NASA Procedures and Guidelines
NPG 1600.6A
Effective Date: March 2, 2000
Expiration Date: March 2, 2002
This Document ...
TABLE OF CONTENTS
Cover
Preface
P.1. PURPOSE
P.2. APPLICABILITY
P.3. AUTHORITY
P.4. REFERENCES
P.5. CANCELLATION
C...
CHAPTER 5. TWO-PERSON INTEGRITY (TPI) NO-LONE ZONE (NLZ)
CONTROLS
5.1. General
5.2. Procedures for Handling and Safegua...
10.1. Requirements
10.2. Preparedness
10.3. Preparing the Emergency Plan
10.4. Emergency Action Procedures Review
APPE...
Effective Date: March 2, 2000
Preface
P.1. PURPOSE
This NPG provides basic information for assignment of individual Com...
k. National Communications Security Committee-1 (NCSC-1), National Policy for Safeguard
and Control of COMSEC, January 16...
P.5. CANCELLATION
a. NHB 1600.6, NASA Communications Security Manual, dated May 1993.
/s/ Jeffrey E. Sutton
Associate A...
CHAPTER 1: INTRODUCTION
1.1. General
This chapter provides procedures and guidelines for the implementation of a totally...
1.4. Objectives
This NPG provides guidance for safeguarding and controlling COMSEC material through
facilitating the fol...
CHAPTER 2: COMSEC MATERIAL CONTROL
2.1. General
This chapter establishes minimum accounting procedures to be followed by...
f. Maintaining master records of all material entered into the COMSEC Material Control System
(CMCS).
g. Maintaining the...
d. The specific items of COMSEC material required, and the desired in place date.
e. A statement that the minimum physica...
2.3.6. Personnel nominated as CAM or ACAM will be in grade GS-7 or above, or a contractor
employee at an equivalent level...
inspected for evidence of tampering and, if any is found, immediately submitting a report of
suspected physical incident ...
e. The CAM will be informed of all changes to the COMSEC account upon his or her return
from a temporary absence. If COMS...
f. Change of ACAM. When a change in ACAM is necessary, elements will submit a written
request through the local security ...
d. Providing technical assistance to Controlling Authorities for cryptographic keying material
controlled by NASA and exe...
Telecommunications Information System Security Instruction (NSTISSI) 4002, under certain
circumstances, the effective edi...
b. ALC-2. Continuously accountable by quantity to the COR. A report will be submitted to the
COR upon receipt and any sub...
identify all transactions involving subsequent transfer, issue, fill, and destruction of the material, as
applicable. EKM...
c. Annual or semiannual, as appropriate, inventory reports and change of CAM reports.
d. Hand receipts.
e. COMSEC Regist...
a. The active section of the register file consists of one form L6061, manual file, or one line item
(automated file), fo...
i. Assign each accounting report (e.g., incoming and outgoing transfers, possession, inventory,
and destruction reports) ...
COR. If it is found that the contents do not include TOP SECRET operational keying material,
follow standard receipting p...
or check purposes. Classified COMSEC publications must be page checked according to the
handling instructions provided wi...
removed, have the hand receipt user sign or initial and date the “USED” column of the “USAGE
RECORD” card applicable to t...
copy and forward it to the COR. Retain the fourth copy for file. Put the following notation on all
copies of transfer rep...
breaking through the container, and facilitate detecting tampering with the container. Mark each
wrapper with the "TO" an...
wrapper of the first package of multiple package shipments. Do not annotate the serial package
number(s) and transaction ...
f. Under normal conditions, ship classified keying material only by one of the following means:
DCS, appropriately cleare...
courier to no more than three editions when shipped by U.S. Registered Mail, no more than one
edition.
b. Within CONUS, ...
set forth below. This change only applies to shipments within the continental United States, U.S.
territories, and posses...
2.6.17. COMSEC Incident Reporting Requirements. The following types of incidents involving
CCI shipments shall be reporte...
f. Pages are not to be removed from basic documents.
g. Reproduction authorization of a document, in whole or in part, is...
a. Whenever it is necessary to convert the short title and/or accounting number of an item of
COMSEC material, report the...
i. The COMSEC Inventory should be used to conduct the inventory.
j. Compare the results of the physical inventory against...
u. When the preprinted inventory has been reconciled to agree with the account's actual holdings,
the CAM and witness wil...
Nasa Guide Line
Nasa Guide Line
Nasa Guide Line
Nasa Guide Line
Nasa Guide Line
Nasa Guide Line
Nasa Guide Line
Nasa Guide Line
Nasa Guide Line
Nasa Guide Line
Nasa Guide Line
Nasa Guide Line
Nasa Guide Line
Nasa Guide Line
Nasa Guide Line
Nasa Guide Line
Nasa Guide Line
Nasa Guide Line
Nasa Guide Line
Nasa Guide Line
Nasa Guide Line
Nasa Guide Line
Nasa Guide Line
Nasa Guide Line
Nasa Guide Line
Nasa Guide Line
Nasa Guide Line
Nasa Guide Line
Nasa Guide Line
Nasa Guide Line
Nasa Guide Line
Nasa Guide Line
Nasa Guide Line
Nasa Guide Line
Nasa Guide Line
of 72

Nasa Guide Line

Guide Line Nasa. Para quem gosta de Procedimentos ta aí um excelente Doc.
Published on: Mar 3, 2016
Published in: Government & Nonprofit      
Source: www.slideshare.net


Transcripts - Nasa Guide Line

  • 1. NASA Procedures and Guidelines NPG 1600.6A Effective Date: March 2, 2000 Expiration Date: March 2, 2002 This Document Is Uncontrolled When Printed. Check the NASA Online Directives Information System (NODIS) Library to verify that this is the correct version before use: http://nodis.hq.nasa.gov/Library/Directives/NASA-WIDE/contents.html Responsible Office: JS/Security Management Office NASA Communications Security (COMSEC) Procedures and Guidelines
  • 2. TABLE OF CONTENTS Cover Preface P.1. PURPOSE P.2. APPLICABILITY P.3. AUTHORITY P.4. REFERENCES P.5. CANCELLATION CHAPTER 1. INTRODUCTION 1.1. General 1.2. Transmission of Classified Information 1.3. Applicability and Scope 1.4. Objectives 1.5. Definitions 1.6. Revisions CHAPTER 2. COMSEC MATERIAL CONTROL 2.1. General 2.2. Responsibilities and Organization 2.3. The COMSEC Account 2.4. COMSEC Material 2.5. COMSEC Material Accountability 2.6. COMSEC Material Control System (CMCS) 2.7. Audit of COMSEC Accounts 2.8. Closing a COMSEC Account CHAPTER 3. CONTROLLING AUTHORITIES 3.1. General 3.2. Establishing the Cryptonet and Designating the Controlling Authority CHAPTER 4. COMSEC INFORMATION ACCESS REQUIREMENTS 4.1. Criteria for Access to COMSEC Information 4.2. COMSEC Briefing Requirements This Document Is Uncontrolled When Printed. Check the NASA Online Directives Information System (NODIS) Library to verify that this is the correct version before use: http://nodis.hq.nasa.gov/Library/Directives/NASA-WIDE/contents.html 1
  • 3. CHAPTER 5. TWO-PERSON INTEGRITY (TPI) NO-LONE ZONE (NLZ) CONTROLS 5.1. General 5.2. Procedures for Handling and Safeguarding Top Secret Keying Material 5.3. TPI Handling of Packages Received CHAPTER 6. COMSEC INCIDENT REPORTING REQUIREMENTS 6.1. General 6.2. COMSEC Incidents CHAPTER 7. ROUTINE DESTRUCTION OF COMSEC MATERIAL 7.1. General 7.2. Training Destruction Personnel 7.3. Routine Destruction Procedures for COMSEC Material 7.4. Routine Destruction Methods and Standards 7.5. Approved Routine Destruction Devices 7.6. Reporting Routine Destruction CHAPTER 8. SECURE TELECOMMUNICATIONS FACILITIES 8.1. Physical Security Requirements for Classified and Unattended Keyed Controlled Cryptographic Items (CCI) Equipment 8.2. CCI Access Controls 8.3. Storage Requirements 8.4. Record of Individuals Having Knowledge of Combinations to Containers Storing Classified COMSEC Material CHAPTER 9. SECURE TELEPHONE UNIT-III (STU-III) 9.1. General 9.2. Responsibilities 9.3. Secure Telephone Unit III (STU-III) Security Education 9.4. Protecting Crypto Ignition Key (CIK) 9.5. Incidents 9.6. STU-III Terminal Keying and Rekeying 9.7. Security Data Mode 9.8. Sensitive Compartmented Information Facilities (SCIF) 9.9. Installations in Residences, Hotels, or Commercial Conference Facilities 9.10. Vehicle Installations 9.11. Acoustic Security CHAPTER 10. COMSEC EMERGENCY ACTION PROCEDURES This Document Is Uncontrolled When Printed. Check the NASA Online Directives Information System (NODIS) Library to verify that this is the correct version before use: http://nodis.hq.nasa.gov/Library/Directives/NASA-WIDE/contents.html 2
  • 4. 10.1. Requirements 10.2. Preparedness 10.3. Preparing the Emergency Plan 10.4. Emergency Action Procedures Review APPENDICES A. COMSEC Terms B. Sample COMSEC Briefing C. Sample Cryptographic Access Certification D. Sample Emergency Action Plan E. Classification Guide This Document Is Uncontrolled When Printed. Check the NASA Online Directives Information System (NODIS) Library to verify that this is the correct version before use: http://nodis.hq.nasa.gov/Library/Directives/NASA-WIDE/contents.html 3
  • 5. Effective Date: March 2, 2000 Preface P.1. PURPOSE This NPG provides basic information for assignment of individual Communications Security (COMSEC) accountability responsibilities within NASA. It sets forth minimum standards, procedures, specifications, and guidelines for safeguarding and control of COMSEC material in NASA's possession. P.2. APPLICABILITY This NPG applies to the NASA Headquarters and all NASA Centers, including Component Facilities. P.3. AUTHORITY 42 U.S.C. Sections 2455, 2456, 2456a, and 2473(c) -- Sections 304 and 203 (c), respectively, of the National Aeronautics and Space Act of 1958, as amended. P.4. REFERENCES a. 5 U.S.C. 552(b)(1)-(9), Exemptions, Freedom of Information Act (FOIA). b. 40 U.S.C. 1441 note, Computer Security Act of 1987, as amended. c. 40 U.S.C. 1441, Responsibilities regarding efficiency, security, and privacy of Federal computer systems. d. 50 U.S.C. 435, Access to Classified Information - Procedures. e. Pub. L. 103-236, 108 Stat. 525, Protection and Reduction of Government Secrecy Act (50 U.S.C. 435 note). f. E.O. 12829, National Industrial Security Program, 3 CFR (1993 Compilation). g. E.O. 12958, Classified National Security Information, as amended, 3 CFR (1995 Compilation) h. 32 CFR, Part 2001, ISOO Directive No. 1. i. E.O. 12968, Access to Classified Information. 3 CFR (1995 Compilation). j. OMB Circular A-130, Security of Federal Automated Information Resources, (Appendix III). This Document Is Uncontrolled When Printed. Check the NASA Online Directives Information System (NODIS) Library to verify that this is the correct version before use: http://nodis.hq.nasa.gov/Library/Directives/NASA-WIDE/contents.html 4
  • 6. k. National Communications Security Committee-1 (NCSC-1), National Policy for Safeguard and Control of COMSEC, January 16, 1991. l. National Communications Security Committee-6 (NCSC-6), National Policy Governing the Disclosure or Release of Communications Security Information to Foreign Governments and International Organizations, January 16, 1981. m. National Telecommunications and Information Systems Security Publication (NTISSP) No. 3, National Policy for Granting Access to U.S. Classified Cryptographic Information, December 19, 1988. n. Index of National Security Telecommunications Information Systems Security Issuances (NSTISSI). o. NTISSI No. 3013, Operational Security Doctrine for the STU - III, Type 1, Terminal. p. NSTISSI No. 4005, Safeguarding Communications Security (COMSEC) Facilities and Materials, August 1997. q. NTISSI No. 4009, National Information Systems Security Glossary, January 1999. r. NTISSI No. 7000, TEMPEST Countermeasures for Facilities, October 17, 1988. s. NTISSI No. 7003, Protected Distribution Systems, December 13, 1996. t. National COMSEC Information Memorandum (NACSIM) No. 5203, Guidelines for Facility Design and Red and Red/Black Installation, June 30, 1982. u. NPD 1600.2A, NASA Security Program. v. NPG 1620.1, NASA Security Procedures and Guidelines. w. NPD 2810.1, Security of Information Technology. x. NPG 2810.1, Security of Information Technology. y. NPD 2800.1, Managing Information Technology. z. 14 CFR, Chapter V, Part 1203a – NASA Security Areas. aa. 14 CFR, Chapter V, Part 1204, Subpart 10 – Conduct or trespass, Inspection of Persons and Personal Effects. bb. 18 U.S.C. Sections 641, 793, 794, 798, 952. cc. National Security Agency (NSA) Manual 90-2, COMSEC Material Control Manual. This Document Is Uncontrolled When Printed. Check the NASA Online Directives Information System (NODIS) Library to verify that this is the correct version before use: http://nodis.hq.nasa.gov/Library/Directives/NASA-WIDE/contents.html 5
