COMMUNITY-WIDE COMPUTER ASSISTED COMPARTMENTATION CONTROL SYSTEM (4C)

• Document Type: CREST
• Collection: General CIA Records
• Document Number (FOIA) /ESDN (CREST): CIA-RDP82M00591R000100050013-3
• Release Decision: RIPPUB
• Original Classification: C
• Document Page Count: 7
• Document Creation Date: December 16, 2016
• Document Release Date: August 11, 2005
• Sequence Number: 13
• Publication Date: October 23, 1978
• Content Type: NOTES

Approved For Raj,se to/ :g DEN8*2111A1L91ipafl'100050013-3
NOTE FOR: Mr. Robert W. Gambino
SUBJECT: Community-Wide Computer Assisted
Compartmentation Control System (4C)
1. Attached is the wrap-up of the 4C Requirements
Team. It contains questions and reservations received from
the Community following your call for final comments, Each
issue is addressed by the Team. Some of them can only be
resolved in the course of the next phase - development of
formal specifications.
2. A decision to go ox not to go is needed within
six months or else the data will be out-of-date and the
knowledgeable people will be scattered.
3. If there is a decision to go - the next step is
formation of a "Specifications Team" made up of people from
CIB, ODP, OC. We think it would be impossible to get ODP and
OC to contribute manpower resources without a firm commitment
of funds. No one wants to bet on the come in this day and
age. Looks like you have to go to the DCI for money or
decision not to progress.
4. Recommend you sign and return to me and I'll have
SSC dissem.
25X1
25X1
LN"IAL
7 ( Proved For Release 2005/08/22 : CIA-RDP82M00591 R000100050013-3
 Approved For Rise 2005/08/2fA=A110591 R~0100050013-3
SECOM-D-332
MEMORANDUM FOR: Members of the DCI Security Cotmittee
SUBJECT :
Robert W. Gambino
Chairman
DCI Security Committee
Community-Wide totputer Assisted
Compartmentatjon Control System (4C) (U)
SECOM-D-34$,26 Jwi 1978j,same Subject
I. (U) Responses to the Requirements Package were unani-
mously supportive of the 4C concept, but there were questions
and reservations about some elements. These are set forth as
ITEs, followed by COMENTs, which have been prepared by the
4C Requirements Team.
ITEM A: (U) Paragraph 6.2 of reference describes a system
which seems based' on the assurnpticin that some NF+IB members
will choose bt tc make all or most, of their SCI record
holdings available for retrieyal by.-all other members. Some
members observed that this would greatly reduce the benefits
of 4C.
COMMENT: (U).The Requirem 't Team and most of the partici-
pating organizations have 'ceived ,4C as an info*rmation bank
which can 'be used to ascertain. 1ielher individuals have been
authorized accesses to SCf,.. "to; deft the S onsors, to ob
taro information concerning .,,'.c ground investigations, to
verify term .certificationt,_? etc. I:t. is planned that such in
formation will be available within secure Government-controlled
areas from 4C terminals operated by cleared personnel. tinder
such conditions the information will be protected, and its
ready availability to people with a.need-to-know will reduce
the telephone.calls, cables me;r os 'andd some travel now required.
to perform. necessary buss` ss.
0
Approved For Release 2005/08/22: ;Qj
005918000100050013-3
 *I '10 r
N y
Approved For ReI se 2005/08/22 : CIA-RDP82M00591 RQQ100050013-3
Such benefits will be reduced if participating organi-
zations elect, without sound reasons, to make their records
inaccessible to other NPIB organizations.
`here are'sound reasons, however, for exceptionally
tight protecti6it of-some records.-..The 4C systea must.provide
the option of making a record inaccessible except to the Spon-
sor and to the Central. ? Facility.. -Without such option, some
members-might feel' obliged to withhold certain records, in
which case the DCI requirement of a complete data base would
ITEM B: (C) There are differing opinions concerning the
proper classification of the 4C data base, and the question
of whether""4C"information. should be transmitted' and ?storedi n
compartmente4 channels. (Theo draft Requirements Package pro-
posed ' that, the ,data be SECRET ands not. compartmented. The
final ' phckage as. s. re#ult of -co eft to the draft $ stated
that the 4C data base, and 4C information transmitted or
stored, must-be bee classified SECRET acid- handled via BYE channels.)
