Agenda

2. Agenda NIEM Impact on Pharmaceutical Drug Monitoring How do we enable prescription drug monitors to see across state lines? The NIEM Framework and ProcessWhat common services, governance models, processes and tools are provided by NIEM? What is NIEM-UML? NIEM GovernanceHow is NIEM governed? How does the federated domain governance function? What are the different NIEM committees? NIEM Program UpdatesWhat are next steps for the program; NIEM-UML and NIEM 3.0? Updates on NIEM international adoption? How can NIEM State & Local practitioners get involved? 2

3. NIEM ImPACT ON pharmaceuticaldrug monitoring The Standard Prescription Monitoring Information Exchange 3

4. NIEM ImPACT ON pharmaceuticaldrug monitoring Prescription Drugs (15.1 million) Cocaine (5.9 mil.) From 1992-2003, 15.1 million Americans abused prescription drugs. That’s more than cocaine, hallucinogens, inhalants, and heroin COMBINED. Hallucinogens (4 mil.) NATIONWIDE DRUG ABUSE Inhalants (2.1 mil.) Heroin (.3 mil.) During the same period, there was a 150% INCREASE in prescriptions written for controlled substances. The brand cost of 4 mg of Dilaudid is $88.94 per 100. The street value for the same amount is $10,000. The demand is REAL. 4

5. NIEM Impact ON pharmaceuticaldrug monitoring 40% of teens believe that prescription drugsare safer than illegal drugs. 29% of teens believe that prescription pain relievers are not addictive. “You have young people getting pills for free from the homes of family members and friends.” - John Walters, former White House drug czar 1 in 5 teens are abusing prescription drugs to get high. 5

6. NIEM ImPACT ON pharmaceuticaldrug monitoring Pharmaceutical drug abuse is crossing state lines as offenders realize the gap in interstate reporting. As this map shows, less than 20%of prescriptions written in California were written for California residents. Where CA Prescriptions Really Go > 0 – .9% 1 – 2.9% 3 – 3.9% 4 – 7% > 19% • There are three facets to the problem—misuse, abuse, and diversion—and three players—prescribers, dispensers, and patients. Prescription drug monitoring is the coming together of pharmacy boards, health agencies, and law enforcement to monitor drug diversion. 6

7. NIEM ImPACT ON pharmaceuticaldrug monitoring As diversion of prescription controlled substances and the abuse involving these drugs continues to escalate, how can we improve interstate monitoring of drug use? How do we enable prescription drug monitors to see across state lines? 7

8. NIEM ImPACT ON pharmaceuticaldrug monitoring Before NIEM, there was large gap in interstate reporting. As abuse and diversion escalate, law enforcement and health practitionersneed a standardized, scalable solution to share patient drug history. The Standard NIEM Prescription Monitoring Program Information Exchange assists prescribers, health agencies, and law enforcement in identifying potential abuse and diversion. 8

9. NIEM Impact ON pharmaceuticaldrug monitoring This map identifies the status of Prescription Drug Monitoring Programs (PDMPs) The Prescription Monitoring Program uses NIEM to empower connections: 1,600,000 Prescribers 284,000 Pharmacists 73,000 Pharmacies54Boards of Pharmacy 18,000 Law Enforcement Agencies11,000Substance Addiction Treatment Programs 140Consumer Protection Agencies This is a solution that the 50 states, Canada, and Mexico can leverage. 9

10. The NIEMFRAMEWORK AND PROCESS What common services, governance models, processes and tools are provided by NIEM?

11. The NIEM framework NIEM connects communities of people who share a common need to exchange information in order to advance their missions, and provides a foundation for seamless information exchange between federal, state, local, and tribal agencies. Much more than a data model, NIEM offers an active user community as well as a technical and support framework. Community Technical Framework Support Framework Tools for Development and Discovery Data Model Formal Governance Processes Established Training Program Online Repositories XML Design Rules Development Methodology Implementation Support Mission-Oriented Domains Help Desk & Knowledge Center Self-Managing Domain Stewards Predefined Deliverables (IEPD) 11

12. Standardizing Data Moving Across Systems Scope-of-NIEM COMMONLY FORMATTED DATA LEGACY DATABASES LEGACY DATABASES INTERFACE INTERFACE Translation • NIEM intentionally does not address standardizing data inside legacy systems. NIEM serves as a translation layer (providing a common understanding) between and across disparate systems. 12

13. The NIEM LIFECYCLES Common Language(Data Model Lifecycle) Repeatable, Reusable Process (Exchange Specification Lifecycle) Built and governed by the business users at Federal, State, Local, Tribal and Private Sectors 13

14. NIEM Governance How is NIEM governed? How does the federated domain governance function? What are the different NIEM committees?

