CHOSUN NETWORK SECURITY MANUAL (U)

Document Type:

CREST [1]

Collection:

General CIA Records [2]

Document Number (FOIA) /ESDN (CREST):

CIA-RDP96B01172R000400050018-5

Release Decision:

RIFPUB

Original Classification:

Document Page Count:

237

Document Creation Date:

December 23, 2016

Document Release Date:

November 10, 2011

Sequence Number:

Case Number:

Publication Date:

March 15, 1985

Content Type:

REQ

File:

Attachment	Size
CIA-RDP96B01172R000400050018-5.pdf [3]	7.93 MB

Body:

Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 COMMAND & CONTROL SYSTEMS ORGANIZATION DRAFT 15 March 1985 CHOSUN NETWORK SECURITY MANUAL (U) CLASS. BY: DCA 184WO0224 DECLASSIFY ON: OADR REQUESTS FOR THIS DOCUMENT MUST BE REFERRED TO: DRAFT Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 COMMAND & CONTROL SYSTEMS ORGANIZATION SECRET DRAFT 15 March 1985 CHOSUN NETWORK SECURITY MANUAL (U) CLASS. BY: DCA 184WO0224 DECLASSIFY ON: OADR REQUESTS FOR THIS DOCUMENT MUST BE REFERRED TO: DRAFT SECRET Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 UNCLASSIFIED Section Page 1. INTRODUCTION ........................................ 1-1 1.1 General ........................................... 1-1 1.2 Purpose.. .... ................................. 1-1 1.3 Applicability and Scope ........................... 1-1 1.4 Authority ......................................... 1-2 1.5 Amendments ........................................ 1-2 1.6 Reproduction.. .................................. 1-2 1.7 Definition of Terms ............................... 1-2 1.8 References ........................................ 1-2 2. STATEMENT OF POLICY ................................. 2-1 2.1 General .... .. .. .. .... . .... ............. 2-1 2.2 Appointment of the Designated Approving Authority.. ................................... 2-1 2.3 Network Operation.................... ............ 2-1 2.4 Network Security Organization and Structure....... 2-1 2.5 Dissemination of Project CHOSUN Information....... 2-2 2.6 Multiple Safeguards ............................... 2-2 2.7 Continuous Evaluation ............................. 2-3 2.8 Mode of Operations ................................ 2-3 2.9 Summary of Security Requirements .................. 2-3 3. CHOSUN NETWORK SECURITY ELEMENTS/RESPONSIBILITIES... 3-1 3.1 General ... .... ... .. .. .... .... 3-1 3.2 Designated Approving Authority Responsibilities... 3-1 3.3 Network Certification Working Group Responsibilities ............ ............. 3-3 3.4 Network Security Officer Responsibilities......... 3-5 3.5 Hub Security Elements ...... .... ........... 3-6 3.5.1 Hub Information System Security Officer Responsibilities ............................. 3-6 3.5.2 System Control Operator Responsibilities........ 3-7 3.5.3 Network Control Operator Responsibilities ....... 3-7 3.5.4 Central Technical Control Operator Responsibilities .............................. 3-8 3.6 Node Security Elements.... ... . .......... 3-8 3.6.1 Node Information System Security Officer Responsibilities .......... ......... ...... 3-8 3.6.2 Technical Control Operator Responsibilities..... 3-9 3.7 Program Management Responsibilities ............... 3-10 3.8 User Responsibilities ............................. 3-10 UNCLASSIFIED Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 UNCLASSIFIED Section Page 4. CHOSUN NETWORK CERTIFICATION AND ACCREDITATION...... 4-1 4.1 Objectives and Scope.... .... . .... ......... 4-1 4.2 Steps in CHOSUN Certification and Accreditation... 4-1 4.3 Hardware/Software Certification ................... 4-3 4.4 Node Certification ................................ 4-4 4.5 Node Accreditation ................................ 4-4 4.6 Hub Certification ................................. 4-5 4.7 Hub Accreditation.... ....................... 4-5 4.8 CHOSUN Network Certification ...................... 4-5 4.9 CHOSUN Network Accreditation... ................. 4-6 4.10 Schedule for Recertification and Reaccreditation................................. 4-6 4.11 Revoking Accreditation ............................ 4-7 5. PERSONNEL SECURITY .................................. 5-1 5.1 General .. ........................... 5-1 5.2 Personnel Identification .......................... 5-1 5.3 Access Authorization Process ...................... 5-1 5.4 Access Requests ................................... 5-2 5.5 Clearance ......................................... 5-3 5.5.1 Exceptions ........ ............................ 5-4 5.5.2 Investigative Requirements ...................... 5-4 5.5.2.1 Minimum Standards .......................... 5-4 5.5.2.2 Investigative Exceptions ...... ............ 5-7 5.5.2.3 Special Investigative Requirement ............. 5-7 5.5.2.4 Approved Investigative Agencies ............... 5-7 5.6 Security Indoctrination ........................... 5-7 5.7 Continuing Security Programs.. .................. 5-8 5.8 Access Termination and Debriefing ................. 5-10 6. PHYSICAL SECURITY ................................... 6-1 6.1 General .. ..................................... 6-1 6.2 Structural Barriers ............................ 6-1 6.3 Intrusion Detection Systems ....................... 6-2 6.3.1 Perimeter Intrusion Detection .................. 6-2 6.3.2 Monitoring and Alarm Response ................... 6-2 6.3.3 Emergency Conditions ............................ 6-3 6.4 Access Control .................................... 6-3 6.4.1 Access Roster........... ....................... 6-3 6.4.1.1 Access by Uncleared Service Personnel ......... 6-4 6.4.1.2 Access by Emergency Personnel ................. 6-4 6.4.2 Intra-Agency Access ............................. 6-4 6.4.3 Inter-Agency Access ... ....................... 6-4 6.4.4 Non-Approved Personnel Access ................... 6-4 UNCLd'SSIFIED Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172ROO0400050018-5 UNCLASSIFIED Section Page 6.4.5 Badges ................ .... .......... 6-5 6.5 Equipment Delivery ................................ 6-6 7. INFORMATION SECURITY.. ..................... 7-1 7.1 Marking (General Provisions) ...................... 7-1 7.1.1 Original Classification ......................... 7-1 7.1.2 Derivative Classification... ... ........... 7-2 7.1.3 Identification of Classification Authority...... 7-2 7.1.4 Declassification and Regrading Procedures ....... 7-3 7.1.5 Applying Derivation Declassification Dates ...... 7-3 7.1.6 Upgrading....................................... 7-4 7.1.7 Dissemination and Reproduction Notice........... 7-4 7.2 Marking Documents ........................... 7-4 7.2.1 Overall and Page Marking ........................ 7-4 7.2.2 Marking Components .............................. 7-5 7.2.3 Portion Marking ................................. 7-5 7.2.4 Compilations ....... . ....... ................ 7-6 7.2.5 Subjects and Titles of Documents ................ 7-6 7.2.6 File, Folder, or Group of Documents ............. 7-6 7.2.7 Transmittal Document .... ................ 7-6 7.3 Marking Classified Information Other Than Documents ............ ............... 7-6 7.3.1 Charts, Maps, and Drawings ................... 7-7 7.3.2 Photographs, Films, and Recordings .............. 7-7 7.3.3 Decks of ADP Punched Cards .................... 7-8 7.3.4 Removable ADP and Word Processing Storage Media..... ....... .. ... .................... 7-8 7.3.5 Documents Produced by ADP Equipment ............. 7-9 7.3.6 Material for Training Purposes .................. 7-9 7.3.7 Miscellaneous Material .......................... 7-9 7.4 Additional Markings ...... .................... 7-10 7.4.1 Wholly UNCLASSIFIED Material .................... 7-10 7.4.2 Restricted Data ................................. 7-10 7.4.3 Formerly Restricted Data .......... . .. 7-10 7.4.4 Special Access Program Documents and Material ... 7-10 7.4.5 Intelligence Sources and Methods Information.... 7-11 7.4.6 COMSEC Material ................................. 7-11 7.4.7 Associated Markings ............................. 7-11 7.5 Storage and Safekeeping ........................... 7-11 7.5.1 General .... ............. ................. 7-11 7.5.2 Standards for Storage Equipment ................. 7-11 7.5.3 Storage of Classified Information ............... 7-12 7.5.4 Designations and Combinations ................... 7-13 7.6 Accountability and Control ... .. ... ... ... 7-14 7.6.1 Procedures for Handling TOP SECRET Information.. 7-14 7.6.1.1 Control ....................................... 7-14 UNCLASSIFIED Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172ROO0400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 UNCLASSIFIED Section Page 7.6.1.2 Accountability...... ......................... 7-14 7.6.2 Procedures for Handling SECRET Information...... 7-15 7.6.3 Procedures for Handling CONFIDENTIAL Information.. .... ..... .............. 7-15 7.6.4 Procedures for Handling Working Papers.......... 7-15 7.6.5 . Receipt of Classified Material .................. 7-16 7.6.6 Restraint on Reproduction ....................... 7-16 8. ADP SECURITY ........................................ 8-1 8.1 General ........................................... 8-1 8.2 Hardware... ........ .. ................. 8-1 8.2.1 Design, Development, Installation ............... 8-1 Maintenance, and Modification ................. 8-1 8.2.2 Configuration Management ........................ 8-1 8.2.3 System Clearing Procedures ...................... 8-2 8.3 Software............... .......................... 8-2 8.3.1 System and Application Software Design, Development, Installation, Maintenance, and Modification.... ........................ 8-2 8.3.2 Configuration Management ........................ 8-4 8.4 Audit Trails... . ..... .................... 8-5 8.5 ADP Products and Storage Media ........... ..... 8-6 8.5.1 Marking, Storage, and Control/Accountability.... 8-6 8.5.1.1 Marking ....................................... 8-6 8.5.1.2 Storage..... ........ ..................... 8-7 8.5.1.3 Control and Accountability.................... 8-9 8.5.2 Erase, Declassification, and Destruction Procedures .................................. 8-9 8.5.2.1 Erase Procedures.. ... ...................... 8-9 8.5.2.2 Declassification Procedures ................... 8-10 8.5.2.3 Destruction Procedures.. .... ............. 8-11 8.5.2.4 Disposition/Destruction Approval .............. 8-12 8.6 Access Controls ................................... 8-12 8.6.1 General ......................................... 8-12 8.6.2 Changes.. ................................... 8-13 8.7 Security Incidents ................................ 8-13 8.8 Contingency Operations Plans ...................... 8-13 8.8.1 General .. .............................. 8-13 8.8.2 NISSO/HISSOInvolvement ......................... 8-14 9. COMMUNICATIONS SECURITY, PRIVACY, AND EMANATIONS SECURITY .......................................... 9-1 9.1 General ........................................... 9-1 9.2 Communications Security ........................... 9-1 9.2.1 Encryption ...................................... 9-1 9.2.2 COMSEC Custodian ................................ 9-1 UNCLASSIFIED Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 UNCLASSIFIED Page 9.2.3 RED Technical Control Facilities ................ 9-1 9.3 Privacy...... . ....... .................. 9-1 9.3.1 Data EncryptionStandard(DES) .................. 9-1 9.3.2 DES Custodian.. ...................... 9-2 9.4 Emanations Security (EMSEC) ....................... 9-2 9.4.1 Facility Design ................................. 9-3 9.4.2 Future Equipment Design, Testing and tifi ti C 9 3 on ................................. er ca - 9.4.3 TEMPEST Testing... . ....................... 9-3 9.4.4 Protected Distribution System ................. 9-4 9.4.5 Acoustics Emanation Protection .................. 9-4 9.4.6 Other Considerations.. ...... ........... 9-4 9.4.6.1 Electromagnetic Interference (EMI) ........... 9-4 9.4.6.2 Electromagnetic Compatibility (EMC) ........... 9-4 9.4.6.3 Personally Owned Electronic Equipment......... 9-4 10. SECURITY TESTING .................................... 10-1 10.1 General ........................................... 10-1 10.1.1 Purpose.. ................................... 10-1 10.1.2 Responsibility.. .............................. 10-1 10.2 Preplanned System Test ........................... 10-1 10.2.1 Test Scope.. . ............................ 10-1 10.2.2 Test Schedule and Frequency ..................... 10-2 10.2.3 Resources ... ............................. 10-2 10.3 Unannounced Random System Tests ................... 10-3 10.3.1 Test Scope ...................................... 10-3 10.3.2 Test Schedule ................................... 10-3 10.3.3 Resources ....................................... 10-3 A - Definition of Terms ..................... A-1 .... ..... ... ....... B - Bibliography... ... B-1 C - CHOSUN Security Classification Guide.... D - Request for Waivers ..................... TBD D-1 E - ST&E Report Format.. ................ E-1 F - Site Security Checklists ................ F-1 G - Access Nomination Form......... ... G-1 H - Statement of Work for an RF-Shielded Enclosure... ........................ H-1 I - Approved Tape Degaussers................ I-1 J - Specifications for Magnetic Tape Erase Equipment ............................. J-1 K - Approved Disk Pack Degaussers........... K-1 L - Approved Paper Destruction Devices...... L-1 M - Glossary ................................ M-1 UNCLASSIFIED Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 UNCLASSIFIED Figure Page 3-1 CHOSUN Network Security Organization.......... 3-2 8-1 Safeguard Statement ........................... 8-8 UNCLASSIFIED Declassified and Approved For Release 2011/11/10: CIA-RDP96B01172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 SECRET SECTION 1. INTRODUCTION (U) 1.1 General (U) (S) The CHOSUN network is designed to improve the nation's crisis management capability in support of the President. To facilitate this objective, the CHOSUN network will provide an audio/video teleconferencing capability that will permit senior officials of the Executive Branch to communicate freely and candidly during crisis situations in an environment that approximates face-to-face meetings. (S) During crisis situations, the CHOSUN network will communicate information of a highly sensitive nature from the White House to participating agencies. In the interest of national security, the network will provide extraordinary protective features to safeguard the security and privacy of information communicated and to avoid proliferation of knowledge about the configuration and capabilities of the network. Multiple security measures to safeguard information will include the continuous employment of protective features in the hardware and software design configuration as well as procedural and technical controls in the areas of personnel, physical, emanations, and communications security. (U) Continuing operation of the CHOSUN network will be contingent upon the results of a continuing review, test, and favorable evalu- ation of the security features of the network, including unannounced evaluations of the security posture of each of the CHOSUN nodes. (S) The Assistant to the President for National Security Affairs is the Designated Approving Authority (DAA) for the CHOSUN network, with sole authority to approve or disapprove the security and privacy features of the CHOSUN network and accredit the network for operation with classified information. 1.2 Purpose (U) (U) This security manual provides the basic policy, criteria, tech- niques, and procedures to implement, certify, accredit, operate, and maintain the CHOSUN network. 1.3 Applicability and Scope (U) (S) This security manual applies to all Executive Branch agencies which develop, operate, maintain, or use the CHOSUN network. It also applies to all contractors and/or private individuals who develop, operate, maintain, or use the CHOSUN network. The provi- sions of this security manual are binding. Conformance is not discretionary. SECRET Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 SECRET 1.4 Authority (U) (C) This policy is established in accordance with the provisions of National Security Decision Directive 95, the National Security Act of 1947, and Executive Order 12356. 1.5 Amendments (U) (U) All amendments or updates to this security manual will be pub- lished, as necessary, by the Network Security Officer (NSO) of the CHOSUN network. Proposed amendments or updates may be forwarded under agency-head signature to the NSO. 1.6 Reproduction (U) (S) Reproduction of this manual is not authorized. Additional copies may be requested from the National Security Council (NSC) in writing. The request must include the name of the accountable individual and the full address of the recipient organization. 1.7 Definition of Terms (U) (U) To avoid misunderstanding due to ambiguity of terms, defini- tions for selected terms used in this manual are provided in appendix A. 1.8 References (U). (U) A list of documents used in the preparation of this manual is provided as appendix B. SECRET Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 SECRET SECTION 2. STATEMENT OF POLICY (U) 2.1 General (U) (U) The following subsections present specific policy statements pertaining to all aspects of the CHOSUN network. These policies establish mandatory requirements designed to ensure the security of all information transmitted, stored, or processed by the network. 2.2 Appointment of the Designated Approving Authority (U) (S) The Assistant to the President for National Security Affairs will be the Designated Approving Authority for the CHOSUN network. The DAA is responsible for providing official approval for the initial and continued operation of the CHOSUN network, based on continuing certification that all elements of the CHOSUN network meet the mandatory requirements of this security manual. The responsibilities of the DAA are specified in detail in sec- tion 3. 2.3 Network Operation (U) (U) No element of the network (node or hub) will be operational without certification and accreditation in accordance with the provisions identified in section 4. 2.4 Network Security Organization and Structure (U) (S) The Designated Approving Authority will provide for the appointment of the CHOSUN Network Security Officer to manage the implementation of security and the testing and evaluation of the security features of the CHOSUN network. The Network Security Officer will appoint and chair a Network Certification Working Group (NCWG), with members from the following agencies: a. (U) National Security Agency. b. (U) Central Intelligence Agency. c. (U) Federal Bureau of Investigation. d. (U) Department of Justice. e. (U) United States Secret Service. The responsibilities of the NSO are detailed in section 3. Addition- ally, the organizations operating the hub and each node will nominate individuals for DAA approval to serve as Information System Security SECRET Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 SECRET Officers for their respective sites. The responsibilities of the Hub Information System Security Officer (HISSO) and the Node Information System Security Officer (NISSO) are provided in detail in section 3. 2.5 Dissemination of Project CHOSUN Information (U) (C) Since the CHOSUN network deals with crisis management decision- making at the national level, the dissemination of information about the network must be stringently controlled. Accordingly, a Security Classification Guide has been prepared for Project CHOSUN. A copy of this guide is provided as appendix C. The information security requirements for Project CHOSUN are identified in section 7, Informa- tion Security. (C) The CHOSUN Security Classification Guide provides basic guidance for determining (1) the security classification, (2) schedules for downgrading, or (3) review of downgrading of Project CHOSUN infor- mation. The guide was formulated to protect from any adversaries sensitive information regarding the architecture, design, capabi- lities, and limitations of Project CHOSUN. (C) Project CHOSUN-related information is the property of the National Security Council in the Executive Office of the President of the United States. Any release of this information, either clas- sified or UNCLASSIFIED, to persons outside of the Executive Branch must be approved in writing by the NSO. All documents relating to Project CHOSUN will be marked "Property of the National Security Council. Written approval required for release." (C) It must be assumed that hostile intelligence services have knowl- edge of and will target Project CHOSUN. Therefore, every effort must be made to protect information about its identity, system configura- tion, and capabilities. Knowledge about the CHOSUN network must not be proliferated. 2.6 Multiple Safeguards (U) (U) The sensitivity of this system requires the application of every available safeguard to protect against the multidisciplinary hostile intelligence threat and to ensure the privacy of the officials utiliz- ing the system. Multiple security measures and procedures will be used to attain an acceptable level of security. The CHOSUN network and the information transmitted within the network will be safeguarded by the continuous employment of protective features in the ADP sys- tem's hardware and software design and configuration, and by other appropriate information, physical, personnel, technical, and commu- nications security controls. SECRET Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 CONFIDENTIAL 2.7 Continuous Evaluation (U) (U) The continued accreditation for the operation of the CHOSUN network is contingent upon the results of a continuing review and testing, including unannounced on-site inspections and favorable evaluation of the security features of the network. 2,8 Mode of Operation (U) (U) Crisis management decisionmaking at the national level requires a diversity of information on an ad hoc basis from a variety of infor- mation sources. The information required ranges from the most highly classified Sensitive Compartmented Information (SCI) to UNCLASSIFIED information available from commercial sources, public data bases, and private individuals. (U) The CHOSUN network must be capable of processing unclassified information as well as multiple levels of classified information within the framework of existing technology without sacrificing the security protection provided to classified information or restrict ing the flow of required information. (C) In the near term, the required security will be achieved by operating the network, to include the hub switch and all connected nodes and node components, in the TOP SECRET/SCI system-high mode. The system-high mode is defined as the utilization of the system to process SCI information when the total network, to include the central hub facility, node processors, and connected components, is secured in accordance with the requirement for TOP SECRET infor- mation and for all categories of SCI processed, stored, or trans- mitted therein, and all users with access to the interconnected network have a valid TOP SECRET clearance and access approvals for all SCI stored, processed, or transmitted within the network. (U) The desired long-term operational goal of the CHOSUN network is to operate in a controlled security mode where at least some users have neither a security clearance nor a need to know for all levels of classification and all types of SCI stored, processed, or trans- mitted within the network. The controlled mode will be achieved using hardware, software, and/or procedural security measures evalu- ated by the NCWG and approved by the DAA. 2.9 Summary of Security Requirements (U) (U) The required security for the CHOSUN network will be provided by the continuous employment of the following protective features: CONFIDENTIAL Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 CONFIDENTIAL a. (C) Personnel Security - All U.S. Government employees, and contractor personnel, terminal operators, test and maintenance personnel assigned to Project CHOSUN must meet the requirements set forth in this document. The criteria and procedures shall be applied equally to all personnel. In addition, technical operators, U.S. Government and con- tractor personnel assigned to the CHOSUN hub will submit to polygraph testing. b. (U) Physical Security - The physical security and certifi- cation requirements for a closed storage Sensitive Compart- mented Information Facility (SCIF) as outlined in NFIB/ NFIC-9.1/47 apply. c. (U) Emanations Security (TEMPEST) - All equipment/systems associated with Project CHOSUN will either be installed within an RF-shielded room or installed in an RF-shielded cabinet/rack. The enclosures must meet NSA Specification 65-6, as specified and amended by appendix H. The TEMPEST guidelines for facility design and RED/BLACK installation outlined in NACSIM 5203 apply to the Project CHOSUN SCIF and the equipment/systems installed therein. Each Project CHOSUN SCIF must be certified prior to commencing classified operations. A request for facility certification using the format of Annex A of NSA/CSS Manual 90-5 must be completed by each agency/department and submitted to the NCWG. d. (C) Communications Security: (1) (U) Transmission Security - All Project CHOSUN cir- cuits between the hub and each node shall be protected by a cryptographic key generator providing traffic flow security and operating 24 hours per day. (2) (U) Cryptographic Security - All Project CHOSUN cir- cuits between the hub and each node shall be protected by a Class A cryptographic system, specifically, the KG-81. End-to-end protection of data shall be accom- plished using an NSA-approved Data Encryption Stan- dard (DES) system which has been submitted to a Security Fault Analysis. The KG-81 and DES crypto- graphic periods shall be daily and per session, respectively. (3) (U) Physical Security - The area in which crypto- graphic equipment is to be installed must meet the requirements set forth in this document and access to the area and the equipment must be restricted to CONFIDENTIAL Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 UNCLASSIFIED those personnel having a need to work. In those agencies/ departments administering a Cryptograph Clearance Program, each person requiring such access must hold a valid cryptographic clearance. (4) (U) Network Security - All microprocessor-based telecommunications equipment/systems must be designed to prevent the spillage of data from one channel to another. e. (U) ADP Security: (1) (U) The hardware and software shall be developed, tested, and maintained in accordance with the pro- visions of Transmittal Memorandum No. 1 to 0MB Circular No. A-71, as implemented in subsequent sections of this manual. (2) (U) Hardware and software configuration management shall be in accordance with a Configuration Manage- ment Plan approved by the Network Certification Working Group. (3) (U) The hardware/software shall provide the following security features: (a) (U) The software shall clear user-inserted infor- mation stored on memory and hard disk and floppy disk storage at the start and termination of each conference or period of operation. (b) (U) All individual users of network services, programs, or data must be identified and authen- ticated and their access request must be checked to ensure that it is authorized prior to estab- lishing a connection between the user and the resource. (c) (U) Each terminal shall be uniquely identified by the system. The system will have the capa- bility of making a positive identification of each terminal prior to allowing that terminal to access system resources. (d) (U) The security classification level and special access categories shall be identi- UNCLASSIFIED Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 UNCLASSIFIED fied with the information in the system, and appropriate labeling of any output shall be ensured. (e) (U) The system shall produce, in a secure manner, an audit trail containing sufficient information to permit a regular security review of system activity. Audit trails shall be maintained at each node and at the hub. (f) (U) The system shall provide a real-time facility to report security anomalies to a security monitor. (g) (U) The system shall isolate user data from system control, net control, and technical control data. UNCLASSIFIED Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 UNCLASSIFIED SECTION 3. CHOSUN NETWORK SECURITY ORGANIZATION/RESPONSIBILITIES (U) 3.1 General (U) (U) This section describes the tasks and responsibilities of all personnel involved in the development, implementation, operation, and maintenance of CHOSUN network security. Figure 3-1 presents an overview of the security organization hierarchy for the CHOSUN network. 3.2 Designated Approving Authority Responsibilities (U) (U) The responsibilities of the DAA for the CHOSUN network are as follows: a. (U) Accredit the CHOSUN network for initial or continued operation based upon review and evaluation of the appropri- ate system/network certification documents. b. (U) Accredit all major modifications to the CHOSUN network. c. (U) Approve the entry of each CHOSUN node into the CHOSUN network. d. (U) Accredit each node and the hub for initial or continued operation based upon a review and evaluation of the appropri- ate node/hub certification documents. e. (U) Make official decision for requiring nonscheduled net- work recertification/reaccreditation upon evaluating input of the NCWG. f. (U) Appoint a CHOSUN NSO to manage the implementation of security and the testing and evaluation of the security features of the CHOSUN network. g. (U) Authorize network access of all users of the CHOSUN network. h. (U) Provide official approval of any changes to the secur- ity requirements of this manual, as recommended by the NCWG. i. (U) Approve each node's interface with other ADP systems, terminals, or networks in order to ensure that these inter- faces do not degrade the security of the CHOSUN network. UNCLASSIFIED Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 DESIGNATED APPROVIN( AUTHORITY 3.2 PROGRAM MANAGEMENT 3,7 NETWORK SECURITY OFFICER 3,4 "in rn v NODE INFORMATION NETWORK CERTIFICATION WORKING GROUP 3.3 HUB INFORMATION SYSTEM SECURITY OFFICER 3.5.1 SYSTEM CONTROL OPERATOR 3.5.2 NETWORK CONTROL OPERATOR 3.5.3 CENTRAL TECHNICAL CONTROL OPERATOR 3.5.4 I (I I Includes Operations Center I I I I Watch Officer/Duty Officer 1 3.8 1 1 TECHNICAL CONTROL I I I OPERATOR 3.6.2 III - -- - --_..? Figure 3-1. (U) CHOSUN Network Security Organization Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 gi, rn v Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 UNCLASSIFIED 3.3 Network Certification Working Group Responsibilities (U) (U) The responsibilities of the NCWG are as follows: a. (U) Perform certification/recertification for all nodes and the hub facility. b. (U) Assess network-wide risk and perform periodic updates of the network threat. c. (U) Review, evaluate, and consolidate the results of individual node and hub certifications and accompanying Security Test and Evaluation (ST&E) reports. d. (U) Prepare a Network Security Report based on the network risk/threat analysis and individual ST&E reports. e. (U) Review and evaluate all requests for waivers to the provisions of this manual and provide to the DAA as part of the node ST&E report all requests for waivers and a recommendation for approval if appropriate. f. (U) Based upon the Network Security Report, certify/ recertify the operational network and prepare a letter of network certification for forwarding to the DAA. g. (U) Advise the NSO on matters pertaining to network security including a changing risk environment, or other changes in security policy, procedures, or tech- nical criteria. h. (U) Review and evaluate all network security incidents and violations and advise the DAA on the requirement/ potential requirement for recertification or deactivation of the operational CHOSUN network. i. (U) Participate in design reviews and validate the design of security protective features in the network. j. (U) Review, evaluate, and recommend for approval each node's interface with other ADP systems, terminals, or networks, in order to ensure that these interfaces do not degrade the security of the CHOSUN network. k. (U) Review, evaluate, and recommend for approval the procedures that are used by each node to disconnect elements of the node from the CHOSUN network, clear memory and disk storage, interconnect with other systems UNCLASSIFIED Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 CONFIDENTIAL processing information at a lower level, and store or destroy information in an approved mannner. 1. (U) Review, evaluate, and recommend for approval the procedures that are used by each node to reconnect elements back to the CHOSUN network after having been interconnected with other systems processing informa- tion at a lower level. m. (U) Review, evaluate, and recommend for approval the configuration management procedures for the CHOSUN network as they relate to network security. n. (U) Review and evaluate all proposed modifications to CHOSUN hardware/software elements for their security adequacy and inform the Network Configuration Manager of those items approved for installation. o. (U) Based on results of testing by the Program Manage- ment Office, certify new system releases. p. (U) Review and coordinate the Network Security Test Program. q. (U) Review results and activities of the CHOSUN Network Test Team. r. (U) Review, evaluate, and recommend for approval the security features of the network Standard Operating Procedures (SOP). (C) The NCWG will initially be comprised of one representative from each of the following: a. (U) National Security Agency. b. (U) Central Intelligence Agency. c. (U) Federal Bureau of Investigation. d. (U) Department of Justice. e. (U) United States Secret Service. The CHOSUN NSO will serve as a voting member and chairman of the NCWG with authority to stop NCWG actions and present issues to the DAA. Where conflicts arise, the Chairman of the NCWG will act as sole interface to the DAA. The DAA will act as final arbiter for the CONFIDENTIAL Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96B01172R000400050018-5 CONFIDENTIAL resolution of all issues relating to the security and privacy of the CHOSUN network. 3.4 Network Security Officer Responsibilities (U) (U) The responsibilities of the NSO are as follows: a. (U) Provide general supervision, administration, and over- all coordination of CHOSUN network security matters, in- cluding operations, test and evaluation, certification, and accreditation. b. (U) Prepare and disseminate all updates to the CHOSUN Network Security Manual. c. (U) Ensure that security instructions, guidance, and SOPs are prepared, issued, and maintained for the network in acco i e; with, DA :y:: ections. d. (U) Maintain cognizance of all aspects of network security including hardware, software, COMSEC, EMSEC, and all other considerations relating to network security. e. (U) Review and monitor all proposed network or node confi- guration changes that may affect the security of the net- work or any user node, and forward recommendations to the NCWG for evaluation. f. (U) Advise the Node Information System Security Officers (NISSOs) and Hub Information System Security Officer (HISSO) of scheduled outages for system testing or maintenance. g. (U) Maintain a current library of network security documen- tation. This library will include but not be limited to: (1) (U) CHOSUN Network Security Manual. (2) (U) All technical references, standards, and criteria (current issues) required for certification of the CHOSUN network. h. (U) Approve network/facility access authorization requests for all personnel other than user, forward user network access authorization requests to the DAA for approval. i. (U) Maintain a security roster for all nonuser personnel approved for CHOSUN access, and assure system/network access permissions have been installed for authorized users. CONFIDENTIAL Declassified and Approved For Release 2011/11/10: CIA-RDP96B01172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 UNCLASSIFIED j. (U) Ensure that personnel no longer requiring CHOSUN access are debriefed appropriately and that USERIDs/passwords are removed from the system when network users are debriefed. k. (U) Advise NISSOs/HISSO on site-unique security matters. 1. (U) Develop and conduct a network/system security test program. Review and evaluate all test results, and provide any resultant recommendations for modifications to existing security procedures to the NCWG. m. (U) Develop, conduct, and document a Security Training Program for the NISSOs and the HISSO. n. (U) Perform a security review of all security incidents and related violations and provide immediate notification of all violations to the NCWG. If required, direct that a node be disconnected or that operation of the network be suspended. o. (U) Serve as voting member 10i the NCWG, in addition to being the NCWG chairman. p. (U) Review and evaluate results of node/hub testing of contingency operations plans for security measures and modify security portions of the contingency operations plans as necessary. Forward proposed changes to the NCWG for approval. 