  • 7. P.5. CANCELLATION a. NHB 1600.6, NASA Communications Security Manual, dated May 1993. /s/ Jeffrey E. Sutton Associate Administrator for Management Systems DISTRIBUTION: NODIS This Document Is Uncontrolled When Printed. Check the NASA Online Directives Information System (NODIS) Library to verify that this is the correct version before use: http://nodis.hq.nasa.gov/Library/Directives/NASA-WIDE/contents.html 6
  • 8. CHAPTER 1: INTRODUCTION 1.1. General This chapter provides procedures and guidelines for the implementation of a totally integrated NASA Communications Account Management Program. 1.2. Transmission of Classified Information 1.2.1 Consistent with law, directives, and regulations, it is NASA policy that the Senior Agency Official, who is concurrently the Director, Security Management Office (DSMO), and the NASA COMSEC Manager shall establish uniform procedures to ensure the following: 1.2.1.1. Automated information systems, including networks and telecommunications systems (voice, video, and data), that collect, create, communicate, compute, disseminate, process, reproduce, store, zeroize, or destroy classified COMSEC information have controls that provide adequate protection, prevent access by unauthorized persons, and ensure the integrity of the information. 1.2.1.2. Emission Security, frequently referred to as TEMPEST countermeasure(s), will be coordinated with the Senior Agency Official for review and approval prior to acquisition and installation to insure that a major adverse financial impact on the program is not borne where there is no viable hostile threat capability. 1.2.1.3. Classified COMSEC information transmitted from an area not under access controls will be secured by NSA encryption or a Protected Distribution System (PDS). 1.3. Applicability and Scope The provisions of this NPG specifically apply to the following: 1.3.1. NASA COMSEC Account Managers (CAM), NASA Alternate CAM (ACAM), security organizations, and other NASA personnel and contractors using or otherwise having access to COMSEC materials. 1.3.2. Contractors under law and/or contract as implemented by the appropriate contracting officer. Contractor CAM and alternate contractor CAM’s responsibilities are identical to NASA CAM’s and ACAM’s. 1.3.3. Center Chiefs of Security (CCS) in implementing effective COMSEC operations. Each site is encouraged to implement this NPG and to tailor this guidance to their unique environments. 1.3.4. The NASA COMSEC Central Office of Record (COR) located at the Kennedy Space Center (KSC). This Document Is Uncontrolled When Printed. Check the NASA Online Directives Information System (NODIS) Library to verify that this is the correct version before use: http://nodis.hq.nasa.gov/Library/Directives/NASA-WIDE/contents.html 7
  • 9. 1.4. Objectives This NPG provides guidance for safeguarding and controlling COMSEC material through facilitating the following: 1.4.1. A COMSEC Material Control System (CMCS). 1.4.2. A COMSEC COR at the Kennedy Space Center. 1.4.3. A procedure to appoint a CAM and ACAM. 1.4.4. A secure COMSEC environment through training and support. 1.5. Definitions See definitions of terms at Appendix A. 1.6. Revisions This NPG will be revised consistent with pertinent Executive orders, statutes, direction from the NSA, and the development of new and improved security concepts. Changes to this NPG are specifically prohibited unless officially promulgated by the NASA COMSEC COR in coordination with the DSMO, and the NASA Office of the General Counsel (OGC). This Document Is Uncontrolled When Printed. Check the NASA Online Directives Information System (NODIS) Library to verify that this is the correct version before use: http://nodis.hq.nasa.gov/Library/Directives/NASA-WIDE/contents.html 8
  • 10. CHAPTER 2: COMSEC MATERIAL CONTROL 2.1. General This chapter establishes minimum accounting procedures to be followed by NASA CAM. 2.1.1. Direct communications between CAM, the NSA Accounting Office (STU-III and SDNS key only); and the NSA Insecurities, Evaluation, and Reporting Branch, are authorized for COMSEC accounting matters involving the direct shipment of COMSEC material. Send direct communications to Director, NSA, Attention: (appropriate office designator), Fort George G. Meade, MD 20755-6000. 2.1.2. Direct communications are authorized between NASA COMSEC Manager, NASA COMSEC COR, NASA CAM, and any other CAM involving direct shipment of COMSEC material. 2.2. Responsibilities and Organization COMSEC material control is based on a system of centralized accounting and decentralized custody and protection. Timely and accurate data are essential to continuous, effective control of COMSEC material entrusted to or produced for NASA. 2.2.1. The NASA DSMO is responsible for the following: 2.2.1.1. Facilitating attendance at the NSA COMSEC Custodian Training Course ND 112 for all newly appointed NASA ACAM’s. 2.2.1.2. Maintaining liaison with the civil agencies, NASA contractor COMSEC accounts, and the military services on all policy matters. 2.2.2. The NASA COR vice KSC, is responsible for the following tasks: a. Performing as NASA COR and conducting liaison with civil agencies, military services, and NASA contractor accounts concerning control of accountable COMSEC material and facilitating day-to-day operation. b. Establishing and closing COMSEC accounts. c. Maintaining a record of NASA COMSEC accounts, CAM, and ACAM’s. d. Processing requests to appoint or terminate the appointments of CAM and ACAM’s and verifying their clearances. e. Verifying semiannually the inventory of each NASA COMSEC account. This Document Is Uncontrolled When Printed. Check the NASA Online Directives Information System (NODIS) Library to verify that this is the correct version before use: http://nodis.hq.nasa.gov/Library/Directives/NASA-WIDE/contents.html 9
  • 11. f. Maintaining master records of all material entered into the COMSEC Material Control System (CMCS). g. Maintaining the financial and property accountability records for all accountable COMSEC equipment owned by or entrusted to NASA. h. Auditing NASA CAM at least every 24 months or on an announced basis or more frequently, based on the factors enumerated in 2.7.1, below. i. Providing guidance and assistance on controlling accountable COMSEC material. j. Preparing and distributing COMSEC Procedural and Material Control Bulletins. k. The chief of each organizational element has the ultimate responsibility for controlling all COMSEC material held within the organizational element. The chief may delegate this responsibility to a CAM and/or alternate(s). However, delegating this responsibility in no way relieves any individual (e.g., the user, the CAM’s supervisor, and other organizational chiefs) from the inherent responsibility for controlling COMSEC material held within the element. The Chief of the NASA organizational element is also responsible for ensuring that CAM and ACAM’s receive required training. l. The CAM is, through organizational and supervisory channels, responsible to the chief of the organizational element for controlling all accountable COMSEC material charged to the organizational element's account. m. The individual users or holder of COMSEC material are personally responsible for controlling and safeguarding COMSEC material while it is entrusted to their care and are not authorized to provide the material to any individual without a new hand receipt issued from the CAM. All material will be returned to the CAM for reissue. 2.3. The COMSEC Account 2.3.1. Requirements for a COMSEC account. Any element requiring COMSEC material must obtain such material through a COMSEC account. If an existing account cannot adequately support the requirement for material within an organization, a new COMSEC account will be established. 2.3.2. Request to Establish a COMSEC account. When a new COMSEC account must be established, submit a written request from the CCS of the NASA organization as follows: a. Submit the request through the CCS to the NASA COMSEC COR located at the KSC. b. Include the title and complete address of the element in which the account will be located; c. The purpose and justification for establishing the account; This Document Is Uncontrolled When Printed. Check the NASA Online Directives Information System (NODIS) Library to verify that this is the correct version before use: http://nodis.hq.nasa.gov/Library/Directives/NASA-WIDE/contents.html 10
  • 12. d. The specific items of COMSEC material required, and the desired in place date. e. A statement that the minimum physical security standards for safeguarding COMSEC material can be met, and the names, grades, and social security numbers with Privacy Act Notice of the individuals to be appointed as the CAM and ACAM’s. Normally, a single ACAM is sufficient at each account. Appointments of more than 2 ACAM’s should be coordinated with the NASA COR. Subparagraphs 2.3.5. and 2.3.6. provide CAM selection criteria. f. Certified clearance information and a Standard Form (SF) N2942B signature specimen on the individuals nominated as the CAM and alternate. When signature cards (SF N2942B) are used for clearance information certification, forward these cards with the written request. The NASA COR will initiate clearance verification. g. Allow a minimum of 30 days for an account to be established. 2.3.3. COMSEC account approval. The COR will be responsible for the following: a. Advising the requesting element in writing by sending an information copy to the CCS when the account is established and the CAM and ACAM appointments are approved. b. Assigning an account number and referencing the account number in all subsequent COR correspondence or transactions relating to the account. c. Providing information on how to obtain COMSEC account forms. 2.3.4. CAM and ACAM training. A newly appointed or changed CAM or ACAM will attend the NSA COMSEC Custodian Training Course ND-112 as soon as possible. This training is mandatory for all NASA CAM appointees, with the exception of those appointed to accounts established solely for secure telephone units or those who have attended equivalent training within 2 years. 2.3.5. Selecting a CAM or ACAM: Individuals selected as CAM will include the following: a. Be a civil service employee or contractor employee qualified to assume the duties and responsibilities of a CAM and meet the requirements contained herein. b. Not be previously relieved of CAM duties for reasons of negligence or nonperformance of duties. c. Be in a position that will permit maximum tenure of not less than 1 year as a CAM or ACAM. d. Not be assigned duties that interfere with the duties as CAM or ACAM. e. Be actually performing the CAM functions on a day-to-day basis. The CAM position will not be assumed solely to maintain administrative or management control of the account functions. This Document Is Uncontrolled When Printed. Check the NASA Online Directives Information System (NODIS) Library to verify that this is the correct version before use: http://nodis.hq.nasa.gov/Library/Directives/NASA-WIDE/contents.html 11
  • 13. 2.3.6. Personnel nominated as CAM or ACAM will be in grade GS-7 or above, or a contractor employee at an equivalent level. Where personnel at the appropriate grade level are not available, include full justification to support the nomination(s) in the appointment request. 2.3.7. Duties of the CAM. The CAM is responsible for the following: a. Ensuring that all COMSEC material issued to, or generated and held by, the account is safeguarded in accordance with requirements. This includes but is not limited to the receipt, custody, issuance, safeguarding, accounting, and, when necessary, destruction of COMSEC material. b. Maintaining up-to-date records and submitting all required accounting reports. c. Having knowledge of the procedures outlined in this NPG. d. Inspecting user areas semiannually. The CAM must have access to accountable material held by users. In cases where the material is used within a Sensitive Compartment Information Facility (SCIF) or Special Access Programs (SAP) and the CAM is not indoctrinated for special access, the area must be sanitized or the CAM escorted to allow fulfillment of his or her responsibilities. e. Protecting COMSEC material and limiting access to individuals with the appropriate clearance and need to know. f. Receiving, receipting, and ensuring the safeguarding and accounting of all COMSEC material issued to the COMSEC account. g. Maintaining accounts and related records as outlined in paragraph 2.5. h. With a witness, conducting an inventory, semiannually, and when a new CAM is appointed, by physically sighting all COMSEC material charged to the account and reconciling this inventory with the COR. The COR or other competent authority may also direct the conduct of an inventory. i. Destroying COMSEC material when required, or as directed by the COR. j. Submitting transfer, inventory, destruction, and possession reports when required. k. Inspecting the implemented protective technologies packaging upon initial receipt, during each inventory, and prior to each use to ensure the integrity of COMSEC material, key, or equipment. l. Ensuring prompt and accurate entry of all amendments to COMSEC publications held by the CAM. m. Ensuring that all accountable COMSEC material shipped outside of the CAM's organization is packaged and shipped in accordance with this NPG. Ensuring that all material received is This Document Is Uncontrolled When Printed. Check the NASA Online Directives Information System (NODIS) Library to verify that this is the correct version before use: http://nodis.hq.nasa.gov/Library/Directives/NASA-WIDE/contents.html 12
