SECNAV M-5510.36, DEPARTMENT OF THE NAVY INFORMATION SECURITY PROGRAM Flashcards
What is used as a generic term for any organizational entity and may include a base, station, unit, laboratory, installation, facility, center, activity, detachment, squadron, ship, etc.?
Command
Who is responsible for the effective management of the ISP within the command?
Commanding Officer
Who is responsible for implementing the ISP and shall have direct access to the commanding officer?
Security manager
The Security Manager will coordinate after-incident responses involving classified information processed on IT systems with the command what?
Information Assurance Manager (IAM)
The command security manager will ensure that access to classified information is limited to appropriately cleared personnel with a need-to-know per what reference?
SECNAVINST 5510.30
The command security manager may be assigned full-time, part-time, or as a collateral duty and must be an officer or a civilian employee, what grade or above, with sufficient authority and staff to manage the program for the command?
GS-11
The security manager must be a U.S. citizen and have been the subject of a favorably adjudicated Single Scope Background Investigation (SSBI) completed within how many years prior to assignment?
Five
The commanding officer shall designate, in writing, a command what for commands handling Top Secret information?
TSCO
The Top Secret Control Officer will ensure that inventories of Top Secret information are conducted at least once how often, or more frequently when circumstances warrant?
Annually
The TSCO must be an officer, senior non-commissioned officer what rank or above, or a civilian employee, GS-7 or above?
E-7
Persons designated as assistant security managers must be U.S. citizens, and either officers, enlisted persons what rank or above, or civilians GS-6 or above?
E-6
Who is the principal advisor to the commanding officer in all matters regarding the Communication Material System (CMS)?
EKMS manager
What reference requires the commanding officer to designate, in writing, a NWP custodian?
NTTP 1-01
What reference establishes procedures and minimum security standards for the handling and protection of NATO classified information?
USSAN 1-69
What is the main receiving and dispatching element for NATO information in the U.S. Government?
Central United States Registry (CUSR)
Per what reference, the commanding officer shall designate, in writing, an IAM and Information Assurance Officer(s)(IAO), as appropriate?
OPNAVINST 5239.1B
Who serves as the point of contact for all command information assurance (IA) matters and implements the command’s IA program?
IAM
Who is designated for each information system and network in the command, and are responsible for implementing and maintaining the command’s information technology systems and network security requirements?
IAO
Per what reference, the commanding officer shall designate, in writing, a command SSO and Subordinate Special Security Officer (SSSO), as needed, for any command that is accredited for and authorized to receive, store, and process SCI?
DoD 5105-21-M-1
Who is responsible for the operation (e.g., security, control, use, etc.) of all command Sensitive Compartmented Information Facilities (SCIFs)?
SSO
The SSO and the SSSO shall be appointed in writing and each must be a U.S. citizen and either a commissioned officer or a civilian employee GS-9 or above, and must meet the standards of what reference?
DCID 6/4
Per what reference, the Commanding Officer shall designate, in writing, a command security officer?
OPNAVINST 5530.14C
Specified security functions may be performed for other commands via what, or Memoranda of Understanding (MOU) or Memoranda of Agreement (MOA)?
SSAs
What include those markings that identify the source of classification (or for original decisions, the authority and reason for classification)?
Associated markings
What include any equipment or interconnected system or subsystem of equipment that is used in the automatic acquisition, storage, manipulation, management, movement, control, display, switching, interchange, transmission, or reception of data or information?
IT systems
What includes Universal Serial Bus drives, flash drives, pen drives, compact disks, scanners, video tapes, floppy disks, recordings, etc.?
Electronic media
Documents containing RD (including CNWDI) or FRD, shall not be marked with any downgrading or declassification instructions, other than those approved by the what?
DOE
Mark (stamp, print, or permanently affix with a sticker or tape) the face and back cover, and what else, of all classified documents to show the highest overall classification level of the information they contain?