3.5 Hub Security Elements (U) 3.5.1 (U) Hub Information System Security Officer Responsibili- ties. The responsibilities of the HISSO are as follows: a. (U) Provide general supervision, administration, and over- all coordination of network security matters for the hub, to include system control, network control, and central technical control elements. b. (U) Serve as designated custodian for safeguarding all cryptographic equipment and materials (e.g., keying materials, manuals). c. (U) Ensure that security instructions, guidance, manuals, and SOPs are implemented and maintained at the hub faci- lities. UNCLASSIFIED Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 UNCLASSIFIED d. (U) Notify the NSO of any security-related issues, activities, and incidents at the hub or within the operational network. e. (U) Manage and assign responsibilitiy to the Central Technical Control Operator (CTCO), the Network Control Operator (NCO), and the System Control Operator (SCO) for testing and evaluation of hub/network features under their operational control. f. (U) Inform the NSO of any proposed hardware or software changes within the hub. g. (U) For personnel other than users, request network/ facility access authorization/approval from the NSO (see section 5.4, Access Requests). h. (U) Exercise contingency operations plans for the hub switch (see section 8.8). Results will be forwarded to the NCWG via the NSO for approval of the subject plan(s). 3.5.2 (U) System Control Operator Responsibilities. As the management element of the hub structure, the responsibilities of the SCO are as follows: a. (U) Implement security instructions, guidance, and SOPS for the system control function. b. (U) Maintain data results of routine security-related hardware/software functional and performance testing; this data should be retained for a period of six (6) months. c. (U) Maintain data on all reported system/network security incidents; this data should be retained for a period of two (2) years. d. (U) Act as alternate to the HISSO for safeguarding all cryptographic equipment and materials (e.g., keying materials, manuals). 3.5.3 (U) Network Control Operator Responsibilities. As an operational element of the hub structure, the responsibilities of the NCO are as follows: a. (U) Implement security instructions, guidance, and SOPs for the network control function. UNCLASSIFIED Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 UNCLASSIFIED b. (U) Monitor network operational security and report inci- dents to the HISSO. 3.5.4 (U) Central Technical Control Operator Responsibilities. As an operational element of the hub structure, the responsibilities of the CTCO are as follows: a. (U) Implement security instructions, guidance, and SOPS for the central technical control function. b. (U) Provide operational control of cryptographic equip- ment and data encryption devices for the network. c. (U) Monitor network security related to the technical con- trol function and report incidents to the HISSO. 3.6 Node Security Elements (U) 3.6.1 (U) Node Information System Security Officer Responsibili- ties. The responsibilities of the NISSO are as follows: a. (U) Provide general supervision, administration, and over- all coordination of all security matters for the node. b. (U) Ensure that security instructions, guidance, and SOPS are implemented and maintained at the node. c. (U) Notify the NSO of any security-related issues, activi- ties, and incidents at the node, including node outage reports. d. (U) Manage and assign responsibility to the local Techni- cal Control Operator (TCO) for testing of node/network features under his jurisdiction. e. (U) Indoctrinate local users on applicable system/network security requirements and responsibilities prior to utiliz- ing or accessing the network. f. (U) Monitor and enforce physical access controls to the node facilities. g. (U) Conduct daily routine checks of the Intrusion Detec- tion System (see section 6.3). h. (U) Provide for safeguarding all cryptographic equipment and materials (e.g., keying materials, manuals). 3-8 UNCLASSIFIED Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 UNCLASSIFIED i. (U) Maintain a current access roster of all node personnel approved for CHOSUN access. j. (U) Serve as Configuration Control Manager for the node, and thus inform the NSO of any proposed node changes. k. (U) Immediately debrief departing personnel who have had access to the system/network, sending notification of departure and debriefing to the NSO. 1. (U) For users, request network/facility access authori- zation via the NSO; the NSO will forward each request to the DAA for approval. For all other personnel, request network/facility access authorization from the NSO (see section 5.4, Access Requests). m. (U) Formulate and test contingency operations plans for the node system (see section 8.8). n. (U) Prepare and forward to the NCWG for approval a node interface document which describes all node interfaces to the CHOSUN external ports. o. (U) Prepare and forward to the NCWG all documentation of the procedures that will be used at the node to disconnect elements of the node from the CHOSUN network, clear the system, process at a lower classification level, and reconnect to the network. 3.6.2 (U) Technical Control Operator Responsibilities. The responsibilities of the TCO are as follows: a. (U) Implement security instructions, guidance, and SOPs for the technical control functions. b. (U) Monitor node security related to the technical control function and report incidents to the NISSO. c. (U) Act as alternate to the NISSO for safeguarding all cryptographic equipment and materials (e.g., keying materials, manuals). d. (U) Provide operational control of cryptographic equipment and data encryption devices for the node. UNCLASSIFIED Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 UNCLASSIFIED 3.7 Program Management Responsibilities (U) (U) The responsibilities of the Program Manager are as follows: a. (U) Provide initial definition of the requirements for security features in the network. b. (U) Retain the results of the design reviews as official records of the program; this data should be retained for a period of three (3) years. c. (U) Document and retain the results of the security test as official records of the program. d. (U) Develop the initial SOPs for the CHOSUN operational network. 3.8 User Responsibilities (U) (U) All users of the network shall be briefed by the NISSO on the need for exercising sound security practices in protecting the in- formation processed, stored, or transmitted by the network. (U) As initiated by a transmitting node, the system software will provide the receiving node(s) with the audit elements appropriate to each data/audio/video conference (e.g., classification of confer- ence, participants; see section 8.4, Audit Trails). The NISSO will ensure that the user(s) at the node is notified of the security mode in which the system is operating and the nodes (users) participating in the conference. (U) At a minimum, originating users must: a. (U) Be responsible for restricting distribution of data to those nodes having a legitimate need to know. b. (U) Ensure that all input ADP products (e.g., printed listings, documents, hard-copy printouts of CRT displays) are marked in accordance with requirements prescribed for the highest level of classification of any information contained in the product. (U) At a minimum, receiving users must: a. (U) Immediately report to the NISSO the receipt of any ADP product not specifically requested or not marked with the appropriate security classification. UNCLASSIFIED Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 UNCLASSIFIED b. (U) Receipt for and protect all classified products trans- mitted by the network (see section 8.5.1.3, Control and Accountability). 3-11 UNCLASSIFIED Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 UNCLASSIFIED UNCLASSIFIED Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 UNCLASSIFIED SECTION 4. CHOSUN NETWORK CERTIFICATION AND ACCREDITATION (U) 4.1 Objectives and Scope (U) (U) This section describes the basic policy and procedures to be employed in the certification and accreditation of the CHOSUN net- work. The objective of the certification and accreditation process is to ensure that the CHOSUN network is developed, installed, opera- ted, and maintained in accordance with requirements stated herein in order to provide adequate security protection. (U) The process of certification and accreditation is of extreme importance in establishing and maintaining appropriate security safeguards within the CHOSUN network. Therefore, it must receive continuous attention, and be fully repeated at frequent intervals to assure adequate protection and safeguarding against any/all network changes and any/all environment changes. (U) For purposes of clarity, the following definitions apply throughout this section: a. (U) Certification is a technical evaluation of a subject network/system/subsystem demonstrating compliance with stated security requirements. b. (U) Accreditation is approval or official authorization for a subject network/system/subsystem to handle sensitive information in an operational environment. As such, the accreditation process provides management control over security decisions and official acceptance of any residual risk. 4.2 Steps in CHOSUN Certification and Accreditation (U) (U) Seven distinct elements are included within the certification and accreditation process for CHOSUN: a. (U) Hardware/software certification. b. (U) Node certification. c. (U) Node accreditation. d. (U) Hub certification. e. (U) Hub accreditation. UNCLASSIFIED Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 UNCLASSIFIED f. (U) Network certification. g. (U) Network accreditation. Each element is briefly described below: a. (U) Hardware/software certification provides a technical evaluation that all software developmental and off-the- shelf) and hardware satisfy security requirements of the CHOSUN network. It is a composite evaluation based upon delivered documentation, results of various tests (contrac- tor performed and independently confirmed by Govern- ment tests) and evaluation of the system in its proposed operating mode/environment. Hardware/software certifica- tion must be obtained before any CHOSUN system is approved for deployment to a CHOSUN facility. b. (U) Node certification is the complete security evaluation or reevaluation of all CHOSUN components located within a node facility. Its scope encompasses all facets of ADP, personnel, physical, procedural, emanations, and communica- tions security. It is based on the results of the node ST&E, Operational Test and Evaluation (OT&E), and a node risk analysis. (U) While the major goal of the certification process is to evaluate technical compliance with stated security policy/ requirements, it is recognized that in certain instances related to site-unique conditions within a node element, procedural compliance with a stated security requirement may be best accomplished in a manner different than specified herein. In no case will any security requirement be waived, but alternative approaches to requirement satisfaction may be considered on a very selective basis through a Request for Waiver. (U) As part of the node certification process, the NCWG is responsible for identification of any security items not in strict compliance with this manual. For those items identi- fied and subsequently evaluated and determined to be in noncompliance with the overall requirement, the user agency will document a Request for Waiver (appendix D) and include it in the Node ST&E report. c. (U) Node accreditation is the formal approval for the node to initiate or continue operation within the CHOSUN network. UNCLASSIFIED Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 UNCLASSIFIED d. (U) Hub certification is the complete security evaluation/ reevaluation of a CHOSUN components located within the hub facility. Its scope encompasses the switching equip- ment, the control elements (network control, system control, technical control) and all related network equipment. Its scope encompasses hardware, software, personnel, procedures, emanations, and communications security, and is based upon a hub ST&E as well as operational testing performed with the nodes. A risk analysis for the hub must also be included in the ST&E report. e. (U) Hub accreditation is the formal approval for the hub facility to initiate or continue operation within the CHOSUN network. f. (U) Network certification for CHOSUN is the complete secur- ity evaluation or reevaluation of the entire CHOSUN network. Its scope encompasses all node facilities, the hub/switch, transmission system, network-level control elements, and network-level administrative and procedural security. It is based upon results from node certification, hub/switch certification, network-wide OT&E, and a rigorous, complete, network-wide security risk analysis. g. (U) Network accreditation is the formal approval for initial or continued operation of the CHOSUN network. This approval authorizes the handling of classified information within the CHOSUN network, and also acknowledges official acceptance of any residual risk. 4.3 Hardware/Software Certification (U) (U) All hardware/software intended for implementation within the CHOSUN network will be certified by the NCWG. This certification is based upon: a. (U) Technical review and evaluation of contractor- developed documentation for developmental software. b. (U) Technical review and evaluation of the integration technique for interfacing off-the-shelf software with developmental software. c. (U) Technical review of contractor testing. d. (U) Performance and review of an Independent Security Test (IST). UNCLASSIFIED Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 UNCLASSIFIED e. (U) Technical evaluation of the proposed hardware environment and associated operational procedures. f. (U) A security risk analysis. An ST&E report will be produced in order to provide documentation of items a through f above. 4.4 Node Certification (U) (U) The certification of a CHOSUN user node encompasses all facets of telecommunications, personnel, physical, procedural, emanations, and communications security. The certification is based upon re- sults of node OT&E and a node security risk analysis. (U) The NCWG is responsible for certification of all nodes, and this process will be documented in a standardized ST&E Report; an ST&E report format is provided in appendix E. As part of the ST&E, the local NISSO must complete a security checklist, as shown in appendix F. (U) In all cases where a node ST&E report contains at least one Request for Waiver, the NCWG may not certify the node until the Request for Waiver is formally reviewed by the DAA. Upon official approval by the DAA of the Request for Waiver, the NCWG will certify the node if all other requirements are satisfied. If a Request for Waiver is not approved by the DAA, the node personnel will take the necessary steps to provide acceptable compliance and revise the node ST&E report to reflect the actions taken. Requests for Waiver must not be considered as a routine part of a node's ST&E. Requests for Waiver will be approved only out of operational necessity and not for budgetary constraints. 4.5 Node Accreditation (U) (U) The accreditation of a CHOSUN node provides official approval for that node to initiate or continue operations within the CHOSUN system. Accreditation for an individual node will be the respon- sibility of the DAA. (U) Upon granting node certification, the NCWG will prepare a letter of certification to be included with the following items as part of the accreditation request package: a. (U) The node ST&E Report. b. (U) The node Security Manual. UNCLASSIFIED Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 UNCLASSIFIED c. (U) The (proposed) roster of node personnel to have CHOSUN access. d. (U) The (proposed) node-unique information compart- ments to be handled by the CHOSUN system. e. (U) Recommended waivers, if any. (U) As a goal, node accreditation should be completed within 30 days of-node certification. 4.6 Hub Certification (U) (U) Certification for the hub facility will be the responsibility of the CHOSUN NCWG. 4.7 Hub Accreditation (U) (U) Upon granting hub certification, the NCWG will prepare a letter of certification to be included with the following items as part of the accreditation request package: a. (U) The hub ST&E Report. b. (U) The hub Security Manual. c. (U) The (proposed) roster of personnel working within the hub facility. d. (U) Recommended waivers, if any. (U) Accreditation of the hub facility is the responsibility of the DAA. 4.8 CHOSUN Network Certification (U) (U) The CHOSUN network certification is the overall security evalua- tion/reevaluation of the entire CHOSUN network; as such, its scope includes the nodes, hub facility, transmission system, personnel, and procedures of the entire CHOSUN network. It relies extensively upon results of node/hub ST&Es. (U) The NCWG will be responsible for the network certification pro- cess. Upon completion of the certification activities, a letter of certification will be prepared by the NCWG for the DAA. In addition, as part of the accreditation request package, the following items will be forwarded to the DAA: UNCLASSIFIED Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 CONFIDENTIAL a. (U) The CHOSUN Network Security Evaluation Report. b. (U) The CHOSUN Network Security Manual. c. (U) Specific identification of proposed nodes to be approved for CHOSUN operation. d. (U) Specific identification of proposed compartmented information types to be approved for CHOSUN processing. e. (U) Any requested waivers with NCWG evaluation and recommendation for approval/disapproval. 4.9 CHOSUN Network Accreditation (U) (C) The accreditation of the CHOSUN network provides official ap- proval for initial or continued operation of the CHOSUN network, as described in the network certification documents (i.e., specific nodes included, specific compartments, and any operational limita- tions stated therein). The Assistant to the President for National Security Affairs is the DAA for the CHOSUN network and therefore has the responsibility to issue CHOSUN network accreditation based upon review and evaluation of the accreditation request package forwarded from the NCWG. (U) As a goal, accreditation of the CHOSUN network will be accom- plished within 30 days of forwarding to the DAA the letter of CHOSUN network certification. (U) Results of network accreditation will be provided immediately to the CHOSUN Network Security Officer to allow prompt initiation of operational activation/re-activation planning. 4.10 Schedule for Recertification and Reaccreditation (U) (U) Once the CHOSUN network has initially completed requisite certi- fication and accreditation, it will require routine recertification and reaccreditation every twelve months. The Network Security Manual will be reviewed and updated annually as a component activity within the network recertification/reaccreditation process. (U) In other instances with the potential to necessitate recertifi- cation/reaccreditation, the NCWG has the responsibility to analyze the specific situation and develop a recommendation on the need for recertification/reaccreditation. The NCWG may then recommend full network-wide recertification/reaccreditation, or only selected steps of the process. For example, a new node requesting entry to the CHOSUN network may necessitate only certification/accreditation of CONFIDENTIAL Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 UNCLASSIFIED the new node and reassessment of system certification based upon the newly provided ST&E rather than recertifying all nodes. (U) Types of situations which may require network recertification and reaccreditation include: a. (U) Occurrence of a system/network violation which, in the judgement of the NCWG, requires recertification/reaccredita- tion. b. (U) Addition of a new user node. c. (U) Significant change in the risk environment. This includes the proposed addition of a new compartmented information category and changes in the threat/operating environment. d. (U) A major change in hardware or software. In cases of these nonroutine situations with potential for full network recertification/reaccreditation, final responsibility for issuing a call for recertification/reaccreditation lies with the DAA for the CHOSUN network. 4.11 Revoking Accreditation (U) (U) The DAA may, at any time, revoke the system network accreditation based on any change in the system/network security posture. Types of changes that may cause revocation of accreditation include but are not limited to the following: a. (U) Occurrence of a system/network violation. b. (U) A significant change in the risk or threat environment. c. (U) Information identifying additional system/ network vulnerabilities. (U) The DAA will also be responsible for initiating the recerti- fication/reaccreditation process of the system/network once the change in security posture has been appropriately addressed (see section 4.10). UNCLASSIFIED Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 UNCLASSIFIED THIS PAGE INTENTIONALLY LEFT BLANK UNCLASSIFIED Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 UNCLASSIFIED SECTION 5. PERSONNEL SECURITY (U) 5.1 General (U) (U) Installation of the CHOSUN network at multiple nodes in a physically secure area requires stringent entry and access controls to be exercised over all personnel having access to the network and its peripherals. The CHOSUN network will operate in a system-high environment (TS/SCI). Therefore, unescorted access to any CHOSUN facility shall be limited to personnel who are cleared for TOP SECRET and formally approved for access to all special categories of information which will be processed, stored or transmitted by the network and who additionally shall be approved for CHOSUN access by the DAA or NSO. (U) The granting of access to the CHOSUN operational network shall be controlled under the strictest application of the "need-to-know" principle and in accordance with the personnel security requirements set forth in this document. 5.2 Personnel Identification (U) (U) Personnel having potential access to CHOSUN network/facilities are identified as users, operators (personnel performing technical functions at the hub and user nodes), and Government and contractor personnel who perform critical support functions in the implemen- tation, testing, and maintenance of the network. Personnel other than those cited above will not be authorized access to the network or node/hub facilities without prior approval of the NSO. 5.3 Access Authorization Process (U) (U) The process of access authorization to the network or node/hub facilities will be the same for all personnel. The access authori- zation process will be dependent upon: a. (U) An access authorization request. b. (U) Approval of the access authorization request based on: (1) (U) Determination of need to know, and (2) (U) Satisfactory background investigation of the individual under consideration for access or evidence of clearance which meets the requirements established by this manual. UNCLASSIFIED Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 UNCLASSIFIED 5.4 Access Requests (U) (U) The proper and careful selection of candidates (users or support personnel) for access to CHOSUN is one of the most important facets of CHOSUN security. Effective security is largely dependent upon the personal integrity and security consciousness of the candidate and the nominator. Therefore, emphasis will be placed on the security screening of candidates for CHOSUN access and continued reinforcement of security requirements. Nominators shall ensure that candidates are of the highest quality in terms of loyalty, character, integrity, discretion, and responsibility. Nominations shall be screened for information incompatible with the personnel standards presented in section 5.5 of this manual. a. (U) Nomination Package Preparation. Nominations for access to Project CHOSUN shall be prepared on the Access Nomination Form provided as appendix G and will include the candidate's full name, rank/grade, Social Security Number, date and place of birth; organization and position assigned; scheduled departure or reassignment, telephone number; security clearance, type of investigation, date granted and by whom; need-to-know justification of access; retention period; certification, by the cognizant security officer, that the individual meets the personal standards set forth in section 5.5, without waiver. (1) (U) For those candidates who meet the security clearance criteria set forth in section 5.5, the sponsor (nominator) shall complete the Access Nomi- nation Form and submit it to the NSO for processing. (2) (U) For candidates who require a personal security investigation or reinvestigation in order to meet the eligibility requirements, the nominator will submit forms to his cognizant investigative agency for completion of a background investigation that meets the criteria set forth in section 5.5.2.1. Upon completion of the required investigation and determi- nation that the individual meets the prescribed criteria, the justification for the candidate's need- to-know requirement will be forwarded to the NSO. b. (U) Nomination Package Submission. Nomination packages, including requests for one-time-limited access, shall be submitted by the Program Management Office (PMO), NISSO, or UNCLASSIFIED Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 UNCLASSIFIED HISSO to the NSO. The nominator will carefully review the nomination package to determine if the candidate meets the personnel reliability standards and need-to-know require- ments before signing the nomination package. Names of individuals not believed by the nominator to meet the need- to-know criteria should not be forwarded to the NSO. c. (U) Nomination Package Review and Approval. The DAA is the sole authority for authorizing access to potential users of the CHOSUN network. Users are those people who require access to the video/data consoles in support of the national crisis management decisionmaking process. All other personnel seeking access to the node/hub facilities (e.g., maintenance, technical control personnel) will be approved by the NSO. (U) The adequacy of the justification provided by the nomination for an individual's access to CHOSUN information shall be determined based on the need-to-know criteria. If work can proceed without an individual's knowledge or involvement at the CHOSUN level, then the individual does not meet the criteria. (U) Approved nomination shall be returned to the nominator, who will arrange for notification of the candidate of the date, time, and place of his security indoctrination briefing and the conduct of the indoctri- nation (see section 5.6). 5.5 Clearance (U) (U) Individuals identified as requiring access to the network will meet the following minimum personnel security standards: a. (U) The individual shall be stable, of excellent character and discretion, and of unquestioned loyalty to the United States. b. (U) Both the individual and the members of his or her immediate family shall be United States citizens. For these purposes, "immediate family" is defined as including the individual's spouse, parents, brothers, sisters, and children. c. (U) The members of the individual's immediate family and persons to whom he or she is bound by affection or obliga- tion should neither be subject to physical, mental, or other forms of duress by a foreign power, nor advocate the use of force or violence to overthrow the Government of the UNCLASSIFIED Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 UNCLASSIFIED United States or the alteration of the form of Government of the United States by unconstitutional means. 5.5.1 (U) Exceptions. Where there is a compelling need and a determination has been made by the DAA that every reasonable assurance has been obtained and that under the circumstances the security risk is negligible, the standards set forth in sections 5.5.b. or 5.5.c. may be waived. Further, an exception to the provi- sions of this manual applies for elected officials of the United States Government, Federal judges, and those individuals for whom the DAA makes a specific exception. 5.5.2 (U) Investigative Requirements. The investigation conducted on an individual under consideration for access to CHOSUN will be thorough and shall be designed to develop information as to whether the individual clearly meets the personnel security standards. The investigation will be current within five (5) years prior to an individual's nomination for access to CHOSUN. If the background investigation is over one (1) year old from the date of nomination into CHOSUN, a subject interview and polygraph will be required. Arrangements for polygraph will be made by the agency requesting the access, through the investigative agency which normally provides polygraph support. (U) The investigation shall be accomplished through record checks and personal interviews of various sources by trained investigative personnel in order to establish positively the complete continuity of identity to include date of birth, residences, education, employ- ment, and military service. Where the circumstances of a case indicate, the investigation shall exceed the basic requirements set forth below to ensure that those responsible for authorizing access have in their possession all the relevant facts in order to deter- mine the candidate's eligibility. (U) The individual shall furnish a signed personal history state- ment, fingerprints of a quality acceptable to the investigative agency, and a signed release, as necessary, authorizing custodians of police, credit, education, and medical records, to provide record information to the investigative agency. Photographs of the individual shall also be obtained where additional corroboration of identity is required. 5.5.2.1 (U) Minimum Standards. Minimum standards for the investi- gation are as follows: a. (U) Verification of date and place of birth and United States citizenship. 5-4 UNCLASSIFIED Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 UNCLASSIFIED b. (U) Check of the subversive and criminal files of the Federal Bureau of Investigation, including submission of fingerprint charts, and checks of such other national agencies as are appropriate to the individual's background. An additional check of Immigration and Naturalization Service records shall be conducted on those members of the individual's immediate family who are United States citizens other than by birth or who are resident aliens. c. (U) Check of appropriate police records covering all areas where the individual has resided in the United States throughout the most recent fifteen (15)-year period or since age eighteen, whichever is the shorter period. d. (U) Verification of the individual's financial status and credit habits through checks of appropriate credit institu- tions and interviews with knowledgeable sources covering the most recent five (5)-year period. e. (U) Interviews with neighbors in the vicinity of all the individual's residences in excess of six (6) months throughout the most recent five (5)-year period. This coverage shall be expanded where the investigation suggests the existence of some questionable behavioral pattern. f. (U) Confirmation of all employment during the past fifteen (15) years or since age eighteen, whichever is the shorter period but in any event the most recent two years. Personal interviews with supervisors and co-workers at places of employment covering the most recent ten (10)-year period. (U) Verification of attendance at all institutions of higher learning and at the last secondary school attended for the most recent fifteen (15)-year period. Attendance at secondary schools may be verified through qualified collateral sources. If attendance at educational institu- tions occurred within the most recent five (5) years, personal interviews with faculty members or other persons who were acquainted with the individual during his or her attendance will be conducted. h. (U) Review of appropriate military records. i. (U) Interviews with a sufficient number of knowledgeable acquaintances (a minimum of three developed during the course of the investigation) as necessary to provide continuity to the extent practicable, of the individual's UNCLASSIFIED Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 UNCLASSIFIED activities and behavorial pattern over the past fifteen (15)-years with particular emphasis on the most recent five (5)-years. (U) When employment, education, or residence has occurred overseas (except for periods of less than five (5)-years for personnel on U.S. Government assignment and less than ninety days for other purposes) during the past fifteen (15) years or since age eighteen (whichever is the shorter period), a check of the records will be made at the Depart- ment of State and other appropriate agencies. Efforts shall be made to develop sources, generally in the United States, who knew the individual overseas in order to cover significant employment, education or residence and to attempt to determine if any lasting foreign contacts or connections were established during this period. However, in all cases where an individual has worked or lived out- side of the United States continuously for over five years, the investigation will be expanded to cover fully this period in his life through the use of such investigative assets and checks of record sources as may be available to the United States Government in the foreign country(ies) in which the individual resided. k. (U) In those instances in which the individual has immediate family members or other persons with whom he or she is bonded by affection or obligation in any of the situations described in 5.5.c. above, the investigation will include an interview of the individual by trained security, investigative, or counterintelligence personnel to ascertain the facts as they may relate to the indivi- dual's access eligibility. 1. (U) In all cases the individual's spouse shall, at a minimum, be checked through the subversive files of the Federal Bureau of Investigation and other appropriate national agencies. When conditions indicate, additional investigation shall be conducted on the spouse of the individual and members of the immediate family to the extent necessary to permit the determination that the personnel security standards presented in this section are met. m. (U) A personal interview. of the individual will be conducted by trained security, investigative or counter- intelligency personnel when necessary to resolve any significant adverse information and/or inconsistencies developed during the investigation. UNCLASSIFIED Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 UNCLASSIFIED 5.5.2.2 (U) Investigative Exceptions. In exceptional cases, the DAA may determine that it is necessary or advisable in the national interest to authorize access prior to completion of the fully prescribed investigation. In this situation, such investigative checks as are immediately possible shall be made at once, and should include a personal interview by trained security or counterintelli- gence personnel. Access in such cases shall be strictly controlled, and the fully prescribed investigation and final evaluation shall be completed at the earliest practicable time. 5.5.2.3 (U) Special Investigative Requirement. In addition, all personnel identified as operators, Government, and contractor personnel working at the hub will be polygraphed prior to access authorization/approval to the facility. 5.5.2.4 (U) Approved Investigative Agencies. Investigations completed by the following Federal agencies are acceptable if they encompass all of the investigative requirements cited in herein: a. (U) Central Intelligence Agency. b. (U) Defense Investigative Service. c. (U) Department of the Treasury. d. (U) Federal Bureau of Investigation. e. (U) Office of Personnel Management. f. (U) United States Secret Service. 5.6 Security Indoctrination (U) (U) Once a nomination has been approved, no information or material will be provided to the candidate until he/she has received a security indoctrination briefing and has executed a Non-Disclosure Agreement (NDA). NDAs shall be forwarded to the NSO and controlled by the NSO for a period of 70 years after access termination. Individuals approved for one-time-limited access will also execute both a briefing and debriefing statement at the time of indoctri- nation. a. (U) All indoctrinations shall be accomplished by the NSO, PM, NISSO, or HISSO. Indoctrinations shall consist of a general description of the Project, as appropriate, and instructions on how to protect CHOSUN information. UNCLASSIFIED Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 UNCLASSIFIED b. (U) Specific instruction shall include the individual's responsibility for notifying the NSO: (1) (U) Upon any significant change in personal status, (e.g., arrests, convictions, civil lawsuits involving allegations of fraud, deceit or misrepresentation against the individual, change of address, or change of employment). (2) (U) Upon unauthorized contact with a citizen of a foreign country. (This recognizes the need for certain indoctrinated individuals to undertake activities requiring official contact with foreign nationals). (3) (U) Upon request for Project CHOSUN information from unauthorized persons. (4) (U) Upon intent to marry or divorce. (5) (U) Of the intent to travel to or through any country (countries) listed as denied areas (see DCID 1/20), at least 30 days prior to such travel. c. (U) Security reindoctrinations shall be conducted annually, or when special events are scheduled to take place (e.g., tests, exercises, and foreign travel). 