Information Systems Security Manager (ISSM) - Marine Corps ...

More documents

Recommendations

Info

NAVSO P-5239-04SEPTEMBER 199542
NAVSO P-5239-04SEPTEMBER 1995ActivityAccreditationSchedule (AAS)Included in the ISSP, the AAS identifies all IS elementsand provides a POA&M for completing the following:· Risk assessments· Security test and evaluations· Contingency plans.IS Incident ReportThe IS incident report explains of the type of incident,the individuals involved, the estimated cost of theincident,summarizes the incident, and the investigation resultsalong with the supervisor’s recommendations; andprovides the local action to prevent reoccurrence.Authorized UserListThe ISSO and cognizant local work area security officermust be able to determine the identity of all usersapproved for any workstation or terminal. The exactmethod and format can vary. Timeliness and accuracyare most important. The Authorized User List identifiesauthorized system users and should be kept as part of therelated accreditation documentation .Security OperatingProceduresOPNAVINST 5239.1A requires that security proceduresbe developed, documented, and presented to all users ofISs. Topics of discussion should include, but are notlimited to: policy statement, system access controls,operating procedures, audit trails, training, physicalsecurity, media protection, modes of operation,emergency procedures, enforcement, documentation,data levels, etc. Additional information may need to beaddressed to meet site-specific needs. The ISSO is theprimary author of the SOPs. The ISSM ensures thatSOPs are reviewed annually for accuracy.Training andAwarenessDocumentationThe purpose of training and awareness documentation isto continuously reinforce the need for security of the ISand network with the users. The reinforcement satisfiesthe requirement to provide refresher training to the user.An awareness program provides the opportunity to43
Page 1: Department of the Navy NAVSO P-5239
Page 5: NAVSO P-5239-04SEPTEMBER 1995FOREWO
Page 8 and 9: NAVSO P-5239-04SEPTEMBER 1995TABLE
Page 10 and 11: NAVSO P-5239-04SEPTEMBER 1995· Sec
Page 12 and 13: NAVSO P-5239-04SEPTEMBER 1995techni
Page 14 and 15: NAVSO P-5239-04SEPTEMBER 1995ISEASS
Page 16 and 17: NAVSO P-5239-04SEPTEMBER 19953.0 IN
Page 18 and 19: NAVSO P-5239-04SEPTEMBER 1995· Sit
Page 20 and 21: NAVSO P-5239-04SEPTEMBER 1995the DO
Page 22 and 23: NAVSO P-5239-04SEPTEMBER 19953.2 Ri
Page 24 and 25: NAVSO P-5239-04SEPTEMBER 1995workin
Page 26 and 27: NAVSO P-5239-04SEPTEMBER 19953.3 Ac
Page 28 and 29: NAVSO P-5239-04SEPTEMBER 19953.4 Ad
Page 30 and 31: NAVSO P-5239-04SEPTEMBER 1995Virus
Page 32 and 33: NAVSO P-5239-04SEPTEMBER 19953.5 Tr
Page 34 and 35: NAVSO P-5239-04SEPTEMBER 1995- Expl
Page 36 and 37: NAVSO P-5239-04SEPTEMBER 19953.6 Ph
Page 38 and 39: NAVSO P-5239-04SEPTEMBER 1995· Eva
Page 40 and 41: NAVSO P-5239-04SEPTEMBER 19953.7 Au
Page 42 and 43: NAVSO P-5239-04SEPTEMBER 19953.8 In
Page 44 and 45: NAVSO P-5239-04SEPTEMBER 19953.9 Se
Page 46 and 47: NAVSO P-5239-04SEPTEMBER 19953.10 C
Page 48 and 49: NAVSO P-5239-04SEPTEMBER 19953.11 S
Page 52 and 53: NAVSO P-5239-04SEPTEMBER 1995update
Page 55 and 56: NAVSO P-5239-04SEPTEMBER 1995Securi
Page 57 and 58: NAVSO P-5239-04SEPTEMBER 1995SECNAV
Page 59 and 60: NAVSO P-5239-04SEPTEMBER 1995This d
Page 61 and 62: NAVSO P-5239-04SEPTEMBER 1995NCSC-T
Page 63 and 64: NAVSO P-5239-04SEPTEMBER 1995NTISSP
Page 65 and 66: NAVSO P-5239-04SEPTEMBER 1995primar

Information Systems Security Manager (ISSM) - Marine Corps ...

You also want an ePaper? Increase the reach of your titles

Delete template?

Save as template?