i marine expeditionary force order p5510.36 5feb10 …...classified hard disk drive control program...

19
UNITED STATES MARINE CORPS I MARINE EXPEDITIONARY FORCE L’$IICr U.S. MARINE CORPS FORCES. PACIFIC 1MJr fi I BOX 555300 i CAMP PENDLETON. CA 92055.5300 IN REPLY REFER T I MEFO P5510.36 SSEC 5Feb10 I MARINE EXPEDITIONARY FORCE ORDER P5510.36 From: Commanding General, I Marine Expeditionary Force To: Distribution List Subj: I MARINE EXPEDITIONARY FORCE HARD DISK DRIVE MANAGEMENT PROGRAM (SHORT TITLE: IMEF HDDP) Ref: (a) MFPO P5510.18a (b) I MEF Policy Letter 06—09 End: (1) Hard Disk Drive Initial Inventory Report (2) Classified Hard Disk Drive Audit Discrepancy Report (3) New Classified Hard Disk Drive Report (4) I MEF Hard Disk Drive Tamper Seal Example (5) Classified Hard Disk Drive Internal Transfer of Custody Report (6) Classified Material Transfer of Custody Form (7) Help Desk Classified Material Chain of Custody Form 1. Purpose. Outline the specific actions to be executed by the I Marine Expeditionary Force Command Security Manager, and its principle and special staff sections as it pertains to the control, accountability and management of classified external and internal hard disk drives. 2. Background. This Order is effective upon receipt and all supervisory personnel will ensure strict compliance with its guidelines. Should any portions of this order conflict with the directives of higher headquarters the latter will apply. 3. Scope. Recommendations concerning the contents of this manual are invited but shall be directed towards the Command Security Manager, I Marine Expeditionary Force. 4. Execution. This order is effective immediately. 5. Certification. Reviewed and approved this ate. RYr Chief of S aff DISTRIBUTION LIST: I, II

Upload: others

Post on 18-Jul-2020

3 views

Category:

Documents


0 download

TRANSCRIPT

Page 1: I MARINE EXPEDITIONARY FORCE ORDER P5510.36 5Feb10 …...CLASSIFIED HARD DISK DRIVE CONTROL PROGRAM 2. Internal Hard Disk Drives: A HOD that has been designed to be placed within computers,

UNITED STATES MARINE CORPSI MARINE EXPEDITIONARY FORCE

L’$IICr U.S. MARINE CORPS FORCES. PACIFIC1MJr fi I BOX 555300

i CAMP PENDLETON. CA 92055.5300

IN REPLY REFER T

I MEFO P5510.36SSEC5Feb10

I MARINE EXPEDITIONARY FORCE ORDER P5510.36

From: Commanding General, I Marine Expeditionary ForceTo: Distribution List

Subj: I MARINE EXPEDITIONARY FORCE HARD DISK DRIVE MANAGEMENT PROGRAM(SHORT TITLE: IMEF HDDP)

Ref: (a) MFPO P5510.18a(b) I MEF Policy Letter 06—09

End: (1) Hard Disk Drive Initial Inventory Report(2) Classified Hard Disk Drive Audit Discrepancy Report(3) New Classified Hard Disk Drive Report(4) I MEF Hard Disk Drive Tamper Seal Example

(5) Classified Hard Disk Drive Internal Transfer of Custody Report(6) Classified Material Transfer of Custody Form(7) Help Desk Classified Material Chain of Custody Form

1. Purpose. Outline the specific actions to be executed by the I MarineExpeditionary Force Command Security Manager, and its principle andspecial staff sections as it pertains to the control, accountability andmanagement of classified external and internal hard disk drives.

2. Background. This Order is effective upon receipt and all supervisorypersonnel will ensure strict compliance with its guidelines. Should anyportions of this order conflict with the directives of higherheadquarters the latter will apply.

3. Scope. Recommendations concerning the contents of this manual areinvited but shall be directed towards the Command Security Manager, IMarine Expeditionary Force.

4. Execution. This order is effective immediately.

5. Certification. Reviewed and approved this ate.

RYrChief of S aff

DISTRIBUTION LIST: I, II

Page 2: I MARINE EXPEDITIONARY FORCE ORDER P5510.36 5Feb10 …...CLASSIFIED HARD DISK DRIVE CONTROL PROGRAM 2. Internal Hard Disk Drives: A HOD that has been designed to be placed within computers,

UNITED STATES MARINE CORPSI MARINE EXPEDITIONARY FORCE

U. S. MARINE CORPS FORCES, PACIFICBOX 555300

CAMP PENDLETON CA 92055.5300

I MEFO P6510.36 Ch 1SSEC27 Sep 10

I MARINE EXPEDITIONARY FORCE ORDER P5510.36 Ch 1

From: Commanding GeneralTo: Distribution List

Subj: I MARINE EXPEDITIONARY FORCE HARD DISK DRIVE MANAGEMENTPROGRAM (SHORT TITLE: I MEF HDDP)

End: (1) New page insert to I MEFO P5510.36

1. Situation. To transmit new page insert to the basic orderthat corrects paragraph 1012 to reflect enclosure (6) viceenclosure (5)