5.7 Continuing Security Programs (U) (U) In order to facilitate the attainment of the highest standard of personnel security and to augment both the access approval criteria and the investigative requirements established by this manual, participating CHOSUN departments and agencies shall insti- tute continuing security programs for all individuals having access to CHOSUN. In addition to security indoctrinations, these programs shall be tailored to create mutually supporting procedures under which no issue will escape notice or be left unresolved. (U) The continuing security programs shall include the following: a. (U) Security education programs to ensure that individuals who are granted access are initially indoctrinated and periodically thereafter instructed as to its unique sensi- tivity so that they understand their personal responsibi- lity for its protection. The individual should be instruc- ted that the ultimate responsibility for maintaining eligi- bility for continued access rests with the individual. UNCLASSIFIED Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 UNCLASSIFIED Therefore, the individual is encouraged to seek appropriate guidance and assistance on any personal problem or situa- tion that may have a possible bearing on his eligibility for continued access, and security counseling should be made available. These instructions should be conducted by individuals having extensive background and experience regarding the nature and special vulnerabilities of CHOSUN information. b. (U) Security supervisory programs to ensure that super- visory personnel recognize and discharge their special responsibility in matters pertaining to the security of CHOSUN information. Such programs shall provide practical guidance as to indicators which may signal matters of security concern. Specific instructions concerning reporting procedures shall be disseminated to enable the appropriate authority to take timely corrective action to safeguard the security of the United States as well as to provide all necessary help to the individual concerned in order to neutralize his vulnerability. c. (U) Security review programs to ensure that appropriate security authorities receive and exchange, in a timely manner, all information bearing on the security posture of persons having access to sensitive information. Personnel history information shall be kept current. Security and related files shall be kept under continuing review. d. (U) Periodic reinvestigation (PR) of individuals granted access to CHOSUN information, material, or facilities will be conducted on a five-year recurring basis. The PR shall consist of all pertinent records, etc., enumerated in section 5.5.2.1 above, as applicable for the intervening period. e. (U) Whenever adverse or derogatory information is discovered or inconsistencies arise that could impact upon an individual's security status, appropriate investigations shall be conducted on a timely basis. The investigation shall be of sufficient scope necessary to resolve the specific adverse or derogatory information, or inconsis- tency in question so that a determination can be made as to whether the individual's continued participation in activities requiring access to SCI is clearly consistent with the interest of national security. UNCLASSIFIED Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 UNCLASSIFIED 5.8 Access Termination and Debriefing (U) (U) Due to the extreme sensitivity of CHOSUN information and locations, access must be limited to those persons requiring access for the performance of their duties. a. (U) Individuals no longer requiring access to CHOSUN information or who may be terminated for cause shall be debriefed by the PMO, NISSO, or HISSO and removed from the CHOSUN access roster by the NSO. As part of the debriefing process, departing individuals must complete a Security Termination Statement that will be forwarded to the NSO for retention. b. (U) Access by individuals authorized for one-time-limited access shall automatically terminate at the end of the access period. c. (U) For those individuals having access to the operational network, the NSO will be responsible for deleting each departing individual's USERID/password from the system and rescinding the previously approved access authorization. The NISSO will delete each departing individual's USERID/ password from the node's word processor. UNCLASSIFIED Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 UNCLASSIFIED SECTION 6. PHYSICAL SECURITY (U) 6.1 General (U) (U) The extreme sensitivity of the CHOSUN network requires extra- ordinary physical security measures to guard against unauthorized access to the nodes, hub, or any other component of the CHOSUN facility. The standards set forth in this manual will be adhered to at all times, whether the specific node is operational or inactive. 6.2 Structural Barriers (U) (U) Requirements for parent rooms are outlined below:* a. (U) Parent room walls will be constructed from truefloor to trueceiling, with all openings in excess of 90 square inches barred, baffled, and alarmed to detect any attempted intrusion of personnel or listening/eavesdropping/transmit- ting devices. Standard wall construction, consisting of drywall with either metal or wooden studs, will be considered adequate. Expanded steel (9-11 gauge) and three (3) inches of fiberglass insulation are required in addition to standard wall construction on all facilities (e.g., conference rooms) which do not have RF shields. (1) (U) Parent Room Housing an RF-Shielded Room. Main- tain a minimum of 18 inches of "dead space" between the exterior of the RF-shielded room and the interior of the parent room perimeter walls. (2) (U) Parent Room Housing RF-Shielded Cabinet/Racks. Provide a minimum of STC 45 when measured at the exterior of the parent room walls. b. (U) Exterior doors will be constructed of 1 3/4-inch-solid material, with hinge pins bradded or welded to preclude removal. Each exterior door will have a three (3)- position, changeable combination; GSA-approved, Group 1 lock; acoustic seal; and pneumatic door closer. Combina- tions will be changed by CHOSUN-approved individuals only, at least every six (6) months, recorded on the appropriate form, and forwarded to the NSO for storage. Local storage of combinations is not authorized. * (U) A parent room is defined as the space located inside a building structure, within which is assembled either an RF-shielded enclosure or one or more RF-shielded cabinet/racks. UNCLASSIFIED Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 UNCLASSIFIED 6.3 Intrusion Detection Systems (U) 6.3.1 (U) Perimeter Intrusion Detection. CHOSUN facilities will be provided with perimeter intrusion detection systems to include, but not be limited to: a. (U) Balanced magnetic switches on all exterior doors, configured for day/night use. b. (U) Vibration detection of the interior of all perimeter walls, active 24 hours a day. c. (U) Passive infrared or omnidirectional ultrasonic detection between the exterior wall and the RF shield, active 24 hours a day. d. (U) Line supervision between the facility and the annun- ciator panel where the alarm is monitored, which will sound an alarm in case of system failure or tampering. e. (U) If the facility will not be continuously staffed 24 hours a day, 7 days a week, passive infrared detection will be installed within the RF shield. f. (U) All alarm sensors and control boxes will have tamper- proof switches. g. (U) All alarm systems will have 8-12-hour battery standby power. h. (U) All control boxes will be located inside the alarmed area. 6.3.2 Monitoring and Alarm Response (U) a. (U) A central station alarm monitoring system for each node must be installed or integrated into existing alarm consoles which will annunciate any alarm condition which occurs at the CHOSUN facility. Zones must be configured in such a way as to indicate the location of the alarm at the facility (e.g., front door, "dead space" between RF shield and outer wall of the parent room). Attempted entries with an invalid card-reader card or individual identifier number should also cause an alarm condition to occur. b. (U) The central station will be staffed 24 hours a day, 7 days a week, and may not be left unattended for even short periods of time. UNCLASSIFIED Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 UNCLASSIFIED c. (U) Responses to alarms will be immediate and occur in all cases of an alarm condition. Response time will not exceed 5 minutes. Only appropriately trained security personnel should be designated to respond to alarms. 6.3.3 Emergency Conditions (U) a. (U) The facility shall be equipped with HALON or a similar fire suppressant. b. The CHOSUN facility should be staffed by a minimum of two people at all times both for security considerations and safety considerations (e.g., in the event one person is incapacitated due to medical emergency or fire). c. (U) All facilities will have water detectors that trigger an alarm in case of flooding. Plastic tarpaulins will be available to cover equipment in case of pipe breakage. d. (U) The physical security features of CHOSUN facilities are such that they would preclude rapid response into the facility unless the doors are opened from the inside. e. (U) In a medical emergency or fire, preservation of life is of paramount importance. Access will be granted to doctors, emergency medical teams, and firefighters as necessary. If practical, the system will be shut down and classified material will be secured or covered prior to allowing access. This should not, however, delay entrance. f. (U) If possible, a CHOSUN-approved individual should be present within the facility as long as it does not create a hazard to the individual. Extraneous and/or unnecessary personnel should not be allowed into the area. g. (U) All facilities (nodes and hub) will be equipped with an interruptible power supply. 6.4 Access Control (U) 6.4.1 (U) Access Roster. A roster of personnel approved for and authorized access to CHOSUN facilities will be maintained by the NSO and transmitted via the CHOSUN network to all nodes on a weekly basis. Each node will receive only the listing of individual's approved for access to that node. This roster will contain the name, Social Security Number, date of birth, place of birth, level of clearance, agency, nodes to which the individual has been approved for access, and date of approval. UNCLASSIFIED Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 UNCLASSIFIED 6.4.1.1 (U) Access by Uncleared Service Personnel. Uncleared service personnel e.g., electricians, carpenters, plumbers, construction, cleaning, and delivery personnel) will be provided a one-for-one escort at all times while in the CHOSUN facility. 6.4.1.2 (U) Access by Emergency Personnel. Access by emergency personnel shall be in accordance with the provisions of para- graph 6.3.3.d. above. 6.4.2 (U) Intra-Agency Access. Intra-agency access to a CHOSUN facility will be controlled by a card-reader access control which requires both a valid, electronically read card and three-number, unique identifier code to be entered separately by the individual. The NSO will change identifier codes at least semi-annually and maintain a record of the change for one (1) year. Card-reader systems will be installed with an Uninterruptible Power Supply (UPS) or have a backup system which will sustain complete operation for a minimum of eight (8) hours. The system must also be capable of allowing egress while denying ingress in case of a system failure. The card-reader system must not be installed on the door of the RF- shielded rooms but must be installed on the door of the parent room. 6.4.3 (U) Inter-Agency Access. The access roster distributed by the NSO will be the basis for determining if an individual autho- rized CHOSUN facility access at one node will be automatically allowed access to a CHOSUN facility at another node. If the visitor is approved for CHOSUN access at one node but not at the node being visited, access to the visited node may be granted at the discretion of the visited agency. 6.4.4 (U) Non-Approved Personnel Access. Access by non-CHOSUN- approved personnel will be held to an absolute minimum, consistent with operational needs of the CHOSUN network, and under the con- straints indicated below. A record of such visits will be made and maintained for one (1) year. This record will include the name, organization, date, time entered, time departed, purpose of visit, and signature of escort. Each node shall coordinate with the Network Security Officer prior to granting access to non-CHOSUN-approved personnel. (U) Each CHOSUN facility will have red flashing lights installed in the ceiling of the facility in sufficient quantities to ensure that they are visible to all personnel working within the facility. Prior to entry of non-CHOSUN-approved personnel into the facility, these red lights will be activated to inform all personnel that a non-approved person is present and the node will be disconnected from the network. The visitor will be under constant escort by a CHOSUN-approved individual. Badges will be issued to non-CHOSUN- approved individuals. These badges must conspicuously indicate that the individual is non-CHOSUN approved. These badges must be worn on 6-4 UNCLASSIFIED Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 UNCLASSIFIED an exterior garment, above waist level. 6.4.5 (U) Badges. Control and issuance of badges and identifi- cation numbers are the responsibility of each node; however, certain procedures must be followed in order to ensure the integrity of the access control system. These procedures include the following: a. (U) All issued badges will be accounted for by receipt to include the signature of the individual who has been issued the badge. b. (U) All unissued badges will be stored in a separate locked container within the CHOSUN facility. Unissued badges will be inventoried monthly. c. (U) All individual identifier codes must be randomly computer generated, from within the CHOSUN facility. d. (U) All individual identifier codes which have been issued will be listed in a roster separate from the badge issuance receipt system and sealed in a double envelope within the container where blank badges are maintained. e. (U) The central processing unit of the card-reader system will be stored within the CHOSUN facility and locked in a manner to preclude tampering. f. (U) All lost or stolen badges will be immediately reported to the issuing authority. The issuing authority will void both the badge and identification number from the system. g. (U) An event recorder will be connected to the central processing unit of the card reader system which will record all entrances, exits, invalid attempts, and alarm condi- tions. A copy of these records will be maintained for a period of thirty (30) days. h. (U) Card-reader badges for access to a CHOSUN facility should not leave the building in which the facility is located. A system must be developed by each agency whereby agency identification cards, building access, or other similar identification is exchanged for the card-reader badge. This exchange must, of course, occur outside the CHOSUN facility, and adequate security must be provided to this area to preclude loss or theft. (Agencies may propose alternate methods of access control which provide the same level of security (e.g., two-person reception area with access roster and individual picture identification). The DAA will approve all alternate methods via a Request for Waiver.) UNCLASSIFIED Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 UNCLASSIFIED 6.5 Equipment Delivery (U) (U) Security problems are increased when property and material are in transit. Loading and unloading procedures, compartmentalization of cargoes in ships, railroad cars, aircraft, and movements of such carriers present security hazards of varying degrees. It is recommended that all electronic equipment and supplies be delivered as directly as possible from the source to a neutral address at the user agency and that the deliveries be accompanied by a qualified security officer. (U) To provide for the security of property and material in transit, the responsibilities of the consignor, the carrier, and the consignee must be clearly established. The protection of such property and material is, in general, the responsibility of the person who has the property in his custody. It is the responsi- bility of the consignor to ensure that all cargo requiring security protection is entrusted only to carriers properly cleared for handling this cargo. *(U) A more stringent OPSEC requirement needs to be developed for the delivery of technical and nontechnical equipment (e.g., furni- ture). 6-6 UNCLASSIFIED Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96B01172R000400050018-5 CONFIDENTIAL SECTION 7. INFORMATION SECURITY (U) (C) The dissemination of Project CHOSUN information must be strin- gently controlled to protect crisis management at the national level. Appendix C, the CHOSUN Security Classification Guide pro- vides basic guidance for determining (1) the security classification of CHOSUN information, and (2) schedules for downgrading or declas- sifying information. The guide is designed to protect sensitive information regarding the architecture, design, capabilities, and limitations of Project CHOSUN from adversaries. (C) Project CHOSUN related information is the property of The National Security Council in the Executive Office of the President of the United States. Any release of this information, either clas- sified or unclassified, to persons outside The Executive Branch must be approved in writing by the NSO. All documents related to Project CHOSUN will be marked "Property of The National Security Council. Written Approval Required for Release." (U) The information provided in this section is extracted from DOD 5200.1-R, Information Security Program Regulation. It provides detailed procedures for the marking, control, and accountability of classified information. 7.1 Marking (General Provisions) (U) (U) Information determined to require classification protection under this manual shall be so designated. Designation by means other than physical marking may be used but shall be followed by physical marking as soon as possible. Designation by physical marking, notation, or other means serves (1) to warn the holder about the classification of the information involved, (2) to indicate the degree of protection against unauthorized disclo- sure that is required for that particular level of classification, and (3) to facilitate downgrading and declassification actions. 7.1.1 (U) Original Classification. At the time of original classification, the following shall be shown on the face of all originally classified documents or clearly associated with other forms of classified information in a manner appropriate to the medium involved: a. (U) The identity of the original classification authority by position title, unless he or she is the signer or approver of the documents. b. (U) The agency and office of origin. CONFIDENTIAL Declassified and Approved For Release 2011/11/10: CIA-RDP96B01172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 UNCLASSIFIED c. (U) The overall classification of the document. d. (U) The date or event for automatic declassification or notation "Originating Agency's Determination Required" or "OADR." e. (U) Any downgrading action to be taken and the date or event thereof. 7.1.2 (U) Derivative Classification. At the time of derivative classification, the following shall be shown on the face of all derivatively classified documents or clearly associated with other forms of classified information in a manner appropriate to the medium involved: a. (U) The source of classification; that is, the source document or classification guide. If classification is derived from more than one source, the phrase "Multiple Sources" will be shown and the identification of each source will be maintained with the file or record copy of the document. b. (U) The agency and office of the derivatively classified document. c. (U) The overall classification of the document. d. (U) The date or event for declassification or the notation "Originating Agency's Determination Required" or "OADR," carried forward from the classification source. If the classification is derived from multiple sources, either the most remote date or event for declassification marked on the sources or if required by any source, the notation "Originating Agency's Determination Required" or "OADR" shall be shown. e. (U) Any downgrading action to be taken and the date or event thereof. 7.1.3 (U) Identification of Classification Authority. Identifi- cation of a classification authority shall be shown on the "Classi- fied by" line and shall be sufficient, standing alone, to identify a particular official, source document or classification guide. (U) If any information in a document or material is classified as an act of original classification, the classification authority who made the determination-shall be identified on the "Classified by" line unless the classifier is also the signer or approver of the document. UNCLASSIFIED Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 UNCLASSIFIED (U) If the classification of all information in a document or material is derived from a single source (for example, a source document or classification guide), the "Classified by" line shall identify the source document or classification guide, including its date when necessary to ensure positive identification. (U) If the classification of information contained in a document or material is derived from more than one source document, classifica- tion guide, or combination thereof, the "Classified by" line shall be marked "Multiple Sources" and identification of all such sources shall be maintained with the file or record copy of the document. (U) If an official with requisite classification authority has been designated by the head of an activity to approve security classifi- cation assigned to all information leaving the activity, the title of that designated official shall be shown on the "Classified by" line. The designated official shall maintain records adequate to support derivative classification actions. 7.1.4 (U) Declassification and Regrading Procedures. Whenever classified information is downgr a or declassified earlier than originally scheduled, or upgraded, the material shall be marked promptly and conspicuously to indicate the change, the authority for the action, the date of the action, and the identity of the person taking the action. In addition, except for upgrading, prior classification markings shall be cancelled, if practicable, but in any event those on the first page, and the new classification mark- ings, if any, shall be substituted. When classified information is downgraded or declassified in accordance with the assigned down- grading and declassification markings, such markings shall be a sufficient notation of the authority for such action. 7.1.5 (U) implying Derivative Declassification Dates. New material that derives its classification from information classified on or after August 1, 1982, shall be marked with the declassification date, event, or the notation "Originating Agency's Determination Required" or "OADR" assigned to the source information. (U) New material that derives its classification from information classified prior to August 1, 1982, shall be treated as follows: a. (U) If the source material bears a declassification date or event, that date or event shall be carried forward to the new material. b. (U) If the source material bears no declassification date or event or bears an indeterminate date or event such as "Upon Notification by Originator," "Cannot be Determined," UNCLASSIFIED Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 UNCLASSIFIED or "Impossible to Determine," or is marked for declassifi- cation review, the new material shall be marked with the notation "Originating Agency's Determination Required" or "OADR." c. (U) If the source material is foreign Government informa- tion bearing no date or event for declassification or is marked for declassification review, the new material shall be marked with the notation "Originating Agency's Determi- nation Required" or "OADR." (U) New material that derives its classification from a classifica- tion guide issued prior to August 1, 1982, that has not been updated to conform with this Regulation shall be treated as follows: a. (U) If the guide specifies a declassification date or event, that date or event shall be applied to the new material. b. (U) If the guide specifies a declassification review date, the notation "Originating Agency's Determination Required" or "OADR" shall be applied to the new material. 7.1.6 (U) Upgrading. When material is upgraded, it shall be promptly and conspicuously marked as prescribed, except that in all such cases the old classification markings shall be cancelled and new markings substituted. 7.1.7 (U) Dissemination and Reproduction Notice. Classified infor- mation that the originator has determined to be subject to special dissemination or reproduction limitations, or both, shall include, as applicable, a statement or statements on its cover sheet, first page or in the text, substantially as follows: "Reproduction requires approval of originator. Further dis- semination only as directed by (Insert appropriate office or official)." 7.2 Marking Documents (U) 7.2.1 (U) Overall and Page Marking. Except as otherwise speci- fied for working papers, the overall classification of a document, whether or not permanently bound, or any copy or reproduction there- of, shall be conspicously marked, stamped or affixed permanently at the top and bottom on the outside of the front cover (if any), on the title page (if any), on the first page, and on the outside of the back cover (if any). Each interior page shall be marked top and bottom according to its content. Alternatively, the overall classi- UNCLASSIFIED Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 UNCLASSIFIED fication of the document may be conspicuously marked or stamped at the top and bottom of each interior page when such marking is neces- sary to achieve production efficiency and the particular information to which classification is assigned is otherwise sufficiently identi- fied. In any case, the classification marking of a page shall not supersede the classification marking of portions of the page marked with lower levels of classification. 7.2.2 (U) Marking Components. The major components of some complex documents are likely to be used separately. In such instances, each major component shall be marked as a separate document. Examples include each annex, appendix, or similar component of a plan, program or operations order; attachments and appendices to a memorandum or letter; each major part of a report. 7.2.3 (U) Portion Marking. Each section, part, paragraph, or simi- lar portion of a -classified document shall be marked to show the level of classification of the information contained in or revealed by it, or that it is unclassified. Portions of documents shall be marked in a manner that eliminates doubt as to which of its portions contains or reveals classified information. Classification levels of portions of a document shall be shown by the appropriate classi- fication symbol placed immediately follow' er aoaa-s_1zt er or number, or in the absenR s or numbers, immediately before the beginning of the portion. In marking sections, parts, paragraphs or similar portions the parenthetical symbols "(TS)" for TOP SECRET, "(S)" for SECRET, "(C)" for CONFIDENTIAL, and "(U)" for UNCLASSIFIED, shall be used. When appropriate, the symbols "RD" for Restricted Data and "FRD" for Formerly Restricted Data shall be added, for example, "(S-RD)" or "(C-FRD)." In addition, portions that con- tain Critical Nuclear Weapon Design Information (CNWDI) will be marked "(N)" following the classification, for example, "(S-RD) (N)." (U) Illustrations, photographs, figures, graphs, drawings, charts, and similar portions of classified documents will be clearly marked to show their classification or unclassified status. Such markings shall not be abbreviated and shall be prominent and placed within or contiguous to the portion. Captions of such portions shall be marked on the basis of their content also by placing the symbol "(TS)," "(S)," "(C)," or "(U)" immediately preceding the caption. (U) If, in an exceptional situation, parenthetical portion marking is determined to be impracticable, the document shall contain a statement sufficient to identify the information that is classified and the level of such classification. Thus, for example, each por- tion of a classified document need not be separately marked if all portions are classified at the same level, provided a statement to that effect is included in the document. UNCLASSIFIED Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 UNCLASSIFIED (U) When elements of information in one portion require different classifications, but segregation into separate portions would destroy continuity or context, the highest classification required for any item shall be applied to that portion or paragraph. 7.2.4 (U) Compilations. When classification is required to protect a compilation of information, the overall classification assigned to such documents shall be placed conspicuously at the top and bottom of each page and on the outside of the front and back covers, if any, and an explanation of the basis for the assigned classification shall be included on the document or in its text. 7.2.5 (U) Subjects and Titles of Documents. Subjects and titles of classified documents shall be marked with the appropriate symbol, "(TS)," "(S)," "(C)," or "(U)" placed immediately following and to the right of the item. When applicable, other appropriate symbols, for example, "(RD)" or "(FRD)" shall be added. 7.2.6 (U) File, Folder, or Group of Documents. When a file, folder, or group of classified documents is removed from secure storage, it shall be marked conspicuously with the highest classifi- cation of any classified document included therein or shall have an appropriate classified document cover sheet affixed. 7.2.7 (U) Transmittal Document. A transmittal document, including endorsements and comments when such endorsements and comments are added to the basic communications, shall carry on its face a promi- nent notation of the highest classification of the information trans- mitted by it, and a legend showing the classification, if any, of the transmittal document, endorsement, or comment standing alone. For example, an unclassified document that transmits as an attachment a classified document shall bear a notation substantially as follows: "UNCLASSIFED WHEN SEPARATED FROM CLASSIFIED ENCLOSURE." 7.3 Marking Classified Information Other Than Documents (U) (U) Security classification and applicable associated markings assigned by the classifier shall be conspicuously stamped, printed, written, painted, or affixed by means of a tag, sticker, decal, or similar device, on classified material other than paper copies of documents, and on containers of such material, if possible. If mark- ing the material or container is not practicable, written notifica- tion of the security classification and applicable associated mark- ings shall be furnished to recipients. The following procedures for marking various kinds of material containing classified information are not all inclusive and may be varied to accommodate the physical characteristics of the material containing the classified information and to accommodate organizational and operational requirements. UNCLASSIFIED Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 UNCLASSIFIED 7.3.1 (U) Charts, Maps, and Drawings. Charts, maps and drawings shall bear the appropriate classification marking for the legend, title, or scale blocks in a manner that differentiates between the overall classification of the document and the classification of the legend or title itself. The higher of these markings shall be inscribed at the top and bottom of each such document. When folding or rolling charts, maps, or drawings would cover the classification markings, additional markings shall be applied that are clearly visible when the document is folded or rolled. Applicable associated markings shall be included in or near the legend, title, or scale blocks. 7.3.2 (U) Photogra hss, Films, and Recordings. Photographs, films (including negatives), recordings, and their containers shall be marked to assure that a recipient or viewer will know that classified information of a specific level of classification is involved. a. (U) Photographs. Negatives and positives shall be marked, whenever practicable, with the appropriate classification designation and applicable associated markings. Roll nega- tives or positives may be so marked at the beginning and end of each strip. Negatives and positives shall be kept in containers bearing conspicuous classification markings. All prints and reproductions shall be conspicuously marked with the appropriate classification designation and appli- cable associated markings on the face side of the print if possible. When such markings cannot be applied to the face side, they may be stamped on the reverse side or affixed by pressure tape label, stapled strip, or other comparable means. (NOTE: When self-processing film or paper is used to photograph or reproduce classified information, all parts of the last exposure shall be removed from the camera and destroyed as classified waste, or the camera shall be pro- tected as classified). b. (U) Transparencies and Slides. Applicable classification markings shall e sown clearly on the image of each trans- parency or slide, if possible, or on its border, holder, or frame. Other applicable associated markings shall be shown on the border, holder, or frame. c. (U) Motion Picture Films. Classified motion picture films and video tapes shall be marked at the beginning and end of each reel by titles bearing the appropriate classification and applicable associated markings. Such markings shall be visible when projected. Reels shall be kept in containers bearing conspicuous classification and applicable associated markings. UNCLASSIFIED Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 UNCLASSIFIED bearing conspicuous classification and applicable associated markings. d. (U) Recordings. Sound, magnetic, or electronic recordings shall contain at the beginning and end a clear statement of the assigned classification that will provide adequate assurance that any listener or viewer will know that clas- sified information of a specified level is involved. Re- cordings shall be kept in containers or on reels that bear conspicuous classification and applicable associated markings. e. (U) Microforms. Microforms are images, usually produced photographically on transparent or opaque materials, in sizes too small to be read by the unaided eye. Accordingly, the assigned security classification and abbreviated appli- cable associated markings shall be conspicuously marked on the microform medium or its container, so as to be readable by the unaided eye. These markings shall also be included on the image so that when the image is enlarged and dis- played or printed, the markings will be conspicuous and readable. Such marking will be accomplished as appropri- ate for the particular microform involved. For example, roll film microforms (or roll microfilm employing 16, 35, 70, or 105 mm films) may generally be marked as provided for roll motion picture film. 7.3.3 (U) Decks of ADP Punched Cards. When a deck of classified ADP punched cards is handled and controlled as a single document, only the first and last card require classification markings. An additional card shall be added (or the job control card modified) to identify the contents of the deck and the highest classification therein. Such additional cards shall include applicable associated markings. Cards removed for separate processing or use and not immediately returned to the deck shall be protected to prevent com- promise of any classified information contained therein, and for this purpose shall be marked individually. 