Commanding General All Commanders, Marine Corps Installations East
|
|
|
- Samantha Owens
- 7 years ago
- Views:
Transcription
1 UNITED STATES MARINE CORPS MARINE CORPS INSTALLATIONS EAST PSC BOX CAMP LEJEUNE NC IN REPlY RefER TO: 5239 G-6 o J ~I'R 201'1 COMMANDING GENERAL'S POLICY LETTER From: To: SUbj: Commanding General All Commanders, Marine Corps Installations East Ref: (a) (b) ( c) (d) (e) (f) (g) (h) (i) ( j ) DOD R, "Joint Ethics Regulation," March 25, 1996 CJCSI C, DISN: Policy and Responsibilities, Jul 08 MCO , Marine Corps Information Assurance Program (MCIAP) MC EIAD OPSTD 005, Personal Electronic Devices (PEDs), Aug 03 MC EIAD OPSTD 011, Personally Identifiable Information, Apr 09 MC EIAD OPSTD 010, Unauthorized Disclosure and Electronic Spillage Handling, Sep 06 MARADMIN 647/08 of 18 Nov 08, Immediate Discontinued Use of Removable Media Storage and Memory Devices on Marine Corps Networks Uniform Code of Military Justice Department of Navy Civilian Human Resources Manual MARADMIN 641/11 of 27 Oct 11, Marine Corps Blackberry Camera and Video Camera Waiver Process to use Camera and Video Features on Government Issued Blackberry 1. Purpose. This policy sets regulations and guidelines on the use of removable storage devices for all subordinate commands and personnel within Marine Corps Installations East (MCIEAST) area of responsibility (AOR), in accordance with references (a) through (j) This policy ensures MCIEAST personnel understand the importance of the proper usage of removable storage devices on the MCIEAST's computing enclaves. Additionally, this policy facilitates the prevention and detection of fraud, waste, and abuse as it relates to removable storage devices. 2. Background. Despite the operational necessity of removable storage devices, these beneficial devices pose risks to MCIEAST networks. The risks range from the unauthorized disclosure of unclassified information to the exfiltration of classified information to our combatant enemies. Per the references, MCIEAST will ensure technical and procedural controls are in place to reduce these risks, while ensuring that operational requirements can be met. 3. Scope. This policy applies to all MCIEAST Commands. Additionally, this policy applies to all service members, contractors, civilians, and foreign nationals utilizing any MCIEAST computing enclaves.
2 SUbj: 4. Policy a. Definitions (I) MCIEAST computing enclaves, also referred to as "networks" in this policy, include any classified or unclassified networks for which MCIEAST has operational responsibility. These networks include, but are not limited to, the Secret Internet Protocol Router Network (SIPRNET), Non-secure Internet Protocol Router Network (NIPRNET), and Combined Enterprise Regional Information Exchange System (CENTRIXS) International Security Assistance Forces (ISAF}) (CX-I) network. (2) Removable storage device refers to any information storage medium that can be attached to, inserted in, plugged into, or otherwise connected to a computer system to store, transmit, or process information/data. These devices are also referred to as removable secondary storage devices. Removable storage devices include, but are not limited to, thumb drives, memory sticks, flash drives, Universal Serial Bus (USB) drives, pen drives, external hard drives, phones, Personal Digital Assistants (PDA), personal computer memory card international association (PCMCIA) media, ipod and MP3 players, digital e-readers, floppy disks, external compact disks (CD) and digital video disk (DVD) burners (optical recording devices), and all other flash based storage devices. (3) Flash media is defined as any solid state storage device and includes, but is not limited to, USB thumb drives, memory sticks/cards, or camera flash cards. (4) For the purpose of this policy, government owned/procured devices are defined as those devices that have been purchased by a Department of Defense (DoD) agency for official use. This includes, but is not limited to, devices purchased by MCIEAST headquarters and subordinate commands. (S) For the purpose of this policy, personally owned/procured devices are defined as those devices that have been purchased by an individual. Contractor owned/procured storage devices are defined in this category, and are not authorized for use unless explicitly authorized on a case-by-case basis by the Designated Approving Authority (DAA). (6) Standalone computer systems are defined as machines/hosts that are not logically or physically connected to the MCIEAST networks at any time. These machines must be wiped and reimaged before being introduced back to MCIEAST networks. b. General Policy (1) This policy applies to any removable storage device that can be connected to a computing device via cable, USB, Firewire (IEEE 1394), PCMCIA, External Serial ATA, wireless, Bluetooth, infrared, and/or radio frequency. The purpose of the connection could be to 2
3 Subj: provide power, store, transmit, download, and/or upload data. (2) The will be limited use the device. every effort to use of removable storage devices on MCIEAST networks to personnel who have an operational requirement to Where this requirement applies, commands will make provide government owned/procured products. (3) The use of removable storage devices with the capability and/or technology to connect to computer systems via wireless, Bluetooth, 3-G, infrared, and/or radio frequency, is not authorized for use on MCIEAST computing enclaves at any time. (4) The following guidelines apply for approval of removable storage devices for use on the MCIEAST computing enclaves: (a) Approval may be granted for external USB hard drives containing spinning platters of any capacity. (b) Use of RIM Blackberry devices on the network must comply with reference (j). (c) All devices will be scanned, inspected, and approved by the local Cyber Security (CS) staff before being connected to the network. (d) File security on the device must provide the same level of discretionary access control (DAC) as found on the computer to which it will connect (e.g. NTFS to NTFS). Authentication shall be active and used at all times. (5) Personally owned/procured removable storage devices are not authorized for use on any MCIEAST network or standalone computer system. (6) The following removable storage devices are not approved for use on MCIEAST network computer systems ipod or any type of MP3 Player, flash media/memory, USB thumb drives, digital e-readers, PCMCIA memory, PDA, cameras, or solid state drives in accordance with reference (g). (7) In some instances (e.g., public affairs, combat correspondents, and intelligence), flash media is essential for performance of duties. If flash media/memory is essential for performance of duties, the transfer of data will be conducted from a standalone system to a CD-R or DVD-R. (8) All removable storage devices connecting to MCIEAST classified networks (e.g., SIPRNET or CX-I) shall be treated as controlled items and handled according to local command physical security policy. (9) All personally identifiable information (PII) stored on a removable storage device will be encrypted, per reference (e). 3
