OFFICE OF SECURITY COMMENTS ON DRAFT 'INSTRUCTION' RE MANAGEMENT POLICY GOVERNING AUTOMATIC DATA PROCESSING

• Document Type: CREST
• Collection: General CIA Records
• Document Number (FOIA) /ESDN (CREST): CIA-RDP78-04723A000100100026-7
• Release Decision: RIPPUB
• Original Classification: S
• Document Page Count: 3
• Document Creation Date: December 9, 2016
• Document Release Date: August 19, 2000
• Sequence Number: 26
• Publication Date: September 10, 1969
• Content Type: MF

([~~ IP,- c, M. {
Approved For Release 2000/09/08 h4 78-04723A000100100026-7
1 0 SEP 1969
MEMORANDUM FOR: Chief, Support Services Staff
SUBJECT : Office of Security Comments on Draft
"Instruction" re Management Policy
Governing Automatic Data Processing
1. The draft "Instruction" concerning Agency ADP manage-
ment policy dated 26 August 1969, which was provided Mr. _
f this Office with a request for comments, has been reviewed
by appropriate OS components.
2. This review reflects agreement with the purpose of the
"Instruction" to strengthen the management of Agency information
processing resources through the Information Processing Coordi-
nators Group. Paragraphs 1 and 2 of the draft "Instruction's appear
to be specific and positive procedures toward this end.
3. Paragraph 4 of the draft "Instruction" indicates that IPC
Group efforts will be supplemented "as necessary" by specialists
from other Agency components, presumably including this Office.
We would suggest regular participation on a consultant basis by an
OS computer security specialist in IPC Group meetings, in order
to ensure optimal support of the Group's efforts from the standpoint
of information processing security.
Approved For Release 2000/09/08 :
downgrading and
 Approved For Release 2000/0
FIB
gem
04723A000100100026-7
10 September 1969
14EMORANDUM FOR: Chief, Information Processing Staff, OPPB
SUBJECT Draft Memorandum to the Deputy Directors Dated
8 September 1969, Subject: "Automatic Data
Processing --- Management"
1. 1 continue to be concerned that we are trying to produce a
solution to a problem which we haven't defined. Before wefiissue
oa a
the
memorandum or instruction I believe we should have a good
objectives we hope to achieve; what we are trying to accomplish; what
problem we are trying to solve. This latest draft doesn't seem to help.
2. The subject of the draft memorandum, and the Director's
memorandum of 3 September to which the draft refers, is "Automatic Data
Processing --- Management." The focus of the briefing for the Director
which led to the issuance of his memorandum and the need to follow it
with supplemental instructions has been automatic data processing. The
subject draft calls for strengthening coordination and control of
"information processing and ADP." The remainder of the first paragraph
seems to expand the scope well beyond the basic ADP interest. I don't
believe this represents the management intent of the Agency, but if we
are going to expand the scope of interest beyond strictly ADP matters
it is all the more important that we have a clear definition and under-
standing of exactly what we intend to deal with.
3. Paragraph 2 seems directed toward strengthening the PPB
function rather than the coordination and management of ADP matters.
The Director, PPB is given the basic management responsibility with the
limited caveat that he will "involve the IPC's" at his discretion.
This is not acceptable, nor is it consistent with the intent of this
whole exercise as I understand it.
4. Paragraph 3b of the draft is opposite to a suggestion I
offered in an earlier paper. I don't see that the IP and E Program
category serves a useful purpose, but if it does I would think its
improvement would come through refinement rather than broadening its
scope to include even more ill-defined activities. Perhaps the problem
is with the term "information processing" itself. The interest of the
Information Processing Coordinators until now has focussed on informa-
tion processing activities which use, or expect to use, automatic data
Approved For Release 2000/09/08'x+ 4A t1 3A000100100026-7
 Approved For Release 2000/09/08 : CIA-RDP78-04723A000100100026-7
CONFIDENTIAL
processing equipment, excluding communications automatic switching.
Perhaps we should define it that way.
5. Referring to paragraph 3d, I repeat there is no such thing
as a five year plan for ADP in the Agency. ADP activities do not exist
in a vacuum and they are not self-sustaining. ADP is a method or a
tool used in the accomplishment of some operational or management ob-
jective. We have a wide variety of operational and management plans
and programs in the Agency which use or expect to use ADP equipment in
the achievement of their objectives. The most we can hope for by way
of a "five year ADP plan" is a collection and compilation into one docu--
ment of all of the plans and programs which use ADP. Such a compilation
represents a significant duplication of effort and before it is under-
taken we should have a clear idea of its utility.
6. Paragraph 3e should be deleted. The five projects listed
are items of current interest only. Reports about them can be obtained
by addressing a request to the Deputy Director responsible for their
development. The list of projects of interest is not exhaustive and the
interest will wane temporarily in favor of some other list as soon as
reports about these five have been reviewed.
7. Attached is a hastily contrived draft of a Headquarters
Notice which you might want to consider as an alternative for discus-
sion purposes.
25X1A
nrormati.on rrocessing
Coordinator, DD/S
Attachment
Draft of Headquarters Notice
DDS/SSS/RHW:jms (10 September 1969)
Distribution:
Orig - Adse w/att
1 - SSS Subject
1 - SSS Chrono
L
Approved For Release 2000/09/08 : CIA-RDP78-04723A000100100026-7