7.3.4 (U) Removable ADP and Word Processing Storage Media. a. (U) External. Removable information storage media on devices, used with ADP systems and typewriters or word processing systems, shall bear external markings clearly indicating the classification of the information and applicable associated markings. Include are media and devices that store information recorded in analog or digital form and that are generally mounted or removed by the users or operators. Examples include magnetic tape UNCLASSIFIED Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 UNCLASSIFIED b. (U) Internal. ADP systems and word processing systems employing such media shall provide for internal classi- fication marking to assure that classified information contained therein that is reproduced or generated, will bear applicable classification and associated markings. An exception may be made by the agency head, or designee, for the purpose of exempting existing word processing systems when the internal classification and applicable associated markings cannot be implemented without exten- sive system modification, provided procedures are established to ensure that users and recipients of the media, or the information therein, are clearly advised of the applicable classification and associated markings. 7.3.5 (U) Documents Produced by ADP Equipment. At a minimum, the first page, and the front and back covers, if any, of documents pro- duced by ADP equipment shall be marked. Classification markings of interior pages may be applied by the ADP equipment or by other means. When the application of associated markings by the ADP equipment is not consistent with economical and efficient use of such equipment, such markings may be applied to a document produced by ADP equipment by superimposing upon the first page of such document a "Notice of Declassificaion Instructions and Other Associated Markings." Such notice shall include the date or event for declassification or the notation "Originating Agency's Determination Required" or "OADR" and all other such applicable markings. If individual pages of a document produced by ADP equipment are removed or reproduced for distribution to other users, each such page or group of pages shall be marked as prescribed, or by superimposing on each such page or group of pages, a copy of any "Notice of Declassification Instruc- tions and Other Associated Markings" applicable to such page or group of pages. 7.3.6 (U) Material for Training Purposes. In using unclassified documents or material to simulate classified documents or material for training purpose, such documents or material shall be marked clearly to indicate the actual unclassified status of the informa- tion, for example, "(insert classification designation) for train- ing, otherwise "unclassified" or "UNCLASSIFIED SAMPLE." 7.3.7 (U) Miscellaneous Material. Documents and material such as rejected copy, typewriter ribbon, carbons, and similar items developed in connection with the handling, processing, production, and use of classified information shall be handled in a manner that assures ade- quate protection of the classified information involved and destruc- tion at the earliest practicable time. Unless a requirement exists UNCLASSIFIED Declassified and Approved For Release 2011/11/10: CIA-RDP96B01172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 UNCLASSIFIED to retain this material or documents for a specific purpose, there is no need to mark, stamp, or otherwise indicate that the information is classified. 7.4 Additional Markings (U) (U) The warning notices prescribed in this section shall be promi- nently displayed on classified documents or materials, when appli- cable. In the case of documents, these warning notices shall be marked conspicuously on the outside of the front cover, or on the first page if there is not a front cover. Transmittal documents, including those that are unclassified shall also bear these addi- tional warning notices, when applicable. (U) When display of warning notices on other materials is not pos- sible, their applicability to the information shall be included in the written notification of the assigned classification. 7.4.1 (U) Wholly UNCLASSIFIED Material. Normally, unclassified material shall not be marked or stamped "UNCLASSIFIED" unless it is essential to convey to a recipient of such material that it has been examined with a view to imposing a security classification and that it has been determined that it does not require classification. 7.4.2 (U) Restricted Data. Classified documents or material con- taining Restricted Data as defined in the Atomic Energy Act of 1954, as amended, shall be marked as follows: "This material contains Restricted Data as defined in the Atomic Energy Act of 1954. Unauthorized disclosure subject to administrative and criminal sanctions." 7.4.3 (U) Formerly Restricted Data. Classified documents or material containing Formerly Restricted Data, as defined in section 142.d, Atomic Energy Act of 1954, as amended, but no Restricted Data, shall be marked as follows: "Unauthorized disclosure subject to administrative and criminal sanctions. Handle as Restricted Data in foreign dissemination. Section 144.b, Atomic Energy Act, 1954." 7.4.4 (U) Special Access Program Documents and Material. Additional markings as prescribed in directives, regulations, and instructions relating to an approved Special Access Program shall be applied to UNCLASSIFIED Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 UNCLASSIFIED relating to an approved Special Access Program shall be applied to documents and material containing information subject to the special access program. Such additional markings shall not serve as the sole basis for continuing classificaion of the documents or material to which the markings have been applied. When appropriate, such mark- ings shall be excised to ease timely declassification, downgrading, or removal of the information from special control procedures. 7.4.5 (U) Intelligence Sources and Methods Information. Documents that contain information relating to intelligence sources or methods shall include the following marking: "WARNING NOTICE--Intelligence Sources or Methods Involved" 7.4.6 (U) COMSEC Material. Before release to contractors, a COMSEC document will indicate on the title page, or first page if no title page exists, the following notation: "COMSEC Material - Access by Contractor Personnel Restricted to U.S. Citizens Holding Final Government Clearance." This notation shall be placed on COMSEC documents or material when originated and when release to contractors can be anticipated. Other COMSEC documents or material shall be marked in accordance with National COMSEC Instruction (NACSI) 4005. Foreign dissemi- nation of COMSEC information is governed by NCSC Policy Direc- tive 14-2. 7.4.7 (U) Associated Markings. Other applicable associated mark- ings required for documents shall be accomplished as prescribed in this section or in any other appropriate manner. 7.5 Storage and Safekeeping (U) 7.5.1 (U) General. Classified information shall be stored only under conditions adequate to prevent unauthorized persons from gaining access. The requirements specified in this manual repre- sent the minimum acceptable security standards. 7.5.2 (U) Standards for Storage Equipment. The GSA establishes and publishes minimum standards, specifications, and supply schedules for containers, vaults, alarm systems, and associated security devices suitable for the storage and protection of classified information. Heads of agencies may establish additional controls to prevent unauthorized access. Security filing cabinets conforming to Federal specifications bear a Test Certification Label on the locking drawer, attesting to the security capabilities of the 7-11 UNCLASSIFIED Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 UNCLASSIFIED container and lock. (On some older cabinets the label was affixed on the inside of the locked drawer compartment.) Cabinets manu- factured after February 1962 indicate "General Services Admini- stration Approved Security Container" on the outside of the top drawer. 7.5.3 (U) Storage of Classified Information. Classified infor- mation that is not under the personal control and observation of an authorized person will be guarded or stored in a locked security container as prescribed below: a. (U) TOP SECRET. TOP SECRET information shall be stored in: (1) (U) A safe-type steel file container having a built- in three-position, dial-type combination lock approved by the GSA or a Class A vault or vault-type room that meets the standards established by the head of the agency concerned. When located in buildings, struc- tural enclosures, or other areas not under U.S. Government control, the storage container, vault, or vault-type room must be protected by an alarm system or guarded during nonoperating hours. (2) (U) An alarmed area, provided such facilities are adjudged by the local responsible official, to afford protection equal to or better than that prescribed in a. (1) above. When an alarmed area is used for the storage of TOP SECRET material, the physical barrier must be adequate to prevent (1) surreptitious removal of the material, and (2) observation that would result in the compromise of the material. The physical bar- rier must be such that forcible attack will give evi- dence of attempted entry into the area. The alarm system must provide immediate notice to a security force of attempted entry. Under field conditions, the field commander will prescribe the measures deemed adequate to meet the storage standards contained in a. (1) and (2) above. b. (U) SECRET and CONFIDENTIAL. SECRET and CONFIDENTIAL information shall be stored in the manner prescribed for TOP SECRET; or in a Class B vault, or a vault-type room, strong room, or secure storage room that meets the standards prescribed by the head of the agency. UNCLASSIFIED Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 UNCLASSIFIED 7.5.4 (U) Designations and Combinations. a. (U) Numbering and Designating Storage Facilities. There shall be no external mark as to the level of classified information authorized to be stored therein. For identi- fication purposes each vault or container shall bear externally an assigned number or symbol. b. (U) Combination to Containers. (1) (U) Changing. Combinations to security containers shall be changed only by individuals having that responsibility and an appropriate security clearance. Combinations shall be changed: (a) (U) When placed in use. (b) (U) Whenever an individual knowing the combina- tion no longer requires access. (c) (U) When the combination has been subject to possible compromise. (d) (U) At least semiannually. (e) (U) When taken out of service. (U) Built-in combination locks shall be reset to the standard combination 50-25-50; combination padlocks shall be reset to the standard combination 10-20-30. (2) (U) Classifying Combinations. The combination of a vault or container used for the storage of classified information shall be assigned a security classification equal to the highest category of the classified infor- mation authorized to be stored therein. (3) (U) Recording Storage Facility Data. A record shall be maintained for each vault, secure room or container used for storing classified information, showing location of the container, the names, home addresses, and home telephone numbers of the individuals having knowledge of the combination. (4) (U) Dissemination. Access to the combination of a vault or container used for the storage of classified information shall be granted only to those individuals who are authorized access to the classified information stored therein. UNCLASSIFIED Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 UNCLASSIFIED c. (U) Electrically Actuated Locks. Electrically actuated locks (for example, cypher and magnetic strip card locks) do not afford the required degree of protection of classified information. 7.6 Accountability and Control (U) 7.6.1 (U) Procedures for Handling TOP SECRET Information. Agencies shall establish the following procedures for handling TOP SECRET information. 7.6.1.1 (U) Control. TOP SECRET Control Officers and alternates shall be designated within offices to be responsible for receiving, dispatching, and maintaining an accountability register of TOP SECRET documents. Such individuals shall be selected on the basis of experience and reliability, and shall have appropriate security clearances. 7.6.1.2 (U) Accountability a. (U) TOP SECRET Registers. TOP SECRET accountability regis- ters shall be maintained by each office originating or receiving TOP SECRET information. Such registers shall be retained for 5 years and shall, as a minimum, reflect the following: (1) (U) Sufficient information to identify adequately the TOP SECRET document or material to include the title or appropriate short title, date of the document, and identification of the originator. (2) (U) The date the document or material was received. (3) (U) The number of copies received or later reproduced. (4) (U) The disposition of the TOP SECRET document or material and all copies of such documents or material. b. (U) Serialization. Copies of TOP SECRET documents and material shall be numbered serially. c. (U) Disclosure Records. Each TOP SECRET document or item of material shall have appended to it a TOP SECRET disclo- sure record. The name and title of all individuals, includ- ing stenographic and clerical personnel to whom information in such documents and materials has been disclosed, and the date of such disclosure, shall be recorded thereon. Disclos- ures to individuals who may have had access to containers UNCLASSIFIED Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 UNCLASSIFIED in which TOP SECRET information is stored, or who regularly handle a large volume of such information need to be so re- corded. Such individuals, when identified on a roster, are deemed to have had access to such information. Disclosure records shall be retained for 2 years after the documents or materials are transferred, downgraded, or destroyed. d. (U) Inventories. All TOP SECRET documents and material shall be inventoried at least once annually. The inventory shall reconcile the TOP SECRET accountability register with the documents or material on hand. At such times, each document or material shall be examined for completeness. Agency officials may authorize the annual inventory of TOP SECRET documents and material in repositories, libraries, or activities that store large volumes of TOP SECRET documents or material to be limited to documents and material to which access has been granted within the past year, and 10 percent of the remaining inventory. e. (U) Retention. TOP SECRET information shall be retained only to tie extent necessary to satisfy current requirements. Custodians shall destroy nonrecord copies of TOP SECRET docu- ments when no longer needed. Record copies of documents that cannot be destroyed shall be reevaluated and, when appropri- ate, downgraded, declassified, or retired to designated records centers. f. (U) Receipts. TOP SECRET documents and material will be accounted for by a continuous chain of receipts. 7.6.2 (U) Procedures for Handling SECRET Information. Adminis- trative procedures shall be established controlling SECRET material originated or received by an activity; distributed or routed to a sub-element of such activity; and disposed of by the activity by transfer of custody or destruction. The control system for SECRET must be determined by the practical balance of security and operating efficiency. 7.6.3 (U) Procedures for Handling CONFIDENTIAL Information. Admini- strative controls shall be established to protect CONFIDENTIAL infor- mation received, originated, transmitted, or stored by an activity. 7.6.4 (U) Procedures for Handling Working Papers. Working papers are documents and material accumulated or created in the preparation of finished documents and material. Working papers containing clas- sified information shall be: UNCLASSIFIED Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 UNCLASSIFIED a. (U) Dated when created. b. (U) Marked with the highest classification of any information contained therein. c. (U) Protected in accordance with the assigned classification. d. (U) Destroyed when no longer needed. e. (U) Accounted for, controlled, and marked in the manner prescribed for a finished document of the same classi- fication when any of the following occurs: (1) (U) Released by the originator outside the activity or transmitted electrically or through message center channels within the activity. (2) (U) Retained more than 90 days from date of origin. (3) (U) Filed permanently. (4) (U) TOP SECRET information contained therein. 7.6.5 (U) Receipt of Classified Material. Procedures shall be developed within agencies to protect incoming mail, bulk shipments, and items delivered by messenger until a determination is made whether classified information is contained therein. Screening points shall be established to limit access to classified infor- mation to cleared personnel. 7.6.6 (U) Restraint on Reproduction. Portions of documents and materials that contain TOP SECRET information shall not be repro- duced without the consent of the originator or higher authority. Any stated prohibition against reproduction shall be strictly observed. The following measures apply to reproduction equipment and to the reproduction of classified information. a. (U) Copying of documents containing classified infor- mation shall be minimized. b. (U) Officials authorized to approve the reproduction of TOP SECRET information shall be designated by position title and shall review the need for reproduction of classified documents and material with a view toward minimizing reproduction. UNCLASSIFIED Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 UNCLASSIFIED c. (U) Specific reproduction equipment shall be designated for the reproduction of classified information. Rules for reproduction of classified information shall be posted on or near the designated equipment. d. (U) Notices prohibiting reproduction of classified infor- mation shall be posted on equipment used only for the reproduction of unclassified information. e. (U) Agencies shall ensure that the equipment used for reproduction of classified information does not leave latent images in the equipment or on other material. f. (U) All copies of classified documents reproduced for any purpose, including those incorporated in a working paper, are subject to the same controls prescribed for the docu- ment from which the reproduction is made. g. (U) Records shall be maintained to show the number and distribution of reproduced copies of all TOP SECRET documents, of all classified documents covered by special access programs distributed outside the originating agency, and of all SECRET and CONFIDENTIAL documents that are marked with special dissemination and reproduction limitations. 7-17 UNCLASSIFIED Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 UNCLASSIFIED 7-18 UNCLASSIFIED Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 UNCLASSIFIED SECTION 8. ADP SECURITY (U) 8.1 General (U) (U) This section presents the ADP considerations necessary to pro- vide requisite computer and network security. The requirements are derived from DCID 1/16. 8.2 Hardware (U) 8.2.1 (U) Design, Development, Installation, Maintenance, and Modification. All hardware will be procured and distributed by the CHOSUN program office. All hardware will be tested for stand-alone operation and for network operation within the CHOSUN design, engi- neering, and integration facility prior to delivery and installation at a node. Initial installation at a site will be done by the CHOSUN contractor under the cognizance of the CHOSUN program manage- ment office and persons responsible for security at that site. (U) Maintenance of the hardware will be coordinated with the CHOSUN NSO, NISSO, or HISSO affected. A record of all visits by mainte- nance personnel shall be made and retained for one (1) year. (See section 5, Personnel Security, and section 6, Physical Security, for specific clearance requirements for maintenance and service personnel.) (U) Modification to the hardware must not be undertaken indepen- dently by the nodes. Any modifications that are deemed necessary must be reviewed and approved by the CHOSUN NCWG in accordance with the CHOSUN Configuration Management Plan. Major modifications will require recertification of the network by the NCWG and reaccredita- tion by the DAA. (See section 4.10, Schedule for Recertification and Reaccreditation. 8.2.2 (U) Configuration Management. The CHOSUN program office will provide all sites with a SOP manual that contains a detailed checklist of procedures to be employed by the nodes. This includes the setting of all hardware switches, the powering up and down of each individual device, the loading of the configured system with standard software and firmware, system operating procedures, and shutdown and restart procedures. (U) The SOP will also include the optional procedures for purging and disconnecting components of the node system in order to inter- face with ADP systems or communications networks outside the CHOSUN network which may be operating at a lower classification level. (A "port-connected" alert will be placed on all conference User Control UNCLASSIFIED Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 UNCLASSIFIED Terminals (UCTs) for all word processing or graphic external inter- connections.) In addition, procedures for reconnecting node compo- nents, after processing at a lower classification level, will be included. The SOP is primarily an operations manual, but its existence and strict adherence to the procedures it sets forth are essential to overall system security. (U) Where node procedures vary from the SOP, each node is respons- ible for preparing and submitting for NCWG review the text for node- unique procedures. With the concurrence of the NCWG, node-unique procedures will be included as an addendum to the SOP. Any proposed changes to the standard hardware/software may impact operational procedures. Therefore, as previously stated, all proposed changes will be reviewed and evaluated by the configuration manager at the nodes and submitted to the NCWG for approval before incorporation into the SOP. (U) A unique SOP will be developed for use at the hub. The topics covered will be the same, but hub specifics will differ. 8.2.3 (U) System Clearing Procedures. At the termination of a conference, all user data will be purged from the system. This will normally include all removable media. In special cases, and then only with the concurrence of the conference originator, removable media may be removed before the clearing process. After system clearing, removable media will be removed, marked appropriately if not marked, and stored in a secure container. Clearing of memory will be initiated by software at the hub. 8.3 Software (U) (U) Software utilized in CHOSUN will be largely off-the-shelf soft- ware with a limited amount of software newly developed by the vendor. This section describes the procedures for developing, testing, and controlling the software. 8.3.1 (U) System and Application Software Design, Development, Installation Maintenance, and Modification. All software utilized within the H UN network will be provided by the CHOSUN program office. Sites may not modify or add to the software package provided. (U) The system consisting of commercial and newly developed software must be tested and shown to satisfy the CHOSUN security requirements. (U) All CHOSUN-developed software must be developed in a secure environment and maintained under strict configuration management. Those personnel responsible for the design and development of UNCLASSIFIED Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 UNCLASSIFIED software have the best knowledge of its possible weaknesses. There- fore, all personnel (contractor and Government) who are involved in the design and/or development of any software that is not commer- cially available, shall have as a minimum, a TOP SECRET clearance. Work shall be done in a classified environment and all listings shall be labeled SECRET. a. (U) Security specifications for each new system release will be developed by the Program Management Office, coor- dinated with the NSO, and approved by the NCWG prior to development. b. (U) In-process design reviews for new system releases will be conducted by the Program Management Office in coordina- tion with the NSO and NCWG to ascertain that the proposed design meets the approved specifications. The results of the design review will be fully documented and maintained as official records of the Program Management Office. c. (U) System tests of new system releases will be conducted by the Program Management Office to demonstrate the func- tionality and stability of the new system release and that the system meets the approved security specifications. Tests will be designed by the Program Management Office, coordinated with the NSO, and approved by the NCWG. For the purposes of this testing, it will be assumed that the security features of the software can be penetrated under serious and sustained efforts. The purpose of these tests will not be to prove the integrity of the software and its ability to withstand penetration efforts but rather to as- certain that the security features function correctly under normal constraints. The testing should answer questions such as: (1) (U) Is residue on scratch mass storage cleared during allocation? (2) (U) Do security caveats print correctly? (3) (U) Are users and terminals properly identified? (4) (U) Does the system properly detect and respond to security incidents? (5) (U) Are all audit reports relating to security correct? UNCLASSIFIED Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 UNCLASSIFIED (6) (U) Do new security interfaces developed for this release function correctly? (U) Testing shall be conducted on development copies of the system against unclassified test data bases. The volume and variety of test data and the extent of testing shall be sufficient to ensure that the system will function in a cohesive, identifiable, predictable, and reliable manner. Upon completion of the test, the test results will be fully documented and maintained as part of the official records of the Program Management Office. Prior to installation of new system releases, the NCWG will certify that the system meets the documented and approved specifications and that results of the test demonstrate that the security provisions are adequate. (U) To preclude the inadvertent disclosure of classified information to maintenance personnel, any node undergoing maintenance will be offline from the network. In addition, any maintenance which requires accessing any system dumps will be performed by maintenance personnel with the requisite clearance to see any classified which may be contained therein (see section 5, Personnel Security). The NISSO/HISSO will be notified of all requirements for maintenance personnel, and a record of such visits will be made and retained for one year. 8.3.2 (U) Configuration Management. The software utilized at the nodes is limited to that supplied by the CHOSUN program office. All CHOSUN-developed software shall be classified SECRET. All new re- leases will be delivered and installed by contractor personnel sup- porting the CHOSUN Program Management Office. The NISSO shall be responsible for assuring that the software is stored in a secure container. (U) The Program Management Office shall maintain an operational and a developmental set of system software. In addition, a prior release of the system shall be retained as backup. Backup copies of the operating system and utilities will also be available at all nodes and the hub. All proposed software modifications must be reviewed and approved in accordance with the CHOSUN Configuration Management Plan. The proposed change will be reviewed by the Configuration Review Board to determine if the proposed modification significantly affects security. All new software releases will be subjected to design reviews and testing as identified in section 8.3.1. Inter- release of individual changes (software patches) that significantly impact security shall be distributed only with the approval of the NSO after favorable evaluation of test results. UNCLASSIFIED Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 UNCLASSIFIED (U) A software modification shall be considered to significantly affect security if modules performing any of the following functions are being altered: a. (U) Audit. b. (U) Authentication. c. (U) Labeling. d. (U) User identification. e. (U) Privacy keying. 8.4 Audit Trails (U) (U) The NSO shall examine the audit trails for the network on a daily basis. The authority for any unexpected use of the network shall be investigated. The users identified by the system audit trail shall be compared to the facility lock audit trail. (U) Audit trails shall be maintained at each node and at the hub, and shall be retained for one year. The audit trails should be kept in machine-readable form and may be consolidated if desired. (U) The hub audit trail shall, at a minimum, record the following information: a. (U) Date and time of conference. b. (U) Identity of individual who scheduled the conference. c. (U) Participants in conference (nodes). d. (U) Duration of conference. e. (U) Unclassified name of conference (assigned by scheduler). f. (U) Classification of conference. g. (U) Media used (e.g., voice, word processing). h. (U) File and data tranfers, to include file name, sender, number of box pages or freeze-frame screens transmitted, and receiving users. UNCLASSIFIED Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 UNCLASSIFIED i. (U) Date authorized for release (i.e., printing, storing on a floppy disk). (U) The node audit trail shall include, at a minimum, the following information: a. (U) Date and time of conference. b. (U) Participants (individuals) at the node. c. (U) Name of conference. d. (U) Identification and classification of media utilized as input or created as output. e. (U) The classification, time sent, and destination of all data leaving the node. f. (U) Date authorized for release (i.e., printing or storing on a floppy disk). 8.5 ADP Products and Storage Media (U) 8.5.1 (U) Marking, Storage, and Control/Accountability. All ADP products (e.g., printed listings, documents, hard copy printouts of CRT displays) and storage media (e.g., disk packs, magnetic tapes, diskettes) shall be marked, stored, and controlled in accordance with the requirements prescribed for the highest level of classification and sensitivity of any information contained in the product or stored on the media. 8.5.1.1 (U) Marking: a. (U) ADP Products. All classified ADP products shall be marked as prescribed below. Detailed procedures are pro- vided in section 7. In addition, to provide a means for controlling the products, all classified ADP products should also be marked with the originator and a unique identifier. To facilitate the proper safeguarding of products that cannot have their assigned classification/sensitivity immediately verified, the classification of the system environment in which the product was produced should also be clearly indi- cated on the front of the ADP product. (1) (U) Printed Listings. Listings containing classified information shall be marked with the intended security classification on the top and bottom of each page. The classification markings may be applied by the ADP UNCLASSIFIED Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 UNCLASSIFIED equipment or by other means. The front cover should be marked with the safeguard statement as shown in figure 8-1. Each page should be appropriately numbered, and the user is responsible for checking the continuity of page numbering as soon as practicable after receipt. This review will reduce the possibility of accidental distribution of material classified at a higher level than the basic listing. (2) (U) CRT Displays. The system shall display the appro- priate classification level and caveats on the CRT screen when a file is initially opened. If a hard copy of the CRT display is made, the user is responsible for adding the required security classification at the top and bottom of each page. b. (U) Storage Media. All storage media (e.g., magnetic tapes, disks, disk packs, diskettes) shall be externally marked with their overall security classification, special access restrictions, and a permanently assigned identifi- cation/control number. (1) (U) Magnetic Tapes. In addition to the above-stated minimum requirements, each magnetic tape shall have a gummed label affixed containing, at least, the name of the owner of the tape, date of creation, tape classi- fication, identification of the tape contents, and the tape identification/control number. (2) (U) Removable Disk Packs. Removable disk packs shall be marked with the same information required for mag- netic tapes. The identification control number shall be marked directly on the hub of the disk pack. CAUTION: Care must be taken not to attach any labels that would destroy the balance of the disk pack and cause a disk crash. Use of a magic marker is best for marking the pack itself. Gummed labels shall be af- fixed to the top of the disk pack cover to control information. (3) (U) Other Media. All other media shall be conspicu- ously marked on their covers with the minimum infor- mation described above. 8.5.1.2 (U) Storage. All classified information (ADP products and storage media) must be stored in accordance with requirements for the highest classification and sensitivity of the information being UNCLASSIFIED Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 UNCLASSIFIED SAFEGUARD STATEMENT HANDLE AS TOP SECRET SI/ / / INFORMATION UNTIL SIGNED BY INDIVIDUAL WHO HAS DETERMINED THAT THE SECURITY CLASSIFICATION OF THIS DOCUMENT IS APPROPRIATELY MARKED AND THAT THE DOCUMENT CAN ASSUME THE HANDLING REQUIREMENTS FOR THAT CLASSIFICATION. REPORT ANY UNUSUAL OR UNREQUESTED OUTPUT DISCREPANCIES IMMEDIATELY TO: (INFORMATION SYSTEM SECURITY OFFICER, ROOM NUMBER, PHONE NUMBER). I HAVE REVIEWED THIS DOCUMENT AND BASED ON THE CONTENT FOUND IT SHOULD BE CLASSIFIED: SIGNATURE DATE UNCLASSIFIED Figure 8-1. (U) Safeguard Statement 8-8 UNCLASSIFIED Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 UNCLASSIFIED stored. Facilities for both open and closed storage of classified information may be provided at each node. The NISSO will be responsible for determining what information may be maintained in an open storage facility. All other classified information, to include all storage media and all network/system software, will be maintained in a closed storage facility. Section 7.5, Storage and Safekeeping, states the security requirements for the storage and safekeeping of classified information. 8.5.1.3 (U) Control and Accountability. Control and accountabil- ity procedures must be established for all classified informa- tion. General procedures for control and accountability of ADP products and storage media are provided below. Detailed procedures are provided in section 7.6, Accountability and Control. a. (U) ADP Products. The user shall receipt for all classi- fied material received from the network. The user is responsible for initiating formal accountability controls for the products received. ADP products will be marked on their front cover with a safeguard statement (see figure 8-1). The user will be responsible for protecting ADP products marked with the safeguard statement as appro- priate for the highest classification and all categories of data that were contained in the ADP system at the time the product was produced. After reviewing the output product, verifying its actual classification, and com- pleting the safeguard statement, the customer may control the product at its actual classification. b. (U) Storage media. Procedures for maintaining an inven- tory of all removable storage media shall be estab- lished. As a minimum, the inventory listing should contain the identification/control number, the highest security classification/special category caveats, and date of creation of the device. The inventory listing shall be verified at least annually. Devices classified SECRET and below should also be verified at least annually. 8.5.2 (U) Erase, Declassification, and Destruction Procedures. 8.5.2.1 (U) Erase Procedures. At the end of each conference, each memory location of the processor and the special devices shall be overwritten to preclude the unauthorized disclosure of classi- fied data. The CHOSUN network software will provide the capability for automatically overwriting areas of memory and the disks which may be used to store data. Erased memory units and storage media must still be protected in accordance with the requirements for the highest classification and sensitivity of the information that UNCLASSIFIED Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 UNCLASSIFIED was stored, until the declassification procedures outlined in section 8.5.2.2 have been applied. 