COMPLIANCE WITH THIS PUBLICATION IS MANDATORY

Transcription

1 BY ORDER OF THE COMMANDER AIR FORCE SPECIAL OPERATIONS COMMAND (AFSOC) AIR FORCE INSTRUCTION AIR FORCE SPECIAL OPERATIONS COMMAND Supplement 16 OCTOBER 2008 Incorporating Change 1, 23 November 2011 Communications and Information SOFTWARE MANAGEMENT COMPLIANCE WITH THIS PUBLICATION IS MANDATORY ACCESSIBILITY: Publications and forms are available for downloading or ordering on the e- Publishing website at RELEASABILITY: There are no releasability restrictions on this publication. OPR: HQ AFSOC/A6OI Certified by: HQ AFSOC/A6O (Lt Col Kyna R. McCall) Pages: 8 AFI , Software Management, 13 May 2004, is supplemented as follows: This supplement clarifies commander involvement in the AFSOC Small Computer Software Licensing Program. It implements enterprise license and personal computer-common operating environment considerations, Base Software License Manager (BSLM) responsibilities, Unit Software License Manager (USLM) responsibilities, Client Support Administrator (CSA) responsibilities, Trusted-User responsibilities, Small Computer user responsibilities, and specific requirements for placing software on stand alone and networked systems. It applies to Air- Force-procured COTS software and software developed for unique purposes. Note: This supplement also applies to Air Force Special Operations Command units assigned to non- AFSOC bases. This publication does not apply to the Air National Guard (ANG) or the Air Force Reserve Command (AFRC). Ensure that all records created as a result of processes prescribed in this publication are maintained in accordance with AFMAN , Management of Records, and disposed of in accordance with the Air Force Records Disposition Schedule (RDS) located at Refer recommended changes and questions about this publication to the Office of Primary Responsibility (OPR) using the AF Form 847, Recommendation for Change of Publication, route AF Form 847s from the field through HQ AFSOC/A6NZ, 100 Bartley Street, Suite 137E, Hurlburt Field, FL

2 2 AFI33-114_AFSOCSUP 16 OCTOBER 2008 SUMMARY OF CHANGES This interim change reduces the software training requirement on every Air Force user. The Air Force has reduced its overall manning and needs to minimize some of the requirements of every Air Force user. Software licensing is covered in the Information Assurance and Information Protection CBTs, which are required annually. This change also updates the Client Support Administrators to Client Support Technicians consistent with their career field title. A margin bar indicates newly revised material (Added) Command Software License Manager (CSLM). Designate a primary and an alternate Command Software License Manager (CSLM) to develop and manage the command software license program. The primary Command Software License Manager will: (Added) Develop the guidelines Base Software License Managers (BSLM) will use to conduct their base programs (Added) Incorporate the software licensing program into command Inspector General reviews (Added) Ensure requirements of Section 1(c) of Executive Order (E.O.) 13103, Computer Software Piracy, are met, as indicated below: (Added) The E.O. requires government contractors and recipients of Federal grants and loans to have appropriate systems and controls in place to ensure that Federal funds are not used to acquire, operate, or maintain computer software in violation of applicable copyright laws. The E.O. further provides that if an agency becomes aware that contractors or recipients are using federal funds to acquire, operate, or maintain unlicensed software and determines that such actions may affect the integrity of the agency s contracting and financial assistance processes, the agency is required to take such measures, including the use of certifications or written assurances, as the agency head deems appropriate and consistent with the requirements of law (Added) Each agency must take appropriate measures to ensure government contractors and recipients of grants and other federal funding comply with applicable copyright laws, regulations, instructions, directives, E.O.s, and Air Force and Air Force Special Operations Command (AFSOC) requirements and guidelines. 19. (Added) AFSOC Small Computer Software Licensing Program. Specific responsibilities under this program are contained in paragraphs (Added) through (Added) of this supplement, as follows: (Added) Communications Squadron Commander Responsibilities. Each communications squadron commander will: (Added) Designate primary and alternate BSLMs to manage the wing and base software license programs. Commanders of Air Force Special Operations Command units assigned to non-afsoc bases will appoint an individual to act as BSLM for that unit and manage the software license program as if a host BSLM does not already exist. AFSOC Communications Squadron Commanders that are tenants on a non-afsoc base may appoint, at their discretion, an individual to act as BSLM for that unit and manage the software license program as if a host BSLM does not already exist (Added) Forward BSLM appointment memorandums to the CSLM.