4 SUbj: (IO) Organizations issuing removable storage devices for official use shall control them in a manner consistent with accountability of other highly pilferable items. (II) Removable storage devices involved in or affected by an electronic spillage, unauthorized disclosure, or breach of PII will be surrendered to the command's Security Manager and/or local CS staff immediately. c. Usage Policy. The use of removable storage devices will be in accordance with DoD standards contained in the references. Removable storage devices introduced or connected to MCIEAST networks will be used for official business only. Removable storage devices will be used only for the transfer, transmittal, storage, or processing of DoD approved software and files. The use of removable storage devices for any other purpose{s) is not authorized. (I) Exceptions to Policy. The MCIEAST Assistant Chief of Staff, G-6 (AC/S G-6) has final authority when approving exceptions to this policy. Exceptions to this policy will be considered based on mission necessity, adverse impact to CS, reliability, efficiency, and in accordance with DoD, United States Marine Corps, and local policies and regulations. (2) Punitive Nature. This policy is punitive in nature; service members' failure to comply may result in administrative and/or punitive action, pursuant to Article 92 of reference (h). Civilian employees who fail to comply with this policy may receive corrective, disciplinary, and/or adverse action per reference (i). d. Approval Request Procedures (I) Personnel requesting the use of removable storage devices on the MCIEAST computing enclaves must read and understand this policy letter. (2) All requests for use of removable media on MCIEAST networks will be routed in writing to the applicable CS section for approval. (a) Requests must have respective cognizant section or unit AC/S or S-6 approval and justification prior to submission for final approval; and (b) Request forms can be found on the MCIEAST G-6 CS Share Point portal: ( or by contacting the point of contact at paragraph 7 below. (3) Local command CS staff shall complete the following tasks before approval: 4
5 Subj: (a) audit and remove any unauthorized software or files from the device; (b) perform an up-to-date virus scan of all information contained on the device; (c) ensure the storage device is formatted in NTFS; and (d) ensure the appropriate classification label is affixed to the device. e. Responsibilities (1) The MCIEAST AC/S G-6 shall: (a) ensure USB ports and PCMIA port are disabled on computing devices that process classified material to the maximum extent possible; and (b) serve as final approving authority for the introduction or use of removable storage devices except as noted in paragraph 4.a. (5) above. (2) MCIEAST Commanders shall: (a) ensure all members of -the command are aware of the policies and prohibitions set forth in this policy; (b) ensure command compliance with the standards outlined in this policy; and (c) ensure procedures are established and practiced to ensure that government information is not exposed to unauthorized access or disclosure. (3) Local CS staffs shall: (a) serve as approving authority for the introduction or use of removable storage devices within their AOR; (b) audit the use of removable storage devices on the MCIEAST networks within your AOR; and (c) maintain a record of all approved devices. (4) Users shall: (a) maintain strict conformance to the standards and guidelines set forth in this policy; (b) safeguard the information contained on the removable storage device from unauthorized or inadvertent modification, disclosure, destruction, or usei and 5
6 SUbj: (c) report actual or potential security incidents, to include the possible loss or theft of any removable storage devices, associated with the use of MCIEAST computing systems to their local CS office regardless of the classification of its information content. f. Handling and Destruction. Commands owning removable storage devices are responsible for destruction of those devices, per local command security policy. 5. Classification and Marking a. The connection of any removable storage device to a network makes the storage device permanently classified at the same level as the system to which it was connected. Any device introduced to classified computing systems can no longer be introduced into the computing devices of a lower classification. Contact your local command's Security Manager for declassification procedures and guidelines. b. The removable storage device shall be classified at the highest level of data/information contained on the device. It shall be labeled with the highest overall classification level using the labels: (1) SECRET - Standard Form (SF) 707 (2) SECRET/ISAF - CC FORM 16, June 09 (3) CONFIDENTIAL - SF 708 (4) UNCLASSIFIED - SF 710 c. When standard forms are not feasible due to interference with operation of the device, size of the media, etc., other means of marking may be used as long as they appropriately convey the classification and other required markings. For instance, a card can be attached to the device with the appropriate label affixed to the card or the device will be marked with a permanent marker indicating its classification level. 6. Incident Response and Reporting a. Electronic spillage, unauthorized disclosure, and/or breach or loss of PII will be immediately reported to the local command's Security Manager or CS Staff. b. When responding to an incident, local commands will follow the procedures described in references (d) through (f). c. The reporting chain for responding to an incident is as follows: (1) Local Command CS Staff 6
7 Subj: (2) Local Command Security Manager (classified only) (3) Local Command Special Security Office (SSo) (if spillage involves Sensitive Compartmented Information (SCI)) (4) MCIEAST CS Manager (5) MCIEAST AC/S G-6 (6) External Agencies 7. Point of contact for this policy is the MCIEAST G-6 CS Manager at DSN: or Comm: (910) Copy to: Security Manager ~a T. A. GORRY 7 7
MOBILE DEVICE SECURITY POLICY
State of Illinois Department of Central Management Services MOBILE DEVICE SECURITY Effective: October 01, 2009 State of Illinois Department of Central Management Services Bureau of Communication and Computer
Appendix H: End User Rules of Behavior
Appendix H: End User Rules of Behavior 1. Introduction The Office of Management and Budget (OMB) has established the requirement for formally documented Rules of Behavior as set forth in OMB Circular A-130.
