text: Signal Support by Army Echelon, Core Competencies, Training, and the Army Network
  ARCHITECTURE
  2-260. The architecture of the DODIN-A provides access to protected services at the point of need. The
  architecture converges communications, computing, and enterprise services into a single platform that
  supports and enables all other missions and functions.
  2-261. The core competencies and essential capability of the Signal Corps enable the DODIN-A’s seamless
  cloud environment:
  * Network transport and information services provide, and extend access to, the network and its
  applications and services.
  * DODIN operations and the essential capability of COMSEC operate and secure the network
  and provide access to cloud-based services.
  * Spectrum management operations enable those DODIN-A systems that rely on wireless
  connectivity, without causing or suffering unacceptable frequency interference.
  Defense-in-Depth
  2-262. Information systems security and network security are critical, because a single compromised
  workstation or networking device places the entire network at risk. DODIN operations personnel secure the
  network and its services through defense-in-depth. Defense-in-depth is an information security strategy
  integrating people, technology, and operations capabilities to establish variable barriers across multiple layers
  and missions of the organization (CNSSI 4009). Defense-in-depth includes perimeter security, enclave
  security, host security, physical security, personnel security, and cybersecurity policies and standards.
  Layered security protects every level of the network, down to individual workstations and users. By
  enhancing protection and survivability, defense-in-depth helps achieve the fundamental principle of trusted
  systems.
  2-263. DODIN operations planners devise and implement comprehensive network plans using a full range
  of security measures. The plan includes both external and internal perimeter protection. External perimeter
  protection consists of COMSEC procedures, router filtering, access control lists, security guards, and, where
  necessary, physical isolation serving as a barrier to outside networks, such as the public Internet. Internal
  perimeter protection consists of firewalls and router filtering. These serve as barriers between echelons of
  interconnected networks and information systems. Internal COMSEC barriers provide another layer of
  security for network enclaves. Local workstation protection consists of individual access controls,
  configuration audit capability, protection and intrusion detection tools, and security procedures.
  2-264. The joint regional security stack secures the logical boundary between the DODIN-A and the rest of
  the DODIN. The hardened outer perimeter of the joint regional security stack controls access to applications
  and data within the DODIN-A.
  Communications in Depth
  2-265. Network-enabled operations require a robust, survivable network. Maintaining network-enabled
  capabilities in a degraded information environment mandates a communications in depth architecture for the
  tactical portion of the network. Deployed signal elements implement redundant network transport using line
  of sight transport, satellite communications, wire, and cable. Automatic network establishment and restoral
  eliminate single points of failure so critical communications still get through. Refer to ATP 6-02.60 for more
  information about tactical network systems.
  Colorless Core
  2-266. Colorless core is a Defense Information Systems Agency-compliant cybersecurity architecture that
  offers more efficient Internet protocol network encryption and transport. The key benefits of colorless core
  are data protection and more efficient bandwidth use. The colorless core architecture encrypts all data,
  whether classified or unclassified, from end-to-end. This is different from legacy systems that only encrypted
  classified information. Since all the encrypted data looks the same, an enemy or adversary cannot distinguish
  between classified and unclassified data. This makes unclassified information just as hard to recover as
  classified information. It also makes it harder for adversaries to target classified networks for cryptanalysis.