AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |
Back to Blog
Ato atc1/3/2024 IC4 CY will update the RMF package with the registration number and the signed ATO/ATC.Ĥ.h. After verifying compliance, NSA will provide a letter acknowledging the registration for a specific time period (typically for one year). Upon compliance review, IC4 CY will submit the package to NSA’s CSfC PMO to obtain a Solution Registration Identification Number. The Marine Corps Authorizing Official (AO) is the only authority who can approve the operation, connection, and deviation of CSfC capabilities. If NSA CSfC standards are met, IC4 CY will submit the package with a recommendation for a one year ATO/ATC or a conditional ATO/ATC outlining the conditions and timelines that must be completed.Ĥ.g. The requesting unit will submit completed CSfC documents to IC4 CY via encrypted e-mail on NIPRNet for submission to NSA CSfC PMO.Ĥ.f. All steps must be filled out and the CSfC documentation required by NSA CSfC PMO must be uploaded as an artifact. If a CSfC solution does not have a pre-accredited solution, the ISSM will create a new Risk Management Framework (RMF) package in MCCAST. If the design is compliant, an Authorization to Operate (ATO)/ATC will be provided.Ĥ.e. IC4 CY will ensure the artifacts are compliant with the design in the type authorized solution. The requesting unit will upload all CSfC documentation required by National Security Agency (NSA) CSfC Program Management Office (PMO) as an artifact. If an accredited package exists that meets a unit’s requirement, IC4 will direct the requesting unit to adopt the design in the type accreditation package. ISSMs will forward packages to DC I Information, Command, Control, Communication, and Computers (IC4) Cybersecurity (CY) Branch via encrypted e-mail on NIPRNet for processing and validation.Ĥ.d. ISSMs will check MCCAST-S for existing CPs to determine if the requesting unit’s requirement is unique or can be fulfilled with an existing accredited CP. Forms are located at https:(slash)(slash)4.c. FMF and supporting establishment units who require a CSfC capability must work with their Information Systems Security Managers (ISSM) and submit all required forms (registration form, compliance checklist, network diagrams, and deviation form(s) (if required)) into the Marine Corps Certification and Accreditation Support Tool-Secret (MCCAST-S). This message supersedes the guidance in ref (e).Ĥ.b. This message identifies the steps to submit a CSfC package request and Marine Corps Authorization to Connect (ATC) to avoid impeding progress at the tactical and base levels.Ĥ.a. However, compliance to regulations and refs (a) through (f) must be enforced for the security of information. Deputy Commandant for Information (DC I) supports the Fleet Marine Forces (FMF) with innovative ideas to securely exchange data for the acceleration of command and control decision-making. This message is intended to clarify the registration and accreditation process for CSfC capability packages (CP).ģ. The use of CSfC will become the service’s primary method to protect classified data exchanges.Ģ. HOGUE/CAPT/HQMC DC/I IC4 ICN BRANCH/TEL: Commercial Solutions for Classified (CSfC) precisely layers and architects the latest commercial technologies to protect information up to the Top Secret level. BIENZ/CIV/HQMC DC/I IC4 CY BRANCH/TEL: ROSENBLATT/MAJ/HQMC DC/I IC4 ICN BRANCH/TEL: L. LETTEER/CIV/HQMC DC/I IC4 CY BRANCH/TEL: J. REF F IS TABLET PROCUREMENT, CONFIGURATION, SUSTAINMENT, AND ACCOUNTABILITY GUIDANCE.// REF E IS THE POLICY GUIDANCE FOR THE PROCUREMENT OF COMMERCIAL SOLUTIONS FOR CLASSIFIED SYSTEMS. REF D IS THE MARINE CORPS ASSESSMENT AND AUTHORIZATION PROCESS MANUAL. REF C IS THE MARINE CORPS CYBERSECURITY ARCHITECTURE MANUAL. REF B IS THE DOD INSTRUCTION ON THE RISK MANAGEMENT FRAMEWORK. NARR/REF A IS THE GUIDE FOR THE SECURITY CERTIFICATION AND ACCREDITATION OF FEDERAL INFORMATION SYSTEMS. SUBJ/UPDATED POLICY GUIDANCE FOR COMMERCIAL SOLUTIONS FOR CLASSIFIED SYSTEMS// MSGID/GENADMIN/CMC DCI IC4 WASHINGTON DC//
0 Comments
Read More
Leave a Reply. |