afi16-1404_afgscgm2017-01.pdf

DETER…ASSURE…STRIKE!

DEPARTMENT OF THE AIR FORCE

HEADQUARTERS AIR FORCE GLOBAL STRIKE COMMAND

AFI16-1404_AFGSCGM2017-01

2 March 2017

MEMORANDUM FOR ALL AFGSC PERSONNEL

FROM: AFGSC/CV

245 E. Davis Avenue Ste 100 Barksdale AFB, LA 71110

SUBJECT: AFGSC Guidance Memorandum (GM) to AFI 16-1404, Air Force Information Security Program

RELEASABILITY: There are no releasability restrictions on the publication.

1. By order of the MAJCOM Vice Commander, this AFGSC Guidance Memorandum immediately implements changes to AFI 16-1404, Air Force Information Security Program.

Compliance with this Memorandum is mandatory and applies to all activities and associate organizations per host/tenant support agreements with the Command and is effective immediately. The authorities to waive wing/unit level requirements in this publication are identified with a Tier (“T-0, T-1, T-2, and T-3”) number following the compliance statement.

See AFI 33-360, Publications and Forms Management, Table 1.1 for a description of the authorities associated with the tier numbers. To the extent its directions are inconsistent with other AF publications the information herein prevails, in accordance with (IAW) AFI 33-360, Publications and Forms Management.

2. The attachment contains guidance pertaining to the AFGSC Information Security Program, and supersedes AFI31-401_AFGSCSUP, 8 September 2010. Ensure that all records created as a result of processes prescribed in this publication are maintained IAW Air Force Manual (AFMAN) 33-363, Management of Records, and disposed of IAW Air Force Records Information Management System (AFRIMS) Records Disposition Schedule (RDS). The following changes to AFI 16-1404, 29 May 2015, are effective immediately.

3. The guidance in this memorandum becomes void after one year has elapsed from the date of this memorandum, or upon publication of AFGSC Sup to AFI 16-1404. Please contact AFGSC Information Protection office at DSN 781-2047 with additional recommendations.

MICHAEL E. FORTNEY

Major General, USAF Vice Commander

Attachment:

Guidance Changes

Attachment

Guidance Changes

1.2.3. (AFGSC) The information protection (IP) office (IPO) provides required oversight of Controlled Unclassified Information (CUI) in regards to management, marking, protection and training requirements listed in DoDM 5200.01, Volume 4. It does not provide oversight of the Freedom of Information Act program, which is governed by DoD 5400.7-R_AFMAN 33-302, Freedom of Information Act Program or Privacy Act Program, which is governed by AFI 33- 332, Air Force Privacy and Civil Liberties Program.

1.3.3. (AFGSC) The Wing/CV acts as the senior security official at the installation.

1.7.4. (AFGSC) The installation Unclassified Controlled Nuclear Information (UCNI) manager will be delegated to the senior security forces commander for the wing, who will make local determinations of UCNI. Ensure the local determinations are validated against and meet the adverse effect test in DoDI 5210.83. Any challenges to local determinations will be forwarded to AFGSC/A4 for resolution. (T-2)

2.2.10. (AFGSC) The Director of Information Protection will approve collateral residential storage requests. Requests will contain full justification for residential storage and operating instructions and/or contingency plans for the protection of classified information at the residence.

(T-1)

2.4.1. (AFGSC) The installation Restricted Data (RD) manager will be identified in writing and should be selected from the agency which has the majority of this type of material. If this cannot be determined, the selection will be made by the host wing commander and documented in the installation IP instruction. (T-1)

2.4.2. (AFGSC) The North Atlantic Treaty Organization (NATO) Control Point Officer (CPO) will be identified in writing and selected from the primary agency which controls the most NATO material on the installation. (T-1)

2.4.6. (AFGSC) Membership on the Installation Defense Council (IDC) does not preclude establishment of a specific meeting forum to discuss and work AF Security Enterprise IP-related issues. If a separate forum is established, its charter will be outlined in the Installation IP instruction. (T-3)

2.4.7. (AFGSC) Approve and recertify open discussion (OD) rooms/areas, as required. (T-1)

2.5.2. (AFGSC) Requests must be made from the commander or director, in writing. This does not apply to the annual Information Protection Program Review (IPPR), required per para 10.3 of this AFGM. (T-2)

2.5.4. (AFGSC) This inspection may be conducted on individual units with the data compiled on an annual basis using the procedures at paragraph 10.3. These inspections will be integrated into the wing’s Commander’s Inspection Program (CCIP) and incorporate HHQ, AFGSC and locally generated communicators. Ensure all supplements and local communicators are coordinated through AFGSC IP before publication or units load them into Management Internal Control

Toolset (MICT). Special Access Programs Facilities (SAPF) will be carved out of the annual self-inspection conducted by Wing Information Protection, but will conduct Self-Inspections with findings and observations tracked by the Wing IGI. (T-1)

2.5.5. (AFGSC) It is acceptable to direct units to establish the below items in the mandated unit OI, provided the installation instruction provides the necessary guidelines. (T-3)

2.5.8. (AFGSC) Also, develops approval/recertification packages for OD areas/rooms. (T-1) Ensure the package includes a statement the room/area meets construction standards IAW Attachment 7. Approval/recertify documentation for open storage (OS)/secure rooms and OD rooms/areas will be provided to the organization. (T-1)

2.5.8.1. (AFGSC) If the civil engineer (CE) and security forces (SF) squadron representatives participated in the initial risk assessment by signing the report, this is considered coordination.

2.5.8.2. (AFGSC) If a Wing Cybersecurity Office (WCO) representative is noted as present during the initial risk assessment, and it specifies whether or not a TEMPEST certification (i.e., AF Form 4170) is required, this is considered coordination.

2.5.8.3. (AFGSC) The supporting CE unit and SF installation alarm manager will work with the IP office to identify when facilities may have OS/OD area needs. These responsibilities will be outlined in the installation IP instruction. (T-3)

2.5.10. (AFGSC) If a separate IP forum is established to discuss Air Force Security Enterprise (AFSE) and/or IP-related issues, the CV will chair the meeting. This duty may be delegated to the Chief Information Protection (CIP).

2.5.11. (Added-AFGSC) The CIP will invite non-AFGSC units on AFGSC bases to participate in the AFGSC IP Program. AFGSC units located on non-AFGSC bases will enter into a host-tenant support agreement with the host activity and participate fully. (T-1)

2.5.12. (Added-AFGSC) Will ensure Security Manager (SM) meetings are held at least once every six months. They will be attended by at least one SM or assistant per unit. If a meeting is held, minutes will be prepared and distributed to participants. (T-2)

2.6.10. (AFGSC) The initial risk assessment for open OS/OD area/room and vaults will be provided to the organization, in writing, and signed by the Information Security Specialist (INFOSEC), SF representative and CE representative, unless coordinated separately. (T-2)

2.6.13. (AFGSC) Ensure these items are documented and incorporated into risk assessment reports, where applicable. Include the WCO on risk assessment report in these cases. (T-2)

2.6.14. (AFGSC) Will establish unit files for each activity and maintain the official records, as appropriate, in accordance with (IAW) the Records Distribution Schedule (RDS). Files may be in electronic format. (T-2)

2.6.14.1. (Added-AFGSC) Copy of the unit’s last annual Wing IP inspection or Wing IG CCIP inspection and any IP visits or reports. (T-2)

2.6.14.2. (Added-AFGSC) SM training and Joint Personnel Adjudication System (JPAS) request documentation. (T-2)

2.6.14.3. (Added-AFGSC) Copy of OS/OD approval/recertification and risk assessment memorandum/report. (T-2)

2.6.14.4. (Added-AFGSC) SM or other IP-related appointment letters. (T-2)

2.6.14.5. (Added-AFGSC) A unit consolidated listing provided by the SM of unit security containers, OS and/or OD areas. (T-2)

2.7.1.1. (AFGSC) If a group SM concept is used, the group SM will provide guidance, direction, coordination, and oversight to the subordinate SM. (T-3)

2.7.1.3. (AFGSC) The training content and timelines for security assistants will be determined locally, based on duties assigned, but must be reviewed by the IP Office and approved by the CIP.

Provide general guidelines in the wing IP instruction. Security assistants will be supervised by the unit or group security manager. (T-3)

2.7.1.4. (Added-AFGSC) Notify the IPO within 5 duty days of appointment of a SM, assistant SM or security assistant. (T-2)

2.7.1.5. (Added-AFGSC) Installations may reduce the amount of time for training of SMs.

Ensure timelines are provided in the wing IP instruction. (T-3)

2.7.1.6. (Added-AFGSC) Due to the amount of training required and the scope of duties, commanders and directors will ensure personnel assigned as SMs have at least 12 months retainability (e.g., do not appoint personnel pending separation, retirement, PCA or PCS within 12 months). (T-2)

2.7.3. (AFGSC) It is acceptable for units to localize training by adding additional items to the annual IP training requirements. Ensure any additional items are outlined in the unit IP OI and reviewed by the Installation IPO prior to changing the training plan. (T-3)

2.7.4. (AFGSC) Each unit will develop/document how this information will be tracked in the unit IP OI. These personnel must comply with all derivative training requirements. Commanders and Directors may appoint themselves as derivative classifiers. (T-1)

2.7.4.1. (AFGSC) The SM will be the liaison between the IPO and the unit’s derivative classifiers.

2.7.6. (AFGSC) The WCO will use the applicable TEMPEST guidance to determine whether a TEMPEST survey is required and what countermeasures are required. (T-2)

2.7.6.1. (AFGSC) Some areas may be classified processing areas (CPAs) without being OS or OD areas. Identify these areas and ensure the required TEMPEST survey is conducted. The IPO may assist by providing a risk assessment report for these areas, if requested by the commander or director and/or WCO. The risk assessment report will address IP security countermeasures and the TEMPEST survey will address electronic security countermeasures. (T-2)

2.7.7. (AFGSC) In addition to the below, the unit IP plan/instruction will also include any items identified as necessary in the wing’s IP instruction. (T-3)

2.7.7.1. (AFGSC) The actions required are based on the local threat, risk and the amount/type of classified held by the specific unit. (T-2)

2.7.7.2. (AFGSC) Unless a government issued device is SPECIFICALLY authorized on the TEMPEST survey, an incident will be declared if the device was within 3 meters of a CPA. (T-2)

2.7.7.2.1. (Added-AFGSC) Personal electronic devices (PEDs) are any electronic device that can store, monitor, record, process voice and signals, provide image capturing, and connect using wireless, infrared or Bluetooth capabilities, to include wearable fitness devices and personal wireless headphones. PEDs are capable of inadvertently emitting critical information on locations, time, dates and activity related to our nuclear mission and are prohibited in AFGSC collateral classified processing, storage or meeting areas. An incident will be declared if a PED is introduced into a CPA. (T-2)

2.7.7.2.2. (Added-AFGSC) Personal medical devices are an exception, if recommended by a Health Care Provider AND approved by the Authorizing Official for the applicable information system(s) (i.e., for SIPR AFSC/A6 or NC3 AFGSC/A6) AND included on the area’s TEMPEST package. Introduction of personal medical devices into Sensitive Compartmented Information and Special Programs Facilities (SCIF/SAPF) will be coordinated through the appropriate program security officials.

2.7.7.2.3. (Added-AFGSC) If a government or personal device with audio and/or visual recording capability is discovered in an area where classified information is exposed, being discussed or being processed a security incident will be declared. If the device is a government owned device, it will be surrendered until it can be verified no classified was surreptitiously or inadvertently captured. If the item is a personal device, a request will be made to the owner to surrender the device. If they refuse, contact security forces and have the individual detained and the device confiscated for failure to obey rules and regulations. The unit responsible for the person causing the incident will arrange for secure storage until the item is cleared or returned.

(T-2)

2.7.9. (AFGSC) The SM will work with the unit cybersecurity liaison (CSL) to determine whether nonvolatile memory is an issue with these types of items. Security procedures will ensure the items are properly stored if not able to be cleared or sanitized. (T-2)

2.7.10.1. (Added-AFGSC) On reproduction equipment, the SM and unit CSL ensure any needed clearing or sanitizing procedures are developed to purge volatile memory and whether a toner cartridge retains data and what actions are needed to clear, sanitize or secure it. If memory/toner cannot be purged, the item will NOT be used for classified reproduction, unless stored in an OS area. Equipment media and memory must be purged prior to equipment servicing, removal from service or moved to a non-OS area. NOTE: Contract reproduction equipment which does not have volatile memory may be used for classified if the contractor has performed the following steps in paragraph 2.7.10.1.1 through 2.7.10.1.6. Commanders and Directors will designate and approve reproduction equipment in writing. See AFTO 00-33B-5008, Remanence Security for Information Systems, for more information. (T-1)

2.7.10.1.1. (Added-AFGSC) The facsimile and e-mail capability are physically disabled.

2.7.10.1.2. (Added-AFGSC) Immediate overwrite function is enabled.

2.7.10.1.3. (Added-AFGSC) No user data box or other storage is authorized, regardless of encryption options.

2.7.10.1.4. (Added-AFGSC) No Hard disk drive (HDD) lock is password enabled.

2.7.10.1.5. (Added-AFGSC) Overwrite HDD/Temporary data enabled for all jobs.

2.7.10.1.6. (Added-AFGSC) Overwrite all HDD sanitization for end-of-life.

2.7.10.2. (Added-AFGSC) Before any peripheral items are connected to a secure system, the unit CSL must ensure the item is added to the TEMPEST survey and approved by the WCO prior to it being connected. (T-2)

2.7.12. (AFGSC) Notify the IPO, in writing, of all OS/OD or vault requirements, to include modification if affecting existing areas, and justification for the area or change. These areas will not be certified for convenience. Do not use OS/OD areas until approval/recertification documentation is provided by the IPO and posted in the facility. (T-1)

2.7.12.1. (Added-AFGSC) Proposed structural modifications made to vaults and secure rooms or OD areas must be coordinated with the IPO and CE. The IPO will determine if SF (installation alarm manager) coordination is required. (T-2)

2.7.12.2. (Added-AFGSC) The requesting organization must develop and maintain a written plan or add procedures to the unit IP OI outlining entry and access control procedures for any approved vaults or secure rooms. (T-3)

2.7.13. (AFGSC) If a unit has a recurring requirement to conduct classified briefings, the commander or director may request an OD risk assessment survey, in writing, from the IPO.

The IPO assessment will be used to determine whether a certified OD area is justified and will use the standards provided at attachment 7 to conduct risk assessment. Organizations will notify the IPO, in writing, of all OD area requirements. Information protection and civil engineering personnel will conduct a risk assessment of new and/or modified OD areas to ensure security requirements and construction standards are met IAW Attachment 7. (T-2)

2.7.13.3. (Added-AFGSC) The servicing CIP certifies OD areas in writing. Results of the inspection will be documented in writing and maintained by the SM, IP and at the facility. The requesting organization SM, facility and IPO maintain the document IAW the RDS. Proposed structural modifications to OD areas must be coordinated with the IPO and civil engineer. The IPO and civil engineer must review and the CIP certify, in writing, acoustical and physical integrity of facilities which have been modified. (T-2)

2.7.14. (AFGSC) Refer any questions concerning special access programs to the appropriate program manager.

2.7.15. (AFGSC) This is specifically in regards to annual IPPRs of the unit’s program, whether conducted as a staff assistance visit, as part of the unit’s self-assessment program requirements or during an IP inspection conducted during a CCIP event. (T-2)

2.7.16. (Added-AFGSC) Ensure a notice with the names and phone numbers of the SMs is posted on bulletin boards or other conspicuous places within each facility/building. (T-2)

2.8.2. (AFGSC) Ensure any unit developed training is approved by the IPO. (T-2)

2.8.6. (AFGSC) Indoctrinate non-SCI access in JPAS after assigned personnel complete required IP security training and prior to allowing access to classified. (T-2)

2.8.7. (Added-AFGSC) Maintain an IP program handbook IAW the RDS either electronically or hard copy with the following items: (T-2)

2.8.7.1. (Added-AFGSC) Appointment letters for SM, assistant SMs, security assistants, Top Secret Control Officers (TSCO) and Top Secret Control Assistant (TSCA), derivative classifiers and any others the SM determines are of use. (T-2)

2.8.7.2. (Added-AFGSC). A listing of personnel with combinations (to security containers and secure rooms/vaults), storage containers, vaults, secure rooms and/or certified OD areas. The list will include a primary and alternate custodian, a unit unique container identifier (i.e., SF-#1, SF- #2) and the location. (T-2)

2.8.7.3. (Added-AFGSC) A listing of approved classified reproduction equipment. Also ensure a copy of the approval letter is posted with the device and consider keeping a copy of all approval letters in the IP program handbook. (T-2)

2.8.7.4 (Added-AFGSC) A copy of the unit IP operating instruction. Also consider maintaining a listing of other AFSE and/or IP-related instructions at this location. (T-2)

2.8.7.5. (Added-AFGSC) A copy of the most recent completed/signed SAF and/or local IP/CCIP report with completed SAF or local MICT and/or SIC checklists. (T-2)

2.8.7.6. (Added-AFGSC) A copy of the unit’s last Wing IPPR, MICT self-assessment, Wing IG CCIP report and/or any IP staff assistant visit reports within the last calendar year. (T-2)

2.8.7.7. (Added-AFGSC) Copies of all OS/OD and/or vault certification letters and risk assessments. (T-2)

2.8.7.8. (Added-AFGSC) SM and unit IP-training documentation. (T-2)

2.8.7.9. (Added-AFGSC) Industrial Security documentation, as applicable. (T-2)

2.8.7.10. (Added-AFGSC) A copy of the unit’s JPAS roster, current within 30-days, and updated to reflect all personnel, access level and NdA changes. (T-2)

2.8.7.11. (Added-AFGSC) Copy of the last UMD/SAR code and/or TS billet review. (T-2)

2.8.7.12. (Added-AFGSC) Copies of the SM meeting minutes for the past 12 months. (T-2)

2.8.7.13. (Added-AFGSC) Copies of unit security incident inquiry/ investigation reports IAW

RDS. (T-2)

2.8.7.14. (Added-AFGSC) Miscellaneous items. (T-2)

4.1. (AFGSC) The program manager for the Special Access Program (SAP) is the SME for questions concerning marking of SAP material, as the IPO personnel are not authorized to review SAP material without indoctrination. The SAP Management Office (SAPMO) for all SAP issues is AFGSC/A5Z. (T-0)

4.1.3. (AFGSC) First page and title page, which may be the same, must have overall classification of the entire document and applicable control markings whether in a bound or unbound document. When marking interior pages the use either the overall classification of the entire document and applicable control markings (AFGSC preferred method) or highest level of classification on the page or “UNCLASSIFIED” if there is no classified information and applicable control markings. Do not mix the two methods for interior page markings discussed in DoDM 5200.01, V2.

4.1.6.3. (AFGSC) Figure 11. Mark working papers also with the name, office or origin and phone number of the creator. Date on working papers will be in ink. (T-1)

4.1.7.4. (AFGSC) Figure 11. Mark working papers also with the name, office or origin and phone number of the creator. Date on working papers will be in ink.

4.1.8. (Added-AFGSC) Unclassified material kept in a GSA Approved security container, vault or secure room storing classified material must be marked to reflect its unclassified status. (T-1)

4.2.3. (AFGSC) After appropriate markings are indicated, the material may require supplemental markings to fully convey the intent of the information and the importance of its handling. As the AFGSC standard, the following additional markings will be used (added below the marking line): For AFGSC Internal Use Only, AFGSC Pre-decisional Information, and AFGSC Controlled Distribution.

5.1. (AFGSC) Personal observation and control is defined as being able to both see the classified item AND prevent unauthorized access to the classified item. (T-2)

5.1.7. (AFGSC) Follow the procedures outlined in paragraphs 2.7.7.2. and 2.7.7.3. for these types of incidents and when considering the remainder of the subparagraphs in this paragraph.

5.1.7.3. (AFGSC) A security incident will be declared for any situation described in paragraphs

2.7.7.2. and 2.7.7.3. (T-2)

5.1.7.4. (AFGSC) If an item must be confiscated, contact local security forces and have them document the seizure using the AF Form 52. If the item is voluntarily surrendered, an AF Form 1297, or other receipt may be issued. (T-2)

5.1.7.4.1. (Added-AFGSC) If necessary, contact a subject matter expert on the information involved to assist in determining whether classified information has been captured.

5.1.7.4.2. (Added-AFGSC) If the device is found to have been contaminated with classified material, contact the WCO to determine if an approved clearing procedure exists. If the device is a personal one and cannot be returned to the individual, have them contact the local legal office for further information on recourse. (T-2)

5.2.2.2. (AFGSC) If an exception to standards must be made the aircraft commander in-transit to home station, will report the matter to the home station IPO to determine whether a security incident is warranted. (T-1)

5.2.2.5. (AFGSC) During weather diverts and in-flight emergencies, aircraft commanders will determine how classified information will be secured using the procedures in paragraph 5.2.2.2 – 5.2.2.5., as applicable. When those procedures cannot be met, and USG cleared personnel are not available, using local guards for area control is an acceptable risk when combined with the use of tamper-proof seals on aircraft openings. When local guards are not available, the use of tamper-proof seals on aircraft openings will be the minimum-security requirement. If the seal is subsequently determined to have been broken, the aircraft commander inspects the aircraft for damage, theft of equipment, sabotage, etc. The aircraft commander will report the incident to their home base servicing security office. (T-1)

5.2.3. (AFGSC) Combination locks meeting the appropriate standard (Federal Specification FF- P-110) may also be used to secure storage areas where appropriate standard key locks are not feasible, for example in large warehouse storage areas. The combinations to such locks are considered classified at the highest level stored in the area. (T-1)

5.2.4. (AFGSC) An SF Form 700 will be maintained for each locking drawer in multi-drawer containers. Additionally, empty drawers on a multi-drawer container will NOT be left unlocked or set to factory or prohibited combinations. (T-2)

5.2.4.1. (AFGSC) A periodic maintenance inspection (PMI) by a properly trained individual meets the requirement of the visual inspection discussed in this AFI. Units are encouraged to have a GSA-certified technician conduct a formal PMI once every five years for containers and once every two years for vault doors. Failure to complete this action may result in lock or mechanical failures. This will require a lock neutralization which requires a GSA-certified locksmith to destroy the lock by drilling through it open the container/door. This action is not required for OS area with non-GSA doors. (T-2)

5.2.4.1.1. (AFGSC) The IPO will either conduct the training if qualified personnel are assigned or arrange for training by a GSA-certified technician or locksmith. (T-2)

5.2.4.1.2. (AFGSC) Destroy the AFTO 36 if there are no entries, on existing, in use, security containers or vault doors. If the integrity of the container is in question, it will be taken out of service on the OF 89 and the IPO will assist SMs on contacting a GSA- certified technician to properly assess it. (T-2)

5.2.4.1.3. (AFGSC) The IPO will assist the SM in contacting a certified GSA technician to properly assess issues noted during visual inspections. (T-2)

5.2.4.2. (AFGSC) The security container must be purged before resetting the combination and turn-in to Defense Logistics Agency Disposition Services (formerly DRMO). This includes removing the drawers to ensure no classified has fallen behind or beneath the drawers. If the SM cannot perform this action the IPO will assist them with contacting a certified GSA technician to assist with the action. Note: Ensure individuals performing the purging are cleared to the level of classified that was stored it the container. (T-2)

5.2.4.3. (AFGSC) The risk assessment surveys will also be conducted for any certified collateral OS areas, SAP OS are exempt. Use the physical security standards outlined in Attachment 7 and DoDM 5200.01, Volume 3, Enclosure 3 and its appendix to conduct risk assessments. The risk assessment will be attached to the facility certification paperwork and maintained for the life of the facility. Ensure the risk assessment specifically indicates Top Secret OS areas must be manned 24/7 if the alarms are down and whether Secret OS areas are authorized 4-hour checks and 2-hour checks if the area contains a GSA approved security container used to store Top Secret if alarms are down. (T-2)

5.2.4.3.2. (AFGSC) Existing IDS that has undergone major modifications or new IDS protecting collateral classified areas will be validated through testing, with a burn-in period of no less than 72 hours IAW AF1 31-101 chapter 6. CIP at each installation will determine if the modification is considered major.

5.2.4.3.4. (Added-AFGSC) If personnel must be posted on an area or are required to conduct 2 hour/4 hour checks, they must be cleared for access. The checks will be conducted by the owner/user of the information. The scope of the 2 hour/4 hour check will be determined based on the risk assessment and documented in the certification package. The check will be documented on the “guard check” section of the SF 702. (T-2)

5.2.4.4. (Added-AFGSC) Organizations must notify the IPO and SF, in writing, when the vault or secure room is no longer used for classified storage. (T-2)

5.2.5. (AFGSC) Regardless of the authorized method used to destroy TS information, destruction must be documented by two TS-cleared and authorized personnel. The unit may use the AF Form 143, Top Secret Register Page or the AF Form 1565, Entry, Receipt and Destruction Certificate, to document destruction of TS information. If a TS electronic media item is sent to NSA for destruction, ensure the AF Form 310, Document Receipt and Destruction Certificate or AF Form 1565, Entry, Receipt and Destruction Certificate is attached to the AF Form 143, Top Secret Register Page. If an AF Form 1565 is used by the TSCO to destroy TS material locally, it must be attached to the AF Form 143. (T-2)

5.3. (AFGSC) The transport of classified on-base and to and from the main base to a local geographically located facility (e.g., missile field, etc.) does not require courier authorization documentation, unless determined otherwise by the Wing CC but, as minimum, verbal authorization is required. (T-2)

5.3.2. (AFGSC) General local procedures for transport will be addressed in the Installation IP instruction. Units must also address any unit unique procedures in their unit IP OIs. (T-3)

5.3.2.1. (Added-AFGSC) Commanders will ensure the unit IP OI establishes local procedures and addresses training requirements for receipt of accountable mail [USPS registered, certified, express and first class mail with “Return Service Requested” on the outside, or GSA authorized contractor for overnight delivery (i.e., FEDEX, UPS, etc.)] by unit personnel and the need to protect it as classified. The procedures will ensure this type mail is open by cleared authorized personnel upon receipt, not left unattended or is placed in secure storage and will ensure uncleared personnel are aware they may not accept or open these types of items. Use AF Form 4332, Accountable Communications Receipt Authorization, to designate authorized individuals.

(T-3)

5.3.3. (AFGSC) If a unit has a Top Secret Control Program (TSCP) they may use the AF Form 143, Top Secret Register Page or , AF Form 1565, Entry, Receipt and Destruction Certificate instead of the AF Form 310, Document Receipt and Destruction Certificate to document transfer of Top Secret classified. (T-1)

5.3.4. (Added-AFGSC) Documentation. Courier authorization letter will be issued whenever classified is hand carried off base, except as indicated in para 5.3, in lieu of use of the DD Form 2501, Courier Authorization, card. (T-2)

5.3.4.1. (Added-AFGSC) This is not required for transport between geographic locations which are considered a part of the installation, for example, between a main base and a missile field.

(T-2)

5.3.4.2. (Added-AFGSC) When classified material is hand carried off an installation, the outer wrapper will be marked "OFFICIAL BUSINESS - MATERIAL EXEMPTED FROM EXAMINATION." If a courier authorization letter is issued, the package be signed below this marking with the signature of the person who signed the authorization letter. This does not apply to material transported as discussed in 5.3.4.1. (T-2)

5.4. (Added-AFGSC) TSCP Procedures. The security of Top Secret material in AFGSC is paramount and TSCP will be mandatory for any agency which routinely originates, stores, receives, or dispatches Top Secret material. Strict compliance with Top Secret control procedures take precedence over administrative convenience. These procedures ensure stringent need-to-know rules and security safeguards are applied to our most critical and sensitive information. (T-2)

5.4.1. (Added-AFGSC) Administration of TSCPs. Commanders and Directors will notify IPOs, in writing, of establishment or termination of TSCPs. Accounts will be established for any agency which routinely originates, stores, receives, or dispatches Top Secret material. Local procedures will be established by the commander or director and addressed in the unit IP OI.

Also: (T-2)

5.4.1.1. (Added-AFGSC) A TS Control Officer (TSCO) will be appointed, in writing, with at least one TS Control Assistant (TSCA) to maintain the TSCP. Send a copy of the designation letter to the IPO. (T-2)

5.4.1.2. (Added-AFGSC) The TSCO will use the AF Form 143, Top Secret Register Page, to account for each document (to include page changes and inserts that have not yet been incorporated into the basic document) and each piece of material or equipment to include electronic media. Recontrolling of documents is optional. (T-2)

5.4.1.3. (Added-AFGSC) For electronic or microfiche media, TSCOs may either describe each Top Secret document stored on the media on the AF Form 143 or maintain a listing showing the contents of the media attached to the AF Form 143. This will facilitate a classification review and/or damage assessment if the media is lost or stolen. The AF Form 143 does not have to be attached to the item. EXCEPTIONS: (T-2)

5.4.1.3.1. (Added-AFGSC) Top Secret Electronic Messages. TSCOs do not have to use AF Form 143 for transitory Top Secret electronic messages held for 30 days or less. In these cases, use message delivery registers or other similar records of accountability. (T-2)

5.4.1.3.2. (Added-AFGSC) Top Secret Hard Copy Items. TSCOs do not have to use AF Form 143 for transitory hardcopy items held for 30 days or less. In these cases, use message delivery registers or other similar records of accountability. (T-2)

5.4.1.3.3. (Added-AFGSC) The TSCO does not use the form as a receipt for information received from or delivered to the Defense Courier Service (DCS). DCS receipts suffice for accountability purposed in these cases. (T-2)

5.4.1.4. (Added-AFGSC) Top Secret Disclosure Records. The TSCO uses AF Form 144, Top Secret Access Record and Cover Sheet, in lieu of the SF 703 and as the disclosure record for when information is accessed. (T-2)

5.4.1.4.1. (Added-AFGSC) The form only needs to be annotated once for each person accessing the document/item. A master list for recurring access is acceptable. (T-2)

5.4.1.4.2. (Added-AFGSC) In regards to electronic media, the AF Form 144 does not need to be annotated unless the actual information is accessed, i.e., plugged in and information reviewed.

(T-2)

5.4.1.4.3. (Added-AFGSC) It is acceptable to maintain a listing identifying the items associated with the AF Form 144. (T-2)

5.4.1.5. (Added-AFGSC) Top Secret Inventories. Commanders and Directors will: (T-2)

5.4.1.5.1. (Added-AFGSC) Designate officials to conduct annual inventories for all Top Secret material in the account and to conduct inventories whenever there is a change in Primary TSCOs.

These officials must be someone other than the TSCO or alternate TSCOs of the TSCP being inventoried. The purpose of the inventory is to ensure all of the Top Secret material is accounted for, discrepancies resolved, and its status is correctly reflected on the corresponding AF Form

143. If this inventory is a changeover the new Primary TSCO must conduct the inventory. (T-2)

5.4.1.5.2. (Added-AFGSC) Ensure necessary actions are taken to correct deficiencies identified in the inventory report. (T-2)

5.4.1.5.3. (Added-AFGSC) Ensure the last two inventory reports and records of corrective actions taken are maintained with the account. (T-2) http://www.dcs.ftmeade.army.mil/publicnet/PublicNETDefault.aspx

5.4.1.5.4. (Added-AFGSC) Ensure all accountable items are reviewed in its entirety, e.g., each page of a multipage document. In the case of electronic media, only the actual media need be verified as present, it does not need to be opened for review. (T-2)

5.4.1.5.5. (Added-AFGSC) Time between inventories will not exceed 12 months. (T-2)

5.4.1.6. (Added-AFGSC) SAP will follow the inventory and accountability processes prescribed by the SAPMO. (T-1)

5.4.1.7. (Added-AFGSC) Top Secret Receipts. Use the AF Form 143 as a receipt when transferring Top Secret material in lieu of the AF Form 310, if required. (T-2)

5.4.1.8. (Added-AFGSC) When requested, the IPO provides training to these newly appointed officials based on information provided by the MAJCOM IP.

5.4.1.9. (Added-AFGSC) Each TSCO will maintain a handbook which contains specific records to manage the program to include the following: (T-2)

5.4.1.9.1. (Added-AFGSC) Copy of TSCP establishment memorandum. (T-2)

5.4.1.9.2. (Added-AFGSC) Copy of TSCO/TSCA appointment memorandums. (T-2)

5.4.1.9.3. (Added-AFGSC) Active Top Secret Register Pages. The originator may use an automated system as long as it provides essential data from the AF Form 143. The Originator Control Number (OCN) will be developed by the TSCO and applied to the AF Form 143, AF Form 144 and the associated item.

5.4.1.9.4. (Added-AFGSC) Inactive Top Secret Register Pages, filed by calendar year and retained for a period of 5 years following action taken to make page inactive. Form shows action taken to close or transfer accountability of particular Top Secret material. Include copies of the AF Form 144, which must be maintained for 2 years. (T-2)

5.4.1.9.5. (Added-AFGSC) TSCP inventory reports. (T-2)

5.4.1.9.6. (Added-AFGSC) Miscellaneous items. (T-2)

5.4.1.9.7. (Added-AFGSC) It is acceptable to cross reference items to other binders or electronic files. (T-2)

5.4.1.10. (Added-AFGSC) Annual Validation of TSCPs. Commanders and Directors will certify the need for the TSCP annually. This will be covered in the annual inventory report. If it is determined as no longer needed, the account will be closed and all documentation will be retained by the SM. (T-2)

6.2.2. (AFGSC) The recommended standard is the DSS derivative training listed below, however local IP offices may develop training to meet this requirement. The SM will maintain (or have access to) a database which shows training completion dates. If currency of training is http://www.e-publishing.af.mil/forms/formlist.asp?puborg=AF&series=0100-0199 in question, it is the individual’s responsibility to provide valid proof of completion (i.e., a DSS certificate.)

6.2.3. (AFGSC) The WCO is responsible for creating and oversight for completion of this training. The minimum training will include completion of the noted DSS training course and some type of local supplemental training which includes the noted material from DoDM 5200.01 and AFI 16-1404. (T-2)

6.4. (AFGSC) The below topics may be presented in blocks (e.g., monthly, quarterly or semiannually) to meet the continuing training requirement. SM will document this training annually to show date trained, subjects covered and what forum was used. Outline the procedures in the unit IP OI. (T-2)

6.7. (AFGSC) Each unit will provide the IPO with a list of personnel who require this training, so it can be verified during annual self-inspections. Ensure any other management or oversight personnel are identified in the unit IP OI to include a list of identified local training required. In the case of SMs, the appointment letter meets this requirement. Training requirements for SMs will be addressed in the installation IP instruction. No list is needed for IPO positions, they are identified on the UMD. (T-2)

6.7.2. (AFGSC) Additional SM training will be identified by the IPO, as required (e.g., JPAS training) in the installation IP instruction. The IPO may decrease training completion timelines.

(T-2/T-3)

6.7.3. (AFGSC) The IPO will define a minimum training standard for these positions, if used, in the installation IP instruction. Units may add additional IP-related training items, but will coordinate the requirements through the IPO. The IPO may decrease training completion timelines. (T-2)

6.7.5. (Added-AFGSC) Training certificates for local training will include the name and for military personnel the rank of the student, course name, and dates of training. AF Form 1256, Certificate of Training, can be used for this purpose. (T-2)

7.2. (AFGSC) If the potential security incident reported involves COMSEC, SCI or SAP classified material, the Commander or Director or IPO will notify the wing or installation COMSEC manager, Special Security Office (SSO) or SAP manager, as applicable, instead of the IPO. The IPO will issue a security incident number for all other types of classified security incidents. Security incident numbers will be identified, using the following format, “YY- BASENAME-##” with YY being the two digit calendar year and ## being a sequential number starting with 01 for the first incident. (T-1)The determination of whether an incident meets the criteria outlined in DoDM 5200.01, V3 for an inquiry or investigation may be delegated to the CIP in the installation IP instruction.

7.2.1.3. (AFGSC) Do not delay reporting in an attempt to obtain secure communication for reporting. Ensure no classified information is discussed if secure communication is not available. (T-2)

7.2.3. (AFGSC) The IPO will initiate any up-channel notifications for collateral material. If special access material is involved, the wing or installation program manager will make the notifications through the MAJCOM program manager to the appropriate HHQ agency. (T-2)

7.3. (AFGSC) There is no need to conduct a collateral incident, if another program is also required to conduct an incident. For example, if COMSEC is required to conduct a security report, there is no need for a collateral report. In this case, the IPO will ensure the appropriate agency is made aware of the incident, but does not need to issue a security incident number.

7.3.1. (AFGSC) One time access is not authorized for security incidents in AFGSC. Ensure the IO has the appropriate clearance prior to appointment. In general, use the rules for appointing investigators found in AFI 90-301 for appointing initial inquiry officials. At a minimum SNCO, OFF or GS-9 or higher who is equal to or of greater rank than the individual causing the incident.

Also ensure they are objective (i.e., not a supervisor or supervised by anyone directly involved in the case.) If the appointing official is involved in the incident, IO appointment will be elevated to the next level of command. Personnel must be available for 30 days and not pending retirement or PCS within 180 days. (T-2)

7.3.1.1. (AFGSC) The IPO will perform a technical review to ensure all aspects of the incident have been addressed. If questions remain unanswered, the report will be returned to the IO for correction. Once all questions have been satisfactorily addressed, the CIP will provide a memorandum, as discussed in 7.3.1.5.3. below. Under no circumstances will the IPO or the commander or director attempt to influence the IO’s conclusions. (T-2)

7.3.1.3. (AFGSC) If it is clear gross negligence, misconduct or egregious error exists, the IO will notify the IPO and consult with appointing official to determine if a formal investigation is warranted. (T-1)

7.3.1.5.3. (AFGSC) The IPO will provide a memorandum concurring or non-concurring with the IOs report. If non-concurring, the IPO will provide justification in the memo and the package may be reviewed by the installation legal office.

7.3.1.6. (Added-AFGSC) If a compromise is suspected, the IO will notify the commander or director and the IPO immediately and the commander or director will make an initial classification review notification, as required in DoDM 5200.01, V3, Enclosure 6, 6.c.(1). (T-2)

7.3.2.2.1. (AFGSC) If the IO, CIP and JA (if used) reviews all concur with each other, and if the appointing official concurs with them, the appointing official may simply concur with their conclusions and recommendations and verify corrective actions are complete in the closure letter.

7.3.2.2.6. (Added-AFGSC) If the Commander or Director non-concurs with the IO findings, or with IPO or JA review comments (if they differ from the IO findings), the commander or director will state the reason why in the closure endorsement. The IPO should then review the non-concur comments to ensure they address DoDM 5200.01, V3 standards. If the comments do not meet standards, the package will be rerouted to the closing official. If the item is not resolved, send the entire package to the next level for review and final closure actions. (T-0)

7.3.2.3. (AFGSC) Any computer actions will be accomplished IAW WCO regulatory guidance.

(T-2)

7.3.2.5. (AFGSC) Any person who has had unauthorized access will be debriefed using an AF Form 2587 and, if uncleared, will also accomplish an SF 312, Non-disclosure Agreement. The SM responsible for the material will maintain these records IAW AFRIMS RDS. (T-2)

7.3.3.2. (AFGSC) Derogatory entries in JPAS and contact to CAF will be made IAW AFI 31- 501 (changing to AFI 16-1405) guidance. (T-2)

7.3.3.3.2. (AFGSC) The CIP will consult with the WCO and SMEs to determine whether a classified data spillage occurred and will ensure the OCA is contacted for a CMI determination.

(T-2)W

7.4.2. (AFGSC) Be impartial and objective, that is not in the direct supervisory chain of those involved. (T-2)

7.5. (AFGSC) Security Incidents should be reported to AFGSC within 2 duty days by entering the information into the security incident log located on the AFGSC SharePoint. (T-2)

7.6. (Added-AFGSC). If an inquiry or investigation involved a compromise of classified (actual or probable) the appointing official’s closure letter will address the required classification review notification to the originator. (T-2)

9.2.1. (AFGSC) Ensure the DD Form 254 is modified to allow access to NATO if SIPRNET access will be required in the performance of the contract. (T-1)

10.1.3. (AFGSC) The summary of information for this “ISOO” self-inspection is gathered from the unit self-assessment data and IPPRs which is collected from the results of the unit self assessment.

10.2. (AFGSC) The data for this “ISOO” self-inspection may be collected as noted in 10.1.3.

above.

10.3.8. (Added-AFGSC) Wing Self-Inspections. The IP office will conduct an annual Wing Self-Inspection of each unit participating in the Wing IP program. Additionally: (T-2)

10.3.8.1. (Added-AFGSC) A written report will be provided from the CIP to the commander or director summarizing any findings noted during the IPPR, 15 duty-days. (T-2)

10.3.8.2. (Added-AFGSC) Findings from these IPPRs will be documented in IGEMS and tracked per AFI 90-201. (T-2)

10.3.8.3. (Added-AFGSC) The IPO will participate as a member of the wing’s CCIP process, any formal inspection conducted under CCIP will not count for the one of the unit’s self assessments. (T-2)

10.3.8.4. (Added-AFGSC) As a minimum, ensure the written report covers the criteria outlined in 10.1.3. above. (T-2)

10.4. (AFGSC) The data will be compiled into the MAJCOM report, so include only a summary identified trends for the areas.

10.4.2. (AFGSC) The CIP compiles the information for the ISOO report for the wing commander to review and sign. (T-2)

10.5. (AFGSC) The IP office will conduct at least one IPPR for each assigned unit each calendar year. Special Access Programs Facilities (SAPF) will be carved out of the annual self-inspection conducted by Wing Information Protection, but will conduct Self-Inspections with findings and observations tracked by the Wing IGI. Additionally: (T-2)

10.5.1. (AFGSC) Any localized IP MICT communicators will be approved by the AFGSC IP prior to being utilized. (T-2)

10.5.2. (Added-AFGSC) An objective person, other than the SM, should conduct the unit MICT self-assessment. (T-2)

10.5.3. (Added-AFGSC) The IPO will have access to all unit IP MICT lists. The SMs will have MICT accounts and IP MICT lists. (T-2)

11.4. (AFGSC) Part D. The Standard Form (SF) 311, Agency Security Classification Management Program Data will include the total number of classification decisions on finished products, regardless of media or whether produced in electronic form. The SM will collect numbers of classification decisions for the SF 311 for the IPO. The annual results will be submitted by the IPO to AFGSC/IP by 15 September of each year. (T-1)

Attachment 1

GLOSSARY OF REFERENCES AND SUPPORTING INFORMATION

Adopted Forms

(Added-AFGSC) DD Form 2501, Courier Authorization (Added-AFGSC) AF Form 143, Top Secret Register Page (Added-AFGSC) AF Form 144, Top Secret Access Record and Cover Sheet (Added-AFGSC) AF 1256, Certificate of Completion (Added-AFGSC) AF Form 1565, Entry, Receipt and Destruction Certificate (Added-AFGSC) AF Form 4332, Accountable Communications Receipt Authorization

Abbreviations and Acronyms

(Added-AFGSC) CIP—Chief Information Protection (Added-AFGSC) CPA—Classified Processing Area (Added-AFGSC) DSS—Defense Security Service (Added-AFGSC) IP—Information Protection (Added-AFGSC) IPPR—Information Protection Program Review (Added-AFGSC) ISOO—Information Security Oversight Office (Added-AFGSC) MICT—Management Internal Control Toolset (Added-AFGSC) OD—Open Discussion (Added-AFGSC) OS—Open Storage (Added-AFGSC) SA—Self-Assessment (Added-AFGSC) SI—Self-Inspection (Added-AFGSC) SM—Security Manager (Added-AFGSC) STC—Sound Transmission Class (Added-AFGSC) TL—Transmission Loss (Added-AFGSC) VU—Volume Unit

Attachment 7 (Added-AFGSC)

CONSTRUCTION GUIDELINES FOR OPEN DISCUSSION AREAS

A7.1. (Added-AFGSC) Objectives. To provide guidelines for the achievement of effective security in AFGSC facilities in which collateral classified information is discussed and handled on a daily basis. Normally, open discussion areas are only set up at locations where daily classified conferences or forums occur. The guidance provided herein will be considered when building new facilities or renovating existing facilities. It is acceptable for IPOs to develop these guidelines into a local checklist.

A7.2. (Added-AFGSC) Open Discussion Areas. For the purpose of this instruction, a secure Open Discussion is defined as an area provided special acoustical, technical, and physical security protection, and designated for the discussion and handling of classified defense information on a continuous basis. Due to the high costs of building an Open Discussion, the number of Open Discussion areas will be kept to the absolute minimum consistent with mission accomplishment.

A7.3. (Added-AFGSC) General Approach. The achievement of adequate security for conference facilities so as to protect all classified information therein requires a blend of acoustical, technical, and physical security measures. This blend is obtained through the coordination of acoustical, electronics, civil engineering, and security personnel from the initial planning stage through construction and inspection phases. The installation Civil Engineer or Construction Agent is responsible for the design and construction of Open Discussion areas.

Qualified…