8.5.2.2 (U) Declassification Procedures. Each node shall have on site the necessary programs, equipment, and procedures for declassifying all ADP equipment that may be used for processing or storing classified material. (U) When any of the memory units or storage media are removed from the controlled environment, the following declassification proce- dures apply: a. (U) Magnetic Tapes. Appendix I lists the names and model numbers of magnetic tape erase equipment that are approved for declassifying magnetic tapes. Detailed specifications for erasing magnetic storage media are contained in appen- dix J, Specifications for Magnetic Tape Erase Equipment. b. (U) Magnetic Disks and Disk Packs (Operative). When the capability exists as an integral part of the storage sub- system, an AC/DC erase will be applied to all data tracks before the tracks are overwritten a minimum of three times and the overwrite is verified. Appendix K lists approved disk/disk pack degaussers. Thereafter, all storage loca- tions will be overwritten a minimum of three times: once with the binary digit "1," once with the binary digit "0," and once with a single numeric, alphabetic, or special character. Such alphanumeric or other UNCLASSIFIED data shall be left on the device. The current electrical used in overwriting must be equal to or greater than that used in recording the information, but of a strength that will not damage or impair the equipment. c. (U) Magnetic Disks and Disk Packs (Inoperative). If the storage media has failed in such a manner that it cannot be overwritten, the media may be declassified by one of the following methods: (1) (U) Expose the recording surface(s) to a permanent magnet having a field strength at the recording sur- face of at least 1,500 oersted. Care must be taken to ensure that the entire surface is wiped at least three times by a nonuniform motion of the magnet. Care must also be taken to assure that all tracks are covered by the center of the magnet. A thin sheet of clear plastic (1-5 mil sheet) should be used to prevent damage to the recording surface(s). 8-10 UNCLASSIFIED Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 UNCLASSIFIED (2) (U) Disassemble the platters from the disk pack. Sand off the recording surfaces,on both sides of the platter. (3) (U) Disassemble the platters from the disk packs. Use a torch and burn off the recording surfaces on both sides of the platters. (4) (U) Disassemble the platters from the disk pack. Sand off the recording surfaces on both sides of the platters and spray paint the recording surfaces. d. (U) Internal Memory. Hardware/software techniques for the declassification of internal memory will be provided as part of the system. See section 8.2.3, System Clearing Procedures. e. (U) Magnetic Storage Media Used To Store Analog, Video, or Similar Nondi ital Information. Magnetic tape used to record analog, video, or similar types of nondigital infor- mation may be declassified by degaussing as in paragraph 8.5.2.2.a Rigid magnetic storage surfaces may be declas- sified as in paragraph 8.5.2.2.b above, except that the UNCLASSIFIED overwriting signal must be analog instead of binary, with the latter recording left intact on the device. In the case of a failure of the degausser or the overwriting methods, a permanent magnet may be used as in paragraph 8.5.2.2.c above for rigid recording surfaces. 8.5.2.3 (U) Destruction Procedures. Appendix L specifies approved devices for the physical destruction of all classifed paper waste. In addition, the following paragraphs define the procedures for the destruction of classified ADP products and storage media. a. (U) ADP Products. Classified documents and material shall be destroyed by burning, or with the approval of the NISSO/ HISSO by melting, chemical decomposition, pulping, pulver- izing, shredding, or mutilation sufficient to preclude recognition or reconstruction of the classified information. Records of destruction are required for compartmented, TOP SECRET, and SECRET information. The record shall be dated and signed at the time of destruction by two witnesses for compartmented and TOP SECRET information and one witness for SECRET. In the case of information placed in burn bags for central disposal, the destruction record need only be signed by the witnessing official or officials when the information is so placed. Records of destruction shall be maintained for a minimum of two years. In individual cases involving UNCLASSIFIED Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 UNCLASSIFIED SECRET information, the NISSO/HISSO may waive the require- ment for destruction records if compliance would create an unacceptable degree of operating inefficiency. (U) Classified waste, such as handwritten notes, carbon paper, printer ribbons, and working papers, shall also be destroyed when no longer needed by a method described above. Destruction records are not required. b. (U) Storage media. Storage media that cannot be declassi- fied in accordance with section 8.5.2.2 Declassification Procedures, may be destroyed by burning or, with the approval of the NSO, by melting, chemical decomposition, pulping, pulverizing, shredding, or mutilation. 8.5.2.4 (U) Disposition/Destruction Approval. With the specific approval in each case of the NISSO, storage media declassified in accordance with the procedures described in paragraph 8.5.2.2 may be handled as UNCLASSIFIED and released as necessary. (U) A record of the declassification of storage media and the NISSO/ HISSO approval shall be maintained for a period of two years after disposition of the devices or equipment. (U) Guidance for the declassification of storage media not covered in section 8.5.2.2 may be obtained by submission of all pertinent details to the NSO for consideration on a case-by-case basis. (U) In the absence of data eradication by approved equipment or procedures, or at the direction of the NSO, storage media shall be safeguarded in the manner prescribed for the highest classi- fication, and for each special category, ever recorded thereon until it is destroyed. (U) All labels and security classification markings shall be removed from the magnetic storage media after declassification but before release as UNCLASSIFIED. 8.6 Access Controls (U) 8.6.1 (U) General. Each individual user of the system, including personnel utilizing CHOSUN word processing equipment, will have a unique UNCLASSIFIED USERID assigned. The NSO is responsible for maintaining USERIDs, as well as generating and distributing the log- on passwords for each USERID for network access. In addition, the NISSO is responsible for generating and distributing USERIDs and log-on passwords for the word processor at the node. All passwords will be stored in an approved security container. A password-gene- 8-12 UNCLASSIFIED Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 UNCLASSIFIED rating program may be utilized if approved by NSA. (U) Official requests for individual(s) access will be submitted in accordance with the procedures identified in section 5. The NSO will act as central custodian of all system/network access authorization requests and will notify the appropriate NISSO/HISSO or PMO of approvals/disapprovals. The NISSO/HISSO will install a USERID and password on the node's word processor for each CHOSUN user for his node. 8.6.2 (U) Changes. Log-on passwords will be deleted or changed under any of the following conditions: a. (U) When an individual's access is withdrawn for any reason (e.g., transfer, discharge, reassignment). In a normal situation, individual access is withdrawn before clearance is revoked. b. (U) When a password or record of passwords has been compromised or is suspected of being compromised. c. (U) At least semiannually. 8.7 Security Incidents (U) (U) All security incidents will be investigated by the NISSO/HISSO to determine their cause and, where possible, corrective action will be taken. In addition, all incidents affecting one or more nodes will be reported to the NSO. The FBI will report all Soviet Bloc threats to the National Security Council and then to the individual agency NISSO. All incidents will be fully documented so that areas requiring special corrective action can be identified. If it is determined that a compromise of classified information may have occurred, a report of facts surrounding the incident shall be imme- diately forwarded by the NSO to the NCWG for evaluation. The preliminary investigation conducted by the NSO may be followed by a formal investigation by the NCWG if required. The NCWG will deter- mine if system/network recertification is required. Individual investigation reports will be maintained for three years. 8.8 Contingency Operations Plans (U) 8.8.1 (U) General. The procedures established in previous sections for personnel, physical, information, communications, and ADP secur- ity have been formulated to protect against deliberate attempts to compromise the CHOSUN network, as well as those contingencies for which safeguards may be implemented to protect against permanent destruction, extended loss, or degradation of the node/hub network UNCLASSIFIED Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 UNCLASSIFIED capabilities. (U) While high reliability of the node systems and the network is critical, the availability of alternative communications media, the close geographical proximity of the nodes, and the limited amount of space at the nodes and hub militate against complete redundancy of all equipment at all facilities. 8.8.2 (U) NISSO/HISSO Involvement. Due to the criticality of the planning required for continuity of operations, the NISSO/HISSO will be responsible for the formulation and periodic testing of the node contingency plans. All test results will be forwarded to the NSO for review and evaluation. 8-14 UNCLASSIFIED Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 CONFIDENTIAL SECTION 9. COMMUNICATIONS SECURITY, PRIVACY, AND EMANATIONS SECURITY (U) 9.1 General (U) (C) Due to the extreme sensitivity of the information handled by the CHOSUN network, positive measures to protect the electrical information from disclosure to unauthorized persons must be taken. These measures are grouped into three categories: Communications Security (COMSEC), privacy, and Emanations Security (EMSEC). 9.2 Communications Security (U) 9.2.1 (C) Encryption. To ensure adequate communications security, all signals leaving each node and the hub switch facility shall be encrypted using KG-81 cryptographic equipment. This equipment will be installed and operated in accordance with KAO-179A/TSEC, "Operat- ing Instructions for the KG-81 in the CI-3 System, and TRI-TAC." The keying material to be used for the KG-81s shall be TS/SCI and must be protected by storage in a GSA container approved for TOP SECRET or in a Class A vault. 9.2.2 (U) COMSEC Custodian. Each node and the hub facility will appoint a COMSEC custodian and alternate custodian. These indivi- duals shall be responsible for the acquisition, storage, operation, maintenance, and safeguarding of all cryptographic materials at their installation. Custodians should be appointed in accordance with existing internal regulations of the agency involved. 9.2.3 (C) RED Technical Control Facilities. Since all RED tech- nical control facilities process highly classified signals in the clear, all such facilities must be designed, installed, and oper- ated in accordance with NACSIM 5203. Positive means must be taken to prevent either the inadvertent or deliberate connection of RED signals to BLACK communications facilities. Under no condition is the connection of RED signals (even though protected by Data Encryp- tion Standard equipment) authorized to any public, private, or Government communications network. All signal connections to the Washington Area Wideband System (WAWS) must be on a BLACK basis. 9.3 Privacy (U) 9.3.1 (C) Data Encryption Standard (DES). To ensure privacy and protection of the need-to-know requirement, DES equipment will be used to further process classified information. It should be noted that the use of DES does not provide communications security for signals and hence any signals leaving the RED enclosure must be pro- tected by cryptographic equipment or Protected Distribution Systems 9-1 CONFIDENTIAL Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 CONFIDENTIAL (PDSs) in accordance with NACSIM 5203 and NACSI 4009. The DES is not approved for the protection of data classified by the National Security Act of 1947, as amended, or the Atomic Energy Act of 1954, as amended. The DES shall be implemented according to FIPS Pubs. 46 and 81. Since data protected by DES is still considered as classi- fied information, more stringent means of protection than those required by FED STDs 1026 and 1027 are required (i.e., NACSIM 5203, NASCI 4009, and NACSEM 7002). In addition, all DES equipment and keying material will be protected as TOP SECRET. 9.3.2 (U) DES Custodian. Each node and the hub facility will ap- point a DES custodian and alternate custodian. These individuals will be responsible for the acquisition, storage, operation, main- tenance, and safeguarding of all DES material. These individuals will function similarly to the COMSEC custodians although the regulations governing this application of the DES have yet to be developed. 9.4 Emanations Security (EMSEC) (U) (U) The Director of Central Intelligence (DCI) has directed in DCID 1/19 that, "all electronic equipment which is used to pro- cess or transmit SCI shall meet national standards for TEMPEST." Therefore, all CHOSUN facilities must be TEMPEST accredited. (C) Compliance with the National Communications Security Commit- tee's (NCSC) National Policy on the Control of Compromising Emana- tions is built into the CHOSUN system. There are three methods that may be used for controlling compromising emanations: first, to provide the equipment with a Controlled Zone (CZ) sufficient to preclude a successful hostile intercept action; second, to implement minimum-essential countermeasures to contain compromising emanations within the CZ; and third, to design or modify any equipment used to limit the strength of compromising emanations to acceptable limits considering the available CZ. In CHOSUN, the CZ is the walls, floor, and ceiling of the parent rooms within which are installed the RF-shielded cabinet/racks. (S) The implementation approach, as presented in the contractor's proposal, for controlling emanations includes: a. (S) An RF-shielded conference room facility for housing the user consoles in a secure environment. b. (S) Utilization of TEMPEST-approved racks/enclosure for housing support equipment, privacy devices, video com- pression equipment, and control processor equipment. 9-2 CONFIDENTIAL Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 CONFIDENTIAL c. (U) Utilization of an approved protected distribution system to distribute the CHOSUN signals within a node facility. (C) In addition, it is mandatory that all digital signals conform to NACSI 5002, "Suppression of Compromising Emanations Through Low Level Operation," or be installed using the requirements and methods of Chapter 6, NACSIM 5203. 9.4.1 (U) Facility Design. All CHOSUN facilities shall be designed and built in strict accordance with NACSIM 5203 and NACSI 4009. Pro- tective measures that must be taken are delineated in NACSI 5004, "TEMPEST Countermeasures for Facilities Within the United States." More stringent measures, as determined by local authorities, may be imposed. 9.4.2 (C) Future Equipment Design, Testing, and Certification. All future equipment which will be used for processing RED CHOSUN information and not planned for installation within an RF-shielded room or RF-shielded equipment cabinet/racks, shall meet the requirements specified in a. or b. below: a. (U) Meet the baseline emanation limits established by NACSIM 5100A, or b. (U) Be modified after TEMPEST tests to provide an equivalent level of protection as that provided by NACSIM 5100A. (U) For specific equipment planned for installation in a non-RF- shielded environment, the provisions of NACSEM 5201, "TEMPEST Guidelines for Equipment/System Design," apply to all new equipment specifically designed and constructed for use in CHOSUN. (U) A Preferred Products List (PPL) is prepared by the TEMPEST Qualification Special Committee (TQSC) of the Subcommittee on Com- promising Emanations (SCOCE), NCSC. Equipment appearing in the PPL indicate compliance with the requirements of NACSEM 5100 or NACSIM 5100A and wherever possible should be selected for use in CHOSUN when installed in a non-RF-shielded environment. 9.4.3 (U) TEMPEST Testing. All CHOSUN equipment and facilities processing classified information shall be tested for compliance with NACSIM 5100A. Newly installed equipment will require that testing be accomplished before node recertification can be given. 9-3 CONFIDENTIAL Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 CONFIDENTIAL (U) In addition to review and approval of the implementation contractor's TEMPEST Control Plan, the Government and a represen- tative of the NCWG will witness all TEMPEST-testing activities performed by the contractor at the nodes and hub. 9.4.4 (C) Protected Distribution System. NACSI 4009 requires that all signal distribution lines that carry classified data shall be accomplished via a PDS and installed in accordance with NACSIM 5203. 9.4.5 (C) Acoustics Emanation Protection. Protection against acoustical emanations shall be accomplished in accordance with NACSIM 5103 for all CHOSUN nodes/facilities that process classified information. 9.4.6 (U) Other Considerations 9.4.6.1 (U) Electromagnetic Interference (EMI). All equipment, both RED and BLACK, installed or used within the CHOSUN network, shall meet the requirements of Military Standard (MIL-STD)-461. 9.4.6.2 (U) Electromagnetic Compatibility (EMC). All equipment, both RED and BLACK, installed or used within the CHOSUN network shall meet the requirements of MIL-STD-462. 9.4.6.3 (U) Personally Owned Electronic Equipment. In order to maintain the TEMPEST integrity of CHOSUN facilities, the introduction of personally owned electronic equipment such as radios, televisions, tape recorders, or computers into any CHOSUN facility is strictly prohibited. 9-4 CONFIDENTIAL Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 UNCLASSIFIED SECTION 10. SECURITY TESTING (U) 10.1 General (U) 10.1.1 (U) Purpose. While Security Test and Evaluation will be a part of the certification process, a continuous security testing program is necessary to maintain a secure environment and a high security posture. Accordingly, it is essential that all aspects of CHOSUN security be tested on a thorough and frequent basis; these tests shall occur on both a scheduled basis and on unannounced occasions in order to provide continuing evidence of the effective- ness of the in-place security features. 10.1.2 (U) Responsibility. It is the responsibility of the Net- work Security Officer to ensure that appropriate security testing is carried out for CHOSUN; this testing shall be comprised of two major elements: preplanned testing and unannounced spot-check testing. Results of all test activities will be reviewed and evaluated by the NSO, and any resultant recommendations for addi- tional, enhanced security protection will be forwarded to the NCWG. 10.2 Preplanned System/Network Tests (U) (U) The NSO is responsible for development of a comprehensive security test program for CHOSUN to be approved by the NCWG. The NSO will work with the NISSOs and HISSO in order to coordinate individual, scheduled test periods and site visits relative to various aspects of the test plan. The NISSOs/HISSO are responsible for documenting the results of the testing activities and forwarding results to the NSO. 10.2.1 (U) Test Scope. The NSO is responsible for development of policy and procedures for security testing. Within the node/hub element, testing activities/audit activities will be conducted to include, at a minimum: a. (U) Verify on-site availability of all current-issue CHOSUN security documentation and procedural knowlege by the NISSOs/HISSO. b. (U) Perform periodic on-site inspections to ensure physical integrity of all CHOSUN facilities, such as equipment/equipment bays, and the protected distri- bution system. c. (U) Perform periodic on-site TEMPEST tests to ensure absence of compromising emanations. Newly installed equipment, or the modification of existing equipment, UNCLASSIFIED Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 UNCLASSIFIED will require that on-site TEMPEST testing be reaccom- plished prior to the activation of the site and the issuance of a new site certification. d. (U) Review/verify completeness of all information accountability records, as well as procedures/fa- cilities for information storage and/or destruction. e. (U) Review/verify completeness of system access logs (e.g., operator, maintenance personnel) for nonuser personnel. f. (U) Conduct periodic checks on all "alarmed" elements (e.g., intrusion detection system, external "ports" from consoles). g. (U) Review/verify node/hub roster for all nonuser per- sonnel authorized for CHOSUN access. 10.2.2 (U) Test Schedule and Frequency. Periods in which tests are to be performed within the node/hub elements will be coordinated between the NSO and the cognizant NISSO/HISSO. In no case should security testing activities take priority over operational use of the CHOSUN network; local or network security tests in progress when operational use is required shall be immediately suspended. (U) Since security testing is a continuous process, there is no one assigned frequency of repetition for the testing activities as dis- cussed in section 10.2.1. It is expected that the range will vary from a minimum of once daily for alarm systems to once every three months for review/audit of accountability logs. Minimum-prescribed frequencies of performance will be set in the Network Security Test Plan. 10.2.3 (U) Resources. Personnel augmentation, if any, necessary to perform the test activities within a node/hub element is the responsibility of the NSO, through close coordination/cooperation among the NSO and NISSOs/HISSO. It may be desirable to form a network test team to perform all testing activities. If the team concept is accepted, test team members should be selected in order that all of the following areas of expertise are represented: a. (U) Procedural security doctrine. b. (U) Personnel security. c. (U) Physical security. UNCLASSIFIED Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 UNCLASSIFIED d. (U) Communications/emanations security. e. (U) Computer security. f. (U) Threat/exploitation currency. 10.3 Unannounced Random System Tests (U) (U) In addition to the scheduled preplanned system tests discussed in section 10.2, there will be unannounced spot checks of any/all security features of the CHOSUN network. These tests will be authorized by the NCWG, though the NSO is responsible for schedul- ing the test times. 10.3.1 (U) Test Scope. The scope of potential test activities for the unannounced security tests and spot checks is identical to that of the preplanned tests (section 10.2). 10.3.2 (U) Test Schedule. Tests will be conducted as directed by the NSO. As in the case of preplanned testing, any unannounced security test will be suspended immediately if operational use of the local CHOSUN element is needed. 10.3.3 (U) Resources. Resources to conduct unannounced tests are the sole responsibility of the NSO. As discussed for preplanned tests, it may be desirable to develop a network security team with qualified membership in order to most effectively support the unan- nounced checks. UNCLASSIFIED Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96B01172R000400050018-5 UNCLASSIFIED THIS PAGE INTENTIONALLY LEFT BLANK UNCLASSIFIED Declassified and Approved For Release 2011/11/10: CIA-RDP96B01172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 UNCLASSIFIED DEFINITION OF TERMS (U) UNCLASSIFIED Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 UNCLASSIFIED UNCLASSIFIED Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 UNCLASSIFIED Access Data). The ability to receive products created or trans- mitted by the system; implies no form of direct communication with the system. Access (Physical). The ability or means to enter a controlled area. Access (System). The ability to communicate with (input to or re- ceive output from) the system; implies physical access to the system. Access Code. A software feature designed to detect and prevent unauthorized use (and permit authorized use) of the system. Access Control. The process of limiting physical access to the system and system access to the resources of the system) to author- ized personnel. Accreditation (Approval). The authorization and approval granted to a system or network to process sensitive classified data in an oper- ational environment. Accreditation of the system will be made on the basis of certification by the Network Certification Working Group that designated technical personnel have examined and verified that the design (all network hardware and software) and implementa- tion of the system meet prescribed technical and procedural require- ments for achieving adequate system/data security. Accreditation Authority. See Designated Approving Authority. Audit. To conduct the independent review and examination of system records/activities in order to test for adequacy of system controls, to ensure compliance with established policy and operational proce- dures, and to recommend any indicated changes in controls, policy, or procedures. Audit Trail. A software feature providing a chronological record of system activities/functions that when reviewed/monitored gives an accurate account of usage or user activity within the system. Authentication. The software feature which verifies user eligibil- ity to access the system. Authorization. The granting to a user the right of access 1) to the a controlled area or 2) to the system within the controlled area. Backup Procedures. The provisions made for recovery of data and for restart or replacement of equipment after degradation or loss of the system. Also see Contingency Plans. UNCLASSIFIED Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 UNCLASSIFIED Certification. The technical process, made as part of and in sup- port of the accreditation process, whereby a procedure, hardware/ software component, system, or network is established as meeting prespecified security requirements. Classification. The determination that official information requires, in the interests of national security, a specific degree of protection against unauthorized disclosure, coupled with a desig- nation signifying that such a determination has been made. Closed Storage. The storage of sensitive compartmented information and material in properly secured General Services Administration (GSA) approved security containers within an accredited facility when the facility is not occupied by authorized personnel. Communications Security (COMSEC). The protection (hardware and software) that ensures the authenticity of telecommunications and that results from the application of measures taken to deny unautho- rized persons any information which might be derived from the acqui- sition of telecommunications. Compartmented Intelligence. See Sensitive Compartmented Informa- tion. Compromise. The unauthorized disclosure or loss of sensitive/ classified information. Compromising Emanations. Unintentional data-related or intelli- gence-bearing signals which, if intercepted and analyzed, disclose classified information being transmitted, received, handled, or otherwise processed by any information-processing equipment. Computer Facility. One or more computer systems with their peri- pheral devices, technical controls, and communications equipment in a single controlled area. Configuration Control. See Configuration Management. Configuration Management. The engineering management procedure that includes the following elements: a. Configuration Identification. Selection of the documents which identify and define the configuration baseline characteristics of an item. b. Configuration Control. Controlling changes to the config- uration and its identification documents. UNCLASSIFIED Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 UNCLASSIFIED c. Configuration Status Accounting. Recording and reporting the implementation of changes to the configuration and its identification documents. d. Technical Review. The method by which the contractor and Government determine that the development of a configura- tion item has reached contract milestone requirements. e. Configuration Audit. Checking an item for compliance with the configuration identification. Contingency Plan. A plan which details alternative operational procedures for performing functions which can no longer be performed due to degradation or loss of the system. Controlled Access. See Access Control. Control Zone. The physical space that surrounds equipment that is used to process sensitive defense/political information and that is under sufficient physical and technical control to preclude unau- thorized entry or compromise. Countermeasure. A security feature or control (e.g., hardware/soft- ware, personnel, physical, communications, or administrative) desig- nated to reduce or eliminate security threats to the system. Cryptographic System. A system which uses NSA cryptographic equip- ment that is directly connected to a signal line, making continuous processes of encryption and transmission or reception and decryp- tion. Data Security. The protection of data from accidental, unau- thorized, intentional, or malicious modification, destruction, or disclosure. Declassification. The determination that classified information no longer requires, in the interest of national security, any degree of protection against unauthorized disclosures, together with a removal or cancellation of the classification designation. Derivative Classification. A determination that information is in substance the same as information currently classified, and the application of the classification markings. Designated Approving Authority (DAA). The person designated to approve/accredit the CHOSUN network for the processing, use, storage, production, and transmission of sensitive/classified information. UNCLASSIFIED Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 UNCLASSIFIED Downgrade. A determination that classified information requires, in the interest of national security, a lower degree of protection against unauthorized disclosure than currently provided, together with a changing of the classification designation to reflect such a lower degree of protection. Electromagnetic Emanations. Signals transmitted as radiation through the air and through conductors. Emanations Security (EMSEC). The protection resulting from all measures designed to deny unauthorized persons information of value which might be derived from intercept and analysis of compromising emanations. Encryption (End-to-End). Encryption of information at the origin within a communications network and decryption occurring at the final destination point. Encryption (Link). The application of on-line crypto operations to a ink of a communications system so that all information passing over the line is encrypted. Escort. A designated person who has the appropriate clearance TS/SCI) and access authorization for material processed, stored, and transmitted by the system and is sufficiently knowledgeable to understand the security implications of and to control the activi- ties of an individual who does not have the appropriate clearance for unescorted access. Hardware Security. Computer equipment features or devices used in the system to preclude unauthorized access to data or system resources. Hub. The central switching facility for CHOSUN which links all nodes in the network. Hub Information System Security Officer (HISSO). The individual designated to provide general supervision, administration, and overall coordination of security matters for the Hub to include System Control, Network Control, and Central Technical Control elements. Information Security. The result of any system of administrative policies and procedures for identifying, controlling, and protecting from unauthorized disclosure, information whose protection is authorized by executive order or statute. UNCLASSIFIED Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 UNCLASSIFIED Keying Materials. In cryptography, those devices which control the operations of encryption and decryption. Mode of Operation. The security environment and method of operating the system. Also see System High. Need-to-Know. The necessity for access to, knowledge of, or posses- sion of classified or other sensitive defense information in order to carry out official military or other governmental duties. Responsibility for determining whether a person's duties require that he possess or have access to certain information, and whether he is authorized to receive it, rests upon the individual having current possession, knowledge, or control of the information in- volved and not upon the prospective recipient. Network. The interconnection of the CHOSUN systems together with the necessary communications support. Network Certification Working Group (NCWG). The organization designated to perform certification of the CHOSUN network. Network Security Officer (NSO). The person designated to provide general supervision, administration, and overall coordination of CHOSUN system security matters, including operations, test, and evaluation. Node. A computer facility at the user's location. Node Information System Security Officer (NISSO). The individual designated to provide general supervision, administration, and overall coordination of node security matters. Open Storage. The storage of classified information on shelves, in metal containers, locked or unlocked, but not in GSA-approved secure containers, within an accredited facility while the facility is not occupied by authorized personnel. Operational Network. A network used to provide intercomponent transfer of operational traffic (e.g., data, graphics, video) between nodes. Operator. A person technically qualified to perform certain func- tions on the system. Also see Technical Control Operator. Original Classification. An initial determination that information requires, in the interest of national security, protection against unauthorized disclosure, together with a classification designation signifying the level of protection required. UNCLASSIFIED Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 UNCLASSIFIED Parent Room. The space located inside a building structure, within which is assembled either an RF-shielded enclosure or one or more RF-shielded cabinet/racks. Personnel Security. The procedures established to ensure that all personne accessing the system have the appropriate clearance and authorization. Physical Security. That part of security concerned with the physical measures designed to safeguard personnel, to prevent unauthorized access to equipment, facilities, material and docu- ments, and to safeguard them against espionage, sabotage, damage, and theft. Procedural Security. The management constraints; operational, administrative and accountability procedures; and supplemental controls established to provide an acceptable level of protection for sensitive defense information and data. Protected Distribution System (PDS). A telecommunications system which has been approved by a legally designated authority and to which electromagnetic and physical safeguards have been applied to permit safe electrical transmission of unencrypted sensitive infor- mation. RED/BLACK Concept. The concept that electrical and electronic cir- cuits, components, equipment, systems, and so forth, which handle classified plain language-information in electric signal form (RED) be separated from those which handle encrypted or unclassified information (BLACK). Under this concept, RED and BLACK terminology is used to clarify specific criteria relating to, and to differen- tiate between, such circuits, components, equipment, systems, etc., and the areas in which they are contained. Regrade. A determination that classified information requires a different degree of protection against unauthorized disclosure than currently provided, together with a change of classification designation that reflects such different degree of protection. SECRET. National security information or material requiring a substantial degree of protection, the unauthorized disclosure of which could reasonably be expected to cause serious damage to the National security. Security Incident. Any incident involving classified information in which there is a deviation from the requirements of governing security regulations. (Compromise, inadvertent disclosure, need-to- UNCLASSIFIED Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 UNCLASSIFIED know violations, and administrative deviation are examples of a security incident.) Security Test and Evaluation (ST&E). An examination and analysis of the security features of the system as they have been applied in an operational environment to develop factual evidence upon which an