Attachment 17 USAACE Reg 25-1 POLICY AND PROCEDURES FOR OBTAININGUSING.pdf

USAACE Reg 25-1 • 10 January 2013

USAACE Reg 25-1

DEPARTMENT OF THE ARMY

HEADQUARTERS, UNITED STATES ARMY AVIATION CENTER OF EXCELLENCE

FORT RUCKER, ALABAMA 36362-5105

USAACE Regulation 10 January 2013

No. 25-1

Information Management

POLICY AND PROCEDURES FOR OBTAINING/USING

INFORMATION TECHNOLOGY SERVICES/SYSTEMS AT FORT RUCKER

Paragraph Page

SECTION I. GENERAL

Purpose................................................................................................ 1 2

References ........................................................................................... 2 2

Scope ................................................................................................... 3 2

Definitions .......................................................................................... 4 2

Organization........................................................................................ 5 2

Responsibilities ................................................................................... 6 2

II. POLICY

World Wide Web (WWW) Policy ...................................................... 7 3

Web Update Management................................................................... 8 3

Social Media Policy ............................................................................ 9 4

APPENDIX A. References

Section I. GENERAL

1. PURPOSE. This regulation outlines the administrative policies, procedures, and responsibilities for major activities/units assigned to the US Army Aviation Center of Excellence (USAACE) and Fort Rucker to have content posted to the official Fort Rucker Internet or Intranet sites.

2. REFERENCES. Required and related publications are listed in appendix A.

3. SCOPE. The provisions of this regulation are applicable to all major activities/units assigned to the

USAACE.

4. DEFINITIONS. For the purpose of this regulation, the following terms are defined:

a. Fort Rucker’s Internet site - our public facing Web site accessible to the public through the

World Wide Web (WWW).

b. Fort Rucker Intranet site - our internal Web site accessible to only authorized Common Access

Card enabled users for the dissemination of command information up to For Official Use Only data and information.

c. External official presence (EOP) - any public facing, official public affairs activity conducted on non-Department of Defense sites on the Internet (e.g., Facebook, Twitter).

5. ORGANIZATION. The organizational structure of the USAACE is contained in USAACE

Regulation (Reg) 10-1, Organization and Functions Manual, 30 September 2009.

6. RESPONSIBILITIES.

a. The Command Group is the final approval authority on all Web and social media posting and content and is responsible for final action on all matters external to the USAACE.

b. Major activities/units are responsible for initiating actions to establish, update, and change policies within their functional areas, as required. They will further ensure military and civilian personnel are trained to comply with the policies and procedures of this regulation.

c. Public Affairs Office (PAO) and Network Enterprise Center (NEC) webmasters are responsible for development, staff supervision, and management of Fort Rucker’s Internet and Intranet content.

Section II. POLICY

7. WORLD WIDE WEB (WWW) POLICY.

a. The manager of Fort Rucker’s Web services is the NEC. The NEC webmaster is responsible for managing all provisions of the WWW services, to include Web server hardware and software maintenance and upgrades, technical strategies employed in presenting and navigating Web pages, and the overall character and appearance of Web pages.

b. The following activities are responsible for ensuring information posted to the Web is appropriate for public release:

(1) The Directorate of Plans, Training, Mobilization, and Security will ensure all information posted to the Web conforms to applicable security requirements.

(2) PAO will ensure all information posted to the Web can be released to the public.

(3) The Staff Judge Advocate will review information to be posted to the Web for legal sufficiency.

(4) NEC will ensure all information posted to the Web is in compliance with Section 508

Standards for Web Accessibility under 36 Code of Federal Regulations (CFR) 1194.22.

c. Activities that wish to post information to the Web are responsible for developing their Web pages and coordinating, by action memorandum, with the above activities. The Web Manager will retain the completed coordination documents.

8. WEB UPDATE MANAGEMENT.

a. Policy for updating WWW pages. The information assurance security officer (IASO) or information management officer (IMO) is the person submitting the change to the NEC and will be responsible for determining whether a page update constitutes a change of information (different type) or change to information (update of same). If it is a different type of information, the update should follow the procedures for staffing as stated in paragraph 7 above. Otherwise, the IASO or IMO will need to process as follows:

(1) Only public domain information may be posted to a WWW server. Any new file posted will be reviewed by a subject matter expert and the operations security (OPSEC) officer of the organization.

(2) The IASO or IMO will ensure an OPSEC review is completed on all files to be updated and a copy of the OPSEC review is transmitted with the updated files. He/She will also ensure all files are compliant with Section 508 Standards for Web Accessibility under 36 CFR 1194.22, and a statement that the updated files are Section 508 Standards for Web Accessibility compliant must accompany the transmitted files.