2. Execution. Remove page 1-5, and replace with correspondingpage in the enclosure.

3. Filing Instructions. File this change transmittal behindthe signature page of the basic order.

G. M. RYANChief of S aff

DISTRIBUTION LIST: I, II

3

Page 3: I MARINE EXPEDITIONARY FORCE ORDER P5510.36 5Feb10 …...CLASSIFIED HARD DISK DRIVE CONTROL PROGRAM 2. Internal Hard Disk Drives: A HOD that has been designed to be placed within computers,

CLASSIFIED HARD DISK DRIVE CONTROL PROGRAM

PURPOSE

APPLICABILITY

GUIDANCE

OBJECTIVES

DEFINITION

RESPONSIBLE AUTHORITIES

INITIAL INVENTORY

HARD DISK DRIVE AUDITS

AUDIT DISCREPANCIES

NEW HARD DISK DRIVE REPORTING

CLASSIFICATION MARKING OF HARD

TAMPER SEALS

DESTRUCTION PROCEDURES

TRANSFER OF CUSTODY

REPORTING LOST CLASSIFIED HARD DISK DRIVES

PARAGRAPH

100010011002100310041005100610071008100910101011101210131014

DISK DRIVE

PAGE

1-2

1-2

1-2

1-2

1-2

1-3

1-3

1-3

1-4

1-4

1-4

1-5

1-5

1-6

1-6

1015 1-6VIOLATIONS OF THIS ORDER

1-1

Page 4: I MARINE EXPEDITIONARY FORCE ORDER P5510.36 5Feb10 …...CLASSIFIED HARD DISK DRIVE CONTROL PROGRAM 2. Internal Hard Disk Drives: A HOD that has been designed to be placed within computers,

CLASSIFIED HARD DISK DRIVE CONTROL PROGRAM

1000. PURPOSE

1. This order provides guidance and instruction pertaining to themandatory management and accountability of classified external andinternal Hard Disk Drives (HDD) within the I Marine Expeditionary Force(I MEF) Command Element (CE)

2. This order serves as a supplement to references (a), (b), and (c)and must be used in conjunction with those references to be effective.

3. This order is also intended to serve as an example for subordinatecommands in establishing their own Classified HDD control program.

1001. APPLICABILITY. This order is applicable to the principal andspecial staff sections of this command element.

1002. GUIDANCE. Command personnel are encouraged to contact theCommand Security Manager to obtain amplifying guidance orinterpretation of this order and the references.

1003. OBJECTIVES

1. Prevent and/or minimize the possibility for loss of classifiedHDD 5.

2. Provide definitions for the equipment that this order governs.

3. Establish the requirement to execute an initial inventory ofclassified HDD’s currently retained by the principal and special staffsections of this command element.

4. Establish how and when classified HDD’s shall be audited to ensureaccountability.

S. Provide guidance on marking classified HDD’s.

6. Identify the use of tamper seals on classified computers andexternal HDD’s.

7. Provide forms to be used within the I MEF CE to track the movementand/or destruction of classified HDD’s.

8. Explain the procedures for inspecting subordinate commandsClassified HDD control programs.

9. Define the internal procedures for reporting the loss of classifiedHDD • 5.

1004. DEFINITIONS

1. Hard Disk Drive: a non-volatile storage device that storesdigitally encoded data on rapidly rotating platters with magneticsurfaces.

1-2

Page 5: I MARINE EXPEDITIONARY FORCE ORDER P5510.36 5Feb10 …...CLASSIFIED HARD DISK DRIVE CONTROL PROGRAM 2. Internal Hard Disk Drives: A HOD that has been designed to be placed within computers,

CLASSIFIED HARD DISK DRIVE CONTROL PROGRAM

2. Internal Hard Disk Drives: A HOD that has been designed to beplaced within computers, both desktop and laptop, and server racks. Itcannot be used outside the computer without a specially designedhousing unit.

3. External Hard Disk Drives: A HDD that has placed in speciallydesigned housing unit and can connect via various cables tocomputerized systems to include but not limited to desktop and laptopcomputers.

1005. RESPONSIBLE AUTHORITIES

1. The Command Security Manager is responsible for the management andimplementation of this program. This includes but is not limited tocreating and managing any and all documents necessary to assist in thetracking of HDD program, establishing a database of all inventoriedHDD’s, appropriate record keeping and ensuring the proper mailing anddestruction of classified HOD’s.

2. Section Security Representatives (SSR) are responsible toinventory, account for and manage their respective sections HDD’s. Itis absolutely critical that when a SSR is about to PCS/PCA or transferin any way that prevents them from executing their duties that a newSSR be appointed with sufficient time to ensure a proper turn over.

a. It is highly recommended that Assistant Section SecurityRepresentatives be appointed to ensure the sections HDD programreceives the level of attention it requires.

1006. INITIAL INVENTORY

1. All I MEF principal and special staff sections that storeclassified HDD’s will execute an initial inventory of all classifiedHDD’s they retain.

2. The initial inventory form to be used shall be provided by theCommand Security Manager. See enclosure Cl) . No other format shall beaccepted.

3. The SSR of each principal and special staff section is responsiblefor the completion of the initial inventory.

4. The initial inventories will be used by the command SecurityManager to create a digital database track all the devices and togenerate audit reports.

