ACP 122 (F) - Multilateral Planners Conference

UNCLASSIFIED
ACP 122(F)
e. Degree of Access. The Sponsor(s)/Owner(s) are to establish a written
understanding of the degree of access that users of the system will have to other
connected systems;
f. Access Control. The Sponsor(s)/Owner(s) are to determine the access controls
that will be used to control users of the system when accessing the other connected
systems;
g. Network Management Disputes. The Sponsor(s)/Owner(s) are to establish a
process by which dispute over network management issues can be resolved or be
taken to a higher authority for resolution; and
h. Information Aggregation. The Sponsor(s)/Owner(s) are to recommend to the
national Defence Security Authority, the information aggregation situations that
may require a security classification higher than that of the individual information
items to which access is allowed on the network.
INTEROPERABILITY CONCERNS
816. The following concerns regarding interoperability should be considered when
implementing a combined CIS:
a. Just as a network needs to be managed from a performance point of view, there
should also be some mechanism (or agency) to cater for the effective management
of NETSEC measures (including configuration management, security
management, key management, and access control);
b. While cryptography can effectively deal with confidentiality and integrity in a
network, other measures are necessary to deal with availability issues (fault
tolerance, recovery procedures and redundancy); and
c. The interconnections of a CIS to other systems (e.g., within a Service, or with
allies) must be identified and it must be confirmed that the implementation of the
interconnections satisfies the needs for adequate protection of sensitive
information on the system. The adequate protection of sensitive information on
the system is affected by the potential sharing of sensitive information with other
members of the organisation and with other governments and organisations.
8-4 Original
UNCLASSIFIED