  • 14. inspected for evidence of tampering and, if any is found, immediately submitting a report of suspected physical incident according to chapter 6. n. Having knowledge of the location of every item of accountable COMSEC material and the purpose for which it is being used. o. Establishing procedures to ensure strict control of each item of keying material whenever operational requirements necessitate that material be turned over from one shift to another or from one individual to another. p. Ensuring that appropriate COMSEC material is readily available to properly cleared and authorized individuals whose duties require its use. If the material is classified, verify that the individuals are cleared to the level of the material. Briefing recipients on the requirements for protection and procedures for safeguarding the material until it is returned to the CAM. q. Reporting immediately to the CCS any known or suspected COMSEC incident as defined in chapter 6, and submitting a report according to chapter 6. r. Verifying the identification, clearance, and need to know of any individual requesting access to the records and/or material associated with the COMSEC account. s. Preparing for safeguarding COMSEC material during emergency situations according to chapter 10. 2.3.8. The ACAM. Individuals appointed as ACAM are responsible for the following in the absence of the CAM: a. Witnessing a COMSEC Inventory or Destruction. b. Ensuring that physical inventory or destruction of COMSEC material will be witnessed by an appropriately cleared individual. The witness should normally be the ACAM, but another appropriately cleared and briefed individual may act as a witness when the ACAM is not available. When an inventory or destruction is completed, the witness will sign the inventory report, Key Disposition Record, or destruction report, as appropriate, attesting that the COMSEC material listed has been inventoried or destroyed. The witness will sign an inventory or destruction report only after having personally sighted the material being inventoried and destroyed. c. Destroying keying material that has been hand receipted to a user requires a witness to the destruction of individual key settings. The witness will initial the Key Disposition Record attesting that the material has been destroyed. Under no circumstances will the witness initial a Key Disposition Record without having personally sighted the material being destroyed. d. When the CAM is to be absent for a period not to exceed 60 days, the ACAM will assume the responsibilities and duties of the CAM. An absence in excess of 60 days that has not been coordinated with the COR must be treated as a permanent absence, and a new CAM must be nominated. This Document Is Uncontrolled When Printed. Check the NASA Online Directives Information System (NODIS) Library to verify that this is the correct version before use: http://nodis.hq.nasa.gov/Library/Directives/NASA-WIDE/contents.html 13
  • 15. e. The CAM will be informed of all changes to the COMSEC account upon his or her return from a temporary absence. If COMSEC material was transferred to the account and accepted by the ACAM during the absence, the CAM will inventory the material, and sign, date, and include the remark "received from ACAM" on the front side of the COMSEC account's copy of the transfer report, thus relieving the ACAM of accountability for the material. In those cases in which material was transferred from the account or destroyed, the CAM should verify such actions by comparing the transfer and destruction reports with his or her Register File to assure the accuracy of the actions affecting the material for which he or she is held accountable. 2.3.9. Change of CAM. When it becomes necessary to terminate the CAM's or ACAM’s appointment, NASA elements must submit a written request through the CCS to the COR and include information and clearance certification about the replacement nominee. When written confirmation is received from the COR, the newly appointed CAM and his or her predecessor will perform the following duties: a. Conduct a physical inventory of all COMSEC material held by the CAM. The change of CAM will be effective the date the inventory is signed. b. Prepare an SF 153, listing all COMSEC material to be transferred to the new CAM. Identify the report in block 1 as a "change of CAM" and check both "received" and "inventoried" in block 14. Address the report from the CAM (block 2) to the NASA COR (block 3). The new CAM will sign in block 15, and the departing CAM will sign as the witness in block 17. Forward the original copy to the COR and retain a duplicate copy in the CAM file. When an account holds over 100 line items, a CAM may request a preprinted inventory and transfer from the COR. The request for a preprinted inventory transfer should normally be included with the nomination information. c. Normally, the new CAM will have received written confirmation of appointment before action is initiated to transfer the COMSEC account. However, if the confirmation is delayed and the predecessor’s departure is imminent, the transfer will be accomplished prior to the receipt of written confirmation. d. When the transfer is complete, the new CAM assumes full responsibility for the material charged to the COMSEC account and for its operation. The former CAM is relieved of responsibility for only that COMSEC material included on the transfer/inventory report. He or she is not relieved of responsibility for COMSEC material that is involved in any unresolved discrepancy until a clear COMSEC Inventory Reconciliation Report has been received from the COR. e. Changes of CAM should be scheduled at least 40 days before the former CAM departs to allow for the receipt of a clear COMSEC Inventory Reconciliation Report. However, the former CAM may depart prior to the return of the COMSEC Inventory Reconciliation Report, provided that no discrepancies or irregularities were evident when the inventory and transfer were made. Responsibility for resolving discrepancies discovered after a CAM has departed rests with the CCS. This Document Is Uncontrolled When Printed. Check the NASA Online Directives Information System (NODIS) Library to verify that this is the correct version before use: http://nodis.hq.nasa.gov/Library/Directives/NASA-WIDE/contents.html 14
  • 16. f. Change of ACAM. When a change in ACAM is necessary, elements will submit a written request through the local security office to the COR and will include information and clearance certification about the replacement nominee. g. Under emergency circumstances such as the sudden, indefinite, or permanent departure of the CAM, the CCS will nominate a new CAM (preferably the ACAM). The new CAM and an appropriately cleared witness will immediately conduct a complete physical inventory of all COMSEC material held by the account. When the absence of the CAM is unauthorized, the CCS will immediately report the circumstances in accordance with chapter 6. h. Upon completion of the inventory, prepare an SF 153, Possession Report. Annotate the Possession Report with the remark "Sudden, indefinite, or permanent departure of the CAM" or "Unauthorized absence of the CAM," as appropriate. The new CAM will sign block 15 and the witness will sign block 16. Forward the original copy of the report to the COR and retain a duplicate copy in the COMSEC account's file. i. Sudden, Indefinite, or Permanent Departure of the ACAM. The COR should be notified as soon as possible when an ACAM must be replaced due to a sudden, indefinite, or permanent departure. An unauthorized absence must be immediately reported in accordance with chapter 6. 2.3.10. COMSEC Officer, COMSEC/TEMPEST Point of Contact. Several NASA Centers have designated a COMSEC Officer to address policy issues and programmatic COMSEC responsibilities beyond those specified for the CAM. Although national policy does not require the designation of a COMSEC Officer, it has been NASA practice to designate a civil service employee to act as the COMSEC and TEMPEST point of contact responsible for ensuring oversight and implementation consistent with national policy relevant to NASA activities. It is important to emphasize, however, that the responsibilities identified for the CAM are minimum requirements and, depending on the experience level of the CAM, are balanced against each NASA Center's particular needs. These additional COMSEC/TEMPEST duties can be performed by the same individual. Regardless whether the CAM, COMSEC Officer, or COMSEC/TEMPEST point of contact is designated to perform these additional functions, it must be stressed that NASA Centers not construe this requirement as justification for establishing a separate billet. The duties of the COMSEC Officer, or COMSEC/TEMPEST point of contact, include the following: a. Acting as the NASA Center's single focal point for COMSEC and TEMPEST policy issues. b. Administering one-time COMSEC briefings and/or cryptographic access certification to civil service employees whose duties require access to COMSEC material. c. Ensuring that COMSEC awareness training is part of the NASA Center’s security education program. This Document Is Uncontrolled When Printed. Check the NASA Online Directives Information System (NODIS) Library to verify that this is the correct version before use: http://nodis.hq.nasa.gov/Library/Directives/NASA-WIDE/contents.html 15
  • 17. d. Providing technical assistance to Controlling Authorities for cryptographic keying material controlled by NASA and exercising oversight in those instances where NASA contractor COMSEC accounts have been established solely for the purpose of supporting NASA. e. Assisting project offices in the acquisition of COMSEC material through coordination with the supporting CAM and/or the NASA COMSEC Manager. f. Assisting the CCS to establish selection criteria to screen, interview, and nominate candidates for the CAM. g. Providing technical advice and assistance concerning the use, installation, maintenance, and procurement of secure telephone units. h. Conducting TEMPEST countermeasure determination and coordinating with the Associate, as required. 2.4. COMSEC Material 2.4.1. Short Titles. For accounting purposes, COMSEC material may be identified by short titles derived from the Telecommunications Security nomenclature system; or bear a designator derived from the Joint Electronics Type Designation System; or a Federal part number; or by short titles assigned by a military department. In many cases, the CCI category may not be assigned any short title, instead bearing the manufacturer's commercial designator. This equipment will, however, be marked "Controlled Cryptographic Item" or "CCI" and will bear a Government Serial Number label. The Government Serial Number has been developed for accounting purposes and will be the designator by which the CAM will identify and control the CCI. The serial number is composed of three fields; for example, the label may read "GSN: PES-B4 192." The first field "PES" identifies the manufacturer; the second field "B4" identifies the type of product; and the third field "192" identifies the serial number of the unit. For purposes of the SF 153 using the above example, list the designator "PES-B4" in the short title block and "192" in the accounting number block. NOTE: The serial number for secure telephone unit telephones will vary from the above format. 2.4.2. Accounting Numbers. Most COMSEC material is assigned an accounting (register or serial) number at its point of origin to facilitate accounting. However, material may be received that does not bear an accounting number or for which accounting by number is impractical and, therefore, not required. An example of this type of material is a printed circuit board with a Telecommunications Security nomenclature, which may bear a manufacturer's serial number but which is only accounted for by quantity and is listed in "accounting numbers" on accounting reports as an "N/N" (no number) item. 2.4.3. Edition. COMSEC material may be further identified by alphabetic or numeric edition. COMSEC material is superseded when the new material becomes effective (effective edition). NOTE: Identification of the currently effective edition of operational keying material is considered "CONFIDENTIAL." The general rule is that this information should not be disclosed over a mode of communications that is not secure. However, per National Security This Document Is Uncontrolled When Printed. Check the NASA Online Directives Information System (NODIS) Library to verify that this is the correct version before use: http://nodis.hq.nasa.gov/Library/Directives/NASA-WIDE/contents.html 16