5. All initial inventories hard copy reports shall be kept on recordin a section specific binder.

1007. HARD DISK DRIVE AUDITS

1. All classified HOD’s shall be audited on a monthly basis unlessotherwise directed.

1—3

Page 6: I MARINE EXPEDITIONARY FORCE ORDER P5510.36 5Feb10 …...CLASSIFIED HARD DISK DRIVE CONTROL PROGRAM 2. Internal Hard Disk Drives: A HOD that has been designed to be placed within computers,

CLASSIFIED HARD DISK DRIVE CONTROL PROGR.AN

2. The audit report will be provided by the Command Security managerto the Section Security Representative within the first week of eachmonth.

3. Audit reports will be completed within 10 working days from thedate of notification.

a. Extensions may be granted but must be submitted to and approvedby the Command Security Manager. Extensions will not be approvedbeyond the month the audit is due.

4. Audit reports will be signed for by a section representative via alogbook kept by the Command Security Manager. The logbook will also beinitialed when the audit is returned as completed.

a. Audits, while the responsibility of the respective SSR, can becompleted by any member of the principal or special staff section. Itis ultimately the responsibility of the SSR to ensure the audit isaccomplished on time and that any discrepancies are reported inaccordance with this order.

5. Equipment in use or temp loaned will not be accepted asjustification for not completing an audit within the month the audit isdue.

a. Sections are directed to keep written record when HOD’s aretemporarily loaned out of their custody for various reasons to includebut not limited to training and repair.

b. The written record may be used as proof of existence for oneaudit period without the requirement to physically site the device.Beyond one audit period and the HOD must be physically site certifiedat its temporary location until returned to the section.

1008. AUDIT DISCREPANCIES. If during the course of an audit it isdiscovered that there is a discrepancy with the audit report, it shallbe reported immediately to the Security Manager. Any and all changesto correct the audit report must be submitted in writing usingenclosure (2) . This form to be requested from the Command Securitymanager.

1009. NEW HARD DISK DRIVE REPORTING. Sections that have new HOD’s toreport/inventory shall use enclosure (3) and provide it to the CommandSecurity Manager preferably before the equipment is put into use.

1010. CLASSIFICATION MARKING OF HARD DISK DRIVES

1. All secret HDD’s will the SF 707 SECRET classification stickerplaced on them in accordance with SECNAV M-55l0.36.

2. All unclassified hard disk drives store in the same safe, vault orworkspace as classified HDD’s must have a SF 710 unclassified stickerplaced on them to ensure the equipment is not improperly handled ormistaken as classified.

1-4

Page 7: I MARINE EXPEDITIONARY FORCE ORDER P5510.36 5Feb10 …...CLASSIFIED HARD DISK DRIVE CONTROL PROGRAM 2. Internal Hard Disk Drives: A HOD that has been designed to be placed within computers,

I MEFO P5510.36 Ch 127 Sep 10

CLASSIFIED HARD DISK DRIVE CONTROL PROGRAM

3. Unmarked HDD’s will be confiscated if found 30 days from the date of thisorder.

loll. TANPER SEALS

1. Tamper seals have been purchased to assist in the management ofclassified HDD’s and are under the strict control of the Command SecurityManager. See enclosure (4) for an example of the tamper seal. Enclosure (4)displays the tamper seal prior to tampering and tampered/compromised.

2. Tamper seals are mandatory on all external classified HDD’s. The tamperseal is placed on external HDD’s to assist in determining whether or not anexternal HOD has been inventoried.

a. External HDD’s intended for classified use shall be brought to theCommand Security Manager prior to use for proper marking and accountability.This must be done be either the SSR or an assistant to the SSR. Only thesections AC/SI Deputy AC/S or SSR can approve the addition of new classifiedHDD’s. This is done to ensure that a sections HDD listing doesn’t growwithout the SSR’s knowledge.

b. Any classified external I-flD’s found without the tamper seal 30 daysafter the date of this order will be confiscated. HDD’s will be returnedafter the HDD has been inventoried and properly labeled. This will requirethe SSR or their assistant to approve the addition of the device.

c. Unclaimed HDD’ s will be submitted to the National Security Agencydestruction facility. The Command Security Manager will report anyconfiscated HDD’s to all SSR’s to include where the device was found prior tosubmission for destruction.

3. Tamper seals are optional on desktop and laptop computers.

a. Tamper seals will only be placed on desktop and laptop computers uponrequest by the SSR. When applied the tamper seal will be placed on thecomputer in such a manner that the only method to remove the inthedded HDDwould be to compromise the tamper seal.

b. Sections that request tamper seals to be placed on laptop and desktopcomputers will not be required to remove the HDD during audits.

c. SSR’s or those who have been directed to complete audits will have toremove the HDD and inspect it physically if there is any evidence of thetamper seal having been tampered with.

1012. DESTRUCTION PROCEDURES. HOD’s that are no longer required will bebrought to the I MEF Command Security Manager and enclosure (6) shall be usedto list the equipment in question to be relinquished for destruction. A copyof the form shall be placed in a section specific binder retained by theCommand Security Manager.

1-5

Page 8: I MARINE EXPEDITIONARY FORCE ORDER P5510.36 5Feb10 …...CLASSIFIED HARD DISK DRIVE CONTROL PROGRAM 2. Internal Hard Disk Drives: A HOD that has been designed to be placed within computers,

CLASSIFIED HARD DISK DRIVE CONTROL PROGRAN

1013. TRANSFER OF CUSTODY

1. If and when HDD’s transfer in custody permanently between twosections of the I MEF CE then enclosure (5) shall be used, a copyprovided to the Command Security Manager and retained by both parties.

a. A copy of enclosure (5) shall be placed in the gaining and therelinquishing sections binders kept by the Command Security Manager.

