MINIMUM SECURITY REQUIREMENTS FOR COMPARTMENTED OPERATION OF REMOTELY ACCESSED RESOURCE-SHARING COMPUTER SYSTEMS IN A CONTROLLED TOP SECRET ENVIRONMENT

• Document Type: CREST
• Collection: General CIA Records
• Document Number (FOIA) /ESDN (CREST): CIA-RDP89B01354R000500710016-2
• Release Decision: RIFPUB
• Original Classification: C
• Document Page Count: 2
• Document Creation Date: December 27, 2016
• Document Release Date: August 9, 2013
• Sequence Number: 16
• Publication Date: September 24, 1970
• Content Type: MEMO

Declassified and Approved For Release 2014/04/03: CIA-RDP89B01354R000500710016-2 12/
NFIDENTIAL
? ?
DEPARTMENT OF THE; NAVY
OFFICE OF THE CHIEF OF NAVAL OPERATIONS
WASHINGTON. D.C. 20350
IN REPLY REFER TO
Op-0-92D222/joy
Ser 03170P092
2 4-SEP 1970
MEMORANDUM FOR THE CHAIRMAN, COMPUTER SECURITY SUBCOMMITTEE
OF THE UNITED STATES INTELLIGENCE BOARD
Subj: Minimum Security Requirements for Compartmented
Operations of Remotely Accessed Resource-Sharing
Computer Systems in a Controlled Top Secret
Environment (C)
1. (C) The proposed directive which would establish security
requirements relative to the processing of sensitive compart-
mented information in computer systems has been reviewed.
This office concurs in the concept of the basic proposal but
nonconcurs and submits a recommended change relative to the
physical security and personnel clearance requirements for
remote terminals.
2. (C) In regard to remote terminals, it is recommended
that the security requirement be changed to only require
that remote terminals be afforded physical security and
cleared operating personnel appropriate to the classifi-
cation level of input/output designed for the respective
terminal, which could be less than Top Secret. To emphasize
the need for this recommended change, as the Navy adds to
and modernizes its current 1,001 computer installations,
planning is to procure new systems that will service the
computer needs of an entire ship or naval base. Such
centralization of computer usage is considered necessary
in the interest of efficiency aid 4 today's austere operating
budget and besides it will allow mote extensive use of
computers with the available multi-purpose computer justi-
fying the computerization of many smaller ship or base
functions. Since such a shipboard' or base computer will
be handling operational, supply, intelligence and personnel
functions, the classification of input/output for the system
could range from unclassified to sensitive compartmented
information with the majority of the users operating at the
Secret or lower level. Thus the question of security
clearance and access control requirements for remote
terminals becomes critical and it is impossible; in view
of the additional personnel security investigations and
GROUP 1
Excluded from automatic
downgrading and
declassification
ia
? .1 tik
?cerrtri-DEN-H-A-b--
Declassified and Approved For Release 2014/04/03: CIA-RDP89B01354R000500710016-2
Declassified and Approved For Release 2014/04/03: CIA-RDP89B01354R000500710016-2
? GONFIDEITIIAL
'CONFIDENTIAL Op-092D222/joy
Ser 03170P092
physical security costs, to concur in a policy that would
arbitrarily require the protection of a remote terminal
at the Top Secret level instead of according to its input/
output, especially when it is considered that other require-
ments in the proposed directive would limit the possibility
of unauthorized disclosures to terminals.
3. (C) Additionally, it is strongly recommended that the
Computer Security Subcommittee take advantage of the momentum
this task has generated to now develop a flexible and realistic
computer security policy that encompasses all classified intelli-
gence information. In view of the greater number of computer
systems to which such a policy would apply and the potential
for improved security, compatibility between agency data banks
and monetary savings could be significantly more important
than the results to be expected from the adoption o subject
draft.
DANIEL J DINAN
Head, S urity Policy Branch
ACNO ( ntelligence)
COPtirir-7rr"
ILn_10
2 CONFIDENTIAL
Declassified and Approved For Release 2014/04/03: CIA-RDP89B01354R000500710016-2