Subj: NAVY IMPLEMENTATION OF DEPARTMENT OF DEFENSE INTELLIGENCE INFORMATION SYSTEM (DODIIS) PUBLIC KEY INFRASTRUCTURE (PKI)
DEPARTMENT OF THE NAVY OFFICE OF THE CHIEF OF NAVAL OPERATIONS 2000 NAVY PENTAGON WASHINGTON, DC 20350-2000 IN REPLY REFER TO OPNAVINST 5239.3A N2 OPNAV INSTRUCTION 5239.3A From: Chief of Naval Operations
MASTER rn DIRErnS UNITED STATES MARINE CORPS 15TH MARINE EXPEDITIONARY UNIT PO BOX 555365 CAMP PENDLETON CA 92055-5365
MASTER rn DIRErnS UNITED STATES MARINE CORPS 15TH MARINE EXPEDITIONARY UNIT PO BOX 555365 CAMP PENDLETON CA 92055-5365 MARINE EXPEDITIONARY UNIT ORDER 5701.1D IN REPLY REFER TO PA0 ' 22 Dec 2003 From:
Department of Defense
Department of Defense DIRECTIVE NUMBER 8100.02 April 14, 2004 Certified Current as of April 23, 2007 ASD(NII) SUBJECT: Use of Commercial Wireless Devices, Services, and Technologies in the Department of
PRIVACY IMPACT ASSESSMENT (PIA) For the
PRIVACY IMPACT ASSESSMENT (PIA) For the Military Sealift Command Financial Management System (MSC-FMS) Department of the Navy - Military Sealift Command (MSC) SECTION 1: IS A PIA REQUIRED? a. Will this
12 FAM 650 ACQUISITION SECURITY REQUIREMENTS FOR OPERATING SYSTEMS AND SUBSYSTEM COMPONENTS
12 FAM 650 ACQUISITION SECURITY REQUIREMENTS FOR OPERATING SYSTEMS AND SUBSYSTEM COMPONENTS 12 FAM 651 GENERAL (CT:DS-180; 06-20-2012) (Office of Origin: DS/SI/CS) a. Acquisition authorities must follow
CITY UNIVERSITY OF HONG KONG. Information Classification and
CITY UNIVERSITY OF HONG KONG Handling Standard (Approved by the Information Strategy and Governance Committee in December 2013) PUBLIC Date of Issue: 2013-12-24 Document Control Document Owner Classification
Public Law 113 283 113th Congress An Act
PUBLIC LAW 113 283 DEC. 18, 2014 128 STAT. 3073 Public Law 113 283 113th Congress An Act To amend chapter 35 of title 44, United States Code, to provide for reform to Federal information security. Be it
Department of Defense INSTRUCTION. Security of Unclassified DoD Information on Non-DoD Information Systems
Department of Defense INSTRUCTION NUMBER 8582.01 June 6, 2012 DoD CIO SUBJECT: Security of Unclassified DoD Information on Non-DoD Information Systems References: See Enclosure 1 1. PURPOSE. This Instruction:
**************** UNCLASSIFIED / **************** Precedence: ROUTINE DTG: 281759Z Aug 12 Originator: DON CIO WASHINGTON DC(UC) UNCLASSIFIED//
**************** UNCLASSIFIED / **************** Precedence: ROUTINE DTG: 281759Z Aug 12 Originator: DON CIO WASHINGTON DC(UC) UNCLASSIFIED// FROM: DON CIO WASHINGTON DC TO: ASN(M&RA) ASN(RD&A) ASN(EI&E)
IA/CYBERSECURITY IS CRITICAL TO OPERATE IN CYBERSPACE
IA/CYBERSECURITY IS CRITICAL TO OPERATE IN CYBERSPACE Commanders, leaders, and managers are responsible for ensuring that Information Assurance/Cybersecurity is part of all Army operations, missions and
Subject: Department of the Navy Social Security Number (SSN) Reduction Plan Phase Three
DON CIO Message **************** UNCLASSIFIED / **************** Subject: Department of the Navy Social Security Number (SSN) Reduction Plan Phase Three Originator: COLUMBIA/L=WASHINGTON/OU=DON CIO (UC)
BY ORDER OF THE COMMANDER USTRANSCOM INSTRUCTION 33-3 UNITED STATES TRANSPORTATION COMMAND 5 DECEMBER 2011
BY ORDER OF THE COMMANDER USTRANSCOM INSTRUCTION 33-3 UNITED STATES TRANSPORTATION COMMAND 5 DECEMBER 2011 Communications and Information MANAGEMENT OF PORTALS AND WEB SITES COMPLIANCE WITH THIS PUBLICATION
POLICY ON WIRELESS SYSTEMS
Committee on National Security Systems CNSSP No. 17 January 2014 POLICY ON WIRELESS SYSTEMS THIS DOCUMENT PRESCRIBES MINIMUM STANDARDS YOUR DEPARTMENT OR AGENCY MAY REQUIRE FURTHER IMPLEMENTATION CHAIR
PRIVACY IMPACT ASSESSMENT (PIA) For the
PRIVACY IMPACT ASSESSMENT (PIA) For the Army Medical Department Personnel Education and Quality System (APEQS) US Army Medical Command - Defense Health Program (DHP) Funded Application SECTION 1: IS A