2. If and when HDD’s transfer in custody to another command ororganization for the purpose of permanent transfer or destruction thenenclosure (6) shall be used.

a. A copy of enclosure (6) shall be placed in the relinquishingsections binder kept by the Command Security Manager.

3. Enclosure (7) shall be used when a section needs to submit theirclassified I-mD and computer to the I MEF (36.

4. Any questions concerning any of the forms listed within thissection can be directed to the Command Security Manager

1014. REPORTING LOST CLASSIFIED HARD DISK DRIVES

1. If a HDD is suspected of being misplaced or lost it shall bereported immediately to the Command Security Manager. No more than 24hours should pass from the moment it is believed the PifiD is missing orlost before reporting it to the Command Security Manager.

2. Once reported to the Command Security Manager the section will have72 hours to do a thorough search for the device. If at the conclusionof the 72 hour period the device cannot be located a PreliminaryInquiry will be initiated.

1015. VIOLATIONS OF THIS ORDER

1. Military personnel are subject to disciplinary action under theUniform Code of Military Justice (UCMJ) , or criminal penalties underapplicable Federal Statutes, as well as administrative sanctions, ifthey knowingly, willfully, or negligently violate the provisions ofthis order.

2. Civilian employees are subject to criminal penalties underapplicable Federal Statutes, as well as administrative sanctions, ifthey knowingly, willfully, or negligently violate the provisions ofthis order.

1016. ADDITIONAL GUIDANCE. Requests for additional guidance andexplanation of this order will be directed to the I MEF CommandSecurity Manager.

1—6

Page 9: I MARINE EXPEDITIONARY FORCE ORDER P5510.36 5Feb10 …...CLASSIFIED HARD DISK DRIVE CONTROL PROGRAM 2. Internal Hard Disk Drives: A HOD that has been designed to be placed within computers,

INIT

IAL

CL

AS

SIF

IED

HD

DR

EP

OR

TS

ecti

on:

Date

Equip

ment

invento

rie

d:

HD

DT

ype

HO

DS

/NH

OD

Man

ufa

ctu

rer

Co

ap

S/N

Com

pM

an

ufa

ctu

rer

Buil

din

gS

afe

/Vault

Num

ber

Inv

en

tori

ed

By

Sig

natu

re

irno

Type

Buil

din

g

HO

DS

/N

Safe

/Vau

ltN

um

ber

HO

DS

/NH

OD

Type

Buil

din

g

HO

DM

an

ufa

ctu

rer

ICam

pS

/NIC

amp

Man

ufa

ctu

rer

IIn

ven

tori

ed-

Sn

atu

r.

Safe

/Vault

Num

ber

HO

DM

anufa

ctu

rer

ICom

pS

/NC

oap

Man

ufa

ctu

rer

Invento

ried

By

Sig

natu

re

HO

DT

ype

Buil

din

g

IWO

S/N

Safe

/Vault

Num

ber

HO

DM

anufa

ctu

rer

Cam

pS

/NC

amp

Man

ufa

ctu

rer

Invento

ried

By

ISig

natu

re

IWO

Type

Buil

din

g

HO

DS

/N

Safe

/Vault

Num

ber

HO

DM

an

.factu

rer

Cam

pS

/NIC

amp

Man

ufa

ctu

rer

Invento

ried

By

[Sig

natu

re

HO

DT

ype

Bu

ildin

g

pp

S/N

Safe

/Vault

Num

ber

IWO

Type

HO

DS

/N

Num

ber

Buil

din

gS

afe

/Vault

HO

DM

anufa

ctu

rer

ICam

pS

/NIC

amp

ManuZ

actu

rer

Invento

ried

By

ISig

natu

re

HO

DM

anufa

ctu

rer

ICam

pS

/NJC

amp

Man

ufa

ctu

rer

Inv

en

tori

ed

By

ISig

natu

re

HO

DT

ype

HO

DS

/NH

DD

Manufa

ctu

rer

Cam

pS

/NC

amp

Man

ufa

ctu

rer

Buil

din

gS

afe

/Vault

Num

ber

Inv

en

tori

ed

By

Sig

natu

re

ENCL

OSUR

E(L

)Pa

ge

____

_of_

____

IM

EF

Form

Cre

ated

:20

10/0

1/29

Page 10: I MARINE EXPEDITIONARY FORCE ORDER P5510.36 5Feb10 …...CLASSIFIED HARD DISK DRIVE CONTROL PROGRAM 2. Internal Hard Disk Drives: A HOD that has been designed to be placed within computers,

GU

IDA

NC

E

HO

DT

yp

e:

Identi

fyw

heth

er

the

HO

Dis

anin

tern

al

or

ex

tern

al

HO

D.

HO

DS

/N:

Lis

tth

eseria

lnu

mb

er

of

the

HD

D.

This

num

ber

isp

receded

by

the

abbre

via

tions

S/N

,D

S/N

,H

DD

S/N

or

the

work

sS

eri

al

Num

ber

.If

you

are

ind

ou

bt

of

the

num

ber

con

tact

the

Com

man

dS

ecu

rity

Manager

and

be

pre

pare

dto

bri

ng

inth

edevic

e.

