BY ORDER OF THE COMMANDER TWENTY-FOURTH AIR FORCE AIR FORCE INSTRUCTION 33-150 24 AF Supplement 3 APRIL 2013 Communications and Information MANAGEMENT OF CYBERSPACE SUPPORT ACTIVITIES COMPLIANCE WITH THIS PUBLICATION IS MANDATORY ACCESSIBILITY Publications and forms are available on the E-publishing website at www e-Publishing af mil RELEASABILITY There are no releasability restrictions on this publication OPR 38 CEIG TA Certified by 24 AF CC Maj Gen Suzanne Vautrinot Pages 8 This instruction implements Air Force Policy Directive AFPD 33-1 Cyberspace Support and supplements AFI 33-150 Management of Cyberspace Activities This supplement defines the services provided by 38th Cyberspace Engineering Installation Group 38 CEIG to the TwentyFourth Air Force 24 AF and its subordinate organizations in support of the AF direction to transform to an enterprise-wide net-centric knowledge-based operational environment outlined in AFPD 33-1 Cyberspace Support It further defines 38 CEIG support activities documented in AFI 33-150 This supplement does not apply to the Air National Guard ANG and the Air Force Reserve Command AFRC and their units Use this supplement in conjunction with Methods and Procedures Technical Order TO 33D-2002 Engineering Installation and Cyberspace Readiness Activities Management and TO 33D-3003 Managing the Cyberspace Infrastructure with the Cyberspace Infrastructure Planning System CIPS Ensure that all records created as a result of processes prescribed in this publication are maintained in accordance with Air Force Manual AFMAN 33-363 Management of Records and disposed of in accordance with Air Force Records Information Management System AFRIMS Records Disposition Schedule RDS Refer recommended changes and questions about this publication to the Office of Primary Responsibility OPR using the AF Form 847 Recommendation for Change of Publication route AF Form 847s from the field through the appropriate functional chain of command This supplement defines how the 38 CEIG provides support to the 24 AF Air Force Network AFNet operators It specifically defines how the 38 CEIG will utilize Cyberspace Systems Integrator CSI to support the 24 AF Operators For additional information on Engineering Installation Services EI reference TO-00-33D-2002 2 AFI33-150_24AFSUP 3 APRIL 2013 1 Roles and Responsibilities 1 1 38 CEIG Operational Engineering Services Paragraphs 1 1 1 through 1 1 3 5 describe three key services along with some additional services provided by the 38 CEIG Operational Engineering Support Special Projects and Evaluation of AFNet Technical Data 1 1 1 Operational Engineering Support 38 CEIG will assign a CSI to work directly with functional experts at the 24 AF and 67th Network Warfare Wing 67 NWW operators and defenders The CSI will 1 1 1 1 Added Travel to and conduct regular visits with each customer 1 1 1 2 Added Assist and provide recommendations in the development review and approval of network architecture and designs 1 1 1 3 Added Identify Tier 1 2 and 3 terrestrial infrastructure deviations for migration to approved AFNET architectures and standard solutions 1 1 1 4 Added Develop strategies for Tier 1 2 and 3 system implementation plans specify installation requirements in accordance with approved AF Cyberspace enterprise architecture and standard solutions and provide appropriate acquisition documentation 1 1 1 5 Added Attend key design meetings and provide engineering expertise necessary to understand interpret and prepare cyber requirements documents supporting AFNet operations 1 1 1 6 Added Participate in the AFNet operations requirements review process Review program documentation and make recommendations to facilitate the successful integration of new systems 1 1 2 Special Projects 38 CEIG will provide support for requested engineering services from the organizations outlined in this supplement that are not part of the normal services and requirements process outlined in TO 00-33D-2002 see Figure 1 AFI33-150_24AFSUP 3 APRIL 2013 3 Figure 1 Special Projects Process 1 1 2 1 Requests Organizations may request engineering support from 38 CEIG by submitting a request to 38 ES Engineering Workload Operations Cell Formerly known as Workload 4 AFI33-150_24AFSUP 3 APRIL 2013 Control at 38ES EWOC@tinker af mil or via SIPRNet at 38ceg EWOC@afmc af smil mil Requests can also be made through the organizational CSI or utilizing the Work Order Management System WOMS in CIPS reference TO 00-33D-3003 1 1 2 2 Initial Analysis 38 ES will conduct an initial analysis of the request to determine scope feasibility of project and provide an acceptance non-acceptance recommendation 1 1 2 3 Resource Determination and Project Planning Execution Phase Upon project acceptance 38 ES will begin project staffing planning technical solution development and implementation as appropriate Additionally 38 ES will notify the 624th Operations Center 624 OC and the 688th Information Operations Wing 688 IOW of the project acceptance All cyberspace infrastructure unclassified project information will be documented in CIPS per TO 00-33D-3003 1 1 2 4 Finalized Documentation Upon completion of the special project 38 ES will provide final documentation to the customer and make inputs to the Knowledge Base Repository once developed by 690th Network Support Group 690 NSG see paragraph 1 2 4 1 1 3 Evaluation of AFNet Technical Network Data The 38 CEIG shall conduct technical analysis of Cyber Vulnerability Assessments Network Health Assessments Air Force Infrastructure Assessments AFIA and other engineering data supplied by AFNet operators and personnel in order to identify