资源描述:
《information assurance manual published by》由会员上传分享,免费在线阅读,更多相关内容在教育资源-天天文库。
1、THTHESTHESECRETARYOFTHENAVYESEECRETARYOFTHENAVYCRETARYOFTHENAVYSECNAVM-5239.1November2005DepartmentoftheNavyInformationAssuranceProgramInformationAssuranceManualPublishedByTheDepartmentoftheNavyChiefInformationOfficerSECNAVM-5239.1November2005DEPARTM
2、ENTOFTHENAVYCHIEFINFORMATIONOFFICER1000NAVYPENTAGONWASHINGTON,DC20350-1000FOREWORDInformationAssurance(IA)isacornerstoneoftheDepartmentoftheNavy(DON)transformationtoasecureinteroperable,net-centricNavalInformationManagement/InformationTechnologyEnter
3、prise.ThesecurityandsuperiorityofDONinformation,systems,andpersonneliskeytoourmaritimedominanceandnationalsecurity.WetakeaDefenseinDepth(DiD)approachtoIA,layeringIAprinciplesandcontrolsthatapplytopeople,processes,andtechnology.Thepathtoanet-centricen
4、vironmentisrifewithopportunitiesandrisks.ToretainanagileIAposture,DONintegratesIAcontrolsthroughoutallfacetsoftheEnterprise.Wemustallacceptthechallengespresentedinanet-centric,interconnectedenvironment,especiallythatriskassumedbyonesystemisincurredby
5、allsystems.ThisManualimplementsthepolicysetforthinSecretaryoftheNavyInstruction(SECNAVINST)5239.3A,Subject:"DepartmentoftheNavyInformationAssurancePolicy"andisissuedundertheauthorityofSECNAVINST5430.7N,Subject:"AssignmentofResponsibilitiesandAuthorit
6、iesintheOfficeoftheSecretaryoftheNavy."ThisManualisintendedtoserveasahigh-levelintroductiontoinformationassuranceandIAprinciples.ItdiscussescommonIAcontrolsandassociatedrequirementsandreviewstheDepartmentofDefensestrategyforimplementingthosecontrols.
7、FuturemanualsintheSECNAVManual(SECNAVMAN)5239serieswilladdressothertopicssuchasIArolesandresponsibilities,basicIApracticesandprocedures,andIAincidentreportingandresponse,etc.ThisManualiseffectiveimmediately;itismandatoryandapplicabletoallDONactivitie
8、s,installations,commands,units,andpersonnel,andDONownedorcontrolledinformationsystems.NothinginthismanualshallalterorsupersedetheexistingauthoritiesandpoliciesoftheDirectorofNationalIntelligenceregardingtheprotectionofSensitiveCompartmentedInformatio