accreditation can be based. Sensitive Compartmented Information (SCI). That intelligence infor- mation having special controls indicating restrictive handling for which systems of compartmentation or handling are formally established. Sensitive Compartmented Information Facility (SCIF). An area, room, group of rooms, or installation which has been accredited by appro- priate authority for storage, discussion, and/or processing of sen- sitive compartmented information. Software Security. Those general purpose executive, utility, or software eve opment tools, applications programs, and routines which protect data or information handled by the system and its resources. System. The combination of all CHOSUN hardware, software, and firm- ware at a node or the hub. System High. For CHOSUN the utilization of the network to process, store, or transmit Secure Compartmented Information (SCI) when the total system, to include the central facility (Hub), the node terminals, and all their connected peripheral devices, are secured in accordance with the requirements for the highest classification level of all types of SCI processed, stored, or transmitted therein. TEMPEST. Short name referring to investigations and studies of com- promising emanations. Sometimes used synonomously for the term "compromising emanations" (e.g., TEMPEST testing). Terminal Area. The physical space within the control zone of each node housing the video/data consoles and peripheral devices of the system. TOP SECRET (TS). National security information requiring the highest degree of protection, the unauthorized disclosure of which could reasonably be expected to cause exceptionally grave damage to the national security. Unescorted. A person who has the appropriate clearance (TS/SCI) and access authorization for material processed, stored, and transmitted UNCLASSIFIED Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 UNCLASSIFIED by the system to preclude the necessity of an escort when accessing the system. User(s). The primary person(s)/organization(s) who will utilize the system for the purpose of exchanging sensitive defense information with other users. USERID. A unique group of alphanumeric characters that identifies a particular individual for the purpose of utilizing the system. Violation. See Security Incident. Vulnerability. The susceptibility of a particular system to a spe- cific attack, and the opportunity available to a threat agent to mount that attack. A vulnerability is always demonstrable but may exist independently of a known threat. In general, a description of a vulnerability takes account of those factors under friendly control. A-10 UNCLASSIFIED Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 SECRET Classified by: DCA 184WO0224 Declassify on: OADR SECRET Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 UNCLASSIFIED THIS PAGE INTENTIONALLY LEFT BLANK UNCLASSIFIED Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96B01172R000400050018-5 UNCLASSIFIED (U) This appendix provides the complete citation for all references contained within the CHOSUN Network Security Manual. The references are listed by the issuing department/agency for each document. UNCLASSIFIED Declassified and Approved For Release 2011/11/10: CIA-RDP96B01172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 SECRET (U) The White House, National Policy on Telecommunications and Automated Information System Security, National Security Decision Directive 145, 17 September 1984, UNCLASSIFIED. (U) The President, National Security Information, Executive Order 12356 of April 2, 1982, Federal Register, Vol. 47, No. 66, UNCLASSIFIED. (S) National Security Council, Crisis Information and Management System CIMS : Project Medusa , White House National Security Decision Directive 95, 18 May 1983, SECRET. (U) Director of Central Intelligence, Minimum Personnel Security Standards and Procedures Governing Eligibility for Access to Sensitive Compartmented Information, DCID 1/14, 13 May 1976, 9N-CLASSIFIED. (U) Director of Central Intelligence, Security of Foreign Intelli- gence in Automated Data Processing Systems and Networks (U j, DCID 1/16, 6 June 1978, CONFIDENTIAL. (U) Director of Central Intelligence, Computer Security Regulation (U), Attachment to DCID 1/16, 4 December 1984, CONFIDENTIAL. (U) Director of Central Intelligence, Security Policy for Sensitive Compartmented Information (U), DCID 1/19, 28 June 1982, CONFIDENTIAL. (U) Director of Central Intelligence, Security Policy Concerning Travel and Assignment of Personnel with Access to Sensitive Compartmented Information (U), DCID 1/20, 6 June 1978, CONFIDENTIAL. (U) Director of Central Intelligence, U.S. Intelligence Community Physical Security Standards for Sensitive Compartmented Information Facilities (U), NFIB/NFIC-9.1/47, 23 April 1981, FOUO. (U) Defense Intelligence Agency, Physical Security Standards for Sensitive Compartmented Information Facilities (U), DIAM 50-3, 20 August 1976, FOUO. (U) Defense Intelligence Agency, Security of Compartmented Computer Operations (U), DIAM 50-4, 24 June 1980, CONFIDENTIAL. (U) National Security Agency, Operating Instructions for the KG-81 in the CI-3 Systems, and TRI-TAC (U), KAO- 79A TSEC, December 1974, CONFIDENTIAL. SECRET Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 UNCLASSIFIED (U) National Security Agency, Specification for RF-Shielded Enclosures for Communications Equipment: General Specifications (U), NSA Specification 65-6, Appendix B of NACSEM 5204, January 1979, CONFIDENTIAL. (U) National Security Agency/Central Security Service, TEMPEST Security Program (U), NSA/CSS Regulation 90-5, 20 August 1980, CONFIDENTIAL. (U) National Security Agency, Communications Security Equipment System Document, TSEC/KG-81 Family (U), CSEEB-35, CONFIDENTIAL. (U) National Security Agency, Compromising Emanations Laboratory Test Standard, Electromagnetic (U), NACSE 51U0, March 1974, ONFI ENTIAL. (U) National Security Agency, Shielded Enclosures (U), NACSEM 5204, January 1979, CONFIDENTIAL. (U) National Security Agency, TEMPEST Guidelines for Equipment/System Design (U), NACSIM 5201, September 1978, CONFIDENTIAL. (U) National Security Agency, COMSEC Guidance for ADP Systems (U), NACSIM 7002, CONFIDENTIAL. (U) National Security Agency, Compromising Emanations Laboratory Test Requirements, Electroma netics U , NACSIM 51OOA, July 1981, CONFIDENTIAL. (U) National Security Agency, Compromising Emanations Laboratory Test Standard, Acoustics (U), NACSIM 5103, CONFIDENTIAL. (U) National Security Agency, Guidelines for Facility Design and RED/BLACK Installation (U), NACSIM 5203, 30 June 1982, CONFIDENTIAL. (U) National Security Agency, Protected Distribution Systems (U), NACSIM 4009, 30 December 1981, CONFIDENTIAL. (U) National Security Agency, TEMPEST Countermeasures for Facilities Within the United States (U), NACSIM 5004, NFIDENTIAL. (U) National Communications Security Committee, NCSC Policy Direc- tive 14-2. (U) Office of Management and Budget, Security of Federal Automated Information Systems, OMB Circular A-71, Transmittal Memorandum No. 1, 27 July 1978, UNCLASSIFIED. (U) National Security Act of 1947, 61 Stat. 495, 26 July 1947. UNCLASSIFIED Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 UNCLASSIFIED (U) Atomic Energy Act of 1954, 68 Stat. 919, 30 August 1954. (U) National Technical Information Agency, Telecommunications: Interoperability and Security Requirements for Use of the Data Encryption Standard in Physical Layer of Data Communications, FED-STD-1026, UNCLASSIFIED. (U) National Technical Information Agency, General Security Requirements for Equipment Using the Data Encryption Standard, FED-STD-1027, 14 April 1982, UNCLASSIFIED. (U) Department of Defense, Information Security Program Regulation, DoD 5200.1-R, August 1982, UNCLASSIFIED. (U) Department of Defense, Security Requirements for Automatic Data Processing (ADP) Systems, DoD 52 0.28, 18 December 1972, UNCLASSIFIED. (U) Department of Defense, ADP Security Manual, DoD 5200.28-M, January 1973, UNCLASSIFIED. (U) Department of Defense, Sensitive Corn artmented Information TEMPEST Policy and Guidance U , TCO/BCO DoD letter dated 15 May 1979, CONFIDENTIAL. (U) Department of Defense, Military Standardization Handbook RED/ BLACK Engineering - Installation Guidelines U , MIL-HDBK-232, 14 November 1972, CONFIDENTIAL, Superseded by NACSIM 5203). (U) Department of Defense, Electromagnetic Emission and Suscepti- bility Requirements for the Control of Electromagnetic Interference, MIL-STD-461B, 1 April 1980, UNCLASSIFIED. (U) Department of Defense, Electromagnetic Interference Character- istics Measurement of, MIL-STD-462, 9 February 1971 Int. Notice 4 dated 1 April 1980 , UNCLASSIFIED. (U) Department of Defense, Method of Insertion-Loss Measurement (U), MIL-STD-220A, UNCLASSIFIED. (U) Department of Defense, Method of Attenuation Measurement for Enclosures, Electromagnetic Shielding, for Electronic Test Purposes (U), MIL-STD-285, UNCLASSIFIED. (U) Department of Defense, General Specification for Filter, Radio Interference (U), MIL-F-15733, UNCLASSIFIED. UNCLASSIFIED Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 UNCLASSIFIED (U) National Fire Protection Association, American National Standard: National Electric Code, UNCLASSIFIED. (U) National Bureau of Standards, Data Encryption Standard, FIPS PUB 46, 15 January 1977, UNCLASSIFIED. (U) National Bureau of Standards, DES Modes of Operation, FIPS PUB 81, 2 December 1980, UNCLASSIFIED. (U) Department of the Army, Automated Systems Security, AR 380-380, 15 April 1979, UNCLASSIFIED. (U) Department of the Army, Control of Compromising Emanations (U), AR 530-4, CONFIDENTIAL. (U) Department of the Army, Army Automation Management, AR 18-1, 15 August 1980, UNCLASSIFIED. UNCLASSIFIED Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96B01172R000400050018-5 UNCLASSIFIED THIS PAGE INTENTIONALLY LEFT BLANK UNCLASSIFIED Declassified and Approved For Release 2011/11/10: CIA-RDP96B01172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 UNCLASSIFIED CHOSUN SECURITY CLASSIFICATION GUIDE (U) UNCLASSIFIED Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 UNCLASSIFIED THIS PAGE INTENTIONALLY LEFT BLANK UNCLASSIFIED Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 UNCLASSIFIED REQUEST FOR WAIVER (U) UNCLASSIFIED Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 UNCLASSIFIED THIS PAGE INTENTIONALLY LEFT BLANK UNCLASSIFIED Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 UNCLASSIFIED (U) This appendix provides a generalized form/format for a CHOSUN user node/facility to request a specific waiver from the network security policies and procedures stated herein. Waivers will be granted on a very limited basis in those instances where site-unique facility/operational limitations warrant, and are granted for a limited time only. (U) The waiver form, to be completed and endorsed by the NCWG as part of the site certification process, is unclassified prior to being completed. Classification of the completed form will be determined based upon the actual content. UNCLASSIFIED Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 UNCLASSIFIED REQUEST FOR WAIVER 1. Name of site: 2. Site location: Rooms: Building: Address: 3. Identification of requirement for which waiver is requested: (Cite paragraph in Security Manual) 4. Specific reason for waiver request: 5. Alternate compliance proposed: 6. (Expected) Duration of waiver: 7. Steps being taken to eventually meet requirement: UNCLASSIFIED Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 UNCLASSIFIED 8. Other requirements implied: (Cost, time, manpower, operational impact etc.) NCWG Representative Security Officer UNCLASSIFIED Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 UNCLASSIFIED UNCLASSIFIED Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 UNCLASSIFIED SECURITY TEST AND EVALUATION REPORT FORMAT (U) UNCLASSIFIED Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 UNCLASSIFIED THIS PAGE INTENTIONALLY LEFT BLANK UNCLASSIFIED Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 UNCLASSIFIED (U) This appendix presents a format for reporting results of the Security Test and Evaluation performed as part of the certification process for CHOSUN operation. UNCLASSIFIED Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 UNCLASSIFIED 1. COVER SHEET ? Organization/Agency, location ? ST&E time span ? Date of report ? Classification of report/declassification schedule ? Identification/signature of individual(s) responsible for ST&E as documented herein 2. INTRODUCTION AND EXECUTIVE SUMMARY ? Project CHOSUN overview - Organization/Agency Role/Mission ? Objective of the report ? Report organization ? Major evaluation findings and recommendation(s) 3. BACKGROUND ? Established security standards, criteria or policies ? Specific assumptions and definitions relative to ST&E ? Specific scope of this ST&E (i.e., exact boundary conditions assumed for this site during ST&E) ? ST&E Summary - Participants tests analysis - Tests - Analysis UNCLASSIFIED Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 UNCLASSIFIED 4. MAJOR FINDINGS ? Assets ? Threats ? Exposures In place ? Control mechanisms a Vulnerabilities - Residual - no action recommended - Requiring correction 5. RECOMMENDED CORRECTIVE ACTION(S) ? Identify action to correct cited vulnerability - Costs, priority, impact - Responsible element - Subsequent evaluation Annex A - Detailed Configuration/Description of Site Security Annex B - Test Plan Annex C - Test Result(s) Annex D - Site Checklist(s) Annex E - Site Risk Analysis UNCLASSIFIED Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 UNCLASSIFIED THIS PAGE INTENTIONALLY LEFT BLANK UNCLASSIFIED Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 UNCLASSIFIED SITE SECURITY CHECKLISTS (U) UNCLASSIFIED Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 UNCLASSIFIED THIS PAGE INTENTIONALLY LEFT BLANK UNCLASSIFIED Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 UNCLASSIFIED (U) This appendix provides generalized formats/suggested versions of individual site security checklists to be completed as an essential part of the site certification process. Unless otherwise indicated, the checklists are extracted from DIAM 50-3. Individal checklists are provided for: A. (U) General Information B. (U) Procedural/Administration Security C. (U) Physical/Facility Security D. (U) TEMPEST E. (U) ADP Security (U) These checklists are unclassified prior to data being entered. Classification of the completed checklists will be determined individually based upon their content. (U) Reponsibility to complete the individual checklists lies with the Node/Hub Security Officer although the NCWG may elect to inspect/review any element within the scope of assets/procedures covered by these checklists. UNCLASSIFIED Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96B01172R000400050018-5 UNCLASSIFIED THIS PAGE INTENTIONALLY LEFT BLANK UNCLASSIFIED Declassified and Approved For Release 2011/11/10: CIA-RDP96B01172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 UNCLASSIFIED A. GENERAL INFORMATION 1. Name of Site: 2. Site Location: Rooms: Building: Address: 3. Node/Hub Security Officer: TEL/AUTOVON: Alt. Security Officer: TEL/AUTOVON: 4. Reason for Site Certification: Original: Renewal: 5. Duty Hours: 1) Continuous: 2) to days of week 3) Other 6. For Original Certification: 1) Construction completed Date anticipated complete Date 2) Tech. Security Survey completed (Date) 3) TEMPEST Security Checklist completed (Date) 7. For Renewal of Certification: 1) Certification/Accreditation granted by (document/authority) on (Date) 2) Last Inspected by on (Date) Deficiencies F-5 UNCLASSIFIED Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 UNCLASSIFIED Corrected 3) TEMPEST Certification/Accreditation granted by on (Date) 4) ADP Certification/Accreditation granted by on (Date) 5. Date Site Certification Requested: Node/Hub Security Officer F-6 UNCLASSIFIED Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 UNCLASSIFIED B. PROCEDURAL/ADMINISTRATION SECURITY ADMINISTRATION 1. Node/Hub Security Officer: AUTOVON/TEL: Alternative Security Officer: AUTOVON/TEL: 2. Current/Most Recent Version of CHOSUN Security Documentation Available CHOSUN Network Security Manual Node/Hub Security Manual Node/Network Operating Procedures Node/Network Contingency Operations Plans Node Security Test Plan 3. CHOSUN Security Orientation: Date of Most Recent Course Completion: NSO Alt NSO 4. Program to Inform Local Security of CHOSUN Site Commander/Senior Executive Ops. Officer Briefed on By Remarks: PROCEDURAL 1. The following standardized current issue briefings are maintained by NSO: CHOSUN Security Indoctrination (Type 1 - Users, Type 2 - Other) CHOSUN Security Debrief CHOSUN Security Overview 2. Node/Hub Security Manual Last Update F-7 UNCLASSIFIED Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 UNCLASSIFIED C. PHYSICAL/FACILITY SECURITY 7. Description of surrounding area outside of building: a. Fence b. Fence lighting c. Fence guards d. Relationship of building to surrounding area 8. Building: a. Constructio b. Building access control. Continuous? During security hours only? c. Guards (Military) (Civilian) (1) Clearances (2) Frequency of checks (9) Communications (4) Emergency procedures (5) Reserves 9. Remarks: F-8 UNCLASSIFIED Declassified and Approved For Release 2011/11/10: CIA-RDP96B01172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 UNCLASSIFIED Facility security 10. Access control: a. Guards (Military) (Civilian) b. Assigned personnel (1) Clearances (2) Communications (9) Emergency procedures (4) Reserves 11. Windows: 12. Ventilating ducts: a. Walls b. Ceiling c. Floor 14. Soundproofing: (all of the preceding) 15. False ceiling: a. Type b. Distance between false and true ceilings 16. Remarks: F-9 UNCLASSIFIED Declassified and Approved For Release 2011/11/10: CIA-RDP96B01172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96B01172R000400050018-5 UNCLASSIFIED Doors 17. Number of entrances: 18. Types of doors used- a. Vault door (manufacturer, model number) b. Wood (thickness/hollow/solid) c. Wood w/metal (thickness of both door and metal covering; hollow, solid, metal on both sides) d. Metal (thickness/hollow/honeycombed) e. Other 19. Number and types of doors used for emergency exits: a. Vault door (manufacturer, model number) b. Wood (thickness.'hollow/solid) c. Wood w/metal (thickness of both door and metal covering; hollow, solid, metal on both sides) d. Metal (thiclmess/hollow/honeycombed) e. Other 20. Type of lock: (entrances) a. Combination (manufacturer, model, and group number) b. Is the entrance door Of not a vault door) and/or the access control door equipped with a pneumatic door closer? Yes No (if no, why not) F-10 UNCLASSIFIED Declassified and Approved For Release 2011/11/10: CIA-RDP96B01172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96B01172R000400050018-5 UNCLASSIFIED 21. Locks on inspection ports/windows: Of any) 22. Have hinges been properly secured on doors opening outward? Yes No How? 23. Soundproofing: (all doors) 24. Type of locking device used on emergency exits: a. Lock, describe b. Metal strap or bar c. Security deadbolt(s) d. Panic hardware e. Other, describe 25. Type of access control device used during duty hours: a. Cypher lock b. Key lock c. Electrical release d. Guard e. Other 26. Is combination lock of vault door opening into non-secure area protected against tampering? No Why? Yes How? 27. Combination changed by: on 28. Combination on file at: UNCLASSIFIED Declassified and Approved For Release 2011/11/10: CIA-RDP96B01172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 UNCLASSIFIED 29. Double check system: F-12 UNCLASSIFIED Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96B01172R000400050018-5 UNCLASSIFIED Containers 31. GSA approved- Class How many 32. Open/closed signs: 33. Combinations changed by: On 34. Combinations filed at: 35. Double check system: 36. Remarks: UNCLASSIFIED Declassified and Approved For Release 2011/11/10: CIA-RDP96B01172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96B01172R000400050018-5 UNCLASSIFIED Alarm Protection If at least two appropriately cleared personnel are on duty 24 hours every day and have the capability of con- tinuous audio or visual surveillance of the entire facility, the following is not required; however, it is suggested that it be completed for information purposes. Give manufacturer and model numbers in answering the follow- ing questions where applicable. 37. Door protection: a. Alarm door switch b. Television c. Heat detector d. Lacing e. Capacitance f. Other 38. Window protection: a. Alarm tape b. Switch c. Capacitance d. Television e. Other 39. Perimeter wall protection: a. Vibration detection b. Lacing C. Capacitance d. Other 40. Interior protection: )within facility, below false ceiling) a. Volumetric alarm system b. Television c. Other 41. Ventilation and duct protection: a. Barriers b. Acoustic baffles c. Canvas, rubber, or transparent plastic vent connection joints UNCLASSIFIED Declassified and Approved For Release 2011/11/10: CIA-RDP96B01172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 UNCLASSIFIED d. Inspection ports ?. Brealrwire alarms ? Duct trap f. Capacitance S. Other 42. Overhead protection: (space above false ceiling) a. Volumetric alarm system b. Vibration detection c. Alarm lacing d. Other 43. Perimeter (fence)protection: a. Fence alarm b. Capacitance c. Television d. Guards and/or sentry dogs 44. Line supervision protection: a. Inspection only, explain b. Continuous conduit c. Low security line supervision d. High security line supervision e. Other 45. Guard response time for an alarm: When last tested 46. Are all alarms operational? 47. Is emergency/back-up power available for the alarm systems? Yes No How Long? 48. Location of alarm annunciator panel: 49. Is the alarm system equipped with the "REMOTE TEST"feature? 60. If Ultra Sonics (volumetric alarms) are used, has the "oscillator" circuit been modified so as to create an alarm should component failure occur? Yes, How? No, Why? UNCLASSIFIED Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172 R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 UNCLASSIFIED 61. Is procedure established for periodic testing of alarms? 62. When last tested- By whom 63. Description of test methods: UNCLASSIFIED Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172 R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96B01172R000400050018-5 UNCLASSIFIED Telephone System 54. Type of system installed. a. Switchboard Type b. Key system Type c. Conventional (one or two line instruments) d. Other 55. Are the key system and main frame located within the facility? Yes No Answer the following: a. Where is the main frame located? b. What type of security is afforded the main frame equipment room? c. Where is the key system located? d. What type of security is afforded the key system equipment? e. How are the telephone lines routed from the frame room to the facility or key system? f. What type of security is afforded the telephone lines? 56. Number and type of instruments installed (manufacturer, model numbed 67. Type of ringer unit used for each instrument: a. Non-resonant. give manufacturer and model number b. Light signal unit, describe c. Other, describe 68. Category of telephone security: a. Category I b. Category II UNCLASSIFIED Declassified and Approved For Release 2011/11/10: CIA-RDP96B0l172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 UNCLASSIFIED c. Category III d. Remarks - 59. Is telephone equipped with "HOLD "feature? Yes No Is handset equipped with: a. WE type G-10F Push-to-operate b. Other, describe by manufacturer, model number and mode of operation UNCLASSIFIED Declassified and Approved For Release 2011/11/10: CIA-RDP96 BO 1172 R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96B01172R000400050018-5 UNCLASSIFIED Administration a. How and where is waste stored; how often collected? b. Method of destruction c. Nomenclature of disintegrator (if applicable) d. By whom? e. Are certificates of destruction completed and maintained? 62. Emergency destruction plan: a. Is it part of overall command or agency plan? b. What priority is assigned to the sensitive compartmented information material? c. Is plan practical? d. What type of devices are available for accomplishing the emergency destruction of material? e. Make and model number of pulping or shredding equipment used (if applicable) f. Where are the emergency destruction sites located in relationship to the facility? 63. Char Force: a. Used to clean secure areas b. Clearances c. Security procedures in effect when char force is in the area 64. ADPS: a. What is the highest level of classified information processed? C S TS SI TK Other (Specify) b. If SCI is processed, has TEMPEST accreditation been granted in accordance with references e and f (yes) (no) and overall ADP system accreditation granted in accordance with DIAM 50.4 (yes) (no)? UNCLASSIFIED Declassified and Approved For Release 2011/11/10: CIA-RDP96B01172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 UNCLASSIFIED 65. Local security situation: a. Is the facility commander being briefed by local counterintelligence personnel regarding the local counterintelligence situation? b. By whom?. c. How often? 66. Remarks:- UNCLASSIFIED Declassified and Approved For Release 2011/11/10: CIA-RDP96 BO 1172 R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 UNCLASSIFIED Intercom Systems 67. Is an intercom system used? No Yes Type a. Telephone component feature (If this type, disregard following.) b. Separate system; give type of system 68. Are all stations within the facility? Yes No If answer is no. give justification why station(s) must be outside of the facility and describe the measures us- ed to protect the facility from technical penetrations by using the intercom lines routed to stations outside of the facility 69. Has the intercom sytem been tested by technicians during a technical survey? Yes No What were the findings, and have recommendations been complied with? Yes No (If not, why?) 70. Are there any disconnect or special security features installed? No Yes Describe 71. Remarks: UNCLASSIFIED Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96B01172R000400050018-5 UNCLASSIFIED Sound Cover Systems 72. Does the facility have a sound cover system installed? Yes No (If no, disregard the following.) 73. What type of sound source is used to produce the sound cover for the systems? a. Phonograph b. Tape recorder c. Other 74. Hou, are the audio transmission lines routed from the system's amplifier to each speaker/enclosure and what type of cable is used for this purpose? a. Unshielded cable b. Shielded cable c. Electrical metalic tubing (EMT) (Conduit) 75. Are all of the speakers/enclosures contained within the facility? Yes No 76. Has the sound cover system been tested by technicians during a technical survey? Yes No What were the findings, and have recommendations been complied with? (If not, why? UNCLASSIFIED Declassified and Approved For Release 2011/11/10: CIA-RDP96B01172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96B01172R000400050018-5 UNCLASSIFIED Electrical/Electromechanical Equipment 78. Does the facility contain electricapelectromechanical equipment used to process sensitive compartmented information? Yes No (If affirmative, complete the TEMPEST Security Checklist, enclosed with TCOIBCO DoD letter, "Sensitive Compartmented Information TEMPEST Policy and Guidance," 15 May 1979. UNCLASSIFIED Declassified and Approved For Release 2011/11/10: CIA-RDP96B0l172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 UNCLASSIFIED Unusual Security Vulnerabilities 79. Is the facility located in an aria that is subject to burglarious attack and/or mob violence? Yes No If yes, describe nature of threat and additional security measures established to cope with this vulnerability. UNCLASSIFIED Declassified and Approved For Release 2011/11/10: CIA-RDP96B01172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 UNCLASSIFIED 1. (U) Identification and location of organization submitting request. 2. (U) Floor plans of the building containing the SCI area which show the following: a. The boundaries of the SCI area and SCI room numbers. b. The classification level of the areas surrounding, above, and below the SCI area. c. Areas where foreign nationals have access, including classified areas. Indicate whether areas are manned 24-hours a day by at least U.S. SECRET cleared personnel and under U.S. control. d. Areas within facility where personnel with less than U.S. SECRET clearance can obtain access without being properly escorted or under continuous surveillance. 3. (U) Drawing showing: a. Outline of building containing SCI area and its surrounding out- side area, including roadways, loading zones, parking lots, etc. b. If applicable, areas outside the building which are protected with approved alarm systems or which are under continuous surveillance by personnel with at least a U.S. SECRET clearance. 4. (U) Floor plan of SCI area showing: a. Location and identity of electronic equipments by manufacturer and model number and, if applicable, the circuit with which the equip- ments are associated. b. The classification level of information processed by each equipment. c. Routing and identity of lines, cables, and other metallic con- ductors which leave the SCI area, including telephone, power, signal, and alarm lines, pipes, air conducting ducts, etc. *Source: TCO/BCO DOD Letter, "Sensitive Compartmented Information TEMPEST Policy and Guidance (U)" CONFIDENTIAL, 15 May 1979. UNCLASSIFIED Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 UNCLASSIFIED d. Location of telephone instruments, telephone line filters, power line filters, signal ground points, etc. 5. (U) Will signal lines carrying unencrypted SCI information be routed into areas of loner classification or into uncontrolled areas? If so, describe TEMPEST and physical security protective measures outside of SCIF. 6. (U) Will SCI be transmitted outside the SCIF? If so, identify user, building, and room number of distant location for each circuit. If circuit goes directly to an AUTODIN Switching Center (ASC), just identify the ASC. 7. (U) Will both SCI and collateral information be processed elec- tronically within the SCI areas? If so, is the signal line distribution installed in accordance with DoD Directive C-5030-58-M (pages 17-19)? 8. (U) What percentages of SCI, IS, S, C, U are processed by each equipment? Indicate total number of hours/week each equipment is used. 9. (U) Identify all electronic equipments and wirelines that are located within six feet of SCI equipment and SCI signal lines. 10. (U) Do cables carrying SCI information to, from, and between equip- ments have at least one overall non-ferrous metallic shield? If no, describe. Are they in metallic conduit or ducts? 11. (U) Reference Figures 1, 2, and 3. Do all telephone cables in the SCI area have at least one overall non-ferrous metallic shield? Are they in metallic conduit or ducts? Are they filtered before leaving (a) the SCI area or (b) lesser facility controlled area? If answer to (b) is yes, describe. Are filters grounded to a low impedance ground within the controlled area? Is maximum separation maintained between lines to and from filters, e.g., not grouped together? Are signal cables separated from telephone lines? 12. (U) Do pipes and air conditioning ducts leaving the SCI area have non-conductive sections at their points of egress from (a) the SCIF or -(b) lesser facility controlled area? If answer to (b) is yes, describe. 13. (U) Are the SCI equipments installed within an RF-shielded room? If so, provide manufacturer's name, model number, and attenuation characteristics, if available. UNCLASSIFIED Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 UNCLASSIFIED 14. (U) Has a RED/BLACK inspection been performed to determine com- pliance of the facility with RED/BLACK engineering criteria of MIL- HDBK-232? If so, provide copy of inspection report and describe corrective measures implemented if discrepancies were identified. 15. (U) Has an instrumented TEMPEST survey (TEMPEST Test) been performed? If not, has a test been scheduled? If so, were emanations detected outside (a) the SCI area, (b) areas under continuous (direct or CCTV) surveillance by at least SECRET cleared personnel or where protective measures (alarm systems) are used (refer to paragraph 4. of Policy and Guidance on Control of Compromising Emanations). Describe corrective measures discrepancies were Identified. orward copy of test report. UNCLASSIFIED Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 UNCLASSIFIED E. ADP SECURITY A. HARDWARE * 1. Utilisation: a. Do you monitor your operations for compliance with schedules? b. Do you correlate meter hours with utilization hours? c. Do you monitor scheduled maintenance activities to ensure proper reliability and hardware performance? d. Do you verify all periods of down time? e. Do you check "end meter" with "begin meter" read- ings each morning for unexplained gape? f. Do you check all incoming work against an authorized user list? Do you spot-check output for possible misuse of system Do you have an updated distribution system to pre- vent an unauthorized person from receiving a confi- dential report? 2. Commu4cations Security : a. Do all communication links between remote terminal areas and the central computer facility meet the re- quirements for the transmission of the higher classifica- tion and for all categories of data which are contained in the system? b. Are all remote terminals uniquely identified? c. Are dial-up terminals disabled from connection to the central computer facility during classified processing periods? 3. Emanations Security: a. Has the facility been. evaluated in accordance with applicable TEMPEST procedures to determine risk? b. Has all installed ADPE been TEMPEST tested? c. Has ADPE which dose not meet TEMPEST require- ments been provided filtered power, if necessary? d. Are all changes, repairs, and modifications to TEM,- PEST modified ADPE controlled so that the equip- ment emanations characteristics are not altered? 4. Erase and Declassification Procedures: a. Is each memory location used for the storage of classi- fied data overwritten when it is no longer required before reuse, or before the content of the location may be read? b. Are the necessary programs, equipment, and pro- cedures for declassifying any and all ADP equipment used for the processing or storage of classified data on site? YES NO COMMENTS ---------------- ---------------- ---------------- *Sources:DoD 5200.1-R,DoD 5200.28, MIL-HDBK-232, AR 18-1, AR 530-4 F-28 UNCLASSIFIED Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172 R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96B01172R000400050018-5 UNCLASSIFIED 6. Magnetic Tapes and Disks: a. Does your tape and disk accountability procedure cover : (1) Frequency of use? (2) Frequency of cleaning? (3) Authorized user? b. Are magnetic tapes and disks filed in an orderly manner? c. Are tapes cleaned on a regular basis (once each 10 uses is recommended)? d. Do you check and clean your disk packs or have it done by contract? YES NO COMMENTS e. Are tapes kept in their containers except when in use? ------ f. Are tapes stored vertically? g. Are tape utilization records maintained? b. Are tape containers cleaned periodically? i. Are tape beads cleaned every shift? j. Do you sample test your tapes periodically for drop- outs, to determine the general condition of your tape library? k. Do you strip frayed leader regularly? 