HO

DM

anufa

ctu

rer:

Lis

tth

eco

mp

any

that

mad

eth

eH

DD

.N

ot

tob

econfu

sed

wit

hth

em

aker

of

the

com

pu

ter.

They

are

not

alw

ays

on

ein

the

sam

e.

(e.g

.T

oshib

a,

Maxto

r,S

eagate

)

Com

pS

/N:

Seri

al

nu

mb

er

of

the

Com

pute

r.T

his

num

ber

isp

receded

by

the

abbre

via

tions

S/N

or

DS

/Nan

do

nN

MC

Ico

mpute

rsth

ey

itis

liste

das

Seri

al/

Tag

on

the

top

of

the

lap

top

.

Com

pM

anufa

ctu

rer:

Lis

tth

eco

mp

any

that

mad

eth

ecom

pute

r.(e

.g.

HP

,D

ell

,IB

M)

Buil

din

g:

Pro

vid

eth

en

um

ber

of

the

bu

ild

ing

the

ED

Ois

kept.

(e.g

.210700)

Safe

/vau

ltN

um

ber

:N

um

ber

of

the

vault

or

safe

wh

ere

the

HO

Dis

sto

red

when

not

inuse.

If

the

HO

Dis

not

uti

lized

list

N/A

.

Invento

ried

By

:R

ank

and

Last

nam

eof

the

ind

ivid

ual

that

ex

ecu

ted

the

invento

ry.

Sig

natu

re:

Sig

natu

reo

fpers

on

who

perf

orm

ed

the

inv

en

tory

.

ENCL

OSUR

E(I

)

Page 11: I MARINE EXPEDITIONARY FORCE ORDER P5510.36 5Feb10 …...CLASSIFIED HARD DISK DRIVE CONTROL PROGRAM 2. Internal Hard Disk Drives: A HOD that has been designed to be placed within computers,

: UNITED STATES MARINE CORPS• - / --4 I MARINE EXPEDITIONARY FORCE

U.

S. MARINE CORPS FORCES, PACIFIC

CAMP PENDLETON, CA 92055-5300

- NREYRERTO:

5510SECMGR(DD/MMM/YY)

From: (SECTION), I Marine ExpediLionary ForceTo: CoHunand SecuriLy Manager, I Marine ExpediLioriary Force

Subj: CLASSIFIED HARD DISK DRIVE AUDIT DISCREPANCY REPORT

1. The below listed changes must be made to correct the (section) Hard DiskDrive (HDD) invenLory.

1) lID!) AS LISTED ON AUDITHDD S/N:Type: (EXTERNAL or INTERNAL)ManufacLurer:Associated Computer S/N: (If Applicable)CompuLer Manufacturer:

Correction to be made: (Describe what change(s) need to made to correct thesections audit report) (i.e. HDD S/N is incorrect and must be changed to,Change from exLernal to internal, AssociaLed Computer has changed to, HDDpreviously submitted for destruction and needs to be removed, Change safenumber listed to...)

2) HDD AS LISTED ON AUDITHDD S/N:Type: (EXTERNAL or INTERNAL)Manufacturer:Associated Computer S/N: (If Applicable)Computer ManufacLurer:

Correction to be made: (Describe what change(s) need to made to correct thesections audit report) (i.e. HDD S/N is incorrect and must be changed to,Change from external to internal, Associated Computer has changed to, HDDpreviously submitted for destruction and needs to be removed, Change safenumber listed to...)

Prepared by (Rank Fi. Mi, Last Name) Signature

Received by (Rank Fi. Mi. LasL Name) SignaLure

ENCLOSURE (2)

Page 12: I MARINE EXPEDITIONARY FORCE ORDER P5510.36 5Feb10 …...CLASSIFIED HARD DISK DRIVE CONTROL PROGRAM 2. Internal Hard Disk Drives: A HOD that has been designed to be placed within computers,

• UNITED STATES MARINE CORPS• ft I MARINE EXPEDITIONARY FORCE

U. S. MARINE CORPS FORCES, PACIFIC

CAMP PENDLETON, CA 92055-5300

IN REYRCFERTO:

5510SECMGR(DD/MMM/YY)

From: (SECTION), I Marine Expeditionary ForceTo: Conunand Security Manager, I Marine ExpediLionary Force

Subj: NEW CLASSIFIED HARD DISK DRIVE REPORT

1. Listed below are new Hard Disk Drives (ADD) that need to be added to the(section) HDD inventory for fuLure audits.

1) TOD INFORMATIONHDD Type: (EXTERNAL or INTERNAL)ADD S/N:HOD ManufacLurer:Associated Computer S/N: (If Applicable)Computer Manufacturer:Building Number:Safe/Vault Number:

2) IWO INFORMATIONHOD Type: (EXTERNAL or INTERNAL)HOD S/N:HDD Manufacturer:Associated Computer S/N: (If Applicable)Computer Manufacturer:Building Number:Safe/Vault Number:

Prepared by (Rank Fi. Mi. Last Name) Signature

Received by (Rank Fi. Mi. Last Name) Signature

ENCLOSURE (3)

Page 13: I MARINE EXPEDITIONARY FORCE ORDER P5510.36 5Feb10 …...CLASSIFIED HARD DISK DRIVE CONTROL PROGRAM 2. Internal Hard Disk Drives: A HOD that has been designed to be placed within computers,

