POLICY NUMBER 14 - PERSONAL COMPUTERS* FOR HEADQUATERS** APPLICATIONS

• Document Type: CREST
• Collection: General CIA Records
• Document Number (FOIA) /ESDN (CREST): CIA-RDP95-00972R000100190011-9
• Release Decision: RIPPUB
• Original Classification: C
• Document Page Count: 6
• Document Creation Date: December 23, 2016
• Document Release Date: August 23, 2012
• Sequence Number: 11
• Content Type: MISC

Declassified in Part - Sanitized Copy Approved for Release 2012/08/23: CIA-RDP95-00972R000100190011-9
Action
I
Info
I Initials
& Date
Ed M.
i
John F.
Dennis Mc.
Bernie S.
Vince K.
ari A.
Carl B.
Declassified in Part - Sanitized Copy Approved for Release 2012/08/23: CIA-RDP95-00972R000100190011-9
 II III H,I II ~ {1U 1111111L, 111ij11111111 I II 1 I : III I I I I
Declassified in Part - Sanitized Copy Approved for Release 2012/08/23: CIA-RDP95-00972R000100190011-9
ROUTING AND ' TRANSMITTAL SUP
TO:
mbolroom number.
(Name. om=,p
building. Aosy
Initials
Date
2
G/SpS/0.Pip
1
MAR 1
4
a
File
Note and Return
1
For Clearance
Per Conversation
Requested
For Correction
re R
lets
For Your Information
See Me
meat
Investigate
nature
lC
oordination
Justify
Declassified in Part - Sanitized Copy Approved for Release 2012/08/23: CIA-RDP95-00972R000100190011-9 '
ntsnip'--0S8 UPI
983
 Declassified in Part - Sanitized Copy Approved for Release 2012/08/23: CIA-RDP95-00972R000100190011-9
'a I. tr'211 3 - ! tt nsa1 Up 384
Adm`Pi0
Policy Number 14 Personal Computers* for Headquarters**
Applications
Information Systems Security Group policy is to restrict
the use of personal microcomputers to only those applications
which can be solidly justified for reasons such as efficiency
and substantial cost savings, and where demonstrably robust
security controls exist.
The Information Systems Security Group recognizes that
some personal microcomputers will be required for unclassified
applications. Our experience to date, however, clearly
indicates that the presence of unclassified word and data
processing equipment in classified program/project areas
creates the very real danger of contamination of the
unclassified system in spite of conscientious efforts on the
part of well intentioned individuals to prevent such
occurrences. For this reason, all processing which occurs in
classified program/project areas will be presumed to be
classified and must be controlled accordingly.
In those selected cases where sufficient management
justification exists, the use of personal microcomputers for
the processing of Agency official information in a work-related
capacity in a classified program/project area may be approved
providing:
a. The use of personal microcomputer equipment, in
each case, is approved by the Information Systems
Security Group, Office of Security and the
program/project Manager.
b. The personal microcomputer equipment is TEMPEST
approved, or otherwise controlled, in accordance with
standards published by the Office of Communications.
c. The program/project manager creates, publishes and
promulgates written procedures designed to securely
control the use of personal computers, and all
associated magnetic storage media and printed output.
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
* A personal computer is defined as one which (a) is easily
transportable, (b) possesses limited software capabilities, and
(c) costs less than $5,000.00.
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
** The headquarters building, the Agency training centers and
Agency owned or leased facilities located in the Washington
D.C. metropolitan area.
(({({ jjjjj P Use 011111
Declassified in Part - Sanitized Copy Approved for Release 2012/08/23: CIA-RDP95-00972R000100190011-9
 Declassified in Part - Sanitized Copy Approved for Release 2012/08/23: CIA-RDP95-00972R000100190011-9
!Admino~ - Internal Use Only
d. The published procedures are coordinated with the
assigned Information System Security Officer (ISSO),
approved by the Chief, Information Systems Security
Group, and include strict procedures to:
(1) Maintain definite segregation of unclassified
activities from classified activities.
(2) Provide for the use of unique identification
labels for all magnetic media associated with
personal microcomputers.
(3) Provide for the definite segregation of
unclassified personal microcomputer printed output
from classified program/project printed output.
(4) Prevent the removal of all personal
microcomputer magnetic media from the facility.
(5) Provide for the strict control of all
magnetic media used for diagnostics and
maintenance of personal microcomputer systems.
(6) Prevent relocation of personal microcomputers
within the program/project area without the
written approval of the assigned Information
Systems Security Officer.
(7) Prevent the removal of personal
microcomputers from the program/project area
without the written approval of the assigned
Information Systems. Security Officer.
e. Each such approved personal microcomputer system
is available for periodic security audits by the
Information System Security Group, Office of Security.
e:~ bra only
Declassified in Part - Sanitized Copy Approved for Release 2012/08/23: CIA-RDP95-00972R000100190011-9
 Declassified in Part - Sanitized Copy Approved for Release 2012/08/23: CIA-RDP95-00972R000100190011-9
6 June 1984
Attached is a updated list of Agency acquisitions of personal
computers compiled by Policy and Plans Group, Management Staff. This
list represents a ocurements forwarded for the D/ODP's
concurrence as pe~that were processed as of 20 May 1984, Delta
Data personal computer installations through 15 October 1983 and
internal ODP PC purchases. The Delta Data installations have been
verified, however, the remaining data represents only those Agency
procurement requests which were routed through ODP Management Staff.
Also, the Office of Communication's purchases of Wang ICST and IBM PC
units through the OC-managed contracts have not been included. The
listed Delta Data units may also function as terminals as well as local
PCs.
Declassified in Part - Sanitized Copy Approved for Release 2012/08/23: CIA-RDP95-00972R000100190011-9
 25X1
Declassified in Part - Sanitized Copy Approved for Release 2012/08/23: CIA-RDP95-00972R000100190011-9
Next 14 Page(s) In Document Denied
Iq
Declassified in Part - Sanitized Copy Approved for Release 2012/08/23: CIA-RDP95-00972R000100190011-9