Legislative Language
Legislative Language SEC. 1. COORDINATION OF FEDERAL INFORMATION SECURITY POLICY. (a) IN GENERAL. Chapter 35 of title 44, United States Code, is amended by striking subchapters II and III and inserting
R 241525Z DEC 15 MARADMIN 648/15 MSGID/GENADMIN/CMC WASHINGTON DC PR// SUBJ/MCBUL 7000. DEPARTMENT OF DEFENSE (DOD) FINANCIAL MANAGEMENT (FM)
R 241525Z DEC 15 MARADMIN 648/15 MSGID/GENADMIN/CMC WASHINGTON DC PR// SUBJ/MCBUL 7000. DEPARTMENT OF DEFENSE (DOD) FINANCIAL MANAGEMENT (FM) CERTIFICATION PROGRAM IMPLEMENTATION GUIDANCE// REF/A/MSGID:DOC/DODINST
Office of Inspector General
DEPARTMENT OF HOMELAND SECURITY Office of Inspector General Review of DHS Security Controls for Portable Storage Devices OIG-08-95 September 2008 Office of Inspector General U.S. Department of Homeland
This directive applies to all DHS organizational elements with access to information designated Sensitive Compartmented Information.
Department of Homeland Security Management Directives System MD Number: 11043 Issue Date: 09/17/2004 SENSITIVE COMPARTMENTED INFORMATION PROGRAM MANAGEMENT I. Purpose This directive establishes Department
DISTRIBUTION: ASSISTANT G-1 FOR CIVILIAN PERSONNEL POLICY, DEPARTMENT OF THE ARMY DIRECTOR, PLANS, PROGRAMS, AND DIVERSITY, DEPARTMENT OF THE NAVY
DISTRIBUTION: ASSISTANT G-1 FOR CIVILIAN PERSONNEL POLICY, DEPARTMENT OF THE ARMY DIRECTOR, PLANS, PROGRAMS, AND DIVERSITY, DEPARTMENT OF THE NAVY DEPUTY DIRECTOR, PERSONNEL FORCE MANAGEMENT, DEPARTMENT
FLORIDA HIGHWAY PATROL POLICY MANUAL
FLORIDA HIGHWAY PATROL POLICY MANUAL SUBJECT MOBILE VIDEO/AUDIO RECORDING PERSONAL AUDIO/VIDEO RECORDING DEVICES APPLICABLE CALEA STANDARDS 41.3.8; 83.2.2 POLICY NUMBER 17.22 ISSUE DATE 05/01/01 REVISION
Information Security Management Criteria for Our Business Partners
Information Security Management Criteria for Our Business Partners Ver. 2.0 October 1, 2012 Procurement Group, Manufacturing Enhancement Center, Global Manufacturing Division Information Security Group,
MONTSERRAT COLLEGE OF ART WRITTEN INFORMATION SECURITY POLICY (WISP)
MONTSERRAT COLLEGE OF ART WRITTEN INFORMATION SECURITY POLICY (WISP) 201 CMR 17.00 Standards for the Protection of Personal Information Of Residents of the Commonwealth of Massachusetts Revised April 28,
UNITED STATES MARINE CORPS INFORMATION AND PERSONNEL SECURITY PROGRAM MANUAL (SHORT TITLE: MARINE CORPS IPSP)
Headquarters, U.S. Marine Corps MCO P5510.18A PCN 10208490600 UNITED STATES MARINE CORPS INFORMATION AND PERSONNEL SECURITY PROGRAM MANUAL (SHORT TITLE: MARINE CORPS IPSP) DISTRIBUTION STATEMENT A: Approved
TITLE III INFORMATION SECURITY
H. R. 2458 48 (1) maximize the degree to which unclassified geographic information from various sources can be made electronically compatible and accessible; and (2) promote the development of interoperable
COVER SHEET OF POLICY DOCUMENT Code Number Policy Document Name
COVER SHEET OF POLICY DOCUMENT Code Number Policy Document Name Introduction Removable Media and Mobile Device Policy Removable media and mobile devices are increasingly used to enable information access
M E M O R A N D U M. Revised Information Technology Security Procedures INFORMATION TECHNOLOGY SECURITY PROCEDURES. I. General
M E M O R A N D U M To: From: IT Steering Committee Brian Cohen Date: March 26, 2009 Subject: Revised Information Technology Security Procedures The following is a revised version of the Information Technology
Appendix A: Rules of Behavior for VA Employees
Appendix A: Rules of Behavior for VA Employees Department of Veterans Affairs (VA) National Rules of Behavior 1 Background a) Section 5723(b)(12) of title 38, United States Code, requires the Assistant
POLICIES. Campus Data Security Policy. Issued: September, 2009 Responsible Official: Director of IT Responsible Office: IT Central.
