ACP 122 (F) - Multilateral Planners Conference

UNCLASSIFIED
ACP 122(F)
j. Redundancy of Protection. Redundant protective features and procedures shall
be employed in the safeguarding of sensitive information handled by a CIS and
any sensitive assets involved, unless implementation of such measures is not
possible or has been determined to be unnecessary by a TRA;
k. System Stability. All elements and components of the CIS shall function in a
cohesive, identifiable, predictable and reliable manner, so that malfunctions can be
detected and reported within a predictable period of time; and
l. Survivability. The Organisation employing a CIS must be capable of providing
for continuity of operations to meet minimum essential level of services.
INFORMATION ASSURANCE COMPONENTS
210. The components of IA consist of the following:
a. Risk Management;
b. Certification and Accreditation;
c. Secure Operation;
d. Verification Activities;
e. Security Architecture;
f. COMSEC, encompassing CRYPTOSEC, TRANSEC and NETSEC;
g. EMSEC;COMPUSEC;
h. CND;
i. Personnel Security;
j. Physical Security; and
k. An Alert, Warning and Response (AWR) regime.
IMPLEMENTATION CONSIDERATIONS
211. Each participating nation has its own set of information assurance policies, procedures
and doctrine, which are recognized and accepted by approved bilateral agreements as being
adequate for the protection of each others information when passed between nations.
212. The purpose of this publication is therefore not intended to supplant the existing IA
regimes operated by the participants, but rather to act as an agreed upon baseline for
implementation of IA measures in an Allied environment.
2-4 Original
UNCLASSIFIED
(Reverse Blank)