3 AFI33-114_AFSOCSUP 16 OCTOBER (Added) Annually certify in writing to the CSLM an annual software inventory was accomplished and the provisions of this AFI have been met. Due to the CSLM NLT the anniversary date of the BSLM s appointment (Added) Will ensure USLMs are provided automated software inventory listing from System Center Configuration Manager (SCCM) for their unit annually and ensure USLMs are notified within 90 days of their inventory anniversary date (Added) Will ensure Client Support Technicians (CSTs) install only host-base enclave approved software (Added) Unit Commander Responsibilities. Each unit commander will: (Added) Appoint a primary and alternate USLM to administer the software license program for the unit. May appoint Trusted Users if needed. Reference paragraph below (Added) Forward appointment memorandums to the BSLM (Added) Ensure outgoing and incoming software license managers conduct a joint inventory of all licensed software and endorse all inventories (Added) Annually certify to the BSLM an annual inventory was accomplished for all unit computer software. Accomplish certification by signing the annual inventory list or memorandum and indicate the unit s annual software license inventory has been accomplished. Complete this certification each year no later than the day the USLM was officially appointed or when directed by the BLSM (Added) Ensure software acquisitions are coordinated through the respective USLM and the host-base Communications Requirements system (e.g., PWRR, etc) prior to purchase (Added) Ensure USLM is notified of all deliveries of new software licenses and copies of licensing material is provided to the USLM. Ensure the software is added to the unit s software inventory (Added) Ensure necessary training for users and maintainers is obtained for unique software purchased or developed by the unit (Added) Ensure the Air Force enterprise license agreement contracts are used to procure common-user desktop software on new PC orders (Added) BSLM Responsibilities. Each BSLM will: (Added) Ensure a host-tenant support agreement directs all base units to participate in the host-base software license program if they use Air Force command, control, communications, and computer (C4) systems or are connected to Air Force local area networks (Added) Ensure USLM training is provided on a recurring basis and USLMs are notified once they are within 90 days of their training anniversary date (Added) Provide software license training for newly appointed BSLMs, USLMs and CSAs. Utilize the base Intranet to the maximum extent possible as a tool to educate all users. This training will include, but should not be limited to:

4 4 AFI33-114_AFSOCSUP 16 OCTOBER (Added) Ensuring all are familiar with their responsibilities as listed in paragraphs (Added) and (Added) of this supplement, and paragraph 9 of the basic AFI, which covers the disposal of excess or superseded Commercial Off-The-Shelf Software (COTS) (Added) Ensuring all USLMs and CSTs are familiar with AFNIC Air Force E/APL for NIPR software and SOCOM/AFSOC listing for SIPR software (Added) Ensuring all USLM's complete the US Air Force Software License Management and Anti-Piracy computer-based training (Added) DELETED (Added) Explain the basics of software licenses and The Copyright Act (Added) Ensure each unit maintains a software inventory of all government owned/cots software in use within their unit (Added) Ensure each unit performs an annual inventory of all software, licenses, and corresponding documentation of unit software. Ensure the unit commander endorses and forwards a copy to the BSLM (Added) Perform periodic compliance visits to base units and AFSOC tenant organizations. Inspect at least 50 percent of unit accounts annually and inspect each unit at least once every two years (Added) Conduct annual software licensing meetings for USLMs (Added) Maintain a current list of all USLMs (Added) Ensure automated tools are used to the maximum extent possible for tracking software installed on the base network (Added) Ensure the software is approved via the AFNIC Air Force E/APL for NIPR software and SOCOM/AFSOC listing for SIPR software. Follow the AFSOC policy on standalone computer systems exempt from CTOs (Added) Verify new acquisitions against the EPL. Do not approve acquisitions without a valid CTO. Functional areas requesting approval to purchase software not on the EPL must follow the established process to obtain a CTO unless the software is exempt from requiring a CTO (Added) Publish a formal Base Software Users Guide that provides implementation information on how to obtain software and methods to cross check installed copies of software with licenses held. Reference: AFSOC Software Management Guide/Template furnished by the CSLM (Added) Will provide all required assistance to USLMs to expedite software acquisition when short notice high priority requirements are received for items not yet approved for use (Added) USLM Responsibilities. Each USLM will: (Added) Become familiar with license agreements of software used in his or her organization (Added) Coordinate with the BSLM, functional system administrators, Client Support Administrators, users, and/or purchasers on all software acquisitions.

5 AFI33-114_AFSOCSUP 16 OCTOBER (Added) If possible, combine software acquisitions (Added) Monitor delivery of all new software, update software inventory list, inform the BSLM in a timely manner, and become familiar with license agreements (Added) Store evidence of license agreements or licenses (e.g., user manuals, purchase documentation, CD-ROMs, etc.) and physical software media in a secure centralized location (e.g., locked drawer, file cabinet, room, etc.). Contact local FARM or Base Records Management Office to ensure proper retention and disposition of official records and for approval of records in the office file system (Added) Ensure the legal acquisition and use of all software. All new software acquisitions will be coordinated through the host-base Communications Requirements system (e.g., PWRR, CIPS, etc) prior to purchase (Added) Ensure each COTS application has a license (Added) Ensure use of software corresponds to the applicable license agreement (Added) Identify software without associated licenses, assemble proofs of purchase, and request replacement licenses from publishers, as needed (Added) Act as liaison between Small Computer users and the BSLM (Added) Respond to the BSLM as necessary (Added) Coordinate training with the BSLM, as needed (Added) DELETED (Added) Promote user awareness of unauthorized or illegal use of computer software (Added) Explain how and to what extent the user may be held liable for unauthorized or illegal use of computer software (Added) Train users on procedures for acquiring new software (Added) Make users aware of the importance of identifying unauthorized or illegal software on their systems (Added) Circulate software licensing information as needed throughout the organization (Added) Support and implement the base software license program (Added) Maintains a hard or soft copy of the software license inventory and Proof of License Ownership of all government owned/cots software in use within their unit. Proof may consist of hardcopy or softcopy documentation from the supplier such as a manual, purchase documentation, or distribution media. Inventory must include: (Added) Purchase Data (Vendor Name, Purchase Order or Delivery Order Number, Description, Version, Cost, Quantity Purchased, License ID Number(s), Funding Data, Date Purchased, Expiration/Renew by Dates) (Added) Issued to Data (Organization, POC, Date, Quantity Issued, License Number(s)).