15. NIEM Governing Structure NIEM’s governing structure is comprised of Federal, State, Local, Tribal and private organizations NIEM is jointly managed at an executive level by the Department of Homeland Security (DHS), Department of Justice (DOJ), and Department of Health and Human Services (HHS) ESC Executive Steering Council NIEM PMO Executive Director Deputy Director NC&OC NTAC NBAC NIEM Communications & Outreach Committee NIEM Technical Architecture Committee NIEM Business Architecture Committee 15

16. Who steers NIEM currently? Voting Members • Dept of Justice • Dept of Homeland Security • Dept of Health and Human Services Ex-Officio Members • Global Justice Information Sharing Initiative • Office of Management and Budget • Program Manager, Information Sharing Environment • NASCIO Partners • Terrorist Screening Center • Dept of Defense / Dept of Navy • Dept of State, Consular Affairs (invited) 16

17. Who governs NIEM Domains? 17

18. NIEM Program Updates What are next steps for the program; NIEM-UML and NIEM 3.0? Updates on NIEM international adoption? How can NIEM State & Local practitioners get involved?

19. UML Profile for NIEM (v2.1 Alignment) Objective of the NIEM-UML Profile To allow modelers and developers to apply NIEM-UML with minimal effort in order to create new models or change existing models and ultimately to produce NIEM MPD artifacts. • NIEM-UML Implementations • MagicDraw NIEM-UML Plug-in • Open Source Implementation (Under Development) 19

20. NIEM-UML What is NIEM-UML? Learning Requirements? ` ` • NIEM Logical Concepts Not the XSD and NIEM Naming & Design Rules Details • Platform Independent Model (PIM) Profile • Common Profile • Model Package Description Profile • UML Tooling/Development Environment • Subset of the Unified Modeling Language (UML) • Set of UML constructs & Stereotypes • Extends UML to represent NIEM concepts • NIEM concepts are augmented with NIEM-Platform mapping information • NIEM Naming & Design Rules enforced by leveraging the Object Constraint Language • A valid NIEM-UML model will produce a valid MPD 20

21. NIEM 3.0 TIMELINE (13 months) Requirements & Preparation Phase Development & Execution Phase PRE-ALPHA (19 weeks) ALPHA 1(5 weeks) ALPHA 2(10 weeks) BETA(8.5 weeks) RC 1(9 weeks) 3.0(4 weeks) Domain Update Requirements& Harmonization (3 months) kickoffmeeting ReleaseAlpha 1 ReleaseAlpha 2 ReleaseBeta 90-day Deadline ReleaseRC 1 Release NIEM 3.0 Today RELEASEAUDIENCE 21

22. NIEM 3.0 High-Level BASELINE Scope * 1 Technical Architecture Enhancements and bug fixes 2 Harmonized Content, & Domain Content Change requests • Code List Decoupling & Updates • Optional Code List Complexity Solution • New Augmentation Solution • Integrate Latest Version of IC-ISM • Unify Reference & Content-Bearing Elements • Ability to Subset structures.xsd and appinfo.xsd • Conformance Target Declaration Attributes in appinfo.xsd • Local Terminology and Acronym Capability in appinfo.xsd • Resolved Architectural NIEM Configuration Control Tool (NCCT) Issues • Newly Identified Architectural NCCT Issues • Domain Content Change Requests • NCCT Content Harmonization Solutions • Newly Identified NCCT Content Issues NIEM.gov Tools UPDATES 3 • SSGT (Updates & NIEM-UML Alignment) • ConTesA • Code List Generator * Scope is subject to change 22

23. NASCIO NIEM Policy Issuance In April 2011, the National Association of State CIOs (NASCIO) issued a policy statement of support recommending participation and adoption of the NIEM and provided state CIOs with background, guidance and recommendations in support of state government adoption of NIEM to achieve effectiveness in government through collaborative information sharing. 23

24. Success of NIEM within the Departments’ of Justice, Homeland Security, and Health and Human Services propelled growth of NIEM across the Federal Government Progress ON Federal NIEM Adoption 24

25. March 20 TESTIMONY TO HOUSE WAYS AND MEANS "Although I am not testifying on behalf of NIEM today, I am testifying in support of NIEM as it relates to any standards contemplated by this legislation. The NIEM model is now being used in many aspects of government around the country and not just within the Justice domain …Because we in the courts deal with matters that come before us from a range of other governmental disciplines, we would hope that any standards developed in the child support enforcement area would be developed using the NIEM framework and dictionaries.“ Craig Burlingame, CIO Trial Court Information Services, Massachusetts Court System 25

26. Beyond the Border North America Day NIEM in Europe International Activities 26

27. virtual town hall February 14th 2 – 3 p.m. EST We’re kicking off the new year with a Town Hall, and you’re invited! Great initiative. Count on my active participation. I’m registered! Agenda • Preview of 2013 NIEM highlights Donna Roy • Progress on 3.0 Andrew Owen • Community engagement & growth of the Human Services domain Joe Bodmer and David Tabler • Overview of formal NIEM adoption efforts across states & territories Doug Robinson • Achieving interoperability across the Commonwealth of Virginia through the use of NIEM Joseph Grubbs • Community Q&A 27

28. We are NIEM-ified • Dedicated Map on NIEM.gov (complete) • Outreach Campaign planned for rollout in Q2FY13 NIEM users are the most credible source for attesting to “the power of NIEM!” 28

29. Taking action Help Us Define the Next NIEM Challenge A large-scale need to connect people and organizations around a common mission, where information is critical Participate in NIEM Domains 12 NIEM Domains: Cyber, Biometrics, Maritime, CBRN, Screening, Intel, Immigration, International Trade, Justice, Infrastructure Protection, Emergency Management, and Children, Youth, & Family Services Get Involved – Share Your ExpertiseNIEM Committees, NIEM LinkedIn & Twitter Community, Discussion Forms on NIEM.gov—contact NIEM at information@niem.gov to discuss opportunitie. Empower Your TeamGive your team the resources to adopt and use NIEM: Training and Tools Apply For/Leverage Federal Grant DollarsDHS and DOJ grant dollars can be applied for NIEM activities 29

30. Information Sharing Environment:Delivering Trust in Sharing

31. Building Trust with Privacy Principles Privacy Act of 1974, Fair Information Principles, International Privacy Guidelines, and increased social awareness are drivers for building IT systems with trust… • Citizens, by U.S. law, have rights related to how the government uses their information • Federated democracy compounds this at State and Local level • Government entities are expected to practice fair information principles in their systems and processes • Trusted Partners have expectations beyond basic protections provided to citizens such as protection of law enforcement case data, proprietary information, etc • International protections and expectations may differ and are driven by cultural variety • Google and FaceBook's changing privacy policies are driving increased consumer awareness • Public at large has a higher expectation for lower risk and increased protection from government....Much more than what they accept with social media and consumer transactions

32. Building a Network of Trust for Sharing • How do I know who I am sharing with? • Is the environment secure? • Is my personal information safe? • When I share, how do I know it won't be accessed beyond my expectations? • How and when can I share outside of my COI or group of associates? 7

33. Homeland Security Information Network (HSIN) Federal, State, Local, Tribal, Territorial, Private sector, International • HSIN is a web-based knowledge management tool designed to increase collaboration between: • 300+ Million People • 18,000 Organizations • 750,000+ Law Enforcement Officers • 250,000 911 Operators • 1.2 Million Firefighters • 2.2 Million Security Officers • 100,000 Probation/ Parole Officers • * Numbers are estimates UNCLASSIFIED FOUO 2

34. Homeland Security Information Network (HSIN) Sharing: Strong identity information… know who is on the platform, what their role or purpose for sharing, and ensure a safe entry into the system each time… Safeguarding: Large network of stakeholders with expectations of trust in appropriate use of data, and identity of other users. All data must be safeguarded and used appropriately. 4 UNCLASSIFIED FOUO

35. HSIN Identity Principles Account Management Single account for trusted partners Strong Authentication Two factor authentication for getting in.... Identity Proofing Verified at account provisioning, through automated or manual methods Credential Store Ability to use non HSIN credentials as well as offer HSIN credentials for reuse Federation Ability to federate across trusted partners with similar capabilities 5

36. HSIN Information Principles Access Management Access decision determined by originator Stewardship Community of interest governed Tagging Minimum tagging required for safeguarding Shared Value Ratings Allow comments and ratings on value of information Share Risk Safeguarding against inappropriate use is everyone's responsibility 5

37. Homeland Security Information Network (HSIN) UNCLASSIFIED FOUO 6

38. SAML Security Assertion Markup Language (SAML) is an XML -based open standard for exchanging authentication and authorization data GFIPM Global Federated Identity and Privilege Management (GFIPM) framework is an XML –based suite of technical standards, which are built on the Security Assertion Markup Language (SAML) to create common understanding of user attributes across law enforcement and public safety communities XACML eXtensible Access Control Markup Language (XACML) defines access control policy language implemented in XML and a processing model describing how to evaluate authorization requests according to the rules defined in policies NIEM National Information Exchange Model is an XML -based open standard for providing a commonly understood way to describe data across law enforcement and public safety communities HSIN Interoperability Standards • The combination of several XML based standards present a recipe for interoperability that support the goals for sharing and safeguarding