Home / Cybersecurity / NGA Implements Vetting Process to Secure GEOINT App Store

NGA Implements Vetting Process to Secure GEOINT App Store

The National Geospatial-Intelligence Agency has developed an app store that implements segmentation controls to provide Defense Department employees access to applications based on their security clearance levels, Wired reported Tuesday.

“We built the [GEOINT] App Store to be a completely unclassified environment that’s open to the public. … But it also has identity management that uses a federated approach to authentication,” said Ben Foster, a technical director at NGA and product manager for the app store.

Joedy Saffel, division chief and source director of NGA, said the agency has tapped Engility to analyze the source code of apps submitted by developers and screen those tools for potential vulnerabilities through the Innovative GEOINT Application Provider Program.

Under IGAPP, Engility comes up with an initial report on vulnerabilities and informs developers of their findings to help them modify their code.

“What we focused on early on was providing tools so developers can bring their app and do a lot of the pre-testing and development with Engility,” Saffel said.

“And then NGA has a governance board that meets every week, and the whole process has matured enough that by the time an app comes to NGA, we can review it and get that application into the app store and exposed within two weeks’ time,” he added.

Check Also

NBIB Continues Background Investigations Amid Government Shutdown

The National Background Investigations Bureau is still running despite the partial government shutdown's effects on the Office of Personnel Management, Nextgov reported Wednesday. The bureau continues to run on funds that customer agencies pay for investigation work. The NBIB has managed to cut a backlog of 725,000 investigations down to 600,000 between April and the end of 2018.

Leave a Reply

Your email address will not be published. Required fields are marked *