  • 18. Telecommunications Information System Security Instruction (NSTISSI) 4002, under certain circumstances, the effective edition may be transmitted in the clear when necessary to ensure that all holders are using the same key or when confusion exists about the effective key. 2.4.4. “CRYPTO” Marking. COMSEC keying material that is used to protect or authenticate telecommunications carrying national security and Government-sensitive information is identified by the bold marking “CRYPTO”. This marking makes such material readily identifiable from other material so that its dissemination can be restricted to personnel whose duties require access and, if the material is classified, to those who have been granted a final security clearance equal to or higher than the classification of the keying material involved. 2.4.5. Subdivisions of Equipment. Operational COMSEC equipment is identified and accounted for by one short title rather than by individual components and/or subassemblies. Classified and CCI subassemblies, elements, and microcircuits, when not incorporated in equipment, will be accounted for by type and quantity. 2.5. COMSEC Material Accountability · 2.5.1. NASA COMSEC Material Control System (CMCS). 2.5.1.1. When COMSEDC accountable material is received, it will be entered into the CMCS and will remain until destruction or other authorized disposition. 2.5.1.2. Refer questions regarding whether material is qualified for entry into the CMCS and the method of accounting (e.g., by which Account Legend Code (ALC)) to the COR. 2.5.2. ALC. For accounting purposes, all COMSEC material is identified by one of the following ALC: a. ALC-1. Continuously accountable by an accounting (register or serial) number to the COR. A report will be submitted to the COR upon receipt, subsequent transfer, and destruction of ALC- 1 material. All use and destruction of ALC-1 keying material issued to users will be recorded on a local Key Disposition Record. The CAM will retain the Key Disposition Record for a minimum of 3 years. For FIREFLY-based systems, the COR may direct additional reports to be submitted when operational fill devices are loaded into equipment and when seed or operational fill devices are locally zeroized. The following material is continuously accountable and will be assigned ALC –1: 1) All hard copy and magnetic keying material (except certain items classified confidential or below) marked “CRYPTO”. 2) All classified equipment and CCI identified by an external nameplate containing the equipment nomenclature and the equipment serial number. 3) Classified cryptographic software and firmware that are the functional equivalents of, or emulate, COMSEC equipment operations and cryptography. 4) Classified full and depot maintenance NSA Manuals, and other classified TSEC-nomenclature publications and amendments thereto, except as specified in NTISSCI. This Document Is Uncontrolled When Printed. Check the NASA Online Directives Information System (NODIS) Library to verify that this is the correct version before use: http://nodis.hq.nasa.gov/Library/Directives/NASA-WIDE/contents.html 17
  • 19. b. ALC-2. Continuously accountable by quantity to the COR. A report will be submitted to the COR upon receipt and any subsequent transfer of ALC-2 material that changes the total quantity held by the COMSEC account. The following material is continuously accountable by quantity and will be assigned ALC-2: 1) Spare (e.g., intended for installation but not actually installed) classified and CCI components (e.g., microcircuits, printed circuit boards, permuters, and subassemblies) that are intended for installation in equipment that is accountable by serial number. 2) Noncryptographic classified devices that perform critical key processing ancillary functions (e.g., fill devices) key loading devices, when unkeyed. c. ALC-4. Report of initial receipt required. This material will be handled within the CMCS, but only the first recipient must report receipt to the COR. All subsequent transactions will be recorded locally, using SF-153, and will not be assigned a transaction number. Local reports will be retained for a minimum of 3 years. ALC-4 material must be safeguarded according to its classification. The following material will be assigned ALC-4: 1) All hard copy and magnetic keying material not marked CRYPTO; 2) Call sign systems; 3) Unclassified hardware, software, or firmware (e.g., PROMS or other unclassified chips except those marked CRYPTO); 4) Classified limited NSA Maintenance Manuals and all unclassified TSEC-nomenclature publications and amendments thereto. d. ALC-6. Continuously accountable to the COR by means of the Electronic Key Management System (EKMS). A report will be submitted to the COR upon generation, receipt and all subsequent transfers of all ALC-6 material. All transactions involving ALC-6 material including, but not limited to, issue for use and destruction (zeroization) will be recorded in a local disposition record to provide a Digital Transfer Device (DTD) audit trail. Local disposition record will be retained, forwarded, or otherwise disposed of as directed by the COR. The following EKMS-generated and -managed electronic key, and other electronic data will be assigned ALC-6. 1) Any electronic key material requiring continuous, central accountability from a security or operation standpoint, as determined by the controlling authority and specific system doctrine where applicable. 2) Some examples of keys designated ALC-6 are as follows: electronic keys intended to protect information having long-term intelligence value where such determination is made by the controlling authority, such as TOP SECRET (TS) and Special Compartmented Information (SCI); Key Encryption Key (KEK); electronic keys used for joint interoperability when such keys are widely distributed; electronic keys marked CRYPTO, used to generate other electronic keys such as Key Production Keys; and all classified software, firmware, or equivalent data in electronic form which performs cryptographic operations. e. ALC-7. Continuous local accountability within EKMS. Each recipient of ALC-7 key will report receipt to the EKMS element that generated the key. Elements that generate ALC-7 key must maintain local records that document the generation of key and identify all recipients of the key. All holders of ALC-7 material must maintain local disposition records that permit traceability to support compromise recovery and audits. As a minimum, these records shall This Document Is Uncontrolled When Printed. Check the NASA Online Directives Information System (NODIS) Library to verify that this is the correct version before use: http://nodis.hq.nasa.gov/Library/Directives/NASA-WIDE/contents.html 18
  • 20. identify all transactions involving subsequent transfer, issue, fill, and destruction of the material, as applicable. EKMS generated and managed electronic key and other electronic data not covered by ALC-6 will be assigned as ALC-7. f. The ALC is assigned by the originating Government department or agency and represents the minimum accounting standard to be applied. g. The ALC will appear on all accounting reports but not necessarily on the material. Holders will not apply accounting procedures less restrictive than those specified by the ALC assigned, unless specifically authorized by the COR. h. Nonaccountable COMSEC material. Material such as COR correspondence, logs, and reports are excluded from the CMCS. 2.6. COMSEC Material Control System (CMCS) This section outlines the procedures for CAM’s during day-to-day account operations. 2.6.1. Forms. The forms used in the CMCS are limited to the multipurpose SF 153, L6061, and equivalent NASA forms. a. Accounting Reports. Prepare accounting reports on an SF 153 to record transfer, possession, inventory, and destruction of COMSEC material. The required copies and distribution of accounting reports is covered elsewhere in this NPG, which outline the detailed preparation of particular reports. b. Transfer Report: Records COMSEC material transferred from one account to another. c. Destruction Report: Records the physical destruction or other authorized expenditure of COMSEC material. d. Inventory Report: Records the physical inventory of COMSEC material. e. Possession Report: Records the possession of COMSEC material. 2.6.2. Hand Receipt. A record of the acceptance of and responsibility for COMSEC material issued to a user. An SF 153, or the reverse side of form L6061, or a NASA equivalent may be used to hand receipt COMSEC material. 2.6.3. Sample Forms and Reports. Contact the COR for samples of forms and reports. 2.6.4. Accounting Files include the following: a. Incoming transfer reports, possession reports. b. Destruction and outgoing transfer reports. This Document Is Uncontrolled When Printed. Check the NASA Online Directives Information System (NODIS) Library to verify that this is the correct version before use: http://nodis.hq.nasa.gov/Library/Directives/NASA-WIDE/contents.html 19
  • 21. c. Annual or semiannual, as appropriate, inventory reports and change of CAM reports. d. Hand receipts. e. COMSEC Register File L6061 or comparable system approved by the COR. f. Transaction number log. If an approved automatic system is used, a transaction log is not required. 2.6.5. Related files are as follows: a. Courier, mail, and package receipts. b. COR correspondence, including such records as CAM and ACAM appointment confirmation letters, memoranda, messages, and other documentation related to COMSEC accounting. 2.6.6. Classification and Marking of COMSEC Account Inventory, Reports, and File. a. If it is determined that a compilation of records can be declassified, the combined file should be marked, "This file has been declassified by Authority of the DDI CAO (IAW NSA COR Accounting Bulletin 2-92)”. b. All files/reports marked should also be marked "This document contains information EXEMPT FROM MANDATORY DISCLOSURE UNDER THE FOIA." (It is also required for the front cover of a file containing SF-153’s) c. When in doubt about whether or not a record or file may be declassified, contact the COR via a secure telephone unit (if available), or other secure means. This guidance will be implemented in handling COR account inventories, reports, and files. d. In addition, Exemption 5 of the Freedom of Information Act may be used for COMSEC account reports and files that are sensitive but not classified. e. To determine if a report or a compilation of reports is classified refer to Appendix E. 2.6.8. COMSEC Register File. All COMSEC material held by an account is controlled internally, using a COMSEC Register File. This file consists of an active section and an inactive section, both of which should be maintained in alphanumeric order. Normally, this file consists of L6061's; it may be maintained on a personal computer with prior COR approval. If the file is automated, take extreme care to control the database as much as possible, since unauthorized persons could alter/erase information without the immediate knowledge of the CAM. Follow good computer security practices, and maintain current backups of data. Active and inactive sections require the following: This Document Is Uncontrolled When Printed. Check the NASA Online Directives Information System (NODIS) Library to verify that this is the correct version before use: http://nodis.hq.nasa.gov/Library/Directives/NASA-WIDE/contents.html 20
