AIAI33-105

AIR INTELLIGENCE AGENCY INSTRUCTION 33-105

29 APRIL 1992

DEPARTMENT OF THE AIR FORCE HQ AIR INTELLIGENCE AGENCY

Communications

COMMUNICATIONS-COMPUTER SYSTEMS MANAGEMENT

Corrected copy of AFIC REGULATION 700-4

HQ AFIC/SCO

MSgt W. Mayfield

HQ AFIC/SC

Col Norman M. Slocum

7

F; X: (See Last Page)

1. Scope. This regulation provides guidance for the management and operation of the communications-computer function (SC) at all Air Force Intelligence Command (AFIC) command levels. It consolidates unit SC responsibilities established by Air Force and HQ AFIC directives and serves as a reference to guide communications-computer systems officers in the management of required duties. When a conflict occurs between the guidance contained in this publication and the directives in attachment 1, precedence will be given to the applicable higher-level directive. This regulation applies to all AFIC activities to include AFIC-gained Air National Guard and Air Force Reserve units. Send recommended changes to AFIC/SCO, the MAJCOM office of primary responsibility (OPR) for communicationscomputer systems (C-CS) management.

2. Responsibilities. The Chief, C-CS Management (SC) is directly responsible to the AFIC unit commander for management of C-CS operations, security, programs, and resources. For units that do not have an SC, the commander may appoint an OPR to carry out the C-CS management duties and responsibilities described in this regulation. Attachment I lists applicable directives that govern the operation and management of these areas.

3. Operations Management. The SC at each wing, and center and the 696 IG the 6900 CG will oversee the implementation of AFIC policy related to the management and operation of C-CS within it theater of operation. The unit SC is the OPR for C-CS operations.

3.1. Criticomm Support Facility (CSF). The SC has operational oversight of the criticomm support facility that provides all C-CS equipment and control facilities for all circuitry necessary to sustain the day-to-day operations of the AFIC unit. This includes, but is not limited to, analyst-to-analyst operational communications circuits, HFDF network circuits, PLATFORM network circuitry, and circuits that provide record message support. Additionally, the CSF may house terminals that provide record message support for the unit, and in some cases for the host base. SC is also responsible for the operational oversight of all customer operated remotes (COR). These remotes are in areas other than the CSF and may be operated by non-491X I personnel.

3.2. Systems Control Facility. Along with the operation of the CSF, the SC must be knowledgeable of the unit systems control facility and the base technical control facility supporting the unit. The systems control workcenter activates or deactivates, troubleshoots, monitors and quality controls circuits terminating within or passing through the AFIC unit CSF.

3.3. Secure Voice. The SC is the single point of contact for the management of secure voice systems, such as the NSA/CSS secure telephone system (NSTS) and, or secure telephone units, version III (STU-III).

3.4. Frequency Management. If radio frequencies are assigned to an AFIC unis the SC will appoint a frequency manager in writing. The SC will ensure that the frequency manager performs duties according to prescribed directives. Reference AFR 700-14.

3.5. Telephone Control Officer (TCO). The SC, or designated representative, will serve as the organizational TCO and will carry out all duties according to prescribed directives.

3.6. Computer Processing Support. The wing or group SC will oversee the planning, implementation, operation, and management of mission mainframe and minicomputer systems, stand-alone small computers, and local area networks (LAN) in theater. The unit level SC will provide computer operations support to the unit via mainframes, minicomputers, small computers, and LANS. The unit level SC will provide operational oversight for all of these types of computers. The definition of these various types of computers is differentiated by processing speeds and storage capacities, and SC personnel must be able to distinguish between the configuration concepts, is of operating systems or applications software, and operational capabilities of each type of system to be able to provide ultimate support to the unit. Unit level SC will adhere to the suggested checklist according to ESCP 123-700-2, section F for computer systems management.

3.6.1. Mainframe Computers. Some SC provide operations support to the AFIC unit via large mainframe computers which are located outside the confines of the CSF. The unit SC manages these systems and all associated equipment.

3.6.2. Minicomputers or Microcomputers. Some unit SC may provide operations support for special mission systems or projects. These computer systems may not be assigned to SC, but SC may be tasked with providing support for operating these systems.

