Attachment_II-_Protective_Level_3_Information_From_AFI_31-101_Integrated_Defense.pdf

Attachment II- Protective Level 3, Information From AFI 31-101 Integrated Defense

Protective Level 3 (PL-3) Information From AFI 31-101 Integrated Defense

Disclaimer The following excerpts of the AFI 31-101 Integrated Defense are for information purpose only. PL-3 Intrusion Detection System (IDS) requirements will be determined by MAJCOM and coordinated with local Security Forces Squadron (SFS). Installations should utilize

IDRMP to determine the most cost-effective means of protecting PL-3 assets. At minimum, establish a detection capability that is capable of detecting unauthorized personnel prior to entering the restricted area. The location of the line of detection may depend on installation-unique design factors, commander's level of risk acceptance, METT-TC, etc. All questions related to the AFI 31-101 shall be submitted in writing to the Contracting Officer (CO).

4.8. Protection Level 3 (PL-3) Resources. Assign PL-3 to AF assets for which the loss, theft, misuse, compromise, damage or destruction results in mission degradation to the war fighting capability of the US.

4.8.1. Examples of PL-3 Resources. Listed below are some examples of PL-3 resources.

4.8.1.1. Weapons systems capable of being on alert status.

4.8.1.2. Selected C3 facilities, systems, and equipment.

4.8.1.3. Intelligence-gathering systems not critical to US operational capability.

4.8.2. Level of Security for PL-3 Resources. This level of security results in a reasonable degree of deterrence against hostile acts. Failing the ability to deter, defensive measures should be able to delay a hostile force and limit damage to resources. Owners/users of PL-3 resources should be actively involved in security of their assets.

Response to threats is provided by SF.

4.8.3. Desired ID Effects. ID measures at a minimum, Anticipate, Deter, Detect, Assess and Delay threats or hostile acts to these resources.

6.2.6. IDS. IDS refers to systems protecting all PL resources. Typically, PL-1 – PL-3 assets have higher standards for IDS than PL-4 IDS; however, the IDS standards for Sensitive Compartmented Information Facilities (SCIFs) and

Special Access Program Facilities (SAPFs) must meet the requirements in Intelligence Community Directive (ICD)

705, regardless of the PL. (T-2) NOTE: The requirement for IDS administrators only applies to SCIFs and SAPFs.

Additionally, the ICD 705 TS SCI indoctrination requirement only applies to SCIF and SAPF IDS administrators with the level of access outlined in ICD 705.

6.2.7. Intrusion Detection Equipment (IDE). The term IDE is used when referring to individual pieces of IDS equipment (i.e., one motion sensor as part of an entire IDS system).

6.3.7.3. Controlled Area IDS. IDS funding for controlled areas is the responsibility of the owner or primary user of the facility requiring the IDS. Use of commercially leased or purchased IDS is permitted; however, the IDS must meet or exceed all DoD standards. (T-0) All requests for acquisition or modification of alarm systems is coordinated through the IDC before contract tendering. NOTE: Coordinate all purchases of commercial IDS with the installation

SF, Civil Engineer Squadron and Communications Squadron to ensure compatibility. Most installation IDS maintenance contractors or personnel are not trained on commercial systems, so a maintenance contract with the

IDS installer is highly encouraged.

6.3.9.7. PL-3 Facility IDS Requirements. MAJCOMs will determine IDS requirements for PL-3 facilities. (T-2)

MAJCOMs will coordinate the requirements with AFSFC/FPR for approval prior to incorporating those requirements into MAJCOM or local supplements.

6.3.9.10. PL-3 Asset Requirements. Installations should utilize IDRMP to determine the most cost-effective means of protecting PL-3 assets. At minimum, establish a detection capability that is capable of detecting unauthorized personnel prior to entering the restricted area. (T-3) The location of the line of detection may depend on installation-unique design factors, commander's level of risk acceptance, METT-TC, etc.

6.5.2.4. PL-3 Areas. Circulation control is enforced through on-duty owner/user personnel making periodic checks during normal operations. Place fencing for PL-3 areas where it best facilitates movement of personnel and

Attachment II- Protective Level 3, Information From AFI 31-101 Integrated Defense equipment while enhancing physical security. The following examples are provided to aid in planning the location of fencing.

6.5.2.4.1. For PL-3 areas located on installations enclosed with Type A2 perimeter fencing, recommend installing

Type A fencing around the PL-3 restricted area boundary. This fence achieves an additional “delay” effect.

6.5.2.4.2. For PL-3 areas located on installations enclosed without Type A, A1 or A2 perimeter fencing, install a

Type A fence between the installation perimeter and the restricted area at the most advantageous location nearest the restricted area boundary. However, if other natural obstacles achieve a “delay” effect (i.e., swamps, waterways, ravines), fencing may not be required in these areas.

6.5.2.4.3. For PL-3 areas located at remote or off-installation sites, install a Type A fence around areas to delineate the boundary where circulation controls are applied.

6.5.8.1.2. PL-3 Entry Point Lighting. MAJCOMs specify lighting criteria for areas containing PL-3 resources only.

Installation Commanders may prescribe additional lighting requirements as the mission dictates and with input from the IDC.

7.6.2.2. PL-3 Restricted Areas. Because ECs are not normally posted for PL-3 areas, SF or the unit responsible for controlling entry will issue and retrieve the temporary badges for these areas. (T-3) The badges may leave the restricted area; however, establish procedures to ensure the badges are issued, retrieved and accounted for at the beginning and end of the duty day. (T-3)