Top and bottom center
What abbreviation shall be used to designate unclassified portions containing information exempt from mandatory release to the public?
FOUO
What letter shall be used for the identification of NATO RESTRICTED or Foreign Government RESTRICTED information?
R
The authority to grant waivers of the portion marking requirement rests with the what?
Director, ISOO
Associated markings shall not be placed on the what of any classified document?
Back cover
The “Classified by” and “Reason” lines are rarely used because what estimated percent of all DON documents are derivate classified?
99%
Declassification instructions and other downgrading instructions do not apply to documents containing Restricted Data (RD) or what else?
Formerly Restricted Data (FRD)
Only what designated declassifier can declassify an RD document?
Department of Energy (DOE)
What advise document holders that additional protective measures such as restrictions on reproduction, dissemination or extraction are necessary?
Warning notices
Per Title 42, U.S.C., Sections 2011-2284 and what else, mark classified documents containing RD and/or FRD on the face of the document, in the lower left corner, with the applicable warning notice?
DoD Directive 5210.2
What which is a subset of RD is subject to special dissemination controls and marking requirements?
CNWDI
The marking policies and dissemination procedures for CNWDI are contained in what reference?
DoD Directive 5210.2
Per what reference, there is national policy prohibiting foreign disclosure of NNPI?
NAVSEAINST 5511.32C
Classified NNPI not containing RD or FRD information shall include the associated markings set forth in what reference?
NAVSEAINST 5511.32C
Per what reference, SIOP documents shall be marked in the same manner as any other classified document?
OPNAVINST S5511.35K
Per EKMS-1, what designator identifies all COMSEC documents and keying material which are used to protect or authenticate classified or controlled unclassified government or government-derived information?
CRYPTO
Per what reference, mark documents containing FOUO Law Enforcement Sensitive (FOUOLES) in the same manner as documents containing FOUO?
DoD 5200.1-R
Per what reference, mark the bottom face and the back cover of unclassified documents containing DoD UCNI with “DoD unclassified Controlled Nuclear Information”?
OPNAVINST 5570.2
The DOS does not require that what information be specifically marked, but does require that holders be made aware of the need for controls?
SBU
Mark information or material designed as LIMITED DISTRIBUTION, or derived from such information or material per what reference?
DoD Directive 5030.59
The policy for marking intelligence information is contained in what reference?
DCID 6/6
What marking is the most restrictive intelligence control marking and shall only be used on classified intelligence that clearly identifies or would reasonably permit ready identification of intelligence sources or methods that are particularly susceptible to countermeasures that would nullify or measurably reduce their effectiveness?
ORCON/OC
Use what marking with, or without, a security classification level marking, to identify information provided by a commercial firm or private source under an expressed or implied understanding that the information shall be protected as a trade secret or proprietary data believed to have actual or potential intelligence value?
PROPIN/PR
Within the DON, only the Director of Naval Intelligence and the Director of Intelligence, United States Marine Corps, may determine what information warrants initial application of what caveat?
NOFORN
The “NOFORN” caveat shall not be applied to non-intelligence information except for what?
NNPI
What control making was previously only for use on intelligence information, but is now authorized for use on all classified defense information deemed releasable through appropriate foreign disclosure channels?
REL TO
The product of what shall not be classified unless it incorporates classified information to which the developer was given prior access?
IR&D
What reference governs the assignment, control, and use of nicknames, exercise terms and code words?
OPNAVINST 5511.37C
What are a combination of two unclassified words with an unclassified meaning?
Nicknames
What term is a combination of two non-code words that may or may not be classified and may or may not have a classified meaning?
Exercise
What is a single classified word with a classified meaning?
Code word
Classification by what is rare, and in order to qualify for classification, something not already identified in the individual parts must be revealed?
Compilation
What with jurisdiction over the classified information may change the level of classification?
OCA
What determines the duration of classification?
Date of Source
When using source documents that have old declassification instructions, all declassification actions are effective on what date of the year in which declassification is to take place?
31 December