3.6.3. Small Computers. The SC is responsible for the management of small computers within the organization. This includes all personal computers (PC) whether they are in a stand-alone mode or connected to a local area network (LAN). SC is responsible for the accountability of the equipment, ensuring that proper security considerations are met, and that users are knowledgeable of hardware or software characteristics. In addition, SC will serve as the central point of expertise for small computers, assisting unit personnel in all problem solving inquiries.

3.6.4. System or Network Administration. SC is responsible for ensuring systems or network administration responsibilities are assigned for all installed systems and, or networks. These responsibilities may be delegated to other functional areas within the organization, but the SC will retain management oversight and policy responsibility at an times. In general terms, the system administrator (SA) is responsible for managing data bases, system hardware or software, data storage, communications connectivity, system performance, and will maintain a close liaison with the system users.

4. Comm-Computer Systems Security. SC is responsible for enforcing C-CS security policy in the theater and unit. Specific functional responsibilities include but are not limited to the following:

4.1. Computer Security (COMPUSEC). SC will ensure that all computer and communications equipment are accredited according to accreditation standards. The senior computer security officer (SCSO) will ensure the development of policies and procedures to educate users in proper utilization of equipment to prevent common COMPUSEC violations. Reference ESCR 56-10, Automated Information System Security Procedures.

4.2. Magnetic Media Control. SC is responsible for enforcing the accountability of magnetic media and implementing procedures for processing, accounting, storing, distributing, and shipping of magnetic media. Reference ESCR 56- 1 0, atch 17.

4.3. Communications-Computer Systems Security Education, Training, and Awareness Program (ETAP). SC will establish an ETAP to educate users on the proper utilization of C-CS in a manner that will prevent compromise of sensitive-classified and classified information. 'Ibis includes managing ETAP set forth in AFR 56-18.

4.4. TEMPEST. SC will coordinate with the unit TEMPEST officer to ensure TEMPEST requirements are met during installation, configuration, and relocation of C-CS.

4.5. COMSEC. The COMSEC custodian will be assigned within the SC function. The COMSEC custodian will control and manage dx account and all subaccounts that fall within his or her responsibility as outlined in AFR 56-11. (NOTE: SC is not responsible for unit sub-accounts that fall under purview of the base COMSEC custodian).

5. Program Management. The wing SC will oversee the planning, programming and implementation of C-CS requirements or projects for AFIC units within its theater of operation. The unit SC is the OPR for the planning, program management, and project implementation of C-CS requirements.

5.1. Communications-Computer Systems Requirements Documents (CSRD). SC is the focal point within the AFIC unit for CSRD management. Functions include assisting and developing new C-CS requirements; validating requirements with appropriate base agencies; processing CSRDs through wing to HQ AFIC, as applicable; maintaining the status of CSRDS; and providing feedback to users.

5.2. System Integration. The unit SC will ensure that functional and technical characteristics of existing and, or planned C-CS effectively and efficiently support stated user requirements. System integration ensures the effective mesh of all systems that are required to work together and that the technical solutions comply with the approved architectures.

5.3. Project Implementation. The unit SC will be responsible for the implementations of C-CS projects. This will include coordination with the host base agencies and higher headquarters, as applicable. 'Me SC will ensure that all support items or functions have been accomplished and that higher headquarters are kept advised of the status of implementation. Additionally, the SC will be the focal point for all C-CS engineering site surveys and oversee project implementation by the appropriate installation agency.

6. Configuration Management. SC is the focal point for the review and oversight for all C-CS systems to include hardware, software, local area networks (LAN), and wide area networks (WAN). SC will ensure that configuration management is applied to each C-CS. The functional and physical characteristics of the C-CS system must be identified, documented, controlled, and audited to ensure the system is within the established architecture, interoperabie with other systems, and capable of supporting the mission.

7. Resource Management. SC is responsible for the effective management of all resources under its control, (equipment materiel, and personnel). The following entities emphasize the realm of SC's resource management responsibility:

7.1. Inventory Control. The unit SC will provide timely and accurate communications-computer systems inventory and management information directly to the AFIC Automated data processing equipment (ADPE) inventory manager.