POLICIES Campus Data Security Policy Issued: September, 2009 Responsible Official: Director of IT Responsible Office: IT Central Policy Statement Policy In the course of its operations, Minot State University
Management Standards for Information Security Measures for the Central Government Computer Systems
Management Standards for Information Security Measures for the Central Government Computer Systems April 21, 2011 Established by the Information Security Policy Council Table of Contents Chapter 1.1 General...
Department of Defense DIRECTIVE
Department of Defense DIRECTIVE NUMBER 5240.06 May 17, 2011 Incorporating Change 1, May 30, 2013 USD(I) SUBJECT: Counterintelligence Awareness and Reporting (CIAR) References: See Enclosure 1 1. PURPOSE.
Information Technology Cyber Security Policy
Information Technology Cyber Security Policy (Insert Name of Organization) SAMPLE TEMPLATE Organizations are encouraged to develop their own policy and procedures from the information enclosed. Please
Part 14: USB Port Security 2015
Part 14: USB Port Security This article is part of an information series provided by the American Institute of Healthcare Compliance in response to questions we receive related to Meaningful Use and CEHRT
UNIVERSITY GUIDEBOOK. Title of Policy: Acceptable Use of University Technology Resources
PAGE 1 of 6 UNIVERSITY GUIDEBOOK Title of Policy: Acceptable Use of University Technology Resources Responsible Division/Office: Information Technology Approving Officer: Vice President for Finance and
Information Security Policy September 2009 Newman University IT Services. Information Security Policy
Contents 1. Statement 1.1 Introduction 1.2 Objectives 1.3 Scope and Policy Structure 1.4 Risk Assessment and Management 1.5 Responsibilities for Information Security 2. Compliance 3. HR Security 3.1 Terms
ELECTRONIC SIGNATURES AND MANAGEMENT OF ELECTRONICALLY SIGNED RECORDS
Commandant United States Coast Guard 2100 Second Street, S.W. STOP 7101 Washington, DC 20593-7101 Staff Symbol: CG-6 Phone: (202) 475-3518 Fax: (202) 475-3929 COMDTINST 5200.5 FEB 3 2011 COMMANDANT INSTRUCTION
DEPARTMENT OF THE NAVY HEADQUARTERS UNITED STATES MARINE CORPS WASHINGTON, DC 20380-0001. Subj: Civilian Workforce Management: Managing to Payroll
DEPARTMENT OF THE NAVY HEADQUARTERS UNITED STATES MARINE CORPS WASHINGTON, DC 20380-0001 MARINE CORPS ORDER 12510.2C w/ch 1 MCO 12510.2C MPC-30 10 Dec 1986 From: Commandant of the Marine Corps To: Distribution
PROCESSING CLASSIFIED INFORMATION ON PORTABLE COMPUTERS IN THE DEPARTMENT OF JUSTICE
PROCESSING CLASSIFIED INFORMATION ON PORTABLE COMPUTERS IN THE DEPARTMENT OF JUSTICE U.S. Department of Justice Office of the Inspector General Audit Division Audit Report 05-32 July 2005 PROCESSING CLASSIFIED
Management Standards for Information Security Measures for the Central Government Computer Systems
Management Standards for Information Security Measures for the Central Government Computer Systems April 26, 2012 Established by the Information Security Policy Council Table of Contents Chapter 1.1 General...
Department of Defense INSTRUCTION. SUBJECT: Public Key Infrastructure (PKI) and Public Key (PK) Enabling
Department of Defense INSTRUCTION NUMBER 8520.2 April 1, 2004 SUBJECT: Public Key Infrastructure (PKI) and Public Key (PK) Enabling ASD(NII) References: (a) DoD Directive 8500.1, "Information Assurance
One Hundred Twelfth Congress of the United States of America
S. 3454 One Hundred Twelfth Congress of the United States of America AT THE SECOND SESSION Begun and held at the City of Washington on Tuesday, the third day of January, two thousand and twelve An Act
DEPARTMENT OF DEFENSE Defense Commissary Agency Fort Lee, VA 23801-1800 DIRECTIVE. Social Media
DEPARTMENT OF DEFENSE Defense Commissary Agency Fort Lee, VA 23801-1800 DIRECTIVE Social Media DeCAD 100-04 Corporate Communication Directorate OPR: DeCA/BEC References: See Enclosure 1 1. PURPOSE. This
STATE OF OHIO I. AUTHORITY
STATE OF OHIO SUBJECT: PAGE 1 OF 8. Telecommunication Services SECTION: 05-OIT-12 RULE/CODE REFERENCE: SUPERSEDES: Ohio IT Policy ITP H.2 05-OIT-12 dated 08/19/14 RELATED ACA STANDARDS: EFFECTIVE DATE:
D E PAR TME NT OF THE NAVY OFFICE OF THE SECR ET A R Y 1000 N A VY PENT A G ON W A SHI N G T ON D C 20350-1000
D E PAR TME NT OF THE NAVY OFFICE OF THE SECR ET A R Y 1000 N A VY PENT A G ON W A SHI N G T ON D C 20350-1000 SECNAVINST 5430.27D OJAG (Code 13) SECNAV INSTRUCTION 5430.27D From: Secretary of the Navy
Media Disposition and Sanitation Procedure
Media Disposition and Sanitation Procedure Revision History Version Date Editor Nature of Change 1.0 11/14/06 Kelly Matt Initial Release Table of Contents 1.0 Overview... 1 2.0 Purpose... 1 3.0 Scope...
