IT portfolio (CIO) Serve as AF Information Manager (CIO) Integrate information power across all Service Core Functions (Warfighting Integration) Synchronize AF and Joint Warfighter Networking Capabilities (Warfighting Integration) Oversee OT&E for Air Force Network operations Lead Air Force Network interoperability and sustainment Implement Capital Planning and Investment plan Lead information security and Info assurance programs Report on adherence to evaluation and compliance Implement IT governance and policy Support Joint and Service processes AFSPC and SAF/CIO A6: Lanes in the Road

4. I n t e g r i t y - S e r v i c e - E x c e l l e n c e AFSPC and SAF/CIO A6: Lanes in the Road 4 CIO A6 Responsibilities: AFSPC Responsibilities: Serve as AF’s Senior Communicator reporting to CSAF (A6) Manage and oversee AF-wide IT resources (CIO) Protect AF information (CIO) Manage AF IT portfolio (CIO) Serve as AF Information Manager (CIO) Integrate information power across all Service Core Functions (Warfighting Integration) Synchronize AF and Joint Warfighter Networking Capabilities (Warfighting Integration) Oversee OT&E for Air Force Network operations Lead Air Force Network interoperability and sustainment Implement Capital Planning and Investment plan Lead information security and Info assurance programs Report on adherence to evaluation and compliance Implement IT governance and policy Support Joint and Service processes

5. I n t e g r i t y - S e r v i c e - E x c e l l e n c e Is it Clear?

6. I n t e g r i t y - S e r v i c e - E x c e l l e n c e Accomplishments Began Undergraduate Cyber Training → initial qualification started Fixed Enlisted Cyber Initial Skills Trng → rigorous quals implemented Created 05 Gameplan → grow new cyber leaders Engaged w/ Jt/IT Community, Industry, & Academia → relationships built Enhanced AF Sr Leader Dashboard → strategic decision support tool Demo’d AFFOR Collaboration Tool (ACT) → real-time SA for C-NAFs Developed Cloud Computing Effort → basis for net security Created CIO dashboard and relevant metrics → informed of IT investments Revised SAF/CIO A6 Msn Directive/Policy Directives → clearer guidance Updated CIO policies → ensured statutory compliance Finalized CIO Council → standardized infrastructure resourcing 6 People, Relationships, Technology & Governance

7. I n t e g r i t y - S e r v i c e - E x c e l l e n c e Looking Forward Develop Cyber Professional Continuing Education Revitalize C&I Civilian Force Development Stand up 1B4 AFSC & continue cyber operationalization Develop Strategic Comm Plan to focus communication efforts Implement C-NAF Dashboard Lead DoD Net Worthiness Certificate HPT Smart Edge Devices Continue AF migration to single Active Directory Develop AF Aerial Layer Networking Vision and Flight Plan Implement C&A AFSO21 improvements Develop CONOPS Architecture to drive standardized infrastructure 7 People, Relationships, Technology & Governance

8. I n t e g r i t y - S e r v i c e - E x c e l l e n c e Headquarters U.S. Air Force 8 Minimize PowerPoint Presentation and click on “What’s in Play” icon to view video Air Force IT Conference 2010

9. I n t e g r i t y - S e r v i c e - E x c e l l e n c e Cyber Transformation What’s in Play

10. I n t e g r i t y - S e r v i c e - E x c e l l e n c e Security Focus on things that are important

11. I n t e g r i t y - S e r v i c e - E x c e l l e n c e Broadening Security 285 million records compromised in 2009 Verizon 2010 Data Breach Report Data Apps S/W Network Unauthorized or Authorized Access Data Stolen/Altered Applications Compromised Networks Still Targeted Full Spectrum Attacks Securing the “Work” of the Network in Addition to the Network Traditional Focus Shifting Focus

12. I n t e g r i t y - S e r v i c e - E x c e l l e n c e Full Spectrum Defense Active Defense Weapon Development Plan of Attack Recon / Fingerprint AttackPenetrated Insight Global Sensors Local Sensors Local Sensors Traditional IDS/IPS Understand Emerging threats in the wild Understand how threats are being employed in the wild against us Understand how threats are being employed against us C&C detection Anomaly detection Data leakage detection Statistical behavior analysis Forensic/Anti-Forensics Analysis Predict attacks Bolster automatic defenses Determine origin and intent Prevent AttacksRemove Attack OpportunityReduce Attack Scope “Get ahead” Network Understanding Our Approach Must Disrupt the Attack through Predictive & Proactive Means

13. I n t e g r i t y - S e r v i c e - E x c e l l e n c e Challenges Acquiring capability at the “Speed of Need” Budget / Efficiencies Culture Change Mobile Devices and Collaboration Tools 13

14. I n t e g r i t y - S e r v i c e - E x c e l l e n c e Headquarters U.S. Air Force 14