Examples of I MEF Tamper Seal

Untampered Seal: LLMi?1

Tampered Seal:

______________

ENCLOSURE(S)

Page 14: I MARINE EXPEDITIONARY FORCE ORDER P5510.36 5Feb10 …...CLASSIFIED HARD DISK DRIVE CONTROL PROGRAM 2. Internal Hard Disk Drives: A HOD that has been designed to be placed within computers,

• UNITED STATES MARINE CORPS• r / I MARINE EXPEDITIONARY FORCE

u.aMARINE 05 F0

IN REPLY REFER TO:

5510SECMGR(DD/MMM/YY)

From: (SECTION), I Marine ExpediLionary ForceTo; (SECTION), I Marine ExpediLionary Force

Subj: CLASSIFIED HARD DISK DRIVE INTERNAL TRANSFER OF CUSTODY REPORT

1. The below listed classified Hard Disk Drive(s) (HDD) is/are here bytransferred from the (Section) to (Section)

2. Additionally, the new storage location of the equipment is also provided.

1) HDD fl4F0R)TIONHDD Type: (EXTERNAL or INTERNAL)HDD S/N:HDD Manufacturer:Associated Computer S/N; (If Applicable)Computer Manufacturer:

GAINING SECTIONS STORAGE LOCATIONBuilding Number:Safe/Vault Number:

2) IOn INFORMATIONHDD Type: (EXTERNAL or INTERNAL)HDD S/N:HDD Manufacturer:Associated Computer S/N: (If Applicable)Computer Manufacturer:

GAINING SECTIONS STORAGE LOCATIONBuilding Number:Safe/Vault Number:

Released by (Rank Fi. Mi. Last Name) Signature

Section - Date

Received by (Rank Fi. Mi. Last Name) Signature

Section Date

ENCLOSURE (s.)

Page 15: I MARINE EXPEDITIONARY FORCE ORDER P5510.36 5Feb10 …...CLASSIFIED HARD DISK DRIVE CONTROL PROGRAM 2. Internal Hard Disk Drives: A HOD that has been designed to be placed within computers,

CLASSIFIFU MAIFRIAL TRANSFER OF CIJSTODY Reason: Destruction Transfer

1. FROM: (OFFICIAL UNIT OR SECTION TITLE) 2. TO: (OFFICIAL UNFrOR SECTION TITLE)

3. OFFICIAL MAILING ADDRESS FOR RECEIVING DESTINATION (FOR MAIL Otfl 4, INSTRUCTIONS

Personnel submitting this loon for the purpose of transferring classified materialam liable for the accurate listing of all andes listed herein and their appropriatedassiflcation markings. No form will be accepted unless completely filled OUt.

NO HAND WRITTEN FORMS WILL BE ACCEPTED WITHOUT PRIORAPPROVAL TO ENSURE LEGIBLE DOCUMENTATION.

5. CONTACT PHONE NUMBER 6. FM NUMBER (OPTIONAL) 7, DATE OF REPORT 6. DATE OF TRANSACTION

9. UNCLASSIFIED DESCRIPTIONS (I.E. TIRE, MAKE, MODEL) 10.0W II. SERIAL NUMBER (IF APPLICABLE) 12. CLASSIFICATION 13. MEDIUM(I.E CDHDD,)

1)

2)

3)

4)

5)

6)

7)

6)

9)

10)

11)

12)

13)

14)

15)

REQUEST FINAL DESTINATION ORGANIZATION FILL OUT BOXES 20. 21 AND 22

14. SUBMITIED BY’ (PRINTED RAI4IQTITLE AND FULL NAME) 15. SIGNATURE 16. DATE SIGNED

17. RECEIVED BY: (PRINTED RMIUTITLE MD FULL NAME) IS. SIGNATURE IS. DATE SIGNED

20. RECEIVED BY: (PRINTED MANIC? TIRE AND FULL NAI.tNFINAL DESTINATION) 21. SIGNATURE 22. DATE SIGNED

BELOW FOR COMMAND SECURITY MANAGER OFFICE USE ONLY (USED FOR MAILED MATERIAL)

METHOD OF TRANSMISSION REQUESTED (Check One) PARCEL TRACKING NUMBER

REGISTERED CERTIFIED FEDEX

PREPARED BY: (RANK AND FULL NAME & INITIALS) SIGNATHRE OF INVIDUAL WHO PREPARED MATERIAL FOR MAILOUr,

THIS FORM CREATED200S/I2108 UNCLASSIFIED Page of_

ENCLOSURE ()

Page 16: I MARINE EXPEDITIONARY FORCE ORDER P5510.36 5Feb10 …...CLASSIFIED HARD DISK DRIVE CONTROL PROGRAM 2. Internal Hard Disk Drives: A HOD that has been designed to be placed within computers,

HE

LP

UE

SK

ClA

SS

IFIE

DC

OM

PIJ

TE

RA

ND

hAR

DD

ISK

DR

IVE

ChA

INO

FC

IJST

OD

YFO

RM

1.FR

OM

;(S

ECTI

ON

SUB

MIT

TIN

GEO

UIP

MEN

TI2.

