unclassified - Air Force Financial Management & Comptroller

BUDGET ITEM JUSTIFICATION (EXHIBIT P-40)
UNCLASSIFIED
DATE:
FEBRUARY 2002
APPROP CODE/BA:
OPAF/ELECTRONICS & TELECOMMUNICATION EQUIPMENT
P-1 NOMENCLATURE:
COMSEC EQUIPMENT
Description (continued):
b. AIR AND GROUND COMMUNICATIONS PROGRAM: Includes a wide range of security products addressing a variety of
applications and security levels, ranging from traditional COMSEC to embedded cryptographic modules for use in tactical and strategic
environments.
c. AIR FORCE ELECTRONIC KEY MANAGEMENT SYSTEM (AFEKMS): An Acquisition Category (ACAT) III acquisition and
sustainment program providing secure, flexible and timely upgrades to existing key generation, distribution and management systems.
(Reference Program Element 33401F of the Air Force Descriptive Summaries.)
2. COMPUTER NETWORK SUPPORT: Provides Defensive Counter Information capability to protect Air Force computer systems and their
information against unauthorized intrusion, corruption, and/or destruction, be it deliberate or unintentional. This program contains Air Force
Information Warfare Center (AFIWC) and 67th Information Operations Wing (67th IW) programs and initiatives to protect Air Force
computers, whether they are stand-alone, networked, telephone switches, or embedded in weapon systems, and provide Information Warfare
(IW) threat prediction for AF systems. A brief description by program/initiative follows.
a. COMPUTER SECURITY ASSISTANCE PROGRAM (CSAP) AF COMPUTER EMERGENCY RESPONSE TEAM (AFCERT):
Through the CSAP, the warfighter can identify computer system intrusion attempts, conduct isolation and containment actions, and quickly
determine the operational status of computer systems. AFCERT, the AF-level point of contact for reporting and handling computer security
incidents/vulnerabilities, exercises operational control for the integration and implementation of Automated Security Incident Measurement
(ASIM) intrusion detection monitoring, and performs ASIM data analysis and incident response (IR). IR consists of AFCERT’s capability to
isolate, contain and recover from unauthorized activity targeted at AF and related automated information systems before that activity impacts
AF operations and mission capability. AFCERT coordinates the operational and technical resources needed to assess, analyze, and respond to
computer security incidents detected by ASIM or reported by AF computer users, security managers, and system administrators. FY01-03
funding provides hardware/software necessary for intrusion detection monitoring and data analysis and incident response capability.
P-1 ITEM NO PAGE NO:
32
3
UNCLASSIFIED
Page 3 of 5