Information Assurance Roles (A6), Above Wing

Question 1

Secretary of the Air Force, Air Force Chief Information Officer (SAF/CIO A6)

Answer 1

• Senior communicator for the AF
• Designated by SECAF to be responsible for all AF owned and operated IS
• Develops, implements and enforces Comm
  
  • Policies
  • Standards
  • Strategies
  • Procedures
• Ensure the most effective and efficient acquisition, integration, application, and management of IT assets.
• Ensures IA is an integral part of IS and app design.
• Establishes AF-GIG acceptable baseline risk level
• Provides guidance to mitigate threats appropriate for risk
• Appoints designated accrediting authority for AF-GIG
• Reviews waiver requests for compliance to DoD GIG policy, Defense information systems Network (DISN) capability, and technical sec requirements.

Question 2

Secretary of the Air Force, Policy and Resources Directorate, Policy and compliance division (SAF/A6P)

Answer 2

• Develops policies and procedures for operations and maintenance
• Appoints Air Force Certified TEMPEST Technical Authorities (CTTA) who work as part of the AFNIC
• Oversees implementation of AF COMPUSEC program

Question 3

Air Force Space Command Commander (AFSPC/CC)

Answer 3

• Functions as the designated accrediting authority (DAA) for the AF-GIG (designated by SAF CIO A6)
  
  • Delegates authority to AFSPC/A6
• Assists Air Force Network Integration Center (AFNIC) in developing IA guidance and procedures for space ISs in the acquisition and development life cycle

Question 4

624th Operations Center

Answer 4

• Conducts the Air Force portion of Network Defense (NetD) mission
• Employs mechanisms and procedures to monitor all Air Force ISs to detect, report, and document unauthorized activity (successful or unsuccessful)
• Institutes appropriate NetD countermeasures or corrective actions

Question 5

Air Force Network Integration Center (AFNIC)

Answer 5

• Executes and manages the AF EMSEC program
• Acts as Certified TEMPEST Technical Authority (CTTA)for AF EMSEC
• Executes and manages the AF COMSEC program:
  
  • COMSEC incident processing and analysis
  • Cryptographic Access Program
  • Develops COMSEC Forms
• Manages AF COMPUSEC Program
• Manages and executes the IA Notice and Consent (N&C) program
• Certifying Authority (CA) for AF IA Program
• Manages AF Ports Protocols and Services (PPS)

Question 6

MAJCOM IA Office

Answer 6

Manages the Command EMSEC/COMSEC/COMPUSEC programs

• Focal point for all MAJCOM IA requirements
• Implements Emission Security Information Messages (ESIMS)
• Ensures compliance with AFSSI 7702, EMSEC Countermeasure Reviews, at each command installation by performing inspections

Question 7

Air Force Office of Special Investigations (AFOSI)

Answer 7

Responsible for investigating

• Threat information
• Analysis of counterintelligence (CI) threats
• Cyber-CI threat assessments concerning current and emerging threats to the AF-GIG