ACP 122 (F) - Multilateral Planners Conference

UNCLASSIFIED
ACP 122(F)
ensure that information required for operational support is available to the warfighter. The
objectives of this policy are to ensure that:
a. All sensitive information stored, processed, displayed or transmitted by combined
CIS are safeguarded in a manner consistent with this publication and its
subordinate publications,
b. All sensitive assets, information and CIS products having intrinsic value to
combined operational and management functions are safeguarded in a manner
consistent with this publication and its subordinate publications, and
c. The residual risk of compromise to sensitive information and assets is reduced to a
level acceptable to the combined force.
INFORMATION ASSURANCE ASSUMPTIONS
207. The following are basic assumptions for IA:
a. Info is always at risk from natural, accidental and deliberate actions; and
b. It is not possible to ensure absolute protection of information.
INFORMATION ASSURANCE OBJECTIVES
208. The following are the objectives of IA:
a. To protect information used in and for operational processes;
b. To control access to information by ensuring appropriate clearances are obtained
and need-to-know principles are applied;
c. To provide the appropriate degree of information protection as determined by the
criticality and security classification of the information; and
d. To verify a consistent approach to the protection of information.
INFORMATION ASSURANCE PRINCIPLES
209. The following security principles will need to be considered:
a. Assurance of Protection. CIS handling sensitive information shall provide
assurance that its security functionality will perform consistently as specified.
Both automated and manual techniques shall be employed regularly to verify that
all required security mechanisms and procedures are invoked and operating
properly;
2-2 Original
UNCLASSIFIED
(Reverse Blank)