COMMENT: (C) The BSO:CIA,"after consiaering tha reply to the
draft, agreed that the data base as a whole should not be
available outside of BYE channels, and that the classification
of SECRET was appropriate.
Over the years we have handled a similar data base
(SPECLE) as SECRET. Individual records within such data
bases have been handled as unclassified and uncompartmeuted,
and ' `listing of all Individuals neered by some Agencies/
De a~rtments avea -be n -h-idled as NFi 7ENTIAL or`esve4s un-
c-ass t er, and uncompartmented.
With existing SCI access approval record-keeping systems
we have had: human intervention. at central facilities between
remote gries and responses to those remote queries. The
human intervention has- provided p-rotbction against releasing
information to unauthorized individuals or those who have no
'need-to-know". It' has protected- individuals who ate under
cover. It has permitted us;toassign proper classification,
and to properly channel reports which are transmitted to
It is essential to, provide su?i-tabl'e protection against
unauthorized release of information while maintaining efficiency
Approved For Release 2005/08/22 : CIA--~R,,DP82M00591 R000100050013-3
 Approved For Release 200/08/22 : CIA-RDP82M005914i?00100050013-3
in piocess pg,:and.p cess nj 4C information. The Requirements
Team, conc.1Ude i, that_ on balance,, optimum results would be ob-
tained by ;estsblishn$ Tigorous, security measures (hardware,
software, personnel, encryption, emanation and physical) for
the system as a whole. It was assumed that this would encourage
the input of gil S;I access.apprgval.records, simplify the
system's ,internal security features and encourage members to
make their records available to other Agencies/Departments
(see Item A, above).
The Specifications Team will give additional attention
to this problems, and will explore various possibilities for
Improving system efficiency while protecting the information.
ITEM C: (U) Several mnembers, questien the plan to implement
Phase '1 of 4C, *i hoot a positive c9mmitment to proceed to
Phases 2 and 3, with all remote stations (CONUS and Overseas)
identified. and included in cost estimates.
COMMENT: . (U) With implementation of Phase 1, in. order to
achieve a currant -data . ba$o, it ist ant ,cipated that there
will be increased utilization of cables to expedite the r
ns or debriefings which occur at
t4
i
ns
Q
cording of ia7doctr
distant points. The degree of success in utilization of cable
facilities may. influence the determination of Phase 2 and
Phase 3 requirements.
it is sate. to predictthat.there will be changes in the
locations of activities, the voluee of recordable actions
at the variop locations, end there will be changes in methods
and technology which will impact on requirements and costs of
Phases 2 and 3.
ITEM D: (iJ) Some members, with widely dispersed in4octrina-
basee dubious about
currentoperations,
tion/debTieflng am~~.ntai.ncertification
their ability
COMMENT. (U .This Item is,clpsely related to Item C, above
The R,equir meets Team, to _questioning the economic feasibi-
lity of .placing on-line interactive terminals at each of the
many scattered points around the world, has costed a system
in which thgTV will be some delay between events and the
recording of-those events in 4C, The 4C system was costed
Approved For Release 2005/08/22 : CIA-RD &2MP0591 R000100050013-3
i r:'
 Approved For P44dase 200,46$/ ~Fi4=14hFL2M005914 W0100050013-3
for Phase 2 and Phase 3 expansion only to points having a
relatively,-high volume'-oi activity. During Phase 1, with
expanded itse-bf existing cable facilities, there can be great
improvement in the timeliness of the central data base.
ITEM B- j Some members have exgfee'sseed concern about the
increased work load in developing 4C and in maintaining their
existing system plus the 4C system after it becomes opera-
tional. They site dubious -about availability of manpower.
COMMENT: (i3)' Organizations with 'large numbers of records and
existing ADP systems will 'be a tpeoted to provide manpower to
work 'with 'the ' specifications Teamm $a. re aired, to assist in
the 'ccon taie } of date `to 4C speS Ifications, and may need to
operate 'parallel` "sysfatts-'dring arf eratic tal test period.
4C is ?a, major project which will not succeed without manpower
support from participating organizations.
Adequate "41'port from.,each ma$ber of the Community is
essential foil the success 'cif ~4C. "The Requirements Team did
not attempt to assess the rtssioun d.f _man power 'support which
will be required from each participating organization.
The Requirements Team did not conduct a Costs/Benefits
analysis, but did conclude that 4C has the potential to re-
place some existing ADP systems, and eliminate some redundancies
in keypunching, computer processing, `and storage. Also, with
4C replacing some existing systems, there will bea consid-
erable reduction in compttteer programming in the Community.
Correction of "bugs" or -system enhancements in 4C will bene-
fit all partici ating organizations., and less work will be
required to exchange data hetwesn systems.
ITEM F: (U) Is the CIA paying for' 'all costs, except for
salaries of employees who will participate in development,
operation, and maintenance of 4C?
COMMENT: (C) No. Each participating organization will be
expected to pTevide aAd prepart'app `opriate sp ago for per3.-
pheral equipment. 'The space shoutd~.be 'ready ae tine the
equipment is - cheduled ?or`insta' lation.
In buildings which `are'''tetviced-by Tetrahedron the par-
ticipating ofga.nizatidt Teho Id lark ge for installation of
lines from the Technical Control Facility (fin the lr u'_'1 Cfng)
to areas where 4+C . peripheral equipment will be installed.
Approved For Release 2005/08/22 : CIA-RDP82M00591 R000100050013-3
 Approved For R Lase 2005/08/22: CIA-RDP821VI00591 RW90100050013-3
ITEM'G (C) The assumption that the KC-84 would be available
in.`time to meet the cryptographic ,needs of 4C was questioned.
COMMENT: (C) It now ' appears; that' the KG-84 will not be avail-
able within the expected time frame. Consequently, the KG-34
would have to be used itstead'bf the I(G-84.
ITEM II: (U) Some NFIB. mmenbers have surfaced possible re-
quirements fear - addititnii- terminal equipment and communications
facilities at locations which were not mentioned during the
study of requirements. One menbsr advised that a planned
centralization?ofoperations would reduce such requirements.
On balance,, the.responses to'BECQM D. 345 have indicated an
increase in Phasa,l requirements for terminals and communi-
cations.
COMMENT: .. (U) ?The Requirements Team costed a central facility
which can ser*$ce_4dditional remote terminals. If there is
a decision to implement Phase 1 of 4C with a fixed amount of
money no?isufficient to meet all immediate requirements, it
may be necessary to po#tpore:instsllavion of equipment at some
remote sites.
ITEM 1: (U) There were questions or comments concerning
various matters. which were not studied in detail by the
Requirements Team. Some examples are: (1) the definitions
of Data Fields, both required and optional; (2) the methods
to be used in updating two systems, when 4C can not replace
an existing ADP system; (3) th* need to maintain an audit
trail on queries (Privacy Act and security considerations);
and (4) the use of AUTODIN,
COMMENT: (U) With the assistance of participating organiza-
tions, these are questions which will be addressed and resolved
by the Specifications Team.
2. (U) Reservations, as described above, will be con-
sidered when I participate in discussions of 4C funding.
You will be notified promptly when the decision is made.
3. (U) Thank you for your assistance in conducting
the 4C requirements and costing study.
Robert W. Gambino
Approved For Release 2005/08/22 : CIA-RDP82M00591 R000100050013-3
 DISTRIBUTION,
Original - Executive Sec
i
I
I
I
1
I
1
I
1
I
2--
2 -
1 -
1
2
OS/P M/SSC/[
QC
SECOM Chrono
OS Registry
SSC
Chrono
'C1A-R82M00591 W0100050013-3
eery, SBCOM
{20' Oct-,per .1978)
Approved For Release 2005/08/22 : CIA-RDP82M00591 R000100050013-3