I'm not sure if Procurement is the right catagory (if it's not please direct me to the correct forum).
It seems to me that the US military has radically changed its official attitude toward use of new and civilian technologies in the field (the Marine's CONDOR network is an example of this).
I'm wondering how they maintain / ensure security standards while not slowing down procurement and deployment of hetrogenous networks or other new, civilian technologies.
In the corporate world, each component would need to be reviewed and tested by the security group--this would take weeks or months and risk-averse administrators would probably reject the new thing (or face termination, if they accepted a component that was later compromised).
Again, in the corporate world, rogue groups generally use new technologies unofficially (and secretly), until they're proven enough to be officially accepted.
It sounds like the US military (army/marines) has found a way of nurturing innovation while addressing security concerns.
Any information about how they perform this would be greatly appreciated.
I'm specifically wondering
- Are components reviewed to see if they meet standards?
- Are they reviewed *before* procurement? During the process? After deployment?
- Are there people at the unit (Batallion) level who have authority to authorize these purchases from a risk / security point-of-view (I assume the OIC has final authority, but I'm wondering if there are subject-matter-experts who address technical issues like suitable encryption)
- Are there specific funding structures for buying civilian equipment (I've heard that units have a slush fund for buying things from the open market)
- Is there a group that interprets security poilicy to answer questions for soldiers in the field? (Most corporate security policies I've seen are so complex and vague that people have a hard time understanding them)
- Is there an audit group (Inspector General?) that officially examines deployed, new technology and okays/disallows it?
I was in the infantry a long time ago, and was never a part of the procurement cycle, so any insight would be very helpful.
Cheers,
E. |