1. " Have you investigated the possibility of a tape rehabil- itation or recertification program? m. Is your tape library located in an area secure from explosion or other dangers? n. Do you use storage vaults specifically designed for magnetic media for critical tape files? o. Have you considered magnetic detection equipment ------ ---- to preclude the presence of a magnet near your tapes and disks? p. Do you provide similar protection for your tape files while they are in transit to a backup site, etc.? ------ ---- q. Are ADP products marked with: (1) Date of creation? (2) Highest classification of any information contained in in the product? (3) Downgrading or exemption instructions when placed in permanent files? (4) A unique identifier? (5) The classification of the system's environment when the product was produced if the assigned classification cannot be immediately verified by the customer? UNCLASSIFIED ---------------- ---------------- ---------------- ---------------- ---------------- ---------------- ---------------- ---------------- ---------------- ---------------- ---------------- ---------------- Declassified and Approved For Release 2011/11/10: CIA-RDP96B0l172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96B01172R000400050018-5 UNCLASSIFIED YES NO COMMENTS r. Are all ADP storage devices marked with: (1) The overall security classification which meets the highest classification of any information stored on the device? (2) Special access restrictions? (3) A permanently assigned identification/code number? (4) A color code? B. SOFTWARE SECURITY * 1. Physical Security: a. Are the essential programs, software systems, and associated documentation in your Program Library located in a locked vault or secured area? b. Hare you provided backup files at a secondary location for both the programs and the associated documenta- tion? 2. Access Restrictions: a. Have you restricted access to the essential programs and software systems on a need-to-know basis in the prime and backup areas? b. Do you employ a multilevel access control to your (1) (2) data files? By various levels of security classification? By various breakdowns within a file, i.e., by block, record, field, and characters? (3) By read only, write only, update, etc.? c. Do you perform periodic checks to validate the secu- rity software utilities and tables of access codes? d. If you employ remote access to online data bases, do you employ techniques to prevent more than one user updating files at any given time? 3. Remote Terminals: a. Do you employ keyword or password protection? (1) If so, do you change keywords and passwords semi- annually (annually)? b. Do you employ software scrambling techniques during transmission of vital data? c. Do you employ hardware cryptographic devices dur- ing transmission of vital data? d. Do you restrict terminal users to higher level languages such as COBOL, FORTRAN, and PL/1, to prevent their access to machine language coding (which can be used by a knowledgeable systems programer to over- *Sources: DoD 5200.28, DoD 5200.2841 F-30 UNCLASSIFIED ----------------- ---------------- ----------------- Declassified and Approved For Release 2011/11/10: CIA-RDP96B01172 R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 UNCLASSIFIED ride or alter software such as operating systems, secu- rity utilities, tables, etc.)? 4. Operating Systems: a. Do your operating systems have built in protection to prevent the bypassing of security utilities and the un- authorized access to data bases by a knowledgeable programer familiar with the system? b. Are memory bounds tested following maintenance, initial program load, and each restart? c. Can your own software systems technologists be de- pended upon not to circumvent the normal access procedures by use of a special coding thus violating the integrity of the system? d. Are all modifications to the operating system verified by by the Security Officer or personnel designated by him? e. Is a record of all operating system modifications main- tained until &t least the next software release? S. Application Programs: a. Are well designed restart and recovery procedures in- corporated and utilized? b. Do your restart procedures properly handle the more complex requirements presented by files that are proms essed in random rather than sequential order? c. Are programing changes and maintenance well con- trolled and documented? d. Do you employ diagnostic and test routines to validate outputs from critical reporting systems? 6. Threat Monitoring: a. Do you maintain a monitor log of those who access data banks or any sensitive files? b. Do you use a software security routine to monitor at- tempts to access sensitive files by unauthorized users? (1) Does this routine notify the operator via the on-line console? (2) Does this routine provide a record of all such attempts via a printout at day's end? c. Does your organization use the data obtained above to develop patterns which can help to track down pos- sible suspects who misuse or have unauthorized access to vital data records? d. Are all security incidents investigated to determine their cause and where possible, the corrective action to be taken? F-31 UNCLASSIFIED YES NO COMMENTS ---------------- ---------------- - - - - - - - - - - - - - - - - Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 UNCLASSIFIED YES NO COMMENTS e. Is a formal investigation in accordance with DOD Regulation 5200.1-11 conducted whenever a compro- mise or suspected compromise is the result of the secu- rity incident? C. SERVICE PERSONNEL 1. In-House: a. Do you control access to vital areas for custodial, else- . and other in-house maintenance personnelt b. Do you provide special escorts for maintenance per- sonnel who are not appropriately cleared? 2. Vendor: a. Do you have a list of each vendor's authorized service and systems support personnel? b. Do you insist on positive identification? c. Do you supervise their activities to ensure that they don't compromise your security? d. Do you insist that vendors verify that they have per- formed a background check on their personnel? FILES 1. On-Line and Off-Line Program Files: a. Are the duplicate files stored in a separate building from the originals? b. Have you considered the merits of leasing underground storage space from a reputable vital records concern? c. Do you store programs in low fire hazard containers? d. Do you have a current inventory of such files? e. Have you held a "dry run" in the past 3 months to test the ease and accuracy of your file backup system? f. Are program changes controlled and recorded? Are changes made only to a reproduced version of the original program file with the original left intact? h. Do you maintain a record of items withdrawn from production file area? i. Does Computer Operations review systems documen- tation for compliance with' operational standards? Do you maintain any type of backup of source data for programs under development? k. Are programs classified according to a predetermined classification policy? UNCLASSIFIED ---------------- ---------------- ---------------- ---------------- ---------------- ---------------- Declassified and Approved For Release 2011/11/10: CIA-RDP96B01172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 UNCLASSIFIED 2. Documentation : a. Do you have documentation standards which include: (1) We or Bow charts? (2) Current listing? (3) Input and Output formats? (4) Output samples? (6) User documentation? (6) Copies of test data? (7) Adequate explanation of codes, tables, calculations, etc.? (8) Explanation of error messages? (9) Rejected record procedures? (10) Explanation of halts? (11) File sequence description? (12) Control and balancing instructions? b. Do you maintain duplicates of all documentation? c. Is the duplicate filed in a separate building from the original? d. Do you utilize low fire hazard storage equipment for documentation? e. Do you inventory this file at least annually? f. Do you review your documentation backup period- ically to ensure its current applicability? g. Are changes in programs and documentation coordi. nated and approved by the cognizant areas? h. Are changes reviewed by the internal auditor? i. Does Computer Operations review systems documen- tation for compliance with operational standards? 3. Data Files : a. Is the retention cycle for the data files documented for sack application? b. Does the user review this procedure regularly for compliance? c. Are all data files maintained within and under the con- trol of the computer complex rather than user? d. Are files classified in terms of degree of sendtivity and value to the organization? e. Are files (tape, disk, or card) kept in an area other than the computer room? YES NO COMMENTS UNCLASSIFIED Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96B01172R000400050018-5 UNCLASSIFIED f. Is this area fire-protected? g. Is access specifically controlled? h. Do you use special low fire hazard storage containers for critical files? i. Is your program for source document retention co- YES NO COMMENTS ordinated with your file reconstruction procedures? ------ ---- Do you "dry run" your data file security system periodically to ensure compliance with standard procedure? k. Do you know the relative value of a given program application or file? 1. Do you understand and comply with the legal require- ments for file retention? m. Do you educate the user to participate effectively in a file classification program? E. INTERNAL AUDIT CONTROLS 1. Does an overall audit control philosophy exist relatingto com- puter systems concerned with assets? 2. Are computer usage and production controls employed? ------ Is user input controlled to ensure receipt of all input data? 3. 4. Is output monitored to ensure compliance with standards? 5. Do error reporting and follow-up procedures exist? 6. Does a quality control exist to verify proper execution of reports? 7. Are program changes controlled? 8. Are all options of all programs tested? 9. Are conversions controlled to ensure continuity? 10. Does the installation ensure separation of duties? 11. Is the installation adequately protected against intrusion? ------ ---- 12. Does backup exist for programs and files? 13. Does backup exist for hardware? 14. Are the systems auditable? 15. Does the auditor get involved during the system design phase? F. TIME-RESOURCE SHARING (i.e., the concurrent use of any system by two or more users-includes time sharing, multiprocessing, multipro- graming, etc.) 1. Are remote terminals available only to selected individuals?_ ------ 2. Is access to terminal controlled by: F-34 UNCLASSIFIED ---------------- ---------------- ---------------- Declassified and Approved For Release 2011/11/10: CIA-RDP96B01172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 UNCLASSIFIED a. Locked doors? b. Posted guards? c. Other restraints? 3. Is the location of the terminal such that each user's privacy is ensured? 4. Do you have an absolute control of portable terminals to prevent their theft and misuse? 5. Do you utilize "passwords" to identify a specific terminal and a specific user? 6. Is the password protection system really tamperproof? 7. Is the interval at which passwords are changed appropriate to the security requirements? 8. Is the password combined with physical keys or access badges? 9. Does the system software restrict a given individual to specific data files only? to. Is the right to add, delete, or modify files limited by software controls? 11. Is access to the "keyword" and "lock-word" files restricted? 12. Does the system maintain accurate records of all activity against each data file? 13. Are security-override procedures classified at the highest level and the use of override closely monitored? 14. Are scramblers or other cryptographic techniques utilized as appropriate? 15. Is the time-resource sharing security system monitored and reviewed? 16. Is program debugging of the security system closely moni- tored and controlled? 17. Do you have software protection of online operating sys- tems/applications programs? CONTINGENCY PLAN Backup Facilities: a. Do you have a backup computer available? (1) If yes, is it in : (a) The same room? (not good) (b) A different room-same building? (better) (c) A separate location? (best) (2) Can it handle your workload? UNCLASSIFIED YES NO COMMENTS ---------------- -------------- ---------------- ---------------- ---------------- ---------------- ---------------- ---------------- ---------------- ---------------- Declassified and Approved For Release 2011/11/10: CIA-RDP96B01172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96B01172R000400050018-5 UNCLASSIFIED b. If not, do you have access to another computer? (1) Contractual agreement? (2) Test at least quarterly? (3) Does the installation take computer security seriously? (4) Can it handle your workload? c. Do you have an implementation plan for use of backup installation? d. Do you test and review it periodically? e. Do you have a regular maintenance schedule? f. Do you monitor it for compliance? g. Does the vendor stock span parts locally? 2. Do you have a written contingency plan covering: a. Who is responsible for each functional area? b. A detailed notification procedure clearly specifying- "Who calls whom?" (1) Management? (2) Emergency crews? (3) Users? (4) Backup sites? (5) Service personnel? (6) Facilities personnel? c. Criteria for determining extent of disruption? d. The responsibility for retaining source documents and/or data files for each application? e. Identification of backup installations? f. Destruction or safeguarding of classified material in the central computer facility in the event the facility must be evacuated? g. Items such as: (1) Purchase or lease of new or temporary computer equipment? (2) Acquisition of air conditioning equipment? (3) Purchase of computer time/services? (4) Acquisition of additional manpower? (5) Acquisition of furnishings, cabinets, etc.? (6) Acquisition of replacement tapes/diskpacks? (7) Alternate site preparation? YES NO COMMENTS ----------------- ----------------- ----------------- ----------------- - - - - - - - - - - - - - - ---------------- ---------------- ---------------- F-36 UNCLASSIFIED Declassified and Approved For Release 2011/11/10: CIA-RDP96B01172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 UNCLASSIFIED YES NO COMMENTS (8) Travel accommodations? (9) Orderly transportation of computer jobs, personnel, and related materials? (10) Duplication of backup files? (11) Continuing security in contingency mode? h. Do you have a contingency training program for all ADP personnel? UNCLASSIFIED ---------------- ---------------- ---------------- Declassified and Approved For Release 2011/11/10: CIA-RDP96B01172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 UNCLASSIFIED THIS PAGE INTENTIONALLY LEFT BLANK UNCLASSIFIED Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 UNCLASSIFIED APPENDIX G ACCESS NOMINATION FORM (U) UNCLASSIFIED Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 UNCLASSIFIED THIS PAGE INTENTIONALLY LEFT BLANK UNCLASSIFIED Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 UNCLASSIFIED (U) This appendix provides the format for requesting access to CHOSUN facilities and/or the CHOSUN network. The incomplete form is UNCLASSIFIED. The completed form will be classified SECRET. UNCLASSIFIED Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 UNCLASSIFIED PROJECT CHOSUN ACCESS NOMINATION FORM DATE 2 TO 3 FROM CHOSUN NETWORK SECURITY OFFICER REQUESTING AGENCY 4 1 NOMINEE IDENTIFICATION FULL NAME RANK/GRADE DATE OFSRTH PLACE OF BIRTH SOCIAL SECURITY NUMBER ADDRESS OF AGENCY/ORGANIZATION ASSIGNED POSITION TELEPHONE NUMBER SCHEDULED DEPARTURE/REASSIGNMENT DATE 5 1 CLEARANCE/INVESTIGATIVE DATA LEVEL HELD SCI ACCESS INVESTIGATIVE AGENCY DATE GRANTED TYPE OF INVESTIGATION (BGGNATURE CERTFES COMPLGANCE WITH CLEARANCE/NVESTI3ATIVE AGENCY SECURITY OFFICER APPROVAL REQUIREMENTS SPECFED IN CHOSUN NETWORK SECURITY MANUAL) 6 JUSTIFICATION FOR ACCESS SPECIFY NODES TO BE ACCESSED, REASON FOR ACCESS, NEED-TO-KNOW, TYPE OF ACCESS (LF- FACILITY ONLY OR NETWORK) PERIOD OF ACCESS (SPECFY DATE(s) ) NISSO/HISSO/PMO SIGNATURE DATE OF SIGNATURE AGENCY SIGNATURE APPROVAL POSITION OF APPROVING AGENT DATE OF APPROVAL 7 1 ACCESS AUTHORIZATION NSO SIGNATURE APPROVAL/DISAPPROVAL DATE DAA SIGNATURE APPROVAL/DISAPPROVAL DATE COMMENTS UNCLASSIFIED G-4 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 CONFIDENTIAL STATEMENT OF WORK FOR AN RF-SHIELDED ENCLOSURE (U) Classified by: NSDD-95 Declassify on: OADR (U) NOTE: This Outline Statement of Work is classified CONFIDENTIAL. When detailed site-unique information is added to Attachments A, D, E, G, I, and J and the document is associated with a specific Project CHOSUN site, the Final Statement of Work must be classified a minimum of SECRET, as determined by the result of a review by cognizant authority. CONFIDENTIAL Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 UNCLASSIFIED THIS PAGE INTENTIONALLY LEFT BLANK UNCLASSIFIED Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96B01172R000400050018-5 CONFIDENTIAL (C) This outline document provides a mechanism for the procurement of a Project CHOSUN standard RF-shielded enclosure in which to house a node video console and a node digital data console. Essentially, the document complies with NSA's NACSEM 5204, Appendix B (NSA Specification No. 65-6, which provides 100 dB of electromagnetic attenuation) amended to include: 45 dB worth of acoustic treatment; 18 to 24 inches of clear space around and over the RF-shielded room; a minimum of 4 inches of clear space under the enclosure; and special treatment of the parent room. CONFIDENTIAL Declassified and Approved For Release 2011/11/10: CIA-RDP96B01172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 UNCLASSIFIED THIS PAGE INTENTIONALLY LEFT BLANK UNCLASSIFIED Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 UNCLASSIFIED CONTENTS Section Page 1. INTRODUCTION ......................................... H-7 2. GENERAL REQUIREMENTS ................................. H-7 3. ASSEMBLY AND INSTALLATION ............................ H-8 4. APPLICABLE PUBLICATIONS .............................. H-9 5. DRAWINGS, INSTRUCTIONS, AND REPORTS .................. H-9 6. MATERIAL ............................................. H-11 7. INSTALLERS ........................................... H-15 8. INSPECTION AND MATERIAL TESTS ........................ H-15 9. APPROVAL AND ACCEPTANCE .............................. H-16 10. ADDITIONS AND CORRECTIONS ............................ H-17 11. CAUSE FOR REJECTION .................................. H-17 12. WARRANTY ............................................. H-17 13. SPECIFIC QUALITY CONTROL ............................. H-17 14. OPERATION AND MAINTENANCE INSTRUCTIONS, PARTS LIST, AND TEST PROCEDURES ............................ H-18 15. GOVERNMENT FURNISHED MATERIAL AND INFORMATION........ H-19 UNCLASSIFIED Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 UNCLASSIFIED PAGE A. GENERAL SPECIFICATION FOR RF-SHIELDED ENCLOSURE...... H-21 B. REQUIRED ELECTROMAGNETIC ATTENUATION ................. H-25 C. REQUIRED ACOUSTIC ATTENUATION ........................ H-27 D. ENCLOSURE DIMENSIONS ................................. H-29 E. PARENT ROOM .......................................... H-31 F. INTERIOR FINISH ...................................... H-33 G. SERVICE PENETRATIONS ................................. H-35 H. POWER LINE FILTER SPECIFICATION ...................... H-37 I. ELECTRICAL DISTRIBUTION .............................. H-41 J. AIR CONDITIONING ..................................... H-43 UNCLASSIFIED Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 CONFIDENTIAL SECTION 1. INTRODUCTION (U) 1.1 Background (U) (C) One safeguard the U.S. Government uses to protect its sensitive information from being electrically compromised is conducting clas- sified meetings and discussions in permanent electromagnetic shielded enclosures. Therefore, offerors are requested to submit proposals for the design, fabrication and installation of an RF-shielded enclosure as identified in attachment A hereto. As- sembly and installation of this enclosure shall be at a Government facility in the Washington, D.C., metropolitan area. The exact location will be identified upon date of contract award, or sooner if deemed necessary by the Government. 1.2 Scope of Work (U) (U) The Contractor shall provide the qualified personnel, faci- lities and materials necessary to design, fabricate and install an RF-shielded enclosure as denoted herein, in accordance with the attached general specifications which are hereby incorporated by reference and made a part hereof. (U) This Statement of Work, with its attachments, covers the design, fabrication and installation of the above-mentioned RF- shielded enclosures, hereinafter referred to as "enclosure." SECTION 2. GENERAL REQUIREMENTS (U) 2.1 General (U) (U) The enclosure shall be assembled by a firm regularly engaged in the manufacturing of RF-shielded enclosures and must have built similar enclosures of at least the size specified in attachment A. No prototype or nonstandard items will be used. All equipment and devices must be in common use and have spare parts readily avail- able. 2.1.1 (U) RF-Shielded Enclosure. The Contractor shall furnish a turn-key shielded enclosure designed, built, and assembled at Government facilities or identified by the Contracting Officer and in conformance with NSA Specification No. 65-6, including Heating- Ventilation-Air Conditioning (HVAC), electrical, plumbing, fire detection, and architecturally sound systems. (U) The RF-shielded enclosure shall be built and tested strictly to the requirements of NSA Specificiation No. 65-6 (Appendix B of NACSEM 5204), unless specified exemptions or changes are made within CONFIDENTIAL Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 UNCLASSIFIED this Statement of Work. Where the above NSA Specification does not give specific direction on a particular construction or testing problem, the Contractor shall propose one or more possible solutions to the Contracting Officer's Technical Representative (COTR) for his approval or selection prior to implementation. Discrepancies noted by the Contractor between the NSA Specification cited above, other specifications to be followed in part (such as NACSIM 5203 or those listed in Section 4. herein) or any Government furnished or approved drawings shall be promptly brought to the attention of the COTR for clarification and resolution. 2.2 (U) The enclosure(s) shall meet (or exceed) the electro- magnetic attenuation requirements as described in attachment B, hereinafter referred to as "attenuation requirement." 2.3 (U) The enclosure(s) shall continue to meet (or exceed) the attenuation requirements for a period of three (3) years after initial field acceptance without requiring major maintenance (i.e., retightening of bolts, screws). 2.4 (U) The enclosure(s) shall meet (or exceed) the acoustic attenuation requirement as described in attachment C. 2.5 (U) Whenever possible, the enclosure(s) shall have inter- changeable wall panels to permit the relocation of panels containing the door, power line filters, signal line penetrations, and air conditioning and ventilation penetrations during installation while still maintaining all the requirements of this Statement of Work (SOW). 2.6 (U) The enclosure(s) shall be capable of being increased or decreased in length and/or width, at a later date, by the addition or removal of one or more of the RF panels while still maintaining all the requirements of this specification. 2.7 (U) The enclosure(s) shall be capable of disassembly and subsequent reassembly, at a later date, while still maintaining all the requirements of this specification. SECTION 3. ASSEMBLY AND INSTALLATION (U) (U) Installation of the enclosure(s) will be at a later date at a location somewhere within the Washington, D.C.,metropolitan area as specified by the Contracting Officer. The Contractor shall provide installation personnel within ten (10) days after delivery of the enclosure. H-8 UNCLASSIFIED Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 UNCLASSIFIED SECTION 4. APPLICABLE PUBLICATIONS (U) 4.1 (U) The following standards of the latest addition in effect on the date of invitation for bid form a part of this specification to the extent specified herein. The requirements of this specifi- cation, its attachments and supplements will prevail in the event of conflict with any of the below-mentioned publications. 4.2 Department of Defense, National Security Agency (U) a. (U) NACSEM 5203 Guildelines for Facility Design and Red/Black Installation b. (U) NACSEM 5204 Shielded Enclosures c. (U) NSA Specification National Security Agency No. 65-6 Specification for RF-Shielded Enclosures for Communications Equipment: General Specification (Appendix B of NACSEM 5204) 4.3 Military Standards (U) a. (U) MIL-STD-220A Method of Insertion-Loss Measurement b. (U) MIL-STD-285 Attenuation Measurement for Enclosures, Electromagnetic Shielding, for Electronic Test Purposes, Method of c. (U) MIL-F-15733 Filters, Radio Interference, General Specification for 4.4 American Standards (U) a. (U) American National (All Applicable Publications) Standards Institute b. (U) National Electrical Code SECTION 5. DRAWINGS, INSTRUCTIONS, AND REPORTS (U) 5.1 Preliminary Drawings (U) (U) Four (4) sets or preliminary drawings (not less than 24" x 36") of the proposed enclosure, to include one set of sepias, shall be submitted to the Contracting Officer or his representative within UNCLASSIFIED Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 UNCLASSIFIED twenty (20) days after award of the contract. They shall include an architectural drawing showing the dimensions of the enclosure and external features such as power line filters, floor and ceiling supports systems, signal line penetrations, air conditioning and ventilation penetrations, door and door swing area requirements, and any other features which may require modification to the original enclosure design and/or the parent room. 5.2 Final Drawings (U) (U) Two (2) complete sets of final drawings shall be included with the shipment of each enclosure. One (1) set of not less than 24- inch x 36-inch mylar sepias must be provided to the Contracting Officer or his representative not less than fifteen (15) days prior to shipment of the enclosure. Sepias must be of highest quality and produce clearly detailed copies. Drawings will not be reduced in size from originals. The final drawings shall incorporate all revisions, additions, deletions, and/or corrections resulting from the review of the preliminary drawings. In addition, they will include, for each enclosure: a. (U) An architectural drawing showing the dimensions of the enclosure and external features such as systems, signal line penetrations, air conditioning and ventilation penetration, door and door swing area requirements. b. (U) An architectural drawing of the interior finish. c. (U) Detail drawings of the RF panels; floor and ceiling support systems; access openings, power, signal, air conditioning and ventilation penetrations; and lighting layout. d. (U) Cross-sectional drawing of the walls, floor, and ceiling including the floor and ceiling support systems and interior finish. e. (U) Cross-sectional drawings of the access opening. f. (U) Electrical schematic diagrams and connection drawings of the power line filters, power distribution panel(s), access opening alarm, and lighting. g. (U) A complete set of installation instructions describing in detail the step-by-step procedure for installing the entire enclosure and auxiliary components. UNCLASSIFIED Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 CONFIDENTIAL h. (U) The original manufacturer's (not Contractor's) descriptive brochure or service manual for each auxiliary device. (The Contractor's brochure or service manual for auxiliary devices will be accepted only when no manufac- turer's brochure or service manual exists.) Xerox-type copies are not acceptable. SECTION 6. MATERIAL (U) 6.1 General (U) (C) All materials used in the construction of the enclosure shall be new, of current manufacture, and of a high grade, free from all defects and imperfections. Workmanship shall be in acccordance with good modern industrial practices. Should a definite material not be specified, a material shall be used which will meet the requirements of this specification and will be in agreement with good engineering practices. 6.2 Substitution of Parts and Materials (U) (U) If the Contractor desires to substitute another part or material (1) where the specifications and approved drawings require a specific item, or (2) where a particular part or materials have been previously approved for use, he shall notify the Contracting Officer immediately (by telephone) and submit a written statement describing the proposed substitution and the reason therefor. Along with the statement, he shall submit evidence that such a substitu- tion is at least the equal of the part of material specified or previously approved. At the discretion of the Contracting Officer, samples may be required which will demonstrate by testing the suita- bility of the proposed substitution. 6.3 Mechanical (U) 6.3.1 (C) Enclosure Size. The size of the enclosure shall be specified in the specification applicable to each enclosure (attachment D). The minimum inside vertical dimension of the enclosure will be no less than nine feet, with approximately one foot used for a raised floor and six inches utilized for a hung ceiling. The adequacy of the remaining seven feet, six inches for the node operational area will be determined by the Government and the Project CHOSUN prime contractor. 6.3.2 (U) Parent Room Dimensions. The parent room dimensions shall be specified in the specification applicable to each enclosure (attachment E). CONFIDENTIAL Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 CONFIDENTIAL 6.3.3 (U) Enclosure Weight. The gross weight of the enclosure shall not exceed 80 pounds/square foot (as averaged over the floor area occupied by the enclosure). 6.3.4 (U) RF Panels. The RF panels shall be fabricated from zinc- coated steel, laminated to both sides of exterior-grade plywood or 3/4" wood particle board. The combined thickness (gauge) of the steel shall be sufficient to meet (or exceed) the attenuation requirements. Uniform panel thickness shall be ensured so that the mechanical joints form a positive, flat contact, thereby producing a tight RF seal between every mating surface. Contact between dissi- milar metals shall be avoided to prevent galvanic action. 6.3.5 (U) Panel Size. The RF panels shall be no greater than 96 inches in length to 48 inches in width unless otherwise specified. 6.3.6 (U) Joints Between Panels. The framing (or clamping) system shall be fabricated from not less that 1/8-inch thick, zinc-coated, structural steel. The selection of material and its configuration shall provide the rigidity, elasticity and hardness necessary to ensure proper structural strength and RF-tight joints without need for RF gasketing, foil, caulking, knurling, welding, or soldering. Clamping pressure shall be applied to all seams by cadmium-plated, (no less than 1/4-inch) self-threading or machine, phillips-head or hex-head screws, placed on maximum 4-inch centers capable of proper and uniform torqueing to assure maximum metal-to-metal conformity and an RF-tight joint. Contact between dissimilar metals shall be avoided to prevent galvanic action. The framing (or clamping) system shall be designed so that installation can be accomplished entirely from inside the enclosure. The framing (or clamping) system shall meet (or exceed) and maintain the attenuation require- ments without maintenance (i.e., retightening of bolts, screws) for a minimum or three (3) years. 6.3.7 (C) Under-Structure (Floor Support System). Supporting elements between the enclosure and the parent room floor shall be incorporated in the enclosure design. This system shall use transparent lucite and rubber blocks to elevate the enclosure no less than 2 inches and no more than 18 inches (unless otherwise specified) to provide unobstructed surveillance of the area between the underside of the enclosure and the floor of the parent room. 6.3.8 (U) Structural Requirements 6.3.8.1 (U) Floor Loading. The floor support structure shall be designed to carry an average floor load of 80 pounds per square foot with a miximum point load of 175 pound per square foot over a 4-square-foot area. H-12 CONFIDENTIAL Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96B01172R000400050018-5 CONFIDENTIAL 6.3.8.2 (U) Deflection 6.3.8.2.1 (U) Walls. A static load of 75 pounds applied with normal pressure to the wall surface at any point shall not cause a deflection exceeding 1/250th of the span between supports. 6.3.8.2.2 (U) Ceiling. Deflection shall not exceed 1/480th of the span. 6.3.8.3 (U) Structural Support Beams. Structural support beams may be employed (on the outside of the enclosure only) provided the outside dimensions (length, width, and height specified in the Supplemental Data) are not exceeded. No parent room-to-enclosure ceiling supports shall be used unless specified. 6.3.9 (U) Assembly. The complete enclosure (i.e., RF panels, framing system, structural beams, under-structure) shall be capable of assembly on site without welding or soldering. 6.3.10 (U) Access Opening. Will consist of an entrance vesti- bule. The entrance vestibule, which will be the same performance and sound attenuation requirements as the enclosure, will be equipped with two interlocking electromagnetic door systems, Ray Proof Model RCM-8CM-85G-80 (or equivalent), to maintain shielding or the enclosure at all.times. The outer door will have a Sergeant and Greenleaf Codetronics cipher lock Model 8419 for restricted person- nel access to the room. Both doors will have special audio treat- ment to meet the attenuation requirements of attachment C. Oper- ation of the door latching/unlatching mechanism and the overhead door actuator is through a series of microswitch contacts and actuator buttons or floor mats which control an electric motor drive of the latching mechanism and then the automatic door actuator. An electrical safety mat is provided on the swinging side of the door to instantaneously stop the opening or closing operation should anyone be in danger of being struck by the moving door leaf. The operation of the door is protected by means of a complete manual override capability. It must be possible to open the door from either side, in the event of a failure, such as loss of mechanical power, by means of an emergency manual mechanism. Doors shall be electrically interlocked to prevent simultaneous opening of both doors. 6.3.11 (C) Interior 6.3.11.1 (U) Floors. Masonite (or equivalent) shall be installed flush with the RF floor clamps. All RF floor clamps shall be secured by utilizing counter-sunk flat-head screws. A raised floor CONFIDENTIAL Declassified and Approved For Release 2011/11/10: CIA-RDP96B01172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 CONFIDENTIAL of approximately one foot in height shall be installed. The floor covering shall be commercial grade carpet (color selection by customer). 6.3.11.2 (C) Walls. The interior walls shall be constructed of 5/8-inch sheet rock, attached by metal furring studs on 16-inch centers with door and ceiling tracks. Attached to this wall will be Armstrong Soundsoak 85, 1-inch-thick wall panels (a sample of avail- able colors to be provided to customer for selection prior to order- ing and installation.) Colors should be limited in range to ensure high color temperature for video camera signals. A soft blue or soft green is preferred, at least from the chair rail molding uD. A 4-inch vinyl base molding will be provided at the base of the wall (color coordinated in the wall). See attachment F regarding Armstrong Soundsoak 85. 6.3.11.3 (C) Ceiling. The ceiling shall be constructed of 5/8-inch sheet rock attached by metal furring studs on 16-inch centers. A hung ceiling of approximately six inches in depth will be installed equipped with acoustical ceiling tile. 6.3.12 (U) Service Penetrations. The quantity, type and location of service penetrations will be as specified in attachment G. 6.3.13 (U) Air Conditioning Requirements. See attachment J. 6.4 Electrical (U) 6.4.1 (U) Power Line Filters. Specifications for the power line filters are provided in attachment H. 6.4.2 (U) Electrical. Specifications for the electrical distri- bution equipment and material are provided in attachment I. 6.4.3 (U) Grounding. The enclosure shall have a single point ground and be electrically isolated from any building ground systems or potential current-carrying material. Internal wiring shall have an isolated neutral, and a common grounding terminal will be pro- vided on the external surface of the enclosure adjacent to the power penetrations. 6.4.4 (U) Lighting. Interior lighting shall consist of low profile, incandescent round-shaped ceiling fixtures (3-100W/nominal size of 15 1/2-inch diameter x 6-inch with nominal output of 4800 lumens). Light fixtures are to be surface mounted to acoustical tile. Lighting needs to be diffused for video operation and provide high color temperature. Light switches shall be provided and located near the entrance doorway. Each switch that controls H-14 CONFIDENTIAL Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 UNCLASSIFIED overhead lighting shall be equipped with a suitable dimmer switch. NOTE: If flourescent lamps are employed, they must be specially designed for use in a TEMPEST environment. 6.5 Fire Detection System (U) 6.5.1 (U) A fire detection system/smoke and ionization detector system shall be installed within the shielded enclosure. If a fire detector is activated, a bell or other audible warning device shall sound and a light shall illuminate within the enclosure and at a location (to be determined) outside the enclosure. Such outside location shall be in either the parent room or in close proximity thereto. 6.5.2 (U) The fire detection system will be provided and installed by the Contractor. The Contractor shall provide all conduit and wiring required to connect this system. Shielded wiring shall be used to connect the smoke and ionization detectors with the control circuits. Wiring shall be tagged for proper identification. All penetrations of the shield shall maintain the RF integrity of the enclosure. SECTION 7. INSTALLERS (U) (U) Installation of the enclosure as detailed herein shall be conducted by expert field technicians/representatives with Depart- ment of Defense national security clearances, minimum level of SECRET. SECTION 8. INSPECTION AND MATERIAL TESTS (U) 8.1 Monitoring Inspections (U) (U) During the design and fabrication phase of the enclosure(s), the Government reserves the right to conduct monitoring inspections at the Contractor's plant. It will be the responsibility of the Contractor to advise the Contracting Office of the details where deviations from the Statement of Work, its attachments or applicable specifications to each enclosure exist. 