  • 22. a. The active section of the register file consists of one form L6061, manual file, or one line item (automated file), for each accountable item currently held in the account and must include short title, edition, and accounting number, if any, classification and ALC; date of receipt, from whom received (account number), and incoming transaction number. b. The inactive section of the register file consists of one form L6061 or one line item for each item that has been removed from the account and the specific disposition data for the item, as follows: the type of disposition, such as transfer or destruction; (if transferred, also include receiving account number); date of action; and outgoing transaction number. c. Keeping the register file current and accurate is absolutely mandatory; it is a convenient reference and important tool for maintaining strict control over all COMSEC material in the account. Computer programs that produce a facsimile SF-153 (available commercially) may be utilized. 2.6.9. Preparing COMSEC Accounting Reports. a. Include in each report the official titles and addresses of the elements involved; account, transaction, contract, if applicable, numbers; date of report by year, month, day, for example: 880107 indicates January 7, 1988; typed or stamped names of individuals signing reports; and signatures in ink. Computer programs that produce a facsimile SF-153 (available commercially) may be utilized. b. List all short titles in alphanumeric order, omitting the prefix or suffix for telecommunications security (TSEC). For equipment controlled by Government Serial Number (GSN), omit the prefix "GSN." c. Single-space all line item entries on a report. Follow the last line item with the remark "NOTHING FOLLOWS" in capital letters on the next line. d. For items having accounting numbers running consecutively, the inclusive accounting numbers may be entered as a single line entry with total quantity entered in block 10 and the lowest followed by the highest accounting number entered in block 11. e. Enter "N/N" in block 11 for items not having an accounting number or for which accounting by number is not required (e.g., ALC-2 material). f. Ensure that consecutive accounting numbers agree with the entries made in the "quantity" column. g. Include any clarifying remarks deemed appropriate for the receiving CAM or the COR in Block 13 or below the "NOTHING FOLLOWS" line. h. Initial all deletions or corrections in ink. This Document Is Uncontrolled When Printed. Check the NASA Online Directives Information System (NODIS) Library to verify that this is the correct version before use: http://nodis.hq.nasa.gov/Library/Directives/NASA-WIDE/contents.html 21
  • 23. i. Assign each accounting report (e.g., incoming and outgoing transfers, possession, inventory, and destruction reports) a transaction number, starting over with "1" each calendar year. When using a manual system, maintain a log to ensure that transaction numbers do not get duplicated. NOTE: Do not assign transaction numbers to hand receipts, accounting bulletins, reconciliation statements. j. Return preprinted inventories to the COR within 10 working days after receipt. Submit all other reports within 48 hours after receipt or preparation or as otherwise directed. k. Review all reports for completeness and accuracy, and ensure that each copy is legible. l. Receipt of COMSEC Material. m. Sources. Accountable COMSEC material may be received from the NSA, military departments, other Government agencies, allied governments, international organizations, and contractors. The Defense Courier Service (DCS) regulations require personnel who may be required to accept DCS material to complete an Authorization Report (DCS Form 10-R) before receipting for material. This form may be obtained from the serving DCS station. Contact the COR if necessary for proper instructions to complete DCS Form 10-R. n. Receiving Packages and Examining Containers (refer to subparagraph 2.6.9.u. for equipment). Packages receipted for by individuals other than the CAM will be delivered to the CAM unopened. When COMSEC material is delivered, examine the packages carefully for evidence of tampering or exposure of the contents. If either is evident and the contents are classified, CCI, or marked CRYPTO, submit a COMSEC incident report as required by chapter 6 of this NPG. Do not open packages showing evidence of tampering until approval is received from the COR. o. Report any discrepancy in short title, accounting number, or quantity between the contents of the package and the transfer report to the sender and the COR. Correct the transfer report to agree with the material actually received. If the material is classified, CCI, or marked CRYPTO, and the discrepancy cannot be resolved with the sender, submit a report of possible compromise. p. When the incoming check has been completed, sign and distribute the transfer report with one copy to the COR, one copy to the shipment originator, one copy for file, and additional copies as directed by the shipment originator. NOTE: It may be necessary to reproduce additional copies of the SF 153. q. When a package is received and the package inner wrap is stamped TOP SECRET CRYPTO or contains TOP SECRET keying material, immediately initiate two-person integrity controls, and inspect the package for evidence of damage or tampering. Both individuals will then open the package and compare the contents with the enclosed "COMSEC Material Report" (SF 153). If classification cannot be determined before opening, and when material received is routinely TOP SECRET, assume that the material is TOP SECRET. If the contents are TOP SECRET operational keying material, both two-person integrity participants will sign the SF 153 (blocks 15 and 16) and immediately place the material into two-person storage. Submit the SF 153 to the This Document Is Uncontrolled When Printed. Check the NASA Online Directives Information System (NODIS) Library to verify that this is the correct version before use: http://nodis.hq.nasa.gov/Library/Directives/NASA-WIDE/contents.html 22
  • 24. COR. If it is found that the contents do not include TOP SECRET operational keying material, follow standard receipting procedures. r. Certain items of COMSEC material are protectively packaged at production time and will not, in most cases, be opened until they are to be employed by the actual user. To ensure the integrity of key, inspect all protective packaging. If no special handling instructions are provided, though, open the keying material and page check as outlined in subparagraph 2.6.9.v. Protective packaging applied to individual items of TOP SECRET key must not be removed except under two-person integrity conditions. Inventory key tapes in canisters by noting the short title and accounting number on the leading edge of the tape segment, which appears through the window of the plastic canister. Do not remove punched or printed key tapes from protective canisters. Do not open test keying material until it is to be used. Report shipping discrepancies to the COR. s. Receipting for Tapes, Magnetic and Paper. Upon receipt of a shipment of tapes, inventory each reel by short title, edition, and accounting number. Report discrepancies to the COR. t. Receipting for Hardware/Firmware Keying Material. Upon receipt, inventory each item by short title, edition, and accounting number. Report discrepancies to the COR. u. Receipting for Equipment. Equipment received in sealed shipping cartons that have not been opened or do not exhibit signs of tampering may be receipted without physically sighting the material inside as long as the label on the carton agrees with the transfer report; if it does not, the contents must be physically inventoried. Inspect any implemented protective technologies on the equipment. Although certain types of material do not need to be opened before actual use, allow time between opening and use to obtain replacements for incomplete or defective items. Report shipping discrepancies to the COR. Since the CCI category of COMSEC equipment was introduced, much existing or new stand-alone cryptographic equipment, telecommunications, and information-handling equipment with embedded cryptography, and associated ancillary equipment may now be controlled outside of traditional COMSEC control channels. When controlled equipment is received via other than traditional COMSEC control channels, sign the accompanying paperwork, and return a copy to the shipper. Initiate an SF 153 possession report for the receipted material and submit a copy to the COR. v. Page Checking. Conduct page checks of unsealed material to ensure the presence of all required pages. Where the COMSEC account is so large that the CAM cannot personally perform page checks or post amendments, other appropriately cleared individuals who have been properly instructed by the CAM may perform these actions. To conduct the page check, verify the presence of each page against the "List of Effective Pages" or, the "Handling Instructions," as appropriate. Sign and date the "Record of Page Checks" page or, if the publication has no "Record of Page Checks" page, place the notation on the "Record of Amendment" page or the cover. Key cards and/or key lists in sealed transparent plastic wrap, and authenticators shipped in envelopes, should not be opened until 72 hours before the effective date; therefore, do not page check until ready to use. Do not open test keying material until it is to be used. When preparing for actual use, open and page check keying material according to the handling instructions provided with the material. If no special handling instructions are provided, open and page check the keying material. Do not remove key tapes or key lists from protective canisters for inventory This Document Is Uncontrolled When Printed. Check the NASA Online Directives Information System (NODIS) Library to verify that this is the correct version before use: http://nodis.hq.nasa.gov/Library/Directives/NASA-WIDE/contents.html 23
  • 25. or check purposes. Classified COMSEC publications must be page checked according to the handling instructions provided with the material. If no special handling instructions are provided, page check upon initial receipt, when entering an amendment that requires removing and/or inserting pages, before destroying, before shipping to another COMSEC account, and upon return from an authorized hand receipt user and annotate the “Record of Page Checks” accordingly. w. If any pages are missing upon initial receipt, the NSA (Y13) or originator should be notified of a possible production error. If the publication is classified, submit a COMSEC incident report as outlined in chapter 6 of this NPG. Submit requests for disposition instructions and a replacement publication to the COR. x. In the case of duplicate pages, remove and destroy the duplicate page(s). Prepare one copy of a destruction report citing the page number and the accounting number of the basic publication, for example, “Duplicate page number 72 removed from KAM -130A, Number 813”. Neither notification to the COR is required nor is assignment of a COMSEC account transaction number to this locally retained destruction report. In addition, note the duplicate page and the resultant destruction on the "Record of Page Checks" page. y. When a change of CAM has occurred, the incoming CAM must perform a page check of all unsealed material within 30 days after the change of CAM takes place. If the account has a prohibitive number of documents requiring page checks, the incoming CAM must submit a request for an extension to the COR to allow more time to complete all page checks. It is recommended that the outgoing CAM complete page check before transferring control of the account to the incoming CAM. 2.6.10. Procedures for Handling Keying Material. All keying material must be stored in General Service Agency-approved security containers with 007 lock as follows: a. Restrict access to the container storing future editions of classified keying material marked CRYPTO to the CAM and ACAM. Where this restriction cannot be applied because others must have access to the container for either current editions of keying material or other material in the container, store future editions of keying material separately in a locked strongbox that can be opened only by the CAM and ACAM(s). Keep the strongbox in the security container. Exceptions may be made in operational areas to allow shift supervisors access to the next edition of keying material, but not to later editions. Routine destruction of keying material is addressed in chapter 7. b. Key Lists and Key Tapes. When it is necessary to relinquish physical control of operational key lists to a user, do so on a hand receipt. If issuing individual settings is warranted, the hand receipt user's signature or initials and the date in the "ISSUED TO" column on the "DISPOSITION RECORD" on the inside front cover serves in lieu of a hand receipt. c. Key lists and key tapes packaged in protective canisters will not be page checked. Annotate the record of use card with the short title, edition, and register number of the material. Issue the entire canister to a user on a hand receipt. The hand receipt user, however, must not remove more tape segments from the canister than are required for current use. As each segment is This Document Is Uncontrolled When Printed. Check the NASA Online Directives Information System (NODIS) Library to verify that this is the correct version before use: http://nodis.hq.nasa.gov/Library/Directives/NASA-WIDE/contents.html 24