TO:

(SEC

TiO

NIN

ITIA

LLY

REC

EIV

ING

EOU

IPM

ENTI

3.C

ON

TAC

TN

UM

BER

4.IN

STR

UC

TiO

NS:

THIS

FOR

MW

AS

CR

EA

TE

DT

oTR

AC

KTH

EC

HA

INO

FC

UST

OD

YFO

RC

OM

PUT

ER

SA

ND

THEI

RR

ESP

EC

TIV

EC

LA

SSIF

IED

HA

RD

DIS

KD

RIV

ESW

HEN

SUB

MIH

ED

FOR

REP

AIR

OR

PRO

GR

AM

ING

UN

TIL

RET

UR

NED

TOTH

EO

RIG

INA

TOR

.N

OH

AN

DW

RIT

TEN

FOR

MS

WIL

LB

EA

CC

EPT

ED

WiT

HO

UT

PRO

IOR

APP

RO

VA

LTO

EN

SUR

EL

EG

IBL

ED

OC

UM

ENTA

TIO

N.

6.R

EASO

NFO

RSU

BM

ISSI

ON

:I.

NEW

ASS

ET:

Yes

No

7.SE

CTI

ON

SEC

UR

ITY

REP

RES

ENTA

TIV

E(P

RIN

TED

NA

ME)

(BO

XES

6A

ND

?A

RE

MA

ND

ATO

RY

FOR

SUB

MIS

SIO

N)

B.SS

RSI

GN

ATU

RE.

(SIG

NA

TUR

EIS

CO

NFI

RM

ATI

ON

OF

APP

RO

VA

LBY

SSR

FOR

SUB

MIS

SIO

NI

I.SE

RIA

LN

UM

BER

CO

MPU

TER

10.B

RA

ND

11.S

ERIA

LN

UM

BER

HO

D12

,BR

AN

D(IF

KN

O1

)13

.C

LASS

IFIC

ATI

ON

I) 21 3) 4) II

FAIL

ED

HA

RD

DIS

KD

RIV

ES

SH

AL

LB

ER

ET

UR

NE

DT

OT

HE

RE

SP

EC

TIV

ES

EC

TIO

NS

EC

UR

ITY

RE

PR

ES

EN

TA

TIV

E(S

SR

)

14.

SUB

MIT

TED

BY(P

RIN

TED

RAN

K&

FULL

NA

ME)

16.

SIG

NA

TUR

E18

.D

ATE

SUB

MIT

rED

17.

REC

EIV

EDBY

(PR

INTE

DRA

NK

&FU

LLN

AM

E)1!

.SI

GN

ATU

RE

19.

DA

TER

ECEI

VED

20.

REC

EIV

EDBY

(PR

INTE

DRA

NK

&FU

LLN

AM

E)ii

.SI

GN

ATU

RE

22.

DA

TER

ECEI

VED

23.

REC

EIV

EDBY

(PR

INTE

DR

AN

K&

PULL

NA

ME)

24.S

IGN

ATU

RE

25.

DA

TER

ECEI

VED

26.

RET

UR

NED

TO(P

RIN

TED

RA

NK

&FU

LLN

AM

E)27

.SIG

NA

TUR

E28

.D

ATE

REC

EIV

ED

NO

TIC

E:

SE

CT

ION

SE

CU

RIT

YR

EP

RE

SE

NT

AT

IVE

SA

RE

TO

SU

BM

ITB

RO

KE

NH

AR

DD

ISK

DR

IVE

ST

OT

HE

CO

MM

AN

DS

EC

UR

ITY

MA

NA

GE

RFO

RD

EST

RU

CT

ION

FOR

MD

ATE

2009

1121

05

UN

CL

ASS

IFIE

D

hNU

LUSU

R(7

)

Page 17: I MARINE EXPEDITIONARY FORCE ORDER P5510.36 5Feb10 …...CLASSIFIED HARD DISK DRIVE CONTROL PROGRAM 2. Internal Hard Disk Drives: A HOD that has been designed to be placed within computers,

UNITED STATES MARINE CORPSI MARINE EXPEDITIONARY FORCE

Box 555300Camp Pendleton, CA 92055-5300

(1

I I I I I I1.DATE 4Feb102. OPERATION CODE 3. SUBJECT: I MARINE EXPEDITIONARY FORCE HARD

DISK DRIVE MANAGEMENT PROGRAMX ORIGINATOR OF ROUTE SHEETA APPROPRIATE ACTION 9. NATURE OF

ORIGINATORDUE DATE

B SIGNATURE ACTIONINITIALS

C CONCURRENCE REOUIREDD INFORMATION

I MEF Admin Center/ADJ ROUTINE/URGENT KLZ

S COMMENT(S)

10. ACTION OFFICER (NAME, GRADE, SECTION, EXT)K. L. ZUROSKI, ADJ CHIEF, 763-2712

4. 5.OPR 6. ADDRESSEES 7. DATE 8. INITIALS 11. REMARKS AND SIGNATURE:RTNG CODE —

IN OUT CONCURCONCUR

PURPOSE: Routed for COS signature

CS— BACKGROUND: Order is required in accordance with

DCG— .......,,...... 43 I MEF policy letter 06-09 that requires I MEF and its

3 B, F COS—

0k subordinates establish procedures to account for andSERGEANT MAJOR — control classified HOD’s.CMD MASTER CHIEF

2 A SSEC -t-2-- DISCUSSION:

AC/S. S-iREF: I MEF POLICY LETTER 06-09

AC/S. 5-2AC/S. 5-4 RECOMMENDATION: Forwarded F commendationAC/S. G-S — and signature.AC/S. 5-6