8.2 Material Inspections (U) (U) After the enclosure has been fabricated, a material inspection may be made by the Contracting Officer or the COTR at the Contrac- tor's plant to facilitate payment. This in no way relieves the Contractor of his resonsibility to provide any parts or material which may be missing at the time the material inspection is made. UNCLASSIFIED Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 CONFIDENTIAL 8.3 Component Tests (U) (U) During the process of design and fabrication, the Government reserves the right to conduct tests when material and/or methods are being employed which, in the opinion of the Contracting Officer, may not meet the requirements of this Statement of Work, its attach- ments, or the specifications applicable to each enclosure. 8.4 (U) A preliminary test shall be conducted prior to instal- lation of the interior finishes and full acceptance test upon com- pletion of the enclosure. Testing shall be in accordance with the procedures of NSA Specification No. 65-6 and the acoustic attenu- ation test portion of NSA Specification 65-5. A test plan shall be submitted for approval and full test report submitted upon comple- tion. Tests shall be performed by Contractor personnel with all required in-calibration test equipment. The Government reserves the right to conduct independent tests to determine the degree of shielding achieved. 8.5 (C) RF leaks will be detected by means of a Contractor- provided TS-31 Monitoring System as manufactured by Quanta Systems. It is understood that the Contractor may have difficulty in obtain- ing the necessary release in order to acquire the TS-31 system. Should this be the case, the Contractor will immediately notify the Government so that appropriate steps may be taken to assure its release for use on this project. In addition, the Contractor will provide a Shielding Integrity Monitoring System (SIMS) unit, which operates at 462 MHz. SECTION 9. APPROVAL AND ACCEPTANCE (U) 9.1 Design Approval (U) (U) The preliminary drawings for each enclosure shall be reviewed and approved by the Contracting Officer or the COTR prior to the manufacturing phase. 9.2 RF and Acoustical Acceptance Tests (U) (U) The Contractor shall furnish all test equipment and personnel to demonstrate compliance with NSA Specification No. 65-6 and meeting an acoustical attenuation of 45 dB. The number of test frequencies shall be designated by the COTR. The COTR may, at his discretion conduct separate RF and acoustical tests to verify the Contractor's results. H-16 CONFIDENTIAL Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 UNCLASSIFIED SECTION 10. ADDITIONS AND CORRECTIONS (U) 10.1 (U) Additions and/or corrected drawings, publications, and instructions shall be supplied to the Contracting Officer as soon as the addition and/or correction has been incorporated. Changes made to the enclosure during installation must be reflected in final revised or corrected drawings. SECTION 11. CAUSE FOR REJECTION (U) 11.1 (U) The work supplied under this contract shall be in all respects, including design, construction, installation, workmanship, performance and quality, in strict accordance with the requirements specified. 11.2 (U) Evidence of non-compliance to specified requirements shall constitute cause for rejection, and it shall be the responsi- bility of the Contractor to make all necessary corrections at no extra charge to this contract. SECTION 12. WARRANTY (U) (U) The RF-shielded enclosure, less moving parts, shall be guaranteed against defective materials and workmanship and to retain the specified shielding characteristics for a period of five years from date of acceptance test. (U) Moving parts, such as the door, access ports and access panels, shall be guaranteed for a period of one year from date of acceptance test. SECTION 13. SPECIFIC QUALITY CONTROL (U) (U) In addition to the general quality control requirements, the Contractor's Quality Control Representative shall perform the following: a. (U) Verify that all new materials are unused, free from defects and imperfections in workmanship and material. b. (U) Verify that the workmanship and finish shall be such as to ensure satisfactory operation consistent with the requirement of these specifications. The equipment shall be thoroughly clean and free of excess materials, chips and loose spattered foreign materials. Dissimilar metals shall be protected from galvanic action at contact points. c. (U) Verify that the mechanics engaged in machining, UNCLASSIFIED Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 UNCLASSIFIED welding, supervision, and testing shall have not less than two years of responsible experience in their trades and in the employ of manufacturers of radio frequency shielding building components. Helpers and apprentices shall work under the supervision of responsible mechanics. d. (U) Verify that the door shall be mated to its frame so as to ensure proper, uniform pressure on all RF seals. Mated assemblies shall be match-marked for installation and all critical measurements recorded, and verified at time of installation. e. (U) Keep permanent records of receiving inspection of all materials, as well as manufactured assemblies and in-shop tests and inspections. Spot checking of these records shall be performed on site, prior to use in the install- ation. SECTION 14. OPERATION AND MAINTENANCE INSTRUCTIONS, PARTS LIST, AND TEST PROCEDURES (U) a. (U) Operation and maintenance instruction: The instruc- tions shall include complete procedures necessary to operate and maintain the equipment as recommended by the manufacturer. The following sections shall be included, as applicable: .. (1) (U) Safety precautions. (2) (U) Assembly and installation procedures. (3) (U) Adjustment and alignment. (4) (U) Routine and preventive maintenance procedures, including a table of recommended frequencies of performing each procedure; e.g., filter cleaning or replacement, lubrication of door mechanisms, etc. (5) (U) Checkout procedures. (6) (U) Troubleshooting procedures. (7) (U) Repair and corrective maintenance replacement procedures. b. (U) Items of equipment to be described shall include: (1) (U) Hinges. UNCLASSIFIED Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 UNCLASSIFIED (2) (U) Latching hardware. (3) (U) RF gaskets or seals. (4) (U) All types of filters. (5) (U) Panel supporting members. c. (U) Parts Lists: A parts list shall be furnished which shall include those spares and parts recommended by the manufacturer to assure efficient operation for one year's operation following expiration of the warranty period. This list shall cover components, replacements, supplies, and expendable items as may be required. d. (U) Test Procedures: Detailed procedures shall be prepared and submitted, covering all tests specified herein, and shall include blank forms for recording and validating the test data. SECTION 15. GOVERNMENT FURNISHED MATERIAL AND INFORMATION (U) (U) The Government shall prepare the parent room(s) to accept the RF-shielded enclosure as outlined in attachment E. Specific vari- ations will be addressed on a site-by-site basis. H-19 UNCLASSIFIED Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 UNCLASSIFIED UNCLASSIFIED Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 UNCLASSIFIED ATTACHMENT A GENERAL SPECIFICATIONS FOR RF-SHIELDED ENCLOSURE (U) SECTION 1. GENERAL (U) (U) This covers the general requirements applicable to the design and fabrication of an RF-shielded enclosure. SECTION 2. ENCLOSURE DELIVERY SCHEDULE (U) (U) The enclosure shall be delivered according to the schedule provided by the Contracing Officer. SECTION 3. ENCLOSURE MAXIMUM OVERALL OUTSIDE DIMENSIONS (U) a. (U) Length: b. (U) Width: c. (U) Height: ENTER SITE-UNIQUE INFORMATION (U) Length shall be within 1 inch of the above value, width shall be within 1 inch of the above value, and height shall be within 1 inch of the above dimension. SECTION 4. PARENT ROOM DIMENSIONS (See Attachment E) (U) a. (U) Length: b. (U) Width: c. (U) Height: ENTER SITE-UNIQUE INFORMATION HERE (U) The parent room dimensions will not be smaller than above values. SECTION 5. PERSONNEL ACCESS DOOR (U) (U) The personnel access doors will be as specified in Section 6.3.10 of the Statement of Work. SECTION 6. ELECTRICAL (U) a. (U) Three phase electrical service shall enter the enclosure. The main feeders shall be terminated in power distribution panels located as shown in attachment I. UNCLASSIFIED Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 UNCLASSIFIED b. (U) The approximate location of the power line filters, power distribution panels and ground stud are shown in attachment I. The Contractor shall determine the quantity of materials (i.e., length of wire and conduit, number of conduit fittings). The Contractor shall include all material necessary to furnish a complete and functional electrical distribution and lighting system. The holes, in the RF wall panel, for the power line filter penetrations and ground stud, shall be cut during field installation. c. (U) The enclosure light shall be designed for operating on 120V A.C., single-phase, 2-wire (plus equipment ground). d. (U) All conduit must be surface-mounted ferrous metal conduit, or approved channeling with associated ferrous fittings; EMT (thin wall) is preferred. Fittinqs must be compression or threaded type. Junction boxes and pull boxes, if required, must be of ferrous metal construction and all knockout openings sealed. All such boxes will be mounted on the enclosure identified in attachment I. SECTION 7. AIR CONDITIONING PENETRATION (U) a. (U) Insulated Brass Waveguide Penetrations. The Contractor shall provide insulated brass waveguide penetrations for the air conditioning chilled water supply and return lines. The dimensions, type of material and quantity are to be specified by the Contractor based on type of air conditioning package supplied with enclosure. b. (U) Noninsulated Brass Wave uide Penetrations. The Contractor shall provide noninsulated brass waveguide penetrations for the air conditioning condensate drain lines. The dimension, type of material and quantity are to be specified by the Contractor. (U) The holes, in the RF wall panels, for the insulated and noninsulated penetrations shall be cut during field installation. c. (U) Fresh Air Ventilation. Twelve-inch by 12-inch honey- comb air vents shall be provided for fresh air ventila- tion. The quantity and location of the honeycomb air vents are to be determined by the Contractor based on size and configuration of enclosure. Exhaust fans shall be provided on the honeycomb air vents. The exhaust fans shall be rated to provide one (1) air change in ten (10) minutes. Each honeycomb air vent shall have a flush-fitting type H-22 UNCLASSIFIED Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 UNCLASSIFIED louvered grill on the interior finished wall. Each intake honeycomb shall have a cleanable, reusable dust filter installed on the outside of the enclosure. Both the intake and exhaust honeycomb air vents shall be acoustically treated, on the exterior of the enclosure only, to meet (or exceed) the acoustic attenuation requirement of attachment C. UNCLASSIFIED Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 UNCLASSIFIED THIS PAGE INTENTIONALLY LEFT BLANK UNCLASSIFIED Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 UNCLASSIFIED REQUIRED ELECTROMAGNETIC ATTENUATION (U) CJ W V w o 11 Z J CSW IIIMJ 11111 111111 H- 25 UNCLASSIFIED Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172 R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 UNCLASSIFIED THIS PAGE INTENTIONALLY LEFT BLANK UNCLASSIFIED Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 CONFIDENTIAL O O J O Q TOT y 1 Jill Il I i 0 - - r I III I I a - HIM REQUIRED ACOUSTIC ATTENUATION (U) CONFIDENTIAL Declassified and Approved For Release 2011/11/10: CIA-RDP96B01172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 UNCLASSIFIED THIS PAGE INTENTIONALLY LEFT BLANK UNCLASSIFIED Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 CONFIDENTIAL ENCLOSURE DIMENSIONS (U) SECTION 1. GENERAL (U) (C) A platform shall be provided for installation under the enclosure which shall be capable of supporting the enclosure and its contents without buckling or sagging. Platform design shall allow unobstructed surveillance of the area between the underside of the platform and floor of the parent room at all times. There shall be 18 inches of clearance between the floor of the parent room and the underside of the platform. Supporting pillars of the platform shall be transparent. Acoustical isolation shall be provided in the design of the platform to prevent transmission of sound from the enclosure to the floor of the parent room. (U) The inside vertical dimension of the RF-shielded enclosure will be no less than nine feet, with approximately one foot utilized for a raised floor and approximately six inches utilized for a hung ceiling. Final interior dimensions will be provided by the Project CHOSUN implementation contractor. SECTION 2. SPECIFIC (U) (U) The inside dimensions of the proposed enclosure are as shown on the attached drawing and are approximately: a. (U) Length feet b. (U) Width feet c. (U) Height 10 feet* TYPICAL. ACTUAL DIMENSIONS MUST REFLECT UNIQUE ON-SITE REQUIREMENTS *(U) Ceiling height is restricted by the presence of structural beams at a height from the floor of 10 feet 5 inches; there fore, the enclosure cannot exceed 10 feet and the lucite support blocks cannot exceed 4 inches. CONFIDENTIAL Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 UNCLASSIFIED UNCLASSIFIED Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 CONFIDENTIAL ATTACHMENT E PARENT ROOM (U) SECTION 1. GENERAL (U) (U) Unless otherwise specified, the Government will prepare the parent room to accept the RF-shielded enclosure. The Government will furnish to the Contractor architectural drawings depicting: the size and location of AC power service entrances; air handler ducts; existing door openings; signal line, Red ground, and Protected Distribution System (PDS) routing and entrances; and protrusions into the parent room space caused by such items as: pipes, conduit, columns, vertical service chassis, ceiling beams and supports, and the like. a. (U) The Government's design goal is to provide the Contractor a parent room with a vertical unencumbered dimension of twelve feet, slab-to-slab, within which to assemble an RF-shielded enclosure with a vertical dimension of approximately nine feet. b. (U) The parent room must provide approximately 18-24 inches of clear space between the outside wall of the RF- shielded enclosure and the inside wall of the parent room. c. (C) The parent room flooring will be a white linoleum and all adjacent walls and the ceiling area will be painted three coats of white enamel in preparation for the install- ation of the enclosure. d. (U) The entire parent room area will be air conditioned by the existing building system. This area is also to be heated and equipped with a building sprinkler system. SECTION 2. PARENT ROOM DIMENSION (U) (U) The maximum dimensions of the parent room are as shown on the attached drawing, are to be confirmed by the Contractor by field measurements, and are approximately: CONFIDENTIAL Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 UNCLASSIFIED a. (U) Length b. (U) Width c. (U) Height ENTER SITE UNIQUE INFORMATION HERE SECTION 3. SPECIFIC (U) ENTER SITE-UNIQUE INFORMATION HERE UNCLASSIFIED Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 UNCLASSIFIED ATTACHMENT F Fabric Covering Thickness (normal) Absorption Coefficient Coefficients Three-Frequency Averag e (speech privacy range absorption) Four-Frequency Average NRC Specification Range e Speech Privacy Noise Isolation Class (NIC) (tested in accordance with PBS C.2 procedure III S) Fire Hazard Classifica- tion (ASTM E84 Tunnel Test) Flame Spread Fuel Contributed Smoke Density INTERIOR FINISH (U) Soundsoak 85 Low-density Silok'" mineral fiberboard Embossed needlepunch modacrylic reinforced with woven glass-fiber scrim 9' 24" 1" .13 .41 .88 1.06 .99 .98 .98 NRC .85 .80-.90 20 25 or less 20 65 4.00 Concealed aluminum splines attach to drywall, plaster, brick, block, metal studs, and metal partitions. Soft blues or soft greens to enhance video pickup. Fabric is colorfast to wet and dry-cleaning procedures and most spot-cleaning solvents. Surface Dust: Removed by vacuuming or light brushing. Spots: Dry-cleaning fluid or carpet shampoo. Typical Stains: Coffee. soft drinks, ink crayon, carbon, chewing gum can be com- pletely removed from Soundsoak fabric. UNCLASSIFIED Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 UNCLASSIFIED THIS PAGE INTENTIONALLY LEFT BLANK UNCLASSIFIED Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 UNCLASSIFIED SERVICE PENETRATIONS (U) SECTION 1. GENERAL (U) (U) The quantity, type, and location of all service penetrations shall be determined by the contractor in consonance with the Govern- ment's representative. All such penetrations shall conform to the RF-shielding requirements of all enclosures. SECTION 2. SPECIFIC (U) ENTER SITE-UNIQUE INFORMATION HERE UNCLASSIFIED Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 UNCLASSIFIED THIS PAGE INTENTIONALLY LEFT BLANK UNCLASSIFIED Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 UNCLASSIFIED POWER LINE FILTER SPECIFICATION (U) SECTION 1. SCOPE (U) 1.1 (U) This specification covers the detailed requirements for RF interference power line filters, hereinafter referred to as "fil- ters," to be used on the RF-shielded enclosures. SECTION 2. GENERAL INFORMATION (U) 2.1 (U) The filters shall be designed and manufactured in accor- dance with the latest issue of military specification MIL-F-15733, and shall be capable of meeting full conformance with test procedures as specified in MIL-STD-220A (full load). SECTION 3. GENERAL REQUIREMENTS (U) 3.1 (U) The filters shall provide a minimum of 100 dB attenuation to all types of signals betweem 14 kHz and 10 GHz at full load. 3.2 (U) The filters shall be designed such that the inductance coils do not saturate under rated load and that the voltage drop across each filter at rated load does not exceed 2.0 volts RMS. 3.3 (U) The filters shall be designed and manufactured for continuous operation at rated load with a temperature rise not to exceed 25 degrees centigrade above ambient. 3.4 (U) The filters shall comply with MIL-F-15733 overload safety requirement for 140 percent rated current for 14 minutes as well as being capable of withstanding short-term current surges in excess of five (5) times rating without damage. 3.5 (U) The filters shall be rated for 250V A.C./600V D.C., 50 or 60 Hz. 3.6 (U) All required filters shall be externally surface mounted at a location designated by the COTR. SECTION 4. POWER SYSTEMS (U) 4.1 (U) The filters shall be capable of operation on the following power systems: 4.1.1 (U) 120/208V A.C., three-phase, four-wire, 50 or 60 Hz. H-37 UNCLASSIFIED Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 UNCLASSIFIED SECTION 5. MECHANICAL (U) 5.1 (U) The filter impregnant shall be nonflammable as classified by Underwriters Laboratories, Inc. 5.2 (U) The filter housing shall be fabricated from corrosion resistant finish or nonrusting stainless steel and all seams are to be continuously welded. 5.3 (U) Soft solder shall not be used in the construction of the hermetically sealed portion of the filter case. 5.4 (U) Each filter shall be provided with hermetically sealed alumina electrical terminals and these terminals shall be welded or brazed to the filter case. Soft solder shall not be used to provide a seal for the terminals. 5.5 (U) Both the input and output terminals will be contained within the filter housing. 5.6 Filter Input (U) 5.6.1 (U) The filter housing shall have an access opening to the input terminal large enough to accommodate field installation of the feeder wire. A removable cover shall be installed on the access opening. 5.6.2 (U) A UL-approved solderless electrical lug shall be installed on the input terminal to provide a means for connecting the feeder wire in the field. The lug shall be sized to accept a wire rated at the ampacity of the filter. 5.6.3 (U) Each filter shall have a discharge resistor affixed to its input. The value of the resistor shall be such that the residual energy can be discharged to 90 percent of its maximum value within three seconds after the power is removed from the filter. 5.7 Filter Output (U) 5.7.1 (U) If an access opening is provided to the output terminal within the shielded compartment of the filter housing, it shall have a cover with a gasket between the cover and the cover mating surface to maintain the RF interference integrity of the filter. UNCLASSIFIED Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 UNCLASSIFIED 5.7.2 (U) A stranded, copper, thermoplastic, insulated-type THW, 600 VAC-rated wire conductor, no less than 48 inches long, shall be installed on the output terminal of the filter. The size of the wire shall be as follows: a. (U) 50 AMP Filters -- AWG #6 b. (U) 100 AMP Filters -- AWG #2 c. (U) 150 AMP Filters -- AWG #1/10 d. (U) 200 AMP Filters -- AWG #3/0 5.7.3 (U) A threaded pipe waveguide penetration shall be installed on the output side of the filter. Installation hardware (i.e., nuts, washers, gasketing) shall be provided for installing the filters on the shielded enclosure in the field. The diameter of the waveguide through which the wire from the output terminal (paragraph 5.7.2 above) shall be governed by the latest edition of the National Electrical Code. The physical characteristics of the waveguide, the installation hardware, and method of installation shall be such to maintain the RF interference integrity of both the filter and the RF-shielded enclosure. UNCLASSIFIED Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 UNCLASSIFIED THIS PAGE INTENTIONALLY LEFT BLANK UNCLASSIFIED Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 UNCLASSIFIED ELECTRICAL DISTRIBUTION (U) SECTION 1. GENERAL (U) a. (U) All electrical service within the enclosure shall conform to the current standards outlined in the latest edition of the National Electrical Code Handbook, and shall be in accordance with NACSIM 5203, NACSEM 5204, and NSA Specification No. 65-6. The electrical service within this enclosure shall be provided by a Red distribution system as defined in NACSEM 5203. Electrical service shall be 120/208 volts AC, 60 Hz three-phase "Y." All phases plus the neutral line shall be filtered in accordance with NACSEM 5204 and NSA Specification No. 65-6. The filters shall be installed on the outside of the enclosure. The Red electrical service shall be adequate to provide a three-phase ampere electrical distribution panel, complete with 20 amp circuit breakers. This panel shall be located within the enclosure and appropriately covered to match the decor of the interior of the enclosure. b. (U) Additional filters shall be furnished as required for the cipher lock/interlock door system and fire detector (ionization). Sufficient duplex outlets shall be provided and installed by the Contractor in accordance with the National Electrical Code Handbook. Physical separation of the electrical distribution service to individual outlets may also be required by the Government's representative. A circuit breaker panel shall be provided and installed adjacent to the filters outside the enclosure by the Contractor. A sufficient quantity of circuit breakers shall be provided to allow a separate circuit breaker for each duplex outlet. c. (U) The Contractor shall provide a manual trip switch inside the enclosure and in close proximity to the doorway which is capable of interrupting all electrical service within the enclosure. This trip switch will be adequately marked to indicate that it is an emergency shut off switch. SECTION 2. SPECIFIC (U) ENTER SITE-UNIQUE INFORMATION HERE UNCLASSIFIED Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 UNCLASSIFIED THIS PAGE INTENTIONALLY LEFT BLANK UNCLASSIFIED Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 CONFIDENTIAL AIR CONDITIONING (U) SECTION 1. GENERAL (U) (U) Air conditioning facilities for the enclosure(s) shall be provided as specified in the contract. Internal ductwork and waveguides shall be supplied by the enclosure contractor in all cases, and he shall be responsible for ensuring that the aircon- ditioning installation does not degrade the attenuation of the enclosure. a. (C) Ductwork. All ductwork shall be designed to provide the acoustic attenuation in compliance with the require- ments of attachment C. b. (U) Waveguides. All air ducts passing through the panels of the enclosure shall be attached to high frequency elec- tromagnetic waveguide cutoff type vents inserted in the enclosure panels to provide RF attenuation in compliance with the requirements of attachment B. SECTION 2. SPECIFIC (U) a. (U) The contractor shall provide an air conditioning package capable of easily cooling the enclosure based on the equipment installed within and the average presence of from persons within the enclosure. b. (U) ENTER SITE-UNIQUE INFORMATION HERE CONFIDENTIAL Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 UNCLASSIFIED THIS PAGE INTENTIONALLY LEFT BLANK UNCLASSIFIED Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 UNCLASSIFIED APPROVED TAPE DEGAUSSERS (U) UNCLASSIFIED Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 UNCLASSIFIED UNCLASSIFIED Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 UNCLASSIFIED (U) This appendix provides a list of approved tape degaussers for CHOSUN. After following the appropriate procedures for degaussing using an approved device, the storage media may be downgraded and released from the controlled environment. This list of approved devices is extracted from DIAM 50-4. UNCLASSIFIED Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 UNCLASSIFIED N ?1.) N N 5- 5- I- C I- N- ?r ?r CO Q)-O CO 00 C1 E C) Cl C) Cr Cr C \J. .Cr- ? N N C) U . LO UU Ln Ln S C. 4-J, CL - 4-) 4J d Q V) d CL Z 0 \ O U z CL +?) r S_ U I I O C) M +) N - Lf) U '- O C U Cf e-1 W 0) r-+ ?r N CO ~- Y N +~ O U L.L. r-~ C - I 0) 4J ?r I- Q) Q) r- 0 4J C1. 3 CO J 4-4 H m u ?r C to CV 00 O CY (C \ mt ?r Y \ e--4 2 1 S- C (A 1 > C a) V) I M C) ?r U M C) to a) O 4-' Lf) ca O 4-) r? ?r O p ?r (C N S- U -4 C1 O O E 0) S_ i..... 4-) O M r-N C. N RCN 10-0 O U-0 LL. r? I E LO cc 1 41 E C O C) 0 I- = 0 .--1 0 0 to () 00 r- S. CL CO - UU) U-0 F- oU CD WCL CV U ?a Q) 4- C) UNCLASSIFIED (D t.0 0.0 C11~0 tD C, 0) tz CYI O N C N C N C N C N C N C C V S- 4- ?r -1 ?r r-1 ?r e-I ?r e-I r e--I ?r e--1 ?r S- 5- rC (CO (CO (CO (CO (0 O (CO C- C) U S_ I S? I S_ I S_ I S. I S_ I C) d MO 0O MO 0O in O GO S- Q CV Q N Q N ? CV QN '.c o?.- a N E >t vt O 1"1 10 ?0 0 O L V ? rn S. u 0) )..) N 0) V 0) O V .->?- w C V V O 0) IO N N 10 0) 0) E s Ip 0) Y C 0) L V w 0) C V ~-I L 10 V s- ?C u d a L N C) r0 O C 0) G L 0) X naI V G) S0 3 O 4- G) ?) i s- VI 0) N a) O) E . ZIO )0 0) 7 u E L i C 0V C O1 r ~ Ol L 10 C 1.I aa) L > L 4 1-) ar u O r L O. 0) N O. 10 >5 O ?- 0) ?- N 3 L E ~? w v V E rn N 0) 7 C I n L i ? .- )a u V V C 0) iO V t V +-) Q 1) O) 1] L Y b.I L. N E +) 0) 4?I 1- q V 4- N IO 0) N E ?0 - Q) Q 0) V VI O v VI L. Y L O ?.- ? C \ () C a) V I. C W In V L t y 0 ? t 4- 10 V In M- > ?.- O) 3 Cu IO n u.^ OV C E ?- O) 0) L V 10 ?> G N 0 V VS N 0 O) o '~ o ar > )c c > )o c e C L .-. >) > L D E L U O d E V 41 H E Ol VI In ?~ Q) VI VS VI ?.I L Ol V C N v y Inv C C, 4; ?-+ Q u 4) ~- C V 0/ N H C V 4' O N OJ b) Y 10 .~ Y ep E moo uLEU u4-r`O d O 7 O 10 4- O.C 7 0 Ip :3:2 = ?`) L 0 .... E ' E O v 4) VI V 0) - F) 0 3 r0 7 V 0) u O 0) Z r?? N C?) R UNCLASSIFIED Declassified and Approved For Release 2011/11/10: CIA-RDP96B01172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96B01172R000400050018-5 UNCLASSIFIED APPROVED PAPER DESTRUCTION DEVICES (U) L-1 UNCLASSIFIED Declassified and Approved For Release 2011/11/10: CIA-RDP96B01172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 UNCLASSIFIED UNCLASSIFIED Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 UNCLASSIFIED (U) This appendix contains a list of types of equipment which have been tested and approved by the National Security Agency and which, when equipped as specified, meet the routine destruction standards for paper COMSEC materials. (U) Approval of a specific equipment has been based only on exami- nation of residue and a physical security evaluation of the equip- ment. Such factors as reliability, rate of wear, and frequency of key part replacement have not been evaluated, and NSA does not endorse manufacturers' claims concerning these aspects. Hourly volume rates stated are estimates based on average rates for destruction of paper materials and may vary depending on variety, volume, and loading. (U) Other equipment will be added to this list as it is evaluated and approved. Queries or information concerning equipment not shown on the list may be addressed to the Director, National Security Agency, ATTN: S133, Fort George G. Meade, MD 20755. (U) Many, though not all, of the devices listed are available from the GSA Federal Supply Schedule. UNCLASSIFIED Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 NSA-APPROVED PAPER DESTRUCTION DEVICES (U) C z 0 r Cl) Cl) m v EQUIPMENT DESIGNATION Air Fed Model 3 Incinerator Waring 7-Speed Blender Destroyit Cross Cut Shredder CAPACITY LBS MANUFACTURER OR DISTRIBUTOR PER HOUR Buffalo Metal Fabricating Corp. 6 50 Wecker Street Buffalo, NY 14215 Waring Products Division Dynamics Corporation of America New Hartford, CT 06057 The Michael Lith Sales Corp. 25 145 West 45th Street New York, NY 10036 1101 Skokie Boulevard Northbrook, IL 60062 Security Engineered Security Engineered Machine Co. 50 Model 700 5 Walkup Drive Westboro, MA 01581 Security Engineered Security Engineered Machine Co. 50 Dry Disintegrator 5 Walkup Drive Model 1 Westboro, MA 01581 Jay-Bee Model MB2 Jay-Bee Manufacturing Co., Inc. 50-75 and MB3 Office P.O. Box 986 75-100 Disintegrator Tyler, TX 75701 Not approved for high wet strength paper. Office Model. Low noise level. 3/32" filter screen required. Sound enclosure available. 3/16" filter screen required. Moderate noise level. Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 m v Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 C z r m v DESIGNATION Intimus 0007 Shredder (Cross Cut) Jay-Bee Model AB Disintegrator Air Fed Model 2 Incinerator Security Engineered Dry Disintegrator Model 2 Jay-Bee Model 3CB Disintegrator Tyler, TX 75701 MANUFACTURER OR DISTRIBUTOR CAPACITY LBS PER HOUR REMARKS Whitaker Bros. Business Also marketed as the Machines Inc. 5913 Georgia Avenue, NW Washington, DC 20011 Jay-Bee Manufacturing Co., Inc. P.O. Box 986 75-150 Cummins Model 48 Shredder. Discontinued. 3/16" fil- ter screen required. High C Tyler, TX 75701 Buffalo Metal Fabricating Corp. 85-120 noise level and some dust. z 50 Wecker Street Buffalo, NY 14215 r Security Engineered Machinery Co. 5 Walkup Drive Westboro, MA 01581 Jay-Bee Manufacturing Co., Inc. 100 200 3/32" filter screen required. Sound enclosure available. 3/16" filter screen required. P.O. Box 986 High noise level. Dry Disintegrator 5 Walkup Drive Model 3 Westboro, MA 01581 SOMAT Model 30 IS SOMAT Corporation Pulper Box 831 Coatsville, PA 19320 Discontinued. 3/32" fil- ter screen req. High noise level. Discontinued. Not approved for high wet strength paper. 5/16" ring hole strainer required. Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 m v Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 C z C, r a" rn 0 EQUIPMENT DESIGNATION Air Fed Model 1 Incinerator Jay-Bee Model Disintegrator CAPACITY LBS MANUFACTURER OR DISTRIBUTOR PER HOUR REMARKS Buffalo Metal Fabricating Corp. 200-450 50 Wecker Street Buffalo, NY 14215 Jay-Bee Manufacturing Co., Inc. 300 P.O. Box 986 Tyler, TX 85801 Security Engineered Security Engineered Machine Co. 400 Disintegrator 5 Walkup Drive Model 1012 Westboro, MA 01581 Jay-Bee Model 3 ISW Jay-Bee Manufacturing Co., Inc. 750 Disintegrator P.O. Box 986 Tyler, TX 85801 Security Engineered Security Engineered Machinery Co. 600 Disintegrator 5 Walkup Drive Model 22 Westboro, MA 01581 3/16" filter screen required. High noise and dust levels. Destroys printed cir- cuit boards when equip- ped with appropriate filter screen. 3/32" filter screen required. Sound enclosure available. 3/32" filter screen required. High noise and dust levels. Destroys printed circuit boards when equipped with appropriate filter screen. 3/32" filter screen required. Sound enclosure available. Destroys printed circuit boards when equipped with appropriate filter screen. Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 m v Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 C z 0 r Cl) EQUIPMENT CAPACITY LBS DESIGNATION MANUFACTURER OR DISTRIBUTOR PER IIOUR REMARKS DDS Hammermill Document Disintegration Systems 600 Discontinued. 3/16" filter Model 12 2075 Belgrave Avenue screen required . High Huntington Park, CA 90255 noise and dust levels. Destroys printed circuit boards when equipped with appropriate filter screen. Security Engineered Security Engineered Machinery Co. 800 3/32" filter screen Disintegrator 5 Walkup Drive required. Sound enclosure Model 1424 Westboro, MA 01581 available. Destroys printed circuit boards when equipped with appro- priate filter screen. DDS Hammermill Document Disintegration Systems 1000 Equipped with 3/16" filter Model DDS-18 L&F Industries screen. High noise and 2075 Belgrave Avenue dust levels. Destroys Huntington Park, CA 90255 printed circuit boards when equipped with appro- priate filer screen. Jay-Bee Model 4 ISW Jay-Bee Manufacturing Co., Inc. 1500 3/16" filter screen Disintegrator P.O. Box 986 required. High noise Tyler, TX 75701 and dust levels. Destroys printed circuit boards when equipped with appropriate filter screen. DDS Hammermill Document Disintegration Systems 2300 3/16" filter screen Model DDS-24 2075 Belgrave Avenue required. High noise Huntington Park, CA 90255 and dust levels. Destroys printed circuit boards when equipped with appro- priate filter screen. C z 0 r U) U) M m v Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 m v Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 UNCLASSIFIED THIS PAGE INTENTIONALLY LEFT BLANK UNCLASSIFIED Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 UNCLASSIFIED GLOSSARY (U) AC/DC Alternating Current/Direct Current ADP Automatic Data Processing C Confidential CCSO Command and Control Systems Organization CNWDI Critical Nuclear Weapon Design Information COMSEC Communication Security CTCO Central Technical Control Operator CZ Controlled Zone DAA Designated Approving Authority dB decibel DCA Defense Communications Agency DCI Director of Central Intelligence DCID Director of Central Intelligence Directive DES Data Encryption Standard DIAM Defense Intelligence Agency Manual DPI Data Processing Installation EMC Electromagnetic Compatibility EMI Electromagnetic Interference EMSEC Emanations Security FRD Formerly Restricted Data GSA General Services Administration HISSO Hub Information System Security Officer Hz Hertz ips inches per second IST Independent Security Test MIL-STD Military Standard NAC National Agency Check NACSEM National COMSEC/EMSEC Information NACSI National COMSEC Information NCO Network Control Operator NCSC National Communications Security Committee NCWG Network Certification Working Group NDA Non-Disclosure Agreement UNCLASSIFIED Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 UNCLASSIFIED NFIB National Foreign Intelligence Board NFIC National Foreign Intelligence Committee NISSO Node Information System Security Officer NSA National Security Agency NSA/CSS National Security Agency/Central Security Service NSC National Security Council NSDD-95 National Security Decision Directive 95 NSO Network Security Officer OADR Originating Agency's Determination Required OMB Office of Management and Budget OPR Office of Primary Responsibility OT&E Operational Test and Evaluation PDS Protected Distribution System PM Program Manager PMO Program Management Office PPL Preferred Products List PR Periodic Reinvestigation RD Restricted Data RF Radio Frequency S Secret SCI Sensitive Compartmented Information SCO System Control Operator SCIF Sensitive Compartmented Information Facility SCOCE Subcommittee on Compromising Emanations SOP Standing Operating Procedures ST&E Security Test and Evaluation STC Sound Transmission Class TCO Technical Control Operator TQSC TEMPEST Qualification Special Committee TS Top Secret TSA Temporary Secure Area U Unclassified UCT User Control Terminal UPS Uninterruptible Power Supply WAWS Washington Area Wideband System UNCLASSIFIED Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5 SECRET SECRET Declassified and Approved For Release 2011/11/10: CIA-RDP96BO1172R000400050018-5