  • 26. removed, have the hand receipt user sign or initial and date the “USED” column of the “USAGE RECORD” card applicable to the material. 2.6.11. Transferring COMSEC Material. COMSEC material may be transferred from one account to another only as prescribed in this NPG as follows: a. Before transferring, verify the receiving activity's official address, COMSEC account number, and authorization to hold the material being shipped. When the validity of a shipping address or authority for shipment is in question, contact the COR before making the shipment. b. Ensure that shipping is only by one of the authorized modes of transportation prescribed in this NPG. Do not ship accountable material, regardless of the accounting legend code assigned, unless a COMSEC account number is provided with the shipping address. CCI equipment may, however, be transferred to a military department standard logistics system account. c. Verify account numbers and shipping addresses by contacting the appropriate military department's accounting headquarters. d. Ensure that equipment and page checking provisions are accomplished before packing COMSEC material for transfer. Conduct page and equipment checks no earlier than 48 hours before packing. e. When transferring Government-furnished equipment to a contractor CAM, annotate the SF 153 in block 13 to identify those items as Government-furnished equipment and identify the contract number on the form. Transfer of material to external organizations (e.g., civil agencies, and contractors) is authorized to expedite delivery of material and eliminate unnecessary handling of the material between locations. f. The shipping CAM assumes full responsibility for all aspects of the shipment. When transfers are made to a non-NASA organization, include the following information in the "Remarks" portion of the transfer report: ownership of the equipment, purpose of the transfer, contract numbers, project name, and instructions for the receiving CAM. g. Transferring COMSEC Material to the U.S. Military Departments. Prepare five copies of the SF 153 and enclose the original and one copy with the shipment. Put the notation "ADVANCE COPY" on two copies, and immediately forward one to the COR and one to the appropriate military department accounting headquarters. Retain the final copy for file. Include the following notations, as appropriate, on all copies of transfer reports going to the military departments: equipment owner (e.g., NASA, U.S. Air Force); purpose of the transfer/loan; length of loan; repayment of loan; transfer of ownership and authority for the transfer; and the contract number/project name (if appropriate). Place the following statement on all SF 153’s reporting the transfer of COMSEC material: “Sign all copies and distribute as prescribed by the accounting instructions of your service. This shipment consists of _________containers." h. Transferring of COMSEC Material to All Other Activities. Prepare four copies of the SF 153 and enclose the original and one copy with the shipment. Note "ADVANCE COPY" on the third This Document Is Uncontrolled When Printed. Check the NASA Online Directives Information System (NODIS) Library to verify that this is the correct version before use: http://nodis.hq.nasa.gov/Library/Directives/NASA-WIDE/contents.html 25
  • 27. copy and forward it to the COR. Retain the fourth copy for file. Put the following notation on all copies of transfer reports going to activities other than the military departments “Sign all copies. Return one copy to John F. Kennedy Space Center, Code: CMCC/NASA COR, Kennedy Space Center, FL 32899. Dispose of remaining copies as prescribed by the accounting instructions of your organization. This shipment consists of _____ containers." i. Transfer of Material between NASA CAM’s. Prepare four copies of the SF 153 and enclose the original and one copy with the shipment. Note "ADVANCE COPY" on the third copy and forward it to the COR. Retain the fourth copy for file. The material may be transferred through internal mail channels, provided it is properly packaged, handled as controlled mail, and a transmittal receipt covers the package. j. Receipt and Transfer Responsibility. When COMSEC material is shipped to a military activity, the COR and the military department accounting headquarters are responsible for ensuring that the material is received by the intended recipient on a timely basis. When an "ADVANCE COPY" of an SF 153 is received, a receipt suspense date is established by the COR and the military department accounting headquarters, which takes any subsequent tracer action required. k. Tracer actions for shipments to military department standard logistics accounts are handled solely with the appropriate military service accounting headquarters. In lieu of a signed copy of the transfer report, record proof of shipment is the file copy of the transfer report combined with a signed transmittal form, Government Bill of Lading (SF 1103), U.S. Registered Mail receipt, or other shipping document. The COR will not initiate tracer actions for material shipped from other agencies/departments unless requested to do so. l. Nonroutine Disposition of COMSEC Material. Removal from CMCS accountability of any COMSEC material that is lost, compromised, or inadvertently destroyed, can be accomplished only with the specific written approval of the COR. 2.6.12. Military Department Accounting Headquarters Addresses: a. Army Accounting Headquarters. Commander, U.S. Army Communications Electronics Command, Communications Security Logistics Activity, ATTN: SELCL-KPD-OR, Fort Huachuca, AZ 85613. b. Navy, Marine, and Coast Guard Accounting Headquarters -- Director, COMSEC Material System, 3801 Nebraska Avenue, NW, Washington, DC 20393. c. Air Force Accounting Headquarters -- SAALC/LTDA, 230 Hall Boulevard, Suite 108 ATTN: Detachment 4, ESC, San Antonio, TX 78243-7056. Verify Air Force standard logistics system account numbers and shipping addresses by calling (512) 925-2771. 2.6.13. Packaging COMSEC Material. Securely package classified COMSEC material for shipping in two opaque wrappers with no indication of the classification on the outside wrapper. Use packaging material durable enough to provide protection while in transit, prevent items from This Document Is Uncontrolled When Printed. Check the NASA Online Directives Information System (NODIS) Library to verify that this is the correct version before use: http://nodis.hq.nasa.gov/Library/Directives/NASA-WIDE/contents.html 26
  • 28. breaking through the container, and facilitate detecting tampering with the container. Mark each wrapper with the "TO" and "FROM" addresses. a. The outer wrapper must never carry identification of the contents that directly discloses a cryptographic or COMSEC association, such as for a system indicator, the acronym "TSEC". Instead, label the crate or outer wrapper with the short title of the equipment, less the "TSEC" designation, followed by the accounting number for example, “KW-59/101”, to identify the contents. b. Identify assemblies, ancillary devices, elements, and subassemblies shipped individually by short titles, accounting numbers, and the short titles of the equipment in which the items are to be used. c. Identify items not accountable through accounting number by short title and quantity. d. Ensure that the markings on the crate or outer wrapper, identifying the COMSEC material within, agree with the accompanying "COMSEC Material Report" (SF 153). e. When material is to be hand-carried, a briefcase, pouch, or box is an appropriate outer wrapper. f. Specialized shipping containers for COMSEC equipment, such as locked and twice-banded repair kits, may be considered the outer wrapper. g. Mark the inside wrapper of classified cryptographic material with the designator "CRYPTO" and the classification. If the shipment contains keying material designated for "U.S. Use Only," mark the inner wrapper with the remark "SPECIAL HANDLING REQUIRED, NOT RELEASABLE TO FOREIGN NATIONALS." If the shipment contains keying material that is releasable, mark the inner wrapper with the remark "SPECIAL HANDLING REQUIRED, FOR U.S. AND SPECIFIED ALLIES ONLY." Mark the inside wrapper of all accountable COMSEC material with the notation "TO BE OPENED ONLY BY THE COMSEC CUSTODIAN." If the classified material is an internal component of an unclassified packable equipment, the outside equipment shell may be considered as the component's inner wrapper, only one additional wrapper is required. h. Mark all transfer reports and other forms covering an individual DCS shipment with the individual shipment control number; affix the reports to the inner wrapper of the package. NOTE: Do not place the transfer report inside the sealed container with the COMSEC material because this defeats the purpose of marking the short title and accounting numbers on the outside of the container. i. For multiple package shipments, number each container beginning with package Number 1, followed by a slash and the total number of packages making up the shipment (e.g., for a shipment consisting of three packages, the first box would be marked “1/3”; the second one marked “2/3”; and the third (last) one marked “3/3”). Affix the shipping document (SF 153) to the inner This Document Is Uncontrolled When Printed. Check the NASA Online Directives Information System (NODIS) Library to verify that this is the correct version before use: http://nodis.hq.nasa.gov/Library/Directives/NASA-WIDE/contents.html 27
  • 29. wrapper of the first package of multiple package shipments. Do not annotate the serial package number(s) and transaction number in the immediate vicinity of DCS control numbers. j. Package keying material separately from its associated cryptographic equipment, unless the application or design of the equipment is such that the corresponding keying material cannot be physically separated. k. Annotate the equipment designator on the package. The "CCI" marking may be placed on the exterior of the package if so requested. Place the accompanying paperwork in an envelope securely fastened to the outside of the package and mark the envelope with the "TO" and "FROM" addresses, including the account number, without the word "COMSEC." l. Wrap unclassified COMSEC material, except keying material marked CRYPTO, as any other unclassified material according to packaging requirements of the agency or activity. 2.6.14. Authorized Modes of Transportation. An appropriately cleared individual may move COMSEC material locally (e.g., within a NASA Center). Various modes of transportation are authorized for COMSEC material. a. Shipping Classified Keying Material and Classified COMSEC Equipment. In time-critical situations, on a case-by-case basis, the COR, in conjunction with the appropriate NASA CCS, may approve using commercial aircraft within the United States to transport current or superseded keying material as long as the material is hand-carried by an appropriately cleared individual and provided that departmental and Federal Aviation Administration procedures are followed. This policy does not apply to the use of NASA-owned and-operated aircraft, which may be used to transport material within the continental United States with approval from the CCS. When commercial aircraft must be used, written courier authorization is required. b. Classified Keying Material. When practical, limit individual shipments to not more than three editions or 3 months' supply of a particular item of keying material (whichever is the greater amount). This restriction does not apply to packaged irregularly superseded materials. The COR may waive this restriction when material is issued to a newly established account or in cases where supply is difficult and the number of shipments is limited. c. The COR may authorize using U.S. Registered Mail to ship individual editions of CONFIDENTIAL keying material, provided the material does not at any time pass out of U.S. citizen control, and does not pass through a foreign postal system or any foreign inspection. d. Do not send keying material classified SECRET or higher through the mail without prior approval of the COR. e. Except when using systems specifically designed for electronic rekeying, transmit operational keying variables electrically only under emergency conditions and only when the communications system provides end-to-end encryption equal to the classification of the transmitted key setting, and the key setting does not appear in plain text anywhere in the communications path. This Document Is Uncontrolled When Printed. Check the NASA Online Directives Information System (NODIS) Library to verify that this is the correct version before use: http://nodis.hq.nasa.gov/Library/Directives/NASA-WIDE/contents.html 28