7.1.1. Information Processing Management System (IPMS). The unit SC will account for all assigned C-CS equipment via IPMS and submit required reporting according to prescribing directives.

7.1.2. Software Management. All software utilized within the unit will be centrally controlled within SC. SC personnel responsible for software support will be knowledgeable of the various operating or data base systems, system security packages, telecommunication concepts, and general office automation applications and features used by the unit available through accepted procurement channels for use by AFIC units. Sustaining this level of familiarity allows the SC to assist users in developing and maintaining the software programs necessary to support mission requirements. SC is the focal point for all user developed software.

7.2. Maintenance Responsibilities. SC will ensure that all equipment reportable under IPMS is properly maintained and operational. SC will report all deficient equipment to appropriate sources and stay abreast of maintenance status. Upward channel reporting will be accomplished as required.

7.3. Functional Management. SC will perform periodic manning surveys as required and serve as the functional manager for 49XX and 49XXX resources for the unit.

7.4. Communications-Computer System Training. The SC is responsible for developing, implementing and managing organizational communications-computer system training programs. Types of training include use of streamliner remote terminals (ESCR 700-6), training required for conversion to new technology, operator and system administrator training, training to support local and wide area networks, and the use of computer application software. Sources of training include formal government course (AFR 50-5 and AFR 50-9), contract training, computer based instruction, and local training.

C. DOUGLASS COUTO,

Lt Col, USAF

Director of Information Management

RELATED PUBLICATIONS

Operations Management:

AFR 700-6, Information Systems operations Management

AFR 700-7, Information Processing Center Operations Management. Provides policy and procedures for managing data processing centers (DPCS) and telecommunication centers (TCC) that receive, process, store, or transmit information by information systems resources other than voice. Also refer to AFIC Supplement 1 for further guidance.

AFR 700-8, Volumes I and II, Introduction and Policy For Telephone System Management.

AFR 700-14, Frequency Management Defines duties for the frequency manager.

AFR 700-26, Management of Small Computers. Provides policy and guidance for planning, acquiring, managing, and operating small computers, and related software. AFIC Supplement I further defines the Unit SC role as it pertains to unique MAJCOM requirements.

ESCP 123-700-2, Comm-Computer Operations. 'Me pamphlet covers all aspects that must be considered for the effective management of a criticomm support facility (CSF), data processing center (DPC), small computers, and network system administration, providing checklists for managers to follow.

ESCR 700-2, User-Developed Small Computer Software. Provides guidance for management and submittal of userdeveloped software to improve the productivity and facilitate distribution throughout the command.

ESCR 700-6, Communications Policies and Procedures. Prescribes command policy and general in-station procedures for telecommunication stations supporting AFIC.

Security Management:

AFR 12-30, Air Force Freedom of Information Act Program. This regulation controls the use and storage of FOUO information.

AFR 12-35, Air Force Privacy Act program. This regulation controls the AF Privacy Act (PA) program. It requires the squadron PA monitor to determine control measures required to protect Privacy Act information Act computer systems.

AFR 56-18, Education Training Awareness Program. This regulation covers the Air Force computer security, TEMPEST, and COMSEC Education Programs.

AFR 125-37, Resource Protection Program. This regulation sets forth computer facility protection requirements. It covers large computer systems but does not directly address small computers.

AFR 205-16, Automated Data Processing Equipment (ADPE) Security Policy, Procedures and Responsibilities. This regulation establishes the computer system security officer (CSO) function and security programs relating to small computers. It sets up password requirements and annual computer security training requirements.

AFR 700-10, Information Systems Security- This regulation covers risk management, the accreditation process, the designated approving authority (DAA) function, and security for information systems. It discusses physical security (AFR 125-37), personnel security (AFR 205-32), information security (AFR 205-1), the Privacy Act (AFR 12-35),

FOUO information (AFR 12-30), and the COMSEC, TEMPEST, COMPUSEC, and OPSEC programs. It also explains how these items relate to information systems security.

ESCP 123-700-3, Operations, Security, and Management This pamphlet provides managers a checklist for ensuring that command comm-computer system security requirements are being implemented.

ESCR 56-10, Automated Information System Security Procedures. This regulation defines AFIC computer security policy. It applies to all computer resources and protection of information in its electromagnetic state. It augments and clarifies other related directives for the AFIC community.

Program Management:

AFM 67- 1, Volume 2, PART 2, USAF Standard Base Supply System. Prescribes standardized procedures for all supply activities operated or supported by the Air Force Standard Base Supply System.

AFP 700-25, Volume 1, Equipment Directory Information Systems Equipment. Provides brief descriptions of selected information systems equipment in the Air Force inventory.

AFP 700-50, Volume 1, Air Force Communications-Computer Systems Architecture Overview. Provides a complete review of several technical architectures supporting overall Air Force communications-computer systems architectures (AFCSA).

AFR 67-23, Standard Base Supply Customer's Guide. Provides organizational commanders the information they need to obtain effective supply support from the standard base supply system.

AFR 700-1, Managing Air Force Communications-Computer Systems. Establishes policy, objectives, and responsibilities for managing Air Force communication-computer visual information systems.

AFR 700-2, Communications-Computer Systems Planning and Architectures. Establishes policy for Air Force communications-computer systems planning to support overall Department of Defense (DOD) goals, as implemented by the Joint Chiefs of Staff (JCS) and the US Air Force.

AFR 700-3, Communications-Computer Systems Requirements Processing. Establishes the policies and procedures for defining, programming, budgeting, and funding communications-computer systems requirements.

AFR 700-4, Volume 1, Communications-Computer Systems Program Management. Provides policy to activities requiring, implementing, supporting or acquiring communications-computer systems capabilities as defined in AFR 700-1.

AFR 700-4, Volume 2, Communications-Computer Systems Acquisition and Major Automated Information Systems Review Requirements. Provides guidance to activities acquiring communications-computer systems, directs user

responsibilities, assists the user in dealing with the contracting office, and familiarizes the user with overall acquisition process and requirements.

AFR 700-5, Communications-Computer Systems Requirements Board. Provides policy and guidance for establishing and operating communications-computer systems requirements boards (CSRB).

AFR 800-2, Acquisition Program Management. Prescribes the system acquisition process for programs funded primarily through procurement appropriations; the Security Assistance Program, or the Research, Development, Test and Evaluation (RDT&E) appropriation.

ESCR 27-10, AFIC Corporate Structure. Establishes the AFIC corporate structure and procedures for corporate decision making; explains the relationship between the AFIC Council, its supplements, and the functional staff, and briefly describes the AFIC corporate requirements and programs process.

ESCR 67-1, Volume 4, AFIC Equipment Management. Provides AFIC commanders, 6960 ESSG Chief of Supply (LGS), materiel control supervisors, and functional property custodians guidance on how to request certain organizational and all controlled mission equipment (CME).

ESCR 800-3, Acquisition Program Management. Sets policy and tells how to manage acquisition of systems, subsystems, or modifications for which AFIC has either acquisition management, support, or contracting responsibility.

Training:

AFR 50-5, USAF Formal Schools. Provides listing and description of formal education and training courses available to military and civilian personnel. This training is provided by Air Training Command and other government agencies.

AFR 50-9, Special Training. This regulation governs formal special training. Defines categories of training and provides information on planning, programming, and submitting requirements for special training. Outlines procedures and responsibilities for conducting screening to control and allocate formal training quotas.

X Distribution:

AUL/LSE (1)

HQ AFIC /SCO (5)

HQ AFIC / IMOE (3)

AFCEDO/CED (1), Keesler AFB MS 39534

169 ESS/IM (1), Utah ANG Base, 765 N 2200 West Salt Lake City UT 84116-2999

HQ AFRES/IMPD (1), Robins AFB GA 31098-600l

10 AF/IMPD (1), Bergstrom AFB TX 78743-6002

4 AF/IM (1), McClellan AFB CA 95632-6002

8075 ESS (1), Brooks AFB TX 78235-6376

8078 ESS/IM (1), Offutt AFB NE 6811-6376

8085 SPF (1), San Antonio TX 78243-5000.