{ B CC, I MCD- Sa* T

COPSCHIEF OF COPSFOPS

— 1CHIEF OF FOPS

PLANSCHIEF OF PLANS

SUPPORT

COMPTROLLER

CO. I MHG

S URG EON

CHAPLAIN —

. CEIVE[PLO I

rX,F IAOJUTANT

— FEB 0 4 2010toINSPECTORCRSSAFETY

— v

Page 18: I MARINE EXPEDITIONARY FORCE ORDER P5510.36 5Feb10 …...CLASSIFIED HARD DISK DRIVE CONTROL PROGRAM 2. Internal Hard Disk Drives: A HOD that has been designed to be placed within computers,

UNITED STATES MARINE CORPSI MARINE EXPEDITIONARY FORCE

Box 555300Camp Pendleton, CA 92055-5300

Ii. DATE 04 Oct20102. OPERATION CODE 3. SUBJECT: I MEFO P5510.36 I MARINE

EXPEDITIONARY FORCE HARD DISK DRIVEX ORIGINATOR OF ROUTE SHEET MANAGEMENT PROGRAM (SHORT TITLE: I MEFA APPROPRIATE ACTIONHDDP)B SIGNATURE

C CONCURRENCE 9. NATUREOF DUEDATED INFORMATION ACTION ORIGINATORE RETENTION

I MEF Admin Center/ADJ REQUIRED INITIALSF RETURN TO:S COMMENT(S)

ROUTINE/URGENT ALG

10. ACTION OFFICER (NAME, GRADE, SECTION, EXT)A. L. GONZALEZ, MGYSGT, ADJ ,763-2552

5. OPR 6. ADDRESSEES 7. DATE 6. INITIALS 11. REMARKS AND SIGNATURE:CODEIN OUT CONCUR NON PURPOSE: Routed for Chief of Staff signature.CONCUR

CS— DISCUSSION: To transmit new page insert to theDCG n basic order that reflects paragraph 1012 to read

3 CS COS it’ enclosure (6) vice enclosure (5).SERGEANT MAJOR

RECOMMENDATION: Requesting approval and COSCMD MASTER CHsignature.2 A SSEC

AC/S. G-1AC/S. G-2

AC/S, 5-4

AC/S, G6

AC/S. G-S M/USM C

STANDING MAGTF CECOPSCHIEF OF COPSFOPS

CHIEF OF FOPSP LAN S

CHIEF OF PLANSSUPPORT

COMPTROLLERTEG

SURGEONCHAPLAINRLO

- IRECEIVEJ)fX ADJUTANTPAO I OCT 5 ?Oi0INSPECTOR ICRSSAFETY

Page 19: I MARINE EXPEDITIONARY FORCE ORDER P5510.36 5Feb10 …...CLASSIFIED HARD DISK DRIVE CONTROL PROGRAM 2. Internal Hard Disk Drives: A HOD that has been designed to be placed within computers,

CLASSIFIED HARD DISK DRIVE CONTROL PROGRAN

3. Unmarked HOD’s will be confiscated if found 30 days from the dateof this order.

1011. TANPER SEALS

1. Tamper seals have been purchased to assist in the m%gement otclassified ImO’s and are under the strict control of t,He CommandSecurity Manager. See enclosure (4) for an example/f the tamper seal.Enclosure (4) displays the tamper seal prior to taØering andtampered/compromised.

2. Tamper seals are mandatory on all external/lassified HOD’s. Thetamper seal is placed on external HOD’s to a34ist in determiningwhether or not an external HOD has been inv7€toried.

a. External HOD’s intended for clasVfied use shall be brought tothe Command Security Manager prior to uØe for proper marking andaccountability. This must be done be,áither the SSR or an assistant tothe SSR. Only the sections AC/S. Depôty AC/s or SSR can approve theaddition of new classified HOD’s. yhis is done to ensure that asections HOD listing doesn’t grow/ithout the SSR’s knowledge.

b. Any classified external4o’s found without the tamper seal 30days after the date of this or6r will be confiscated. HOD’s will bereturned after the HOD has beln inventoried and properly labeled. Thiswill require the SSR or thei/ assistant to approve the addition of thedevice. /

c. Unclaimed HOD’s y4’ll be submitted to the National SecurityAgency destruction faciity. The Command Security Manager will reportany confiscated HOD’s o all SSR’s to include where the device wasfound prior to submis/ion for destruction.

3. Tamper seals ar optional on desktop and laptop computers.

a. Tamper seals will only be placed on desktop and laptopcomputers upon request by the SSR. When applied the tamper seal willbe placed on the computer in such a manner that the only method toremove the imbedded HDD would be to compromise the tamper seal.

b. Syctions that request tamper seals to be placed on laptop anddeskto/omPuters will not be required to remove the HOD during audits.

c/ SSR’s or those who have been directed to complete audits willhave/to remove the HOD and inspect it physically if there is anyevence of the tamper seal having been tampered with.

1012. DESTRUCTION PROCEDURES. HOD’s that are no longer required willbe brought to the I MEF Command Security Manager and enclosure (5)shall be used to list the equipment in question to be relinquished fordestruction. A copy of the form shall be placed in a section specificbinder retained by the Command Security Manager.

1-5