  • 30. f. Under normal conditions, ship classified keying material only by one of the following means: DCS, appropriately cleared Government personnel who have been designated in writing to act as couriers for cryptographic material, U.S. Diplomatic Courier Service, appropriately cleared and briefed contractor personnel who have been designated in writing by competent authority to act as couriers, provided the material is classified no higher than SECRET. g. For TOP SECRET keying material, courier authorization must be obtained from the appropriate CCS on a case-by-case basis. Two-person integrity controls must be applied whenever local couriers transport TOP SECRET keying material from one location to another. See chapter 5. h. Classified COMSEC Equipment and Components. Do not ship classified COMSEC equipment and components in a keyed condition unless the physical configuration of the equipment makes segregating the keying material impossible. For equipment using a CIK, removing the key permits the equipment to be treated as unkeyed. Ship the CIK separately from the equipment. Transport COMSEC equipment and components classified higher than CONFIDENTIAL by any of the means identified for keying material, or by a cleared commercial carrier under Protective Security Service. Transport COMSEC equipment and components classified CONFIDENTIAL by any of the means specified above, or any of the following: U.S. Registered Mail, provided it does not at any time pass out of U.S. control and does not pass through a foreign postal system or any foreign inspection; Commercial carriers (or U.S. military or military contractor air service) provided a continuous chain of accountability and custody for the material is maintained while it is in transit; U.S. military or military-contractor air service, provided the requirements for DOD Constant Surveillance Service are observed. i. Other Classified COMSEC Material. Use one of the following methods to transport media that embodies, describes, or implements a classified cryptographic logic, such as full maintenance manuals, cryptographic logic descriptions, drawings of cryptographic logic, specifications describing a cryptographic logic, cryptographic computer software, and operating Cryptographic manuals: DCS or appropriately cleared and briefed U.S. Government, contractor or military personnel who have been designated in writing by proper authority to act as courier for the material. These items may not be transported through any postal system. j. Use any of the following means to transport media that does not embody, describe, implement, or contain a classified cryptographic logic: Any of the means authorized in 2.6.15.i. above; Registered mail or by a cleared commercial carrier, using Protective Security Service for media classified SECRET; or U.S. Registered Mail or U.S. Postal Service Certified Mail for media classified CONFIDENTIAL. NOTE: Using Standard First Class Mail service is not acceptable for transporting any classified COMSEC material. 2.6.15. Shipping Unclassified COMSEC Material. a. Unclassified Keying Material Marked CRYPTO. Within Continental United States, by U.S. Registered Mail or authorized U.S. Government, contractor, or military personnel. Outside the continental U.S., use authorized department, agency, or contractor couriers; U.S. Diplomatic Courier Service; or the Defense Courier Service. Where practical, limit shipments transported by This Document Is Uncontrolled When Printed. Check the NASA Online Directives Information System (NODIS) Library to verify that this is the correct version before use: http://nodis.hq.nasa.gov/Library/Directives/NASA-WIDE/contents.html 29
  • 31. courier to no more than three editions when shipped by U.S. Registered Mail, no more than one edition. b. Within CONUS, Shipping CCI Material. Do not transport controlled material in a keyed condition, unless the equipment is designed to operate with a permanently installed hard-wired key. Ship CCI material by the following means: Authorized department, agency or contractor courier; U.S. Registered Mail; Authorized U.S. Government courier service (e.g., Diplomatic Courier Service); or Commercial carrier providing DOD CSS. Coordinate the shipment with the Transportation Officer. c. Outside CONUS. CCI may be sent by registered mail if the package will remain in U.S. mail channels, that is mailed to an Army Post Office or Fleet Post Office address, or will be carried by an individual who has been briefed as a courier. The courier must be briefed on proper security procedures and be aware of all requirements for access and the physical security of the equipment or materials. Transportation may be by any means that permits the courier to maintain continuous accountability and provide protection against loss and unauthorized access while in transit. Where transportation is by commercial aircraft, the CCI should be stowed in the cabin where the courier can maintain constant surveillance. If equipment bulk will not permit cabin storage or creates an excessive burden for the courier, controlled circuit boards may be removed for cabin storage, and the remainder of the equipment may be checked as hold baggage. Controlled equipment must not be transported through countries other than those authorized to receive the equipment. All incidents of impoundment, seizure, or loss of controlled equipment while it is being carried must be reported in accordance with chapter 6 of this NPG. d. All other unclassified COMSEC material may be shipped by any means that will reasonably assure safe and undamaged arrival at the destination. Ship unclassified COMSEC items as classified COMSEC material when an operational need exists to provide both types of material together. 2.6.16. Authorized Modes of Transportation for Controlled Cryptographic Items and Components within the Continental United States, U.S. Territories, and Possessions. United States Postal Service Registered Mail -- Items shipped by registered mail must neither at any time pass out of U.S. control nor pass through any foreign postal system. There are, however, certain restrictions governing the size and weight of packages that can be shipped, which may preclude using this service. Always check with postal service authorities to determine whether the package material qualifies. U.S. First Class Mail, Fourth Class Mail, Parcel Post, Certified Mail, Insured Mail, and Express Mail are not authorized for shipping controlled equipment and components. The following means and capabilities will apply: a. Commercial Carriers. When using commercial carriers, an adequate degree of physical control and accountability for the material must be maintained while it is in transit. However, the small number of commercial carriers that provide an approved constant surveillance service has greatly restricted the ability of shipping activities to move controlled material. Therefore, the existing requirement that commercial carriers must provide approved constant surveillance service is being modified to allow shipping activities to use commercial carriers that can satisfy the requirements This Document Is Uncontrolled When Printed. Check the NASA Online Directives Information System (NODIS) Library to verify that this is the correct version before use: http://nodis.hq.nasa.gov/Library/Directives/NASA-WIDE/contents.html 30
  • 32. set forth below. This change only applies to shipments within the continental United States, U.S. territories, and possessions. b. CCI and components may be transported by any commercial carrier that warrants in writing to the shipping activity that it can satisfy all of the following requirements: The carrier must be a firm incorporated in the United States that provides door to door service; It must guarantee delivery within a reasonable number of days based on the distance to be traveled; and have a means of tracking individual packages within its system to the extent that should a package become lost, the carrier can, within 24 hours following notification, provide information regarding the package's last known location. It must guarantee the integrity of the vehicle's contents at all times; for example, while a driver is making pickup or delivery stops, the vehicle must be locked. It must guarantee that the package will be stored in a security cage should it become necessary for the carrier to make a prolonged stop at a carrier terminal. In addition to satisfying the above requirements, the carrier must either use a signature and tally record that accurately reflects a continuous chain of accountability and custody by each individual who assumes responsibility for the package or shipment while it is in transit. The carrier may either provide its own signature and tally record form or agree to use the DD Form 1907 or NSA Form AC-10; or use an electronic tracking system that reflects a chain of accountability and custody similar to that provided by a manually prepared signature and tally record. Positive identification of the actual recipient of the material at the final destination must be indicated. A hard copy printout shall be provided as proof of service, and the printout must reflect those points, during transit, where electronic tracking of the package and shipment occurred. c. Regardless of the method of transportation selected, the NASA activity shipping controlled equipment and components shall provide the receiving CAM with timely notification of a scheduled shipment. Preferably, notification should be provided at least 24 hours prior to the estimated delivery date. This procedure will help to readily identify any shipment that might be unduly delayed or lost en route. d. Controlled equipment and components may only be shipped to authorized activities and contractors and shall be labeled in a way that will ensure delivery to an individual who is designated to accept custody of the material at the contractor facility/activity. Do not use the individual's name on the delivery label; rather, use functional designators such as office symbols or mail station codes. If using a commercial carrier, the accompanying shipping documents will provide an emergency telephone number(s) of an individual(s) authorized to receipt for the material in the event the carrier attempts to make delivery during other than normal duty or work hours. e. If a shipment of controlled equipment or components has not been received by the intended recipient within 5 working days following the expected delivery date, the originating shipper’s CAM will be contacted immediately. Unless there is a valid explanation for the delay, tracer action shall be initiated on the shipment by the shipping CAM. If its location cannot be determined, the controlled equipment or components shall be assumed to be lost in transit and reported in accordance with the guidelines provided at 2.6.18. below. This Document Is Uncontrolled When Printed. Check the NASA Online Directives Information System (NODIS) Library to verify that this is the correct version before use: http://nodis.hq.nasa.gov/Library/Directives/NASA-WIDE/contents.html 31