Subj: DEPARTMENT OF THE NAVY CYBERSECURITY/INFORMATION ASSURANCE WORKFORCE MANAGEMENT, OVERSIGHT, AND COMPLIANCE
D E PAR TME NT OF THE N A VY OFFICE OF T HE SECRET ARY 1000 NAVY PENT AGON WASHINGT ON D C 20350-1000 SECNAVINST 5239.20 DON CIO SECNAV INSTRUCTION 5239.20 From: Secretary of the Navy Subj: DEPARTMENT
Data Management Policies. Sage ERP Online
Sage ERP Online Sage ERP Online Table of Contents 1.0 Server Backup and Restore Policy... 3 1.1 Objectives... 3 1.2 Scope... 3 1.3 Responsibilities... 3 1.4 Policy... 4 1.5 Policy Violation... 5 1.6 Communication...
Student & Staff Access and Use of Networked Information Resources and Communications
Page 1 of 6 These procedures are written to support the Electronic Resources Policy of the board of directors and to promote positive and effective digital citizenship among students and staff. Digital
Department of Defense INSTRUCTION
Department of Defense INSTRUCTION NUMBER 8551.01 May 28, 2014 DoD CIO SUBJECT: Ports, Protocols, and Services Management (PPSM) References: See Enclosure 1 1. PURPOSE. In accordance with the authority
Written Information Security Plan (WISP) for. HR Knowledge, Inc. This document has been approved for general distribution.
Written Information Security Plan (WISP) for HR Knowledge, Inc. This document has been approved for general distribution. Last modified January 01, 2014 Written Information Security Policy (WISP) for HR
Department of Veterans Affairs VA DIRECTIVE 6601 REMOVEABLE STORAGE MEDIA
Department of Veterans Affairs VA DIRECTIVE 6601 Washington, DC 20420 Transmittal Sheet February 27, 2007 REMOVEABLE STORAGE MEDIA 1. REASON FOR ISSUE: To establish policy for The Department of Veterans
PRIVACY IMPACT ASSESSMENT (PIA) For the
PRIVACY IMPACT ASSESSMENT (PIA) For the Data Backup and Protection Solution (Yosemite) US Army Medical Command - DHP Funded Application SECTION 1: IS A PIA REQUIRED? a. Will this Department of Defense
Personally Identifiable Information (PII), Protected Health Information (PHI), and Federal Information Requirements
Personally Identifiable Information (PII), Protected Health Information (PHI), and Federal Information Requirements (Revised April 9, 2015) 1. General Requirements Overview - Personally Identifiable Information
Defense Logistics Agency INSTRUCTION
Defense Logistics Agency INSTRUCTION DLAI 8130.01 Effective September 27, 2013 SUBJECT: Mobile Device Management REFERENCES: Refer to Enclosure 1. J6 1. PURPOSE. This instruction: a. Establishes the policy
Information Technology and Governance Committee
Information Technology and Governance Committee Paper Title: Enhancing Information Governance at Loughborough University Author: Information Governance Sub-Committee 1. Specific Decision Required by Committee
Reference Guide for Security in Networks
Reference Guide for Security in Networks This reference guide is provided to aid in understanding security concepts and their application in various network architectures. It should not be used as a template
Consensus Policy Resource Community. Lab Security Policy
Lab Security Policy Free Use Disclaimer: This policy was created by or for the SANS Institute for the Internet community. All or parts of this policy can be freely used for your organization. There is
Information Resources Security Guidelines
Information Resources Security Guidelines 1. General These guidelines, under the authority of South Texas College Policy #4712- Information Resources Security, set forth the framework for a comprehensive
Information Security Policy. Policy and Procedures
Information Security Policy Policy and Procedures Issue Date February 2013 Revision Date February 2014 Responsibility/ Main Point of Contact Neil Smedley Approved by/date Associated Documents Acceptable
Information Security Policy
Information Security Policy Touro College/University ( Touro ) is committed to information security. Information security is defined as protection of data, applications, networks, and computer systems
