Security INFORMATION SECURITY PROGRAM MANAGEMENT

NOTICE:ThispublicationisavailabledigitallyontheAFDPO://(Mr.DannyGreen)Certifiedby:HQUSAF/XO(LtGenCarrolH.Chandler)SupersedesAFI31-401,1November2001Pages:87Distribution:FThispublicationimplementsAirForcePolicyDirective(AFPD)31-4,InformationSecurity.Itprescribesandexplainshowtomanageandprotectunclassifiedcontrolledinformationandclassifiedinformation.UsethisinstructionwithExecutiveOrder(EO)12958,asamended,ClassifiedNationalSecurityInforma-tion,25March2003;OfficeofManagementandBudget(OMB),InformationSecurityOversightOffice(ISOO)DirectiveNumber1,ClassifiedNationalSecurityInformation,ExecutiveOrder12829,NationalIndustrialSecurityProgram(NISP),DODManual5220.22,NationalIndustrialSecurityProgramOper-atingManual,January1995;and,DepartmentofDefense(DOD)5200.1-R,InformationSecurityPro-gram,14Jan97,forthemanagementoftheAirForceInformationSecurityProgram.AdditionalreferencesincludeDODInstruction(DODI)5240.11,DamageAssessments,23Dec91;DODDirective(DODD)5210.83,UnclassifiedControlledNuclearInformation(UCNI),15Nov91;AirForcePolicyDirective(AFPD)31-4,InformationSecurity.ThisinstructionisapplicabletocontractorsasprescribedinAFI31-601,IndustrialSecurityProgram.Allthesereferencesarelistedattheendofeachparagraphwhereapplicable.Thisinstructionisnottobeusedasastand-alonedocument.HQUSAF/XOS-Fisdel-egatedapprovalauthorityforrevisionstothisAFI.SUMMARYOFREVISIONSThisdocumentissubstantiallyrevisedandmustbecompletelyreviewed.TherevisionupdatestheTableofContentstoremoveAttachment4,DepartmentoftheAirForceExecutiveOrder(EO)25YearAutomaticDeclassificationPlan,Attachment7,AirForceInformationSecurityProgramTrainingStan-dard,andAttachment10,AirForceOriginalClassificationAuthorityList,whichweremovedtowebpages;deletesreferencestoDirector/ChiefofAcquisitionSecurity;definesthetermstaffagencychief(paragraph1.3.5.);refinesrequirementsforsecuritymanagers(paragraph1.3.5.1.);prohibitsuseofcon-tractorsassecuritymanagers(paragraph1.3.5.2.);establishesthesecuritymanagerastheorganizationalJointPersonnelAdjudicationSystem(JPAS)manager(paragraph1.3.6.10.);outlinesproceduresforinformationsecurityprogramoversight(paragraph1.4.);clarifieswaiverprocess(paragraph1.6.);updatesreportingrequirements(paragraph1.7.);updatesformrequirements(paragraph1.10.);replaces2AFI31-4011NOVEMBER2005Chapter2,Chapter3,andChapter4intheirentiretytoincorporatenewguidancefromEO12958;updatescontrolmeasures(paragraph5.1.);replacesreferencestoASCASandSentinelKeythroughoutChapter5;updatesNon-DisclosureAgreementretentionrequirements(paragraph5.3.);updatesclear-anceeligibilityverificationprocessthroughoutChapter5;updatestheTopSecretinventoryprocess(paragraph5.8.1.3.);prescribestheuseofSF702,SecurityContainerCheckSheet(paragraph5.9.1.3.);prohibitsdisseminationofclassifiedinformationatconferencesandmeetingsnotconductedonclearedU.S.GovernmentorU.S.Governmentcontractorlocations(paragraph5.13.1.);clarifiespolicyforalter-nativesafeguardingmeasures(paragraph5.16.1.);updatesstandardsforstorageofclassifiedinformation(paragraph5.17.)andrepairofdamagedcontainers(paragraph5.22.);addsnewpolicyprescribingemer-gencyauthorityforMAJCOM/FOA/DRUcommanderstoallowdisclosureofclassifiedinformation(paragraph5.26.);updatesprocessfordestructionofclassifiedmaterial(paragraph5.28.);detailsprocessforuseofcommercialovernightcarrierstotransportclassifiedinformationinurgentcases(paragraph6.3.2.);deletesAFForm2595,ClassifiedProtectionInsertionSheet;prescribesdocumentationofinitialsecurityorientation(paragraph8.4.1.1.);movesthetrainingstandardtotheweb(paragraph8.4.1.2.);pre-scribesNATOclassifiedinformationtrainingforallclearedAirForcepersonnel(paragraph8.4.1.3.);updatestrainingforspecialrequirements(Section8C);prescribesdocumentationofnon-disclosureagreementbriefingandattestationsinJPAS(paragraph8.10.1.1.);prescribesdocumentationofNATO,CNWDI,andSIOP-ESIaccessauthorizationinJPAS(paragraph8.10.2.);prescribesdocumentationofaccessterminationinJPAS(paragraph8.11.6.);deletestherequirementtocoordinateDSStrainingthroughAF/XOS-FI;establishesrequirementtoreportunauthorizedpublicdisclosureofclassifiedinfor-mation(paragraph9.1.2.);updatesglossaryofreferencesandsupportinginformation(Attachment1);updatesproceduresforcontrolledunclassifiedinformation(Attachment2);establishesreferenceforphysicalsecuritydesignguidelines(Attachment3);includesnewformatforclassification/declassifica-tionguides(Attachment7).ThefollowingdocumentsarenowlocatedattheAirForceSecurityForcesCenter(AFSFC)website:ListofAirForceOfficialsAuthorizedtoCertifyAccesstoRestrictedData,The25-YearDeclassificationPlan,GeneralInformationSecurityTrainingStandards,andOCATraining.Chapter1—POLICYANDPROGRAMMANAGEMENT71.1.Policy.........................................................................................................................71.2.Philosophy....................