recurring or systemic issues for engineering technical correction or remediation see Figure 2 In addition 38 CEIG will 1 1 3 1 Conduct analysis of technical data focusing on systemic issues affecting the defensive posture of the AFNet Use the results of the analysis to develop and deliver standard technical solutions costing estimates recommended prioritization and or remediation strategies course of actions for hardening the AFNet see Figure 2 1 1 3 2 Participate on the 67 NWW review board to discuss execution of network assessment analyses and recommendations as shown in Figure 2 At a minimum participants should include 24 AF 688 IOW and 67 NWW 1 1 3 3 Use existing 38 CEIG processes to execute remediation and optimization plans approved by the board that require 38 CEIG resources see Figure 2 1 1 3 4 Develop and deliver Project Completion Reports and provide lessons learned for Knowledge Base repository see Figure 2 1 1 3 5 Coordinate with 690 NSG and 318th Information Operations Group to collate and submit semi-annual reports to 688 IOW and 67 NWW describing trends found from the network assessments analysis 3 APRIL 2013 5 Figure 2 Technical Data Evaluation Process 6 AFI33-150_24AFSUP 3 APRIL 2013 1 1 4 General Engineering Services 38 CEIG will provide cyberspace infrastructure technical consultation and support as defined below 1 1 4 1 Lead teams to conduct network health assessments across the functional disciplines of network management network administration and information protection to optimize network performance identify and remediate vulnerabilities and strengthen network security 1 1 4 2 Provide network troubleshooting teams to 690 NSG 561st Network Operations Squadron 83rd Network Operations Squadron 26th Network Operations Squadron and their detachments as required Teams will conduct root cause analysis of network issues recommend corrective actions and implement on-site if feasible 1 1 4 3 Develop publish and maintain Cyberspace infrastructure standards i e Base Area Network and other Functional Specifications to ensure compliance with AFNet architectures and to field integrated and standard solutions 1 1 4 4 Translate 24 AF requirements into achievable technical requirements for the network operations of the enterprise Tier 1 functional mission systems Tier 2 and Main Operating Bases Tier 3 1 1 4 5 Develop standardized solution recommendations and or alternatives for common cyberspace communication systems and Tier 1 2 and 3 network architecture components 1 1 4 6 Review and approve implementation efforts e g Statements of Objectives Statements of Work to ensure Configuration Management deliverables provided by the implementation activity are specified correctly in contract and or implementation documentation 1 1 4 7 Review and approve implementation efforts to ensure inclusion of Test and Evaluation T E requirements in contract and or implementation documentation and ensure the satisfactory fulfillment of the T E requirements prior to Project close-out per TO 33D-3003 with the AFTO Form 747 Cyberspace Infrastructure System Acceptance process 1 1 4 8 Assess and support integration of tools and applications not considered in the scope of Electronic System Center onto the AFNet 1 1 4 9 Supply results of Air Force Infrastructure Assessment to ‘recurring analysis process’ described in Paragraph 1 1 3 1 2 690 NSG Provides integrated network operations for US Cyber Command 24 AF and 67 NWW The Group delivers AF Network Operations network management information assurance Enterprise IT services and Enterprise Service Desk support to establish the cyberspace domain for AF cyberspace operations and ensures AF cyberspace superiority 690 NSG operates and maintains the AFNet Core Services operates and maintains MAJCOM legacy networks migrates AF users from legacy networks into the AFNet and operates and maintains Lackland Air Force Base classified networks 690 NSG and subordinate organizations will 1 2 2 Support the development and staffing of various cyber Orders when appropriate i e provide data as required by 38 CEIG and help ensure they are delivered in a timely manner to accomplish tasks 1 2 3 Provide adequate office workspace for visiting CSI AFI33-150_24AFSUP 3 APRIL 2013 7 1 2 4 Develop and maintain knowledge base repository for research results reports problem resolutions etc See Paragraph 1 1 2 4 1 3 Request 38 CEIG support utilizing one of the following three methods 1 3 1 Utilize the established CIPS process 1 3 2 Send request directly to the 38 ES Engineering Workload Operations Cell at 38ES EWOC@tinker af mil or 38ceg EWOC@afmc af smil mil 1 3 3 Work directly with their assigned CSI for the purposes of entering a request via email or WOMS in CIPS SUZANNE M VAUTRINOT Major General USAF Commander 8 AFI33-150_24AFSUP 3 APRIL 2013 Attachment 1 GLOSSARY OF REFERENCES AND SUPPORTING INFORMATION References AFI 33-150 Management of Cyberspace Support Activities 30 November 2011 AFPD 33-1 Cyberspace Support 09 August 2012 MPTO–00–33D–2002 Engineering Installation and Cyberspace Readiness Activities Management 16 July 2012 MPTO 33D-3003 Managing the Cyberspace Infrastructure with the Cyberspace Infrastructure Planning System CIPS 15 February 2012 Prescribed Forms AFTO Form 747 Cyberspace Infrastructure System Acceptance Adopted Forms AF Form 847 Recommendation for Change of Publication Abbreviations and Acronyms AFCYBER—Air Force Cyber AFIA—Air Force Infrastructure Assessment AFNet—Air Force Network AFNetOps—Air Force Network Operations CIPS—Cyberspace Infrastructure Planning System CSI—Cyberspace Systems Integrator WOMS—Work Order Management System