CG ELECTRONIC MAIL
AND OPERATIONS SECURITY (OPSEC)
ALCOAST 151/03
R 211416Z MAR 03 ZUI
ASN-A00080000148 ZYB
FM COMDT COGARD
WASHINGTON DC//G-CIT/G-CFP//
TO ALCOAST
BT
UNCLAS //N05270//
ALCOAST 151/03
COMDTNOTE 5720
SUBJ: CG ELECTRONIC MAIL AND OPERATIONS SECURITY (OPSEC)
A. SECDEF WASHINGTON DC 141553Z JAN 03 (NOTAL)
B. MANAGEMENT OF ELECTRONIC MAIL, COMDTINST 5270.1D
1. E-MAIL HAS BECOME ONE OF THE MOST WIDELY USED APPLICATIONS IN THE COAST GUARD, AND IS FREQUENTLY USED INSTEAD OF THE TELEPHONE AND RECORD MESSAGES. IT ALLOWS TEAM COAST GUARD TO EASILY COMMUNICATE WITH A BROAD RANGE OF PERSONNEL AND ORGANIZATIONS. HOWEVER, THIS CONVENIENCE HAS COME AT THE EXPENSE OF OPSEC.
2. THE FOLLOWING INFORMATION IS TAKEN FROM REF (A):
QUOTE:
AN AL QUEDA TRAINING MANUAL RECOVERED IN AFGHANISTAN STATES: "USING PUBLIC SOURCES OPENLY AND WITHOUT RESORTING TO ILLEGAL MEANS, IT IS POSSIBLE TO GATHER AT LEAST 80 PERCENT OF INFORMATION ABOUT THE ENEMY."
UNQUOTE.
3. THE PHRASE "LOOSE LIPS SINK SHIPS" IS JUST AS TRUE TODAY AS IT HAS BEEN THROUGHOUT HISTORY. HOWEVER, USE OF THE INTERNET HAS GIVEN THIS PHRASE NEW MEANING. IT IS NO LONGER NECESSARY TO EAVESDROP ON A CONVERSATION. THE FACT THAT FOR OFFICIAL USE ONLY (FOUO) AND OTHER SENSITIVE INFORMATION CONTINUES TO BE FOUND ON PUBLIC WEB SITES AND IN INTERNET E-MAIL INDICATES THAT INFORMATION IS NOT BEING REVIEWED FOR SENSITIVITY AND IS NOT BEING PROPERLY PROTECTED. ELECTRONIC MAIL ADDRESSED TO OTHER THAN A USCG.MIL ADDRESS DOES NOT MEET THE PROTECTION REQUIREMENTS FOR SENSITIVE INFORMATION PER REF (B) AND SHALL BE SENT BY A MORE SECURE MEANS SUCH AS SECURE TELEPHONE, RECORD MESSAGE OR BY SIPRNET E-MAIL.
4. THE COAST GUARD DATA NETWORK PLUS (CGDNPLUS) IS APPROVED FOR UNCLASSIFIED, SENSITIVE INFORMATION AS IT IS CONSIDERED TO BE A PRIVATE NETWORK WITH PROTECTION FROM OUTSIDE ACCESS. THE FOLLOWING TYPES OF INFORMATION SHOULD NOT BE CONTAINED IN E-MAIL SENT TO A NON USCG.MIL MAIL ADDRESS OR POSTED ON PUBLIC WEB PAGES:
A. RULES OF ENGAGEMENT AND USE OF FORCE POLICY,
B. DETAILS OF COURSES OF ACTIONS OR THOSE BEING CONSIDERED,
C. DETAILS OF SCHEDULES AND TIME LINES FOR OPