Attachment 9 - CARDEROCKDIVINST 5510.12.pdf

CARDEROCKDIVINST 5510.12

Code 3421 19 February 2013

CARDEROCKDIV INSTRUCTION 5510.12

From: Division Commander

Subj: CLASSIFIED INFORMATION SYSTEMS REMOVABLE MEDIA POLICY

Ref: (a) US CYBERCOM CTO 10-133

(b) US CYBERCOM CTO 10-133A

(c) US CYBERCOM CTO 10-133 Change 2

(d) NETWARCOM CTO 10-25

(e) NETWARCOM CTO 10-25A

(f) NETWARCOM CTO 10-25B

(g) NETWARCOM CTO 10-25B Update 1

(h) NETWARCOM CTO 10-25B Update 2

(i) NAVSEA Memo 5510 Ser SEA 09P/008 of 3 Feb 11

(j) SECNAV M-5510.36, Department of the Navy Information Security Program, 20 June 2006

(k) NETWARCOM NTD 09-11, File Transfer Between Security Domains

1. Purpose. To provide Command policy and procedures for the transfer of classified data to removable media at all Naval Surface Warfare Center, Carderock Division (NSWCCD) sites and detachments.

2. Background. References (a) through (i) provide direction on the management of classified information systems and direct commands to disable the ability to write classified data to removable media except under specific authorized circumstances.

Removable media is defined as CD/DVD, Secure Digital (SD) cards, Tape, Flash Memory data storage devices, MultiMediaCards (MMC), removable hard drives, etc. Reference (j) is the Navy Information Security Program Manual.

3. Scope. This instruction applies to all NSWCCD employees (military and civilian) and contractors, using information systems which process classified information SECRET and below who need to save classified data to removable media (a “write event”).

DEPARTMENT OF THE NAVY

NAVAL SURFACE WARFARE CENTER, CARDEROCK DIVISION

9500 MACARTHUR BOULEVARD

WEST BETHESDA, MD 20817-5700

IN REPLY REFER TO:

http://doni.daps.dla.mil/SECNAV%20Manuals1/5510.36.pdf

13 Feb 2013

This instruction applies to both classified standalone computers and those classified computers connected to any Department of Defense (DoD) or Navy network, including Navy Marine Corps Intranet (NMCI) and Research, Development, Test, and Evaluation (RDT&E). Excluded from this guidance are:

a. Use of non-writable read-only removable media.

b. Portable media used for data storage of system back-ups that are not intended for distribution.

c. External hard drives so long as they are dedicated to a single computer and not intended to be removed except when being placed into a secure storage container or safe.

d. Internal or dedicated external drives removed for repair or destruction.

e. Local management device/key processors (LMD/KP) supporting the Electronic Key Management System (EKMS) outlined in reference (h).

f. Internal hard drives used in large scale data acquisition systems used to capture trials data at one physical location, shipped to a second location, and subsequently used to provide captured data to large scale analytical systems at the second location. In these cases, trials data must be converted (e.g. UNIX format to NTFS format) for use in analytical systems.

g. Movement of field collected data to analysis systems (without loss of control or dissemination).

4. Policy. The Carderock Division policy is that no person shall transfer any information residing on any classified information system either SECRET or below using removable media of any kind without the specific written approval by a NAVSEA Removable Media Representative (RMR).

5. Responsibilities

a. Commander, NSWCCD. In accordance with reference (i), the Commander, NSWCCD, is appointed as the Command RMR. The RMR is responsible for approving the use of removable media for

19 Feb 2013 local assets at the West Bethesda site and detachments. The RMR shall:

(1) Appoint Media Transfer Agents (MTAs).

(2) Approve RDT&E and NMCI Host Based Security System (HBSS) Device Control Module (DCM) exception requests.

(3) Ensure all reporting requirements are submitted to the NAVSEA Removable Media Manager (RMM) no later than the second business day of each month.

b. Commanding Officer, Naval Surface Warfare Center, Carderock Division, Ship Systems Engineering Station (NSWCCD- SSES). In accordance with reference (i), the Commanding Officer, NSWCCD-SSES, is appointed as the NSWCCD-SSES RMR. The RMR is responsible for approving the use of removable media for local assets at the Philadelphia site. The RMR shall:

(1) Appoint Media Transfer Agents (MTAs).

