Security Army Information Security Program

Army Regulation 380?5

Security

Army Information Security Program

Headquarters Department of the Army Washington, DC 22 October 2019

UNCLASSIFIED

SUMMARY of CHANGE

AR 380?5 Army Information Security Program

This major revision, dated 22 October 2019--

o Changes the title of the publication from "Department of the Army Information Security Program" to "Army Information Security Program" (cover).

o Removes marking guidance (formerly chap 4) and requires all Department of the Army personnel to apply marking standards set forth in Department of Defense Manual 5200.01, Volume 2 (para 1?15a).

o Updates language that addresses controlled unclassified information to meet the requirements outlined in Department of Defense Manual 5200.01, Volume 4 (chap 1, 4, and 8).

o Changes the requirements of self-inspections to be conducted at least annually versus biennially (para 1?24).

o Adds training requirements for derivative classifiers (para 2?6).

o Removes appendix G and refers to Department of Defense Manual 5200.45 for guidance on developing security classification guides (paras 2?17 and 8?7c).

o Updates the distribution list and process for security classification guides (para 2?18).

o Adds figure 3?1, Letter of Certification required by the Army Declassification Activity that address automatic and systematic declassification reviews (para 3?2c).

o Adds language requiring only equipment listed on an evaluated products list issued by National Security Agency/Central Security Service to be used to destroy classified information and materials (para 3?18).

o Removes language prohibiting cover sheets from being stored in security containers (formerly chap 4).

o Updates the language that addresses the Standard Form 312. Removes outdated mailing addresses for filing the Standard Form 312 and prohibits digital signatures on the Standard Form 312 (paras 5?2 and 5?3).

o Cancels DA Form 2962 and requires the use of the debriefing acknowledgement section of a Standard Form 312 (Classified Information Nondisclosure Agreement) for termination briefings (para 5?5).

o Changes the mandatory requirement for accountability and control of Top Secret (collateral) information (para 5?18).

o Adds section detailing guidance on control and safeguarding of Foreign Government information, addressing North Atlantic Treaty Organization unclassified and allowing the processing on the non-classified internet protocol router network (para 5?19).

o Clarifies language on removal of classified information for work at home (para 6?6).

o Adds requirement for Part 1 of the Standard Form 700 be sealed in an opaque envelope before storing inside of the locked drawer (or door) of the container for protection of the personally identifiable information (para 6?8d(1)).

o Updates instructions on applying the classification authority block of Part 2 of the Standard Form 700 envelope, treating such as a derivative classification (para 6?8d(2)).

o Changes minimum requirements from 4 hours to 8 hours for emergency power for intrusion detection equipment (para 6?16g(1)).

o Removes outdated language that addresses "lock replacement priorities" (formerly chap 6).

o Removes language related to transportation plans and requires DA commands to follow guidance outlined in the Department of Defense Manual 5200.01, V3 and the appendix in enclosure 4 (para 7?6b).

o Removes deviations to construction standards for open storage (secure room) areas (formerly para 7?20).

o Updates language addressing security incident reporting and unauthorized disclosure of classified information in the public media (chap 9).

o Removes language on alternate compensatory control measures and refers to AR 380?381 for guidance (throughout).

o Cancels DA Form 455, Mail and Document Register; DA Form 969, Top Secret Document Record, and DA Form 1575, Request for/or Notification of Regrading Action.

Headquarters Department of the Army Washington, DC 22 October 2019

*Army Regulation 380?5

Effective 22 November 2019 Security

Army Information Security Program

Applicability. This regulation applies to the Regular Army, the Army National Guard/Army National Guard of the United States, the U.S. Army Reserve, and DA civilian personnel, unless otherwise stated.

Army internal control process. This regulation contains internal control provisions in accordance with AR 11?2 and identifies key internal controls that must be evaluated (see appendix B).

History. This publication is a major revision.

Summary. This regulation implements the policy set forth in EO 13526 and DODM 5200.01, Volumes 1 through 4. It establishes the policy for classification, downgrading, declassification, and safeguarding of information requiring protection in the interest of national security.

Proponent and exception authority. The proponent of this regulation is the Deputy Chief of Staff, G?2. The proponent has the authority to approve exceptions to this regulation that are consistent with controlling law and regulation. The proponent may delegate this approval authority in writing to a division chief within the proponent agency in the grade of Colonel or the civilian equivalent. Activities may request a waiver to this regulation by providing justification that includes a full analysis of the expected benefits and must include formal review by the activity's senior legal officer. All waiver requests will be endorsed by the commander or senior leader of the requesting activity and forwarded through their higher headquarters to the policy proponent. Refer to AR 25?30 for specific guidance.

Supplementation. Supplementation of this regulation and establishment of command and local forms are prohibited without prior approval by the Deputy Chief of Staff, G?2 (DAMI?CDS), 1000 Army Pentagon, Washington, DC 20310?1000.

Suggested improvements. Users of this regulation are invited to send comments and suggestions for improvements on DA Form 2028 (Recommended Changes to Publications and Blank Forms) directly to the Deputy Chief of Staff, G?2 (DAMI?CDS), 1000 Army Pentagon, Washington, DC 20310?1000.

Distribution. This regulation is available in electronic media only and is intended for the Regular Army, the Army National Guard/Army National Guard of the United States, and the U.S. Army Reserve.

Contents (Listed by paragraph and page number)

Chapter 1 General Provisions and Program Management, page 1

Section I Introduction, page 1 Purpose ? 1?1, page 1 References and forms ? 1?2, page 1 Explanation of abbreviations and terms ? 1?3, page 1 Responsibilities ? 1?4, page 1 Record management (recordkeeping) requirements ? 1?5, page 1

Section II Responsibilities, page 1 Administrative Assistant to the Secretary of the Army ? 1?6, page 1 Deputy Chief of Staff, G?1 ? 1?7, page 1 Deputy Chief of Staff, G?2 ? 1?8, page 1 Commanders of Army commands, Army service component commands, and direct reporting units ? 1?9, page 2 Commanders at all levels ? 1?10, page 2 The security manager ? 1?11, page 3

*This regulation supersedes AR 380-5, dated 29 September 2000, and rescinds DA Form 455, dated 1 July 1962, DA Form 969, dated 1 October 1978, DA

Form 1575, dated 1 September 1977, and DA Form 2962, dated 1 September 1977.

AR 380?5 ? 22 October 2019

i

UNCLASSIFIED

 ................
................

In order to avoid copyright disputes, this page is only a partial summary.

Google Online Preview   Download