The Defense Logistics Agency (DLA) is a vital component of the U.S. Department of Defense (DoD), responsible for managing the global defense supply chain. The DLA provides critical resources to the U.S. military and its allies, ensuring the availability and timely delivery of supplies, equipment, and services essential for national defense.  The Naval Information Warfare Center (NIWC) Atlantic plays a crucial role in the United States defense infrastructure by delivering advanced information warfare capabilities to the U.S. Navy and DoD agencies like the DLA and ensuring the U.S. military maintains its technological edge and operational readiness in an increasingly complex and dynamic threat environment.

The DLA faced significant cybersecurity challenges, necessitating robust and resilient solutions to protect its extensive Industrial Control System (ICS) infrastructure, particularly the Automated Fuel Handling Equipment (AFHE) operational technology (OT) systems. With increasing OT cyber threats, DLA required a comprehensive cybersecurity strategy to safeguard sensitive data, maintain operational efficiency, and ensure compliance with DoD standards. NIWC recognized that an industry partnership was necessary to fortify the DLA’s IT infrastructure against cyber threats and support these critical defense operations.

In partnership with NIWC, TIAG delivered a comprehensive suite of advanced cybersecurity services to the DLA, driving substantial improvements across various domains:

• Advanced Threat Detection and Response: TIAG established an advanced threat detection and response system, enabling real-time monitoring and rapid response to potential cyber threats. This ensured DLA maintained uninterrupted operations, minimized downtime, and delivered essential resources promptly.
• Comprehensive Cybersecurity Assessments: We thoroughly evaluated DLA’s existing OT cybersecurity landscape, identifying vulnerabilities and areas for improvement within the AFHE program. This included a detailed DLA AFHE lab hardware and software inventory, accounting for end-of-life and replacement information. Our team developed an inventory management system and completed two site audits, optimizing lab configuration for enhanced efficiency.
• Risk Management Framework (RMF) Implementation: TIAG implemented the DoD’s RMF to enhance DLA’s security posture, ensure compliance with federal cybersecurity regulations, and significantly reduce the risk of security breaches.
• Enhanced Security Culture: We provided comprehensive training and awareness programs to DLA personnel, equipping them with the knowledge and skills to identify and respond to cyber threats effectively, fostering a robust security culture within the organization.
• Cost-Effective Solutions: By leveraging past improvements, generating standardized processes, and efficiently overseeing site activities, TIAG’s centralized team delivered significant cost savings to DLA.
• Industrial Control Systems (ICS) Engineering: Our expertise in Wonderware/AVEVA system platform software development, PLC development and integration, and ICS Historian development and maintenance was pivotal in upgrading existing systems and implementing new cybersecurity practices.
• AFHE 4.2.0 Next-Generation Application: TIAG led the development of the next-generation AFHE application, including migrating to a type 1 hypervisor for improved system analysis and reproducibility, implementing domain-controlled group policy via Active Directory, adding an in-boundary ACAS scanner and SIEM tool (ELK-stack application), fully re-engineering the AVEVA 2023 System Platform application, and implementing a robust networking architecture with hardened Cisco switch configuration.
• Model-Based Systems Engineering (MBSE): We implemented MBSE methodology to build and support a digital twin system for ICS/OT systems, enhancing system design and analysis capabilities.
• Comprehensive Knowledge Base: TIAG developed a comprehensive knowledge base of ICS and OT systems in the AFHE program, resulting in over 30 published documents, including white papers, SOPs, and AoAs. These documents encompassed the AFHE HMI/SCADA AoA, AFHE Ground Reader Replacement Options Analysis, AFHE 4.2 System Architecture Options – Hypervisor, Isolated Network Connectivity Supporting Automated Fuel Handling Equipment, Patch Management of a Distributed Non-Interconnected System, Use of Windows Server Update Services, and Manual Patching Process for Automated Fuel Handling Equipment.
• Thought Leadership: We showcased our expertise and strategic thinking by developing several white papers and Analysis of Alternatives (AoA) documents in critical areas such as HMI/SCADA systems, ground reader replacement options, and patch management strategies.

TIAG generated 100% of the required policies and procedures for the ATO body of evidence, resulting in the longest ATO ever awarded to the AFHE program, expiring November 7, 2024. Through rigorous assessments and RMF implementation, DLA significantly strengthened its defenses against cyber threats, protecting sensitive data and critical systems. Additionally, TIAG’s multifaceted approach not only enhanced security but also improved overall operational supply chain efficiency and resilience, positioning the DLA AFHE program for continued success in an ever-evolving threat landscape.