(2) Approve RDT&E and NMCI Host Based Security System (HBSS) Device Control Module (DCM) exception requests.

(3) Ensure all reporting requirements are submitted to the NAVSEA Removable Media Manager (RMM) no later than the second business day of each month.

c. Command Security Manager (CSM) shall:

(1) Ensure orientation and periodic training is conducted to ensure all MTAs can properly create, mark, safeguard, package, and transmit classified information.

(2) Ensure all personnel hand-carrying classified media outside of a building are issued a valid classified Courier Authorization (DD Form 2501).

(3) Ensure all security elements are addressed and endorse MTA nominations for RMR approval.

(4) Coordinate investigations concerning violations of information security policy and report to senior leadership for disposition.

(5) Maintain Command policy and procedures for management of classified material as per reference (j), and establish a mechanism for controlling classified media. Conduct random and periodic inspections to ensure compliance with organization policy and report findings to the chain of command.

d. Command Information Assurance Manager (IAM) shall:

(1) Ensure the technical capabilities of classified information systems are configured to preclude inadvertent writing of information to removable media.

(2) Forward waiver requests to NAVSEA for alternative procedures if operational requirements dictate a solution other than that described in this instruction.

(3) If required, report the following information to NAVSEA 09PA no later than the second business day of each month as required in references (g) and (i):

(a) List of approved MTAs.

(b) List of classified information systems approved to perform write events.

(c) Completed transfer logs detailing the month’s write events.

(4) In conjunction with the CSM, conduct investigations concerning Information Assurance (IA) incidents.

(5) Ensure that prospective MTAs complete the required training to comply with reference (k).

(6) Ensure IA elements are addressed and endorse Media Transfer Agent (MTA) nominations for RMR approval.

(7) Facilitate RMR approval of NMCI exception requests as directed in references (a) through (e) using the Naval

Network Warfare Command (NETWARCOM), NMCI HBSS DCM Exception Request Form.

e. Media Transfer Agents (MTAs). Individuals designated in writing by an approved RMR to write and save classified information to removable media. The MTAs shall:

(1) Comply with organizationally directed rules for conducting data transfers on classified systems.

(2) Ensure that all classified media is serialized and logged when received from the department classified documents custodian.

(3) Schedule transfer appointment times and locations, and maintain NSWCCD Classified Media Transfer Forms (CARDEROCKDIV 5510/3), for all write events. Ensure all transfers are witnessed by an additional person with the appropriate security clearance and the need-to-know. Post a copy of all completed forms monthly, no later than the first business day of each month, to a location designated by the IAM.

(4) Identify and report violations of this policy to the IAM and CSM.

(5) Physically protect removable media on classified systems.

(6) Conduct routine checks of media, and report lost/stolen media to the IAM and CSM.

f. Information Assurance Officers (IAOs)/IA Workforce Personnel shall:

(1) Comply with subject Communications Tasking Orders (CTOs) and ensure unauthorized systems are configured to deny writing of information to removable media.

(2) Report any violations of this policy to the IAM and the CSM.

g. Department Heads (DHs) shall:

(1) Review MTA nominations and nominate the appropriate number of MTAs required for mission completion.

(2) Validate mission impact statements and concur that the systems named in the NSWCCD Media Transfer Agent (MTA) Request Form (CARDEROCKDIV 5510/1) and NMCI HBSS DCM Exception Request Form are required to transfer classified information.

(3) Ensure the following reports are maintained and posted monthly, no later than the first business day of each month, to a location designated by the IAM:

(a) The Department’s list of MTAs approved to write data to removable media.

(b) The Department’s list of information systems authorized to use removable media.

(c) The Department’s compilation of monthly logs of classified write events.

(4) Ensure the following policy requirements are communicated to all Department personnel:

(a) The use of removable media is not permitted on unauthorized classified systems.

(b) Write events to removable media are to be kept to a minimum and only for essential data transfers.

6. Process

a. Obtaining an MTA Designation

(1) The Department IAO or Information Technology Coordinator (ITC) will assist the prospective MTA in filling out CARDEROCKDIV 5510/1, and the NSWCCD Classified Information System MTA Agreement (CARDEROCKDIV 5510/2), and route them to the Department Head (DH) for approval.

(2) MTAs must understand the restrictions of transferring information between systems of different classification and complete the training detailed in reference (k).

(3) If approved by the DH, the CARDEROCKDIV 5510/1 and CARDEROCKDIV 5510/2 will be routed to the IAM. The IAM will review the request and confirm that no other options or technical solutions are feasible. In addition, the IAM will ensure the prospective MTA has completed the training detailed in reference (k).

(4) With IAM concurrence, CARDEROCKDIV 5510/1 and CARDEROCKDIV 5510/2 will be routed through the CSM’s Office.

Once the CSM is satisfied that all requirements are met, the CSM will request an appointment with the RMR.

(5) The prospective MTA will read CARDEROCKDIV 5510/2 aloud in the presence of the CSM and the IAM or Command Information Officer (CIO) prior to RMR signature.

(6) The CSM will retain all MTA Assignment letters and related documentation, as required by references (a) through (j).

(7) Prospective MTAs at NSWCCD detachments will obtain MTA approval from the Site Director (SD) who will then forward CARDEROCKDIV 5510/1 and CARDEROCKDIV 5510/2 to the DH, IAM, CSM, and RMR using a digitally signed e-mail. If approved, a phone conference will be scheduled with the SD, CSM, IAM, or CIO, and the prospective MTA. The prospective MTA will read CARDEROCKDIV 5510/2 aloud during the phone conference prior to RMR signature.

(8) Nominating contractor personnel as MTAs. Contractor personnel may be nominated as prospective MTAs provided the contract has specified that:

(a) Contractor personnel may be assigned the duties of an MTA.

(b) Contractor personnel must have the appropriate security clearance to obtain an MTA designation.

(c) Any contractor personnel assigned MTA duties must comply with CARDEROCKDIV Instruction 5510.12, Classified Information Systems Removable Media Policy.

b. Transferring Data

(1) To request a data transfer, the requestor must provide all transfer information requested in the NSWCCD Classified Media Transfer Form (CARDEROCKDIV 5510/3), section 1 and forward the form to an MTA. To avoid the risk of a classified spillage, the recorded “Title or Subject of Transfer” and the “Reason for the Transfer” must be unclassified. The requestor shall ensure that the completed CARDEROCKDIV 5510/3 contains only unclassified information.

(2) The MTA shall:

(a) Ensure that the information system and purpose of the transfer is consistent with the mission requirement approved in CARDEROCKDIV 5510/1.

(b) If the system has not been approved for classified data transfer, for RDT&E systems submit an updated CARDEROCKDIV 5510/1 to the IAM for RMR approval; for NMCI systems submit NMCI HBSS DCM Exception Request Form to the IAM for RMR approval.

(c) Schedule the time and place for the data transfer with the requestor.

(3) If the system and purpose of the transfer is approved, the MTA, with the Two Person Integrity (TPI) witness viewing, will login to the approved system and perform the write operation of the requested information. The witness need not be a designated MTA, but must have the appropriate clearance and need to know for the classified information being transferred.

(4) The MTA and the witness acting for TPI oversight will complete CARDEROCKDIV 5510/3 previously printed out with printed name and signatures. The MTA will update this form as required, and when completed, the MTA will provide a copy to the

IAM.

(5) Each month, the IAM will provide copies of completed NSWCCD Classified Media Transfer Forms to NAVSEA 09P. The Command will retain completed CARDEROCKDIV 5510/3, for at least five years.

7. Navy Marine Corp Intranet (NMCI). To enable write events on classified NMCI workstations, MTAs will submit an NMCI HBSS DCM Exception Request Form to the IAM. The IAM will review the exception request and, if approved, send this form to the RMR.

If the RMR approves the exception request, the IAM will submit the request to the NETWARCOM Battle Watch for action.

8. Forms. The following forms are available on the Carderock Division Intranet at: https://crbewebappdev.dt.navy.mil/ intranet/forms/index.php.

a. NETWARCOM NMCI HBSS DCM Exception Request Form.

b. CARDEROCKDIV 5510/1 (NSWCCD Media Transfer Agent Request Form).

c. CARDEROCKDIV 5510/2 (NSWCCD Classified Information System Media Transfer Agent Agreement).

d. CARDEROCKDIV 5510/3 (NSWCCD Classified Media Transfer Form).

H. M. STEFANYSHYN-PIPER

https://crbewebappdev.dt.navy.mil/intranet/forms/index.php https://crbewebappdev.dt.navy.mil/intranet/forms/index.php

13 Feb 2013

Distribution:

Division Intranet