6 6 AFI33-114_AFSOCSUP 16 OCTOBER (Added) Quantity Installed Data (Item T/M/S, and if Quantity Installed Data different than Issued to Data ; Organization, POC, Date, Total Issued, and License Number(s)). The use of an automated tool to track installed copies is acceptable (Added) Perform an annual inventory of all software licenses and cross check with installed software. Complete this certification each year no later than the anniversary date of the USLM s official appointment. Ensure the unit commander endorses the report (Added) Perform a joint inventory of all software licenses and cross check with installed software before transferring responsibility to another software license manager. Ensure the unit commander endorses the report (Added) Client Support Technician (CST) Responsibilities. Each Client Support Technician (CST) will: (Added) Verify with USLM the validity of the software license (Added) Verify with Wing Information Assurance Office the approval/certificate to operate on the host-base enclave (Added) Monitor computers to ensure Small Computer users do not install or remove any software application (Added) Respond to the USLM as necessary (Added) Small Computer User Responsibilities. Each Small Computer user will: (Added) Assist USLMs with software inventories on PCs as required (Added) Not install or remove any software application without the specific authorization of the CSA in coordination with the USLM (Added) Not make any illegal copies of copyrighted software (Added) DELETED (Added) Report all unauthorized or illegal software on his or her system to the CSA and the USLM for resolution (Added) DELETED (Added) Trusted User Responsibilities. Trusted Users (Computer users with unique requirements that require administrative privileges) (Added) Must be appointed in writing by unit commanders (Added) Will follow all the software license requirements outlined for CSAs and USLMs pertaining to their unique system/requirements. ANTHONY W. FAUGHN, Colonel, USAF Director, Communications and Information

7 AFI33-114_AFSOCSUP 16 OCTOBER References Attachment 1 GLOSSARY OF REFERENCES AND SUPPORTING INFORMATION DODI , TITLE Department of Defense Information Assurance Certification and Accreditation Process (DIACAP) AFI , Software Management CFETP 3A0X1, Information Management Abbreviations and Acronyms ADPE Automated Data Processing Equipment BSLM Base Software License Manager CSLM Command Software License Manager CSA Client Support Administrator COTS Commercial Off-the-Shelf Software CTO Certificate to Operate DIACAP DOD Information Assurance Certification and Accreditation Process EPL Enterprise Products List FARM Functional Area Records Manager PC Personal Computer SCB Systems Flight Commander USLM Unit Software License Manager SMS Systems Management Server Software WM Workgroup Manager Terms Accreditation Formal declaration by the DAA that an information system is approved to operate in a particular security mode using a prescribed set of safeguards and controls. Certificate to Operate (CTO) Issued by the AFSOC CIO or designee as a result of a favorable assessment that has verified the system is information technology (IT) ready. Designated Approval Authority (DAA) An official with the authority to formally assume responsibility for operating an information system or network within a specified environment. License Agreement A contract between the software publisher and the user which instructs and limits how the software is to be used. When software is purchased, the purchaser acquires a license to use it, but the publisher retains full rights to the software and can further distribute and reproduce it. AFSOC s license agreements generally fall into one of the following categories:

8 8 AFI33-114_AFSOCSUP 16 OCTOBER 2008 Enterprise License The DOD and Air Force Enterprise Software Initiatives (ESI) and the Enterprise software agreements (ESA) entered into by DOD components who manage the acquisition of commercially available software at the DOD Enterprise level to reduce the cost of acquiring and maintaining software products. By aggregating requirements and leveraging DOD s buying power together with the buying power of related communities of interest, the DOD is able to achieve the most favorable terms and pricing for COTS software and maintenance. Individual License A license for use on a single machine only. Network License A license that allows every member of the network to access the software. Site License A license defined by a geographic restriction, such as a building, unit, wing, or base. Small Computers Computer systems from standard PCs running MS windows and connected to the NIPRNet and SIPRNet systems to stand alones and specialized computer system. Does not include mainframes or servers. Trusted-User Computer users with unique requirements that require administrative privileges. They manage unique computer operations such as modeling and simulation computer systems, standalone systems or computers with unique software/operational requirements when the CSA is unable to provide adequate assistance. Client Support Administrator Client Support Administrator (CSA) is a new term for Workgroup Manager (WM).