  • 33. 2.6.17. COMSEC Incident Reporting Requirements. The following types of incidents involving CCI shipments shall be reported to the NSA, ATTN: V51A (COMSEC Incidents), for evaluation. a. An information copy will be forwarded to the DSMO and the NASA COR when tracer actions have determined that controlled equipment or components are lost in transit and when shipments that are received show evidence of possible tampering or unauthorized access. All other incidents involving improper shipment or handling of controlled equipment and components shall be considered administrative in nature and reported in accordance with the guidelines set forth below. If a commercial carrier is involved, the name(s) of the carrier(s) shall be included in the report. b. NASA Centers will report such incidents to the originator of the shipment who shall be responsible for any corrective action. A copy of the report shall also be provided to the DSMO, NASA COR and the NSA, ATTN: V51A, for information purposes only. c. If a NASA contract/memorandum of understanding is involved, such incidents will be reported to the originator of the shipment who shall be responsible for any corrective action. A copy of the report shall also be provided to the DSMO, NASA COR and the NSA, ATTN: X722 for information purposes. 2.6.18. Hand Receipts. The following assurances, procedures, and forms will be employed: a. An SF 153, the reverse side of NSA Form L6061 or equivalent NASA form may serve as a hand receipt. b. Before issuing material, determine that the proposed recipient has the need to know; has a COMSEC briefing as applicable; and has the appropriate clearance. Clearance or level of position does not, in itself, entitle any individual to have access to keying material. Each person having access to keying material must need the material in the performance of duties and be familiar with his or her responsibilities for its protection, use, and will be the actual user of the material. Clerical or other personnel who are not the user may not sign hand receipts. c. The proposed recipient knows the physical security measures necessary to protect the material and the possible consequences of compromise and, accordingly, has the physical means to secure and use the material, commensurate with the classification of the item. The file safe protected by a 007 lock should be located in the user's immediate work area. d. COMSEC material issued on hand receipt shall be signed for and controlled by the actual user, who is accountable until the material is returned to the issuing COMSEC account. Under no circumstances will the recipient reissue the material to another individual without the consent of the CAM. If the material is needed by another individual outside the immediate office of the original recipient, the material must be returned to the issuing CAM for reissuance. e. Physical security measures necessary to protect the material from the possible consequences of compromise and a security container must be located in the recipient's immediate work area. This Document Is Uncontrolled When Printed. Check the NASA Online Directives Information System (NODIS) Library to verify that this is the correct version before use: http://nodis.hq.nasa.gov/Library/Directives/NASA-WIDE/contents.html 32
  • 34. f. Pages are not to be removed from basic documents. g. Reproduction authorization of a document, in whole or in part, is contained in the handling instructions, usually the front cover, of each document produced. h. All accountable COMSEC items issued on a hand receipt must be returned to the issuing CAM before the individual is transferred, reassigned, or absent for more than 30 days. i. Any possible compromise, access by unauthorized persons, or violation of security regulations affecting the material (user cannot locate document or suspects document was borrowed) must be reported to the issuing CAM immediately. j. The recipient's signature on the hand receipt certifies his or her understanding of the above handling requirements. k. The CAM must conduct a semiannual review of hand receipts for accuracy and update procedures as necessary. 2.6.19. A possession report, will be prepared on an SF 153. Enter appropriate remarks below the "NOTHING FOLLOWS" line, citing the reason for the report. Forward the signed original copy to the COR and retain a signed duplicate copy for file. Possession reports will be prepared as follows. a. When COMSEC material is received without accompanying transfer reports. b. Whenever reporting conversion of COMSEC material; c. When COMSEC material was previously lost or removed from accountability, but subsequently recovered; d. When a new CAM is appointed because of the sudden permanent departure or unauthorized absence of the previous CAM; e. When the holdings of the COMSEC account are large, a preprinted inventory may be requested from the COR for this purpose, and the properly completed inventory with a notation explaining the circumstances may serve as the possession report; f. When a document with a TSEC nomenclature that requires control in the CMCS is originated or reproduced; g. When COMSEC material is received without an accompanying transfer report, forward a signed copy of the possession report to the shipping COMSEC account, if known, and to the military department accounting headquarters, if applicable. 2.6.20. The CAM will report converted COMSEC material as follows: This Document Is Uncontrolled When Printed. Check the NASA Online Directives Information System (NODIS) Library to verify that this is the correct version before use: http://nodis.hq.nasa.gov/Library/Directives/NASA-WIDE/contents.html 33
  • 35. a. Whenever it is necessary to convert the short title and/or accounting number of an item of COMSEC material, report the conversion to the COR so that accounting records may be properly adjusted. A conversion can result from major modification of equipment requiring the equipment to be redesignated; for example, TSEC/KL-60, redesignated as TSEC/KL-60A). b. Report a conversion by simultaneously submitting a possession report and a destruction report prepared on SF 153's. c. On the possession report, list the item by its new short title and accounting number, and include a remark referencing the associated destruction report. d. On the destruction report, list the previous short title and accounting number, and include a remark that the destruction is for record purposes only and reference the associated possession report. e. Forward one signed copy of each report to the COR and retain one signed copy of each report for file. 2.6.21. Inventories. Preprinted inventories are issued semiannually by the COR and reflect all accountable COMSEC material charged to the account as of the date the report was printed. The following procedures will be followed: a. Conduct 100-percent physical (sight) inventory and return inventory reports to the COR no later than 10 days after receipt. Hold inventories forwarded in preparation for an audit of the account until an auditor arrives. b. Upon arrival, the auditor and CAM will jointly conduct a physical inventory of all accountable COMSEC material held by the account, and all material issued on hand receipts, with the ACAM or another properly cleared witness. c. Assume COMSEC equipment in use to contain all the required subassemblies and elements, so it need not be opened for semiannual inventory purposes. d. Check implemented protective technology for possible signs of tampering before the equipment will be used operationally. e. Inventory equipment that remains in sealed shipping cartons against the marking on the outer wrapper or crate identifying the contents and inspect each carton for evidence of tampering. f. Inventory COMSEC material that is unit packed by the label affixed to the exterior of the package. Inspect each unit package for evidence of tampering. g. COMSEC publications need not be page checked at the time of the semiannual inventory. h. Do not use the preprinted inventory as a checklist when conducting the inventory. Doing so could cause oversight of material held that is not listed on the inventory. This Document Is Uncontrolled When Printed. Check the NASA Online Directives Information System (NODIS) Library to verify that this is the correct version before use: http://nodis.hq.nasa.gov/Library/Directives/NASA-WIDE/contents.html 34
  • 36. i. The COMSEC Inventory should be used to conduct the inventory. j. Compare the results of the physical inventory against the preprinted inventory. Resolve any discrepancies that exist by comparing the preprinted inventory against the COMSEC Register File. k. Give particular attention to additions to, or deletions from, the account made close to the date of the report, since these transactions may not be reflected in the inventory. l. Update the report by deleting an item or supplementing the report with an SF 153. Line out in ink each item to be deleted from the inventory; erasures are not authorized. m. Provide complete details to support the deletion in the "remarks" column opposite the item. If the item was transferred, include the receiving account number, the outgoing transfer number, the transfer report date, and the CAM's initials. n. If the item was destroyed, provide the date, transaction number, and initial the entry. Attach a copy of the referenced SF 153 reports to the inventory report. o. Items listed on the preprinted inventory, but not physically sighted, will be lined out and the appropriate paperwork attached (e.g., Transfer or Destruction Reports). p. When material held is not listed on the inventory, list the material on an SF 153, appropriately classified, signed by the same individuals signing the inventory, and attach as a supplement to the preprinted report. · q. Annotate the SF 153 below the "NOTHING FOLLOWS" line to indicate for each item the name and account number of the sender; the incoming transaction number and date; and/or details, as appropriate, to support the supplement. · · r. Assign the same transaction number to the supplement to the preprinted inventory as given to the inventory report. · · s. When all the material to be put on the supplement is from a complete shipment received on an individual SF 153, do not list the material on the supplemental SF 153. Instead, enclose the supporting SF 153 with the report, annotate the supplemental SF 153 report "See attached SF 153," and list the transaction number and date of receipt. t. During the course of updating the preprinted inventory, review each item on the inventory to determine if the material is still required. If any material is found to be no longer needed, place a remark to that effect in the "Remarks" column opposite each item. This Document Is Uncontrolled When Printed. Check the NASA Online Directives Information System (NODIS) Library to verify that this is the correct version before use: http://nodis.hq.nasa.gov/Library/Directives/NASA-WIDE/contents.html 35
  • 37. u. When the preprinted inventory has been reconciled to agree with the account's actual holdings, the CAM and witness will sign and date the certification on the preprinted inventory and any supplemental SF 153’s. v. Indicate the number of supplemental forms in the space provided in the CAM's certification block; if no supplement was created, mark "NONE." w. Make a final review of the inventory ensuring that any deletions or additions are fully documented and that the certification blocks are signed and dated. x. Forward the original preprinted inventory, along with any supplemental SF 153's, to the COR and retain a copy of these, along with all working papers used in performing the physical inventory, for file. y. When the certified inventory is received by the COR, it will be reconciled with the central office’s records. z. The COR will respond only if discrepancies are noted. aa. If the account is cited with any discrepancy, the CAM will take corrective action within 48 hours of being notified and advise the COR of the action taken. Submit to the COR any substantiating reports required. bb. Complete a change of CAM inventory before the outgoing CAM departs, and account for all transactions so that the completed inventory reflects that material actually held by the account on the date of the changeover. cc. When a COMSEC account does not hold accountable COMSEC material, the CAM and a witness, usually the ACAM should sign the negative inventory, certifying that the account does not hold accountable COMSEC material. dd. COMSEC accounts will continue to receive semiannual inventories until a requirement for the COMSEC account no longer exists and the COMSEC account is formally closed. If the COMSEC account has received or still holds accountable COMSEC material when a negative preprinted inventory is received, supplement the inventory to reflect the accountable COMSEC material held by the COMSEC account. 2.6.22. Destruction Chapter 7 contains routine destruction procedures and requirements, as well as destruction methods and minimum standards that ensure that COMSEC material is adequately destroyed. 2.6.23. Accounting for, and Entering Amendments to, COMSEC Publications as follows: a. A message amendment is used to announce information that must be immediately entered in a COMSEC publication. After posting the amendment and noting the entry on the "Record of This Document Is Uncontrolled When Printed. Check the NASA Online Directives Information System (NODIS) Library to verify that this is the correct version before use: http://nodis.hq.nasa.gov/Library/Directives/NASA-WIDE/contents.html 36

Related Documents