4. Objective. To provide guidelines for IS requirements and LCM support under NMCI.
d. To apply basic policy and principles of computer hardware and software management as they relate to Information Management and Information Technology (IMIT) and Information Systems (IS) associated with
PRIVACY IMPACT ASSESSMENT (PIA) For the
PRIVACY IMPACT ASSESSMENT (PIA) For the Naval Audit Service Information Management System (NASIMS) Department of the Navy - DON/AA - NAVAUDSVC SECTION 1: IS A PIA REQUIRED? a. Will this Department of Defense
THE CHALLENGES OF DATA SECURITY IN THE MODERN OFFICE
THE CHALLENGES OF DATA SECURITY IN THE MODERN OFFICE February 2008 The Government of the Hong Kong Special Administrative Region The contents of this document remain the property of, and may not be reproduced
All Users of DCRI Computing Equipment and Network Resources
July 21, 2015 MEMORANDUM To: From Subject: All Users of DCRI Computing Equipment and Network Resources Eric Peterson, MD, MPH, Director, DCRI Secure System Usage The purpose of this memorandum is to inform
How To Store Data On A Computer (For A Computer)
TH3. Data storage http://www.bbc.co.uk/schools/gcsebitesize/ict/ A computer uses two types of storage. A main store consisting of ROM and RAM, and backing stores which can be internal, eg hard disk, or
Department of Defense INSTRUCTION
Department of Defense INSTRUCTION NUMBER 8523.01 April 22, 2008 ASD(NII)/DoD CIO SUBJECT: Communications Security (COMSEC) References: (a) DoD Directive C-5200.5, Communications Security (COMSEC) (U),
TABLE OF CONTENTS. 2006.1259 Information Systems Security Handbook. 7 2006.1260 Information Systems Security program elements. 7
PART 2006 - MANAGEMENT Subpart Z - Information Systems Security TABLE OF CONTENTS Sec. 2006.1251 Purpose. 2006.1252 Policy. 2006.1253 Definitions. 2006.1254 Authority. (a) National. (b) Departmental. 2006.1255
Ohio Supercomputer Center
Ohio Supercomputer Center Portable Security Computing No: Effective: OSC-09 05/27/09 Issued By: Kevin Wohlever Director of Supercomputer Operations Published By: Ohio Supercomputer Center Original Publication
Department of Defense INSTRUCTION
Department of Defense INSTRUCTION NUMBER 8910.01 May 19, 2014 DoD CIO SUBJECT: Information Collection and Reporting References: See Enclosure 1 1. PURPOSE. This instruction: a. Reissues DoD Instruction
USB flash drive (128MB,256MB,512MB,1GB,2GB,4GB)
USB flash drive (128MB,256MB,512MB,1GB,2GB,4GB) Despite the different brands and names you've heard for USB flash drives JumpDrives, Pocket drives, Pen drives, and Thumb drives they all pretty much operate
COMPLIANCE WITH THIS PUBLICATION IS MANDATORY
BY ORDER OF THE SECRETARY OF THE AIR FORCE AIR FORCE INSTRUCTION 33-217 27 MAY 2014 Communications and Information VOICE CALL SIGN PROGRAM COMPLIANCE WITH THIS PUBLICATION IS MANDATORY ACCESSIBILITY: Publications
BARNSLEY CLINICAL COMMISSIONING GROUP S REMOTE WORKING AND PORTABLE DEVICES POLICY
Putting Barnsley People First BARNSLE CLINICAL COMMISSIONING GROUP S REMOTE WORKING AND PORTABLE DEVICES POLIC Version: 2.0 Approved By: Governing Body Date Approved: Feb 2014 (initial approval), March
SUMMARY: The Office of the Secretary of Defense proposes to. alter a system of records notice DPFPA 02, entitled Pentagon
This document is scheduled to be published in the Federal Register on 02/11/2016 and available online at http://federalregister.gov/a/2016-02788, and on FDsys.gov Billing Code: 5001-06 DEPARTMENT OF DEFENSE
Gaming System Monitoring and Analysis Effort
for the Gaming System Monitoring and Analysis Effort DHS/S&T/PIA-025 October 11, 2012 Contact Point Douglas Maughan DHS S&T Cyber Security Division 202-254-6145 Reviewing Official Jonathan R. Cantor Acting
REMOTE ACCESS POLICY OCIO-6005-09 TABLE OF CONTENTS
OFFICE OF THE CHIEF INFORMATION OFFICER REMOTE ACCESS POLICY OCIO-6005-09 Date of Issuance: May 22, 2009 Effective Date: May 22, 2009 Review Date: TABLE OF CONTENTS Section I. PURPOSE II. AUTHORITY III.
Privacy Impact Assessment for the. Standardized Tracking and Accounting Reporting System- Financial Management System (STARS-FMS)
Privacy Impact Assessment for the Standardized Tracking and Accounting Reporting System- Financial Management System (STARS-FMS) United States Marshals Service Contact Point William E. Bordley Associate
DoD Whistleblower Protection
DoD Whistleblower Protection Appropriated Fund Civilians What You Need to Know Department of Defense Inspector General Patrick Gookin DoD Whistleblower Protection Ombudsman Whistleblowerprotectionombudsman@dodig.mil
Information Security and Electronic Communications Acceptable Use Policy (AUP)
Policy No.: AUP v2.0 Effective Date: August 16, 2004 Revision Date: January 17, 2013 Revision No.: 1 Approval jwv / mkb Information Security and Electronic Communications (AUP) 1. INTRODUCTION Southwestern
PRIVACY IMPACT ASSESSMENT (PIA) For the
PRIVACY IMPACT ASSESSMENT (PIA) For the Ambulatory Blood Pressure Monitoring Software (AccuWin Pro ) US Army Medical Command - Defense Health Program (DHP) Funded Application SECTION 1: IS A PIA REQUIRED?
LSE PCI-DSS Cardholder Data Environments Information Security Policy
LSE PCI-DSS Cardholder Data Environments Information Security Policy Written By: Jethro Perkins, Information Security Manager Reviewed By: Ali Lindsley, PCI-DSS Project Manager Endorsed By: PCI DSS project
OFFICE OF THE SECRETARY OF DEFENSE 1700 DEFENSE PENTAGON WASHINGTON, DC 20301-1700
OFFICE OF THE SECRETARY OF DEFENSE 1700 DEFENSE PENTAGON WASHINGTON, DC 20301-1700 OPERATIONAL TEST AND EVALUATION AUG 0 1 2014 MEMORANDUM FOR COMMANDER, ARMY TEST AND EVALUATION COMMAND COMMANDER, AIR
TASK -040. TDSP Web Portal Project Cyber Security Standards Best Practices
Page 1 of 10 TSK- 040 Determine what PCI, NERC CIP cyber security standards are, which are applicable, and what requirements are around them. Find out what TRE thinks about the NERC CIP cyber security
SUPREME COURT OF COLORADO OFFICE OF THE CHIEF JUSTICE
SUPREME COURT OF COLORADO OFFICE OF THE CHIEF JUSTICE Directive Concerning the Colorado Judicial Department Electronic Communications Usage Policy: Technical, Security, And System Management Concerns This
Information Security Program
Stephen F. Austin State University Information Security Program Revised: September 2014 2014 Table of Contents Overview... 1 Introduction... 1 Purpose... 1 Authority... 2 Scope... 2 Information Security
SERVER, DESKTOP AND PORTABLE SECURITY. September 2014. Version 3.0
SERVER, DESKTOP AND PORTABLE SECURITY September 2014 Version 3.0 Western Health and Social Care Trust Page 1 of 6 Server, Desktop and Portable Policy Title SERVER, DESKTOP AND PORTABLE SECURITY POLICY
Subj: NAVY MEDICINE DATA QUALITY MANAGEMENT CONTROL PROGRAM
DEPARTMENT OF THE NAVY BUREAU OF MEDICINE AND SURGERY 7700 ARLINGTON BOULEVARD FALLS CHURCH, VA 22042 IN REPLY REFER TO BUMEDINST 7000.9A BUMED-M843 BUMED INSTRUCTION 7000.9A From: Chief, Bureau of Medicine
Information Security Risk Assessment Checklist. A High-Level Tool to Assist USG Institutions with Risk Analysis
Information Security Risk Assessment Checklist A High-Level Tool to Assist USG Institutions with Risk Analysis Updated Oct 2008 Introduction Information security is an important issue for the University
PRIVACY IMPACT ASSESSMENT (PIA) For the
PRIVACY IMPACT ASSESSMENT (PIA) For the Assistance Reporting Tool (ART) Defense Health Agency (DHA) SECTION 1: IS A PIA REQUIRED? a. Will this Department of Defense (DoD) information system or electronic
PRIVACY IMPACT ASSESSMENT (PIA) For the
PRIVACY IMPACT ASSESSMENT (PIA) For the Employee Central Training Management System (EC/TMS) Department of the Navy - NAVAIR - FRC Southeast, Jacksonville, FL SECTION 1: IS A PIA REQUIRED? a. Will this
marine corps engineer equipment operator school
marine corps engineer equipment operator school Quite often, marine corps engineer equipment operator school is simply instructions regarding how to download and install the system. 2 marine corps engineer
Report No. D-2011-6-008
Hotline Review June 28, 2011 Hotline Complaint Regarding a Defense Contract Audit Agency Employee Conducting Private For-Profit Tax Business Activity on Government Time and Using Government Equipment Report
PRIVACY IMPACT ASSESSMENT (PIA) For the
PRIVACY IMPACT ASSESSMENT (PIA) For the Data Management Solution (Drager Infinity Gateway Suite) US Army Medical Command - Defense Health Program (DHP) Funded System SECTION 1: IS A PIA REQUIRED? a. Will
Standards for Information Security Measures for the Central Government Computer Systems (Fourth Edition)
Standards for Information Security Measures for the Central Government Computer Systems (Fourth Edition) February 3, 2009 Established by the Information Security Policy Council Table of Contents Standards
Other terms are defined in the Providence Privacy and Security Glossary
Subject: Device and Media Controls Department: Enterprise Security Executive Sponsor: EVP/COO Approved by: Rod Hochman, MD - President/CEO Policy Number: New Date: Revised 10/11/2013 Reviewed Policy Owner:
INFORMATION UPDATE: Removable media - Storage and Retention of Data - Research Studies
INFORMATION UPDATE: Removable media - Storage and Retention of Data - Research Studies REMOVABLE MEDIA: NSW MoH are currently undergoing review with a state-wide working party developing the Draft NSW
P02.07.066. Mobile Device Security.
P02.07.066. Mobile Device Security. A. University employees and students using a laptop computer or mobile device (e.g. portable hard drives, USB flash drives, smartphones, tablets) are responsible for
McAfee Host Data Loss Prevention Best Practices: Protecting against data loss from external devices
McAfee Host Data Loss Prevention Best Practices: Protecting against data loss from external devices COPYRIGHT Copyright 2009 McAfee, Inc. All Rights Reserved. No part of this publication may be reproduced,
PRIVACY IMPACT ASSESSMENT (PIA) For the
PRIVACY IMPACT ASSESSMENT (PIA) For the Job Order Cost Accounting System (JOCAS II) United States Air Force SECTION 1: IS A PIA REQUIRED? a. Will this Department of Defense (DoD) information system or
Best Practice Document Hints and Tips
Marshal Ltd. Date: 02/06/2007 Marshal EndPoint Security From Best Practice Document Hints and Tips Marshal Software Ltd CSL 005 Marshal EndPoint Security Best Practice (2) Privacy Control: None Version: