Bidders Library DISA Form 786.pdf

Please wait...

If this message is not eventually replaced by the proper contents of the document, your PDF viewer may not be able to display this type of document.

You can upgrade to the latest version of Adobe Reader for Windows®, Mac, or Linux® by visiting http://www.adobe.com/go/reader_download.

For more assistance with Adobe Reader visit http://www.adobe.com/go/acrreader.

Windows is either a registered trademark or a trademark of Microsoft Corporation in the United States and/or other countries. Mac is a trademark of Apple Inc., registered in the United States and other countries. Linux is the registered trademark of Linus Torvalds in the U.S. and other countries.

Page of DISA Form 786v1, AUG 14 DISA STATEMENT OF INFORMATION SYSTEM USE AND ACKNOWLEDGEMENT OF USER RESPONSIBILITIES

-BASIC USER-

PART I

MANDATORY NOTICE & CONSENT FOR ALL DOD INFORMATION SYSTEM USER AGREEMENTS

By signing this document, you acknowledge and consent that when you access Department of Defense (DoD) information systems:

• You are accessing a U.S. Government information system (IS) (which includes any device attached to this information system) that is provided for U.S. Government authorized use only.

• You will report to the proper authority within DISA any DISA or non-DISA employee that you witness or who has witnessed someone conducting malicious activity on the Network.

• If you are a supervisor, you do not have the authority to access an employee's government-issued computer and /or device. The supervisor must receive approval from General Counsel for the Agency's Counter Intelligence Representative to review the employee's government-issued computer and or device.

You consent to the following conditions:

o The U.S. Government routinely intercepts and monitors communications on this information system for purposes including, but not limited to, penetration testing, communications security (COMSEC) monitoring, network operations and defense, personnel misconduct (PM), law enforcement (LE), and counterintelligence (Cl) investigations.

o At any time, the U.S. Government may inspect and seize data stored on this information system.

o Communications using, or data stored on, this information system are not private, are subject to routine monitoring, interception, and search, and may be disclosed or used for any U.S. Government-authorized purpose.

o This information system includes security measures (e.g., authentication and access controls) to protect U.S. Government interests--not for your personal benefit or privacy.

o Notwithstanding the above, using an information system does not constitute consent to personnel misconduct, law enforcement, or counterintelligence investigative searching or monitoring of the content of privileged communications or data (including work product) that are related to personal representation or services by attorneys, psychotherapists, or clergy, and their assistants. Under these circumstances, such communications and work product are private and confidential, as further explained below:

Nothing in this User Agreement shall be interpreted to limit the user's consent to, or in any other way restrict or affect, any U.S. Government actions for purposes of network administration, operation, protection, or defense, or for communications security. This includes all communications and data on an information system, regardless of any applicable privilege or confidentiality.

The user consents to interception/capture and seizure of ALL communications and data for any authorized purpose (including personnel misconduct, law enforcement, or counterintelligence investigation). However, consent to interception/capture or seizure of communications and data is not consent to the use of privileged communications or data for personnel misconduct, law enforcement, or counterintelligence investigation against any party and does not negate any applicable privilege or confidentiality that otherwise applies.

• Whether any particular communication or data qualifies for the protection of a privilege, or is covered by a duty of confidentiality, is determined in accordance with established legal standards and DoD policy. Users are strongly encouraged to seek personal legal counsel on such matters prior to using an information system if the user intends to rely on the protections of a privilege or confidentiality.

• Users should take reasonable steps to identify such communications or data that the user asserts are protected by any such privilege or confidentiality. However, the user's identification or assertion of a privilege or confidentiality is not sufficient to create such protection where none exists under established legal standards and DoD policy.

• A user's failure to take reasonable steps to identify such communications or data as privileged or confidential does not waive the privilege or confidentiality if such protections otherwise exist under established legal standards and DoD policy. However, in such cases the U.S. Government is authorized to take reasonable actions to identify such communication or data as being subject to a privilege or confidentiality, and such actions do not negate any applicable privilege or confidentiality.

• These conditions preserve the confidentiality of the communication or data, and the legal protections regarding the use and disclosure of privileged information, and thus such communications and data are private and confidential. Further, the U.S. Government shall take all reasonable measures to protect the content of captured/ seized privileged communications and data to ensure they are appropriately protected.

o In cases when the user has consented to content searching or monitoring of communications or data for personnel misconduct, law enforcement, or counterintelligence investigative searching, (i.e., for all communications and data other than privileged communications or data that are related to personal representation or services by attorneys, psychotherapists, or clergy, and their assistants), the U.S. Government may, solely at its discretion and in accordance with DoD policy, elect to apply a privilege or other restriction on the U.S. Government's otherwise-authorized use or disclosure of such information.

o All of the above conditions apply regardless of whether the access or use of an information system includes the display of a Notice and Consent Banner ("banner"). When a banner is used, the banner functions to remind the user of the conditions that are set forth in this User Agreement, regardless of whether the banner describes these conditions in full detail or provides a summary of such conditions, and regardless of whether the banner expressly references this User Agreement.

PART II

DISA STATEMENT OF INFORMATION SYSTEM USE AND ACKNOWLEDGEMENT OF USER RESPONSIBILITIES FOR UNCLASSIFIED AND CLASSIFIED

FOR AUTHORIZED ACCESS:

I will use DISA Information Systems for official use and authorized purposes only in accordance with DoD 5500.7-R, Joint Ethics Regulation. I will not introduce or process data which the Information System has not been specifically authorized to handle. I understand that all information processed on DISA-controlled Information Systems is subject to monitoring. This includes email and web browsing. I may also be held both criminally and financially responsible for any damages that may occur to the network, systems, other electrical and non-electrical equipment, or computing devices, if my actions are determined to be deliberate, willful, or malicious.

I understand the need to protect all passwords at the hightes leve of data they secure. I will not share my password(s) or accounts(s) information with coworkers or other personnel not authorized to access the information system.

I understand that I am responsible for all actions taken under my account(s) either as an authorized or privileged user. I will not attempt to “hack” the network, any connected Information Systems, or gain access to data which I am not authorized to access.

I understand my responsibility to appropriately protect and label all output generated under my account (to include printed materials, USB devices, floppy disks, and downloaded hard disk files).

I understand , I must have requisite security clararence and documented authorization (approved by my supervisor) of my need-to-know before accessing DISA/DoD information and information systems.

I understand my responsibility to ensure Privacy Act, and other protected personal information (such as personally identifiable information is protected while it is being processed or accessed. In computer environments outside the DISA physical data processing installations requiring access to DISA information and information systems (such as remote job entry stations, terminal stations, minicomputers, microprocessors, and similar activities), I know I must ensure appropriate protection of personal and sensitive data.

I understand by signing this document I acknowledge and consent that when l access DISA and/or any DoD Information system:

I am accessing a U.S. Government information system (as defined in CNSSI 4009) that is provided for U.S. Government-authorized use only. I understand I must complete designated IA training before receiving system access.

I understand that security protections may be utilized on DISA information systems to protect certain interests that are important to the Government. For example, passwords, access cards, encryption, or biometric access controls provide security for the benefit of the Government. These protections are not provided for my benefit or privacy and maybe modified or eliminated at the Government's discretion.

I understand that I am prohibited from the following:

• Introducing classified information into an unclassified system or environment.

• Accessing, storing, processing, displaying, distributing, transmitting, or viewing material that is abusive, harassing, defamatory, vulgar, pornographic, profane, racist, promotes hate crimes, or subversive in nature, or objectionable by nature to include; material that encourages criminal activity or violates any applicable local, state, Federal, national, or international law.

• Violating the established security, release, and protection policies for information identified as Classified, Proprietary, Controlled Unclassified Information (CUI), For Official Use Only (FOUO), or Privacy Act protected during the information handling states of storage, process, distribution or transmittal of such information.

• Obtaining, installing, copying, pasting, transferring, or using software or other materials obtained in violation of the appropriate vendor's patent, copyright, trade secret, or license agreement. This includes peer-to-peer file sharing software or games.

• Installing any unauthorized software (e.g., games, entertainment software) or hardware (e.g., sniffers).

• Knowingly writing, coding, compiling, storing, and transmitting. Or transferring malicious software code, to include viruses, logic bombs, worms, and macro viruses.

• Engaging in prohibited political activity.

• Using the system for personal financial gain such as advertising or solicitation of services or sale of personal property (e.g.• eBay), or stock trading (i.e., issuing buy, hold and/or sell directions to an online broker).

• Engaging in fundraising activities, either for profit or non-profit unless the activity is specifically approved by the Command (e.g.• Command social event fundraisers, charitable fund raisers, etc.).

• Gambling, wagering, or placing of any bets.

• Writing, forwarding, or participating in chain letters.

• Posting personal web pages, using my personally-owned information technology (IT such as personal electronic devices (PEDs), personal data assistants (PDAs), laptops, thumb drives etc.), or non-DISA-controlled information technology on DISA-controlled computing assets.

• Any other actions prohibited by DoD 5500.7-R or any other DoD issuances.

• Personal encryption of electronic commun ications is strictly prohibited and can result in the immediate termination of access.

I will immediately report any person suspected of engaging in, or any other indication of, computer network intrusion unexplained degradation or interruption of network services, or the actual or possible compromise of data or file access controls to the appropriate Information Assurance (lA) Management or senior lA Technical Level representatives. I will not install, modify, or remove any hardware or software (i.e. freeware, shareware, security tools. etc.) without written permission and approval from the Information Assurance Manager (lAM) or senior lA Technical Level representative. I will not remove or destroy system audit, security.event, or any other logs without prior approval from the lAM or senior lA Technical Level representative.

I will not introduce any unauthorized code, Trojan horse programs, malicious code, or viruses into DISA information systems or networks.

I will not allow any user access to the network or any other connected system that is not cleared without prior approval or specific guidance of the lA Management.

I will not use any DISA controlled information systems to violate software copyright by making illegal copies of software.

I agree to notify the organization that issued the account when access is no longer required.

ALL MUST READ AND SIGN:

I understand that failure to comply with the requirements of this User Agreement will be reported and investigated. The results of the i nvestigation may result in one or all of the following actions:

• Immediate revocation of system access and/or user privileges

• Job counseling, admonishment

• Revocation of Security Clearance

• Uniform Code of Military Justice and/or criminal prosecution

• Disciplinary action, reassignment, discharge, or loss of employment

I HAVE READ.UNDERSTAND,AND WILL COMPLY WITH THE REQUIREMENTS SET FORTH IN THIS AGREEMENT. IN THE EVENT OF CONFLICT,PART I TAKES PRECEDENCE OVER PART II ABOVE.

11.0.0.20130303.1.892433.887364