Classified information systems
The Laboratory exceeded its fiscal year 2007 target to reduce the number of single-user classified computers by converting them to diskless computing. The conversion is part of a Labwide effort to comply with a Department of Energy and National Nuclear Security Administration mandate to accomplish classified "diskless" computing by the end of the current fiscal year.
"What this means is that classified offices and/or labs no longer will have the ability to write to portable media. All writeable media will be kept in access-controlled locations," said Charlotte Lindsey, Los Alamos's cyber security program manager and head of the Diskless Conversion Project.
Lindsey said the Lab is on target to meet the September 30 deadline.
Compliance with this mandate meant a significant departure from computing practices that were in place at the Lab in early 2006. The diskless mandate leveraged existing projects -- an expansion of the red network and the new Super VTR (the secure master repository serving diskless workstations) -- to enable a new information security solution.
"The Cyber Systems Security Officers (CSSOs) have been extremely diligent in converting, reporting, and moving this project forward. Now they face the final push," said Lindsey. "This project has been significant for the classified side of the house, because no additional funding was initially identified."
The next step in the Diskless Conversion Project is polling organizations that haven't submitted requests for conversion to a diskless computing system. Additionally, an internal review of possible exemptions is under way. Requests for exemptions to this policy are being analyzed to determine if
• the workstation can be eliminated
• the function can be performed by relocating personnel
• the need justifies the expense
• a permanent exemption is necessary
Lindsey added that ongoing certification and accreditation efforts dictated by the Security Compliance Order add a level of challenge to the diskless conversions -- a separate but equally critical information security project.
More information about the Lab's efforts to manage information security risk is in the March 10 Daily NewsBullletin.
Powerful Light Pulses Imitate Stars, Make Fusion Reactions Clearer
Milagro Telescope Zooms in on New Regions of Space
Library Researchers Make Searching More Predictable