(3) The IASO or IMO will send the file(s) to the webmaster’s e-mail account and fax a copy of the OPSEC review documentation to 255-3776. The Section 508 Standards for Web Accessibility statement can either be faxed or contained in the e-mail transmission.

b. Update files can be sent as attachments to e-mail regardless of size within the Fort Rucker metro area network (MAN) and THIS IS ENCOURAGED. If the file is from personnel outside the Fort Rucker

MAN, there is a size limit on transmission. Files exceeding the size limit can be brought to the Data

Information/Security Branch of the NEC on most common removable media.

c. Only the IASO or IMO will submit files for posting.

d. Files will not be posted without verification from an IASO, IMO, or director/activity head/brigade commander or designee. A copy of a designee appointment must be on file with the NEC webmaster at the time of the update request.

9. SOCIAL MEDIA POLICY.

a. In accordance with (IAW) Memorandum, Secretary of the Army, SASA, 21 October 2010, subject: Delegation of Authority – Approval of External Official Presences, commands are authorized to establish EOPs.

b. Requirements for establishing an official public facing command social media presence are as follows:

(1) Approved by the USAACE Commanding General or his designee, the Fort Rucker Public

Affairs Officer approval must be granted prior to establishment of an official social media presence.

(2) Each social media presence must have a clearly defined purpose and plan supporting the organization’s mission. The plan should be approved by the organization’s commander or director and comply with review procedures outlined in Army Regulation (AR) 25-1, Army Knowledge Management and Information Technology, paragraph 6-7, 4 December 2008.

(3) Each social media presence must be registered with the US Army’s social media directory at http://www.army.mil/socialmedia IAW Directive-Type Memorandum 09-026, Responsible and

Effective Use of Internet-based Capabilities, 25 February 2010.

(4) Each social media presence must be unlocked and open to the public. Private social media outlets should not be registered with the US Army’s social media directory at http://www.army.mil/socialmedia.

c. Any social media presence controlled by the US Army must comply with the policies contained in AR 25-1; AR 360-1, The Army Public Affairs Program, 25 May 2011; AR 530-1, Operations Security

(OPSEC), 19 April 2007; Department of Defense Directive 5230.09, Clearance of DoD Information for

Public Release, 22 August 2008, and Department of Defense Instruction 5230.29, Security and Policy

Review of DoD Information for Public Release, 8 January 2009.

d. Family Readiness Groups (FRGs) may establish an official social media presence with the approval of their command. It is possible that the unit’s official page also serves the dual purpose as a platform for its FRG to disseminate information; however, if the command elects to have separate pages, they must adhere to the same standards.

http://www.army.mil/socialmedia

e. All EOPs must adhere to the following standards:

(1) They must be categorized as a government page.

(2) They include the Commander approved names and logos, not nicknames or mascots.

(3) Branding (official name and logos) across all social media platforms is uniform.

(4) They include a statement acknowledging that this is the “official [Facebook] page of

[enter unit or organization name here][Family Readiness].”

(5) Facebook pages must default to the “Just [unit or organization]” on the wall. This results in command information being the first and primary thing on the wall instead of spam and other comments.

(6) Facebook pages must include “Posting Guidelines” under the “Info” tab. Use the US

Army’s Facebook policy as a reference.

(7) They must be recent and up-to-date. Posts must not be older than 1 month or the EOP will be subject to review by PAO for recommendation to be taken offline.

(8) Adhere to OPSEC guidelines. Family Readiness Support Assistants/FRG leaders should provide all page administrators and FRG members with the US Army Social Media OPSEC presentation and the FBI Briefing on Identity Theft located on the US Army’s slideshare site at http://www.slideshare.net/usarmysocialmedia.

(9) They should not be used as a place for personal/professional advertisement or endorsement.

(10) They must be registered with the US Army’s social media directory at http://www.army.mil/socialmedia.

f. Questions concerning the establishment of EOPs should be directed to the Web Content

Manager, Fort Rucker PAO, 255-1159.

http://www.slideshare.net/usarmysocialmedia

FOR THE COMMANDER:

DONALD N. GALLI

Colonel, Aviation

Chief of Staff

OFFICIAL:

DEBORAH L. SEIMER

Director of Human Resources

Appendix A

The proponent agency of this regulation is the USAACE CIO/G6. Users are invited to send comments and suggested improvements to the CG, USAACE, ATTN: ATZQ-CIO, Fort

Rucker, AL 36362-5105.

APPENDIX A

REFERENCES

AR 25-1 Army Knowledge Management and Information Technology

AR 25-30 The Army Publishing Program

AR 360-1 The Army Public Affairs Program

AR 530-1 Operations Security (OPSEC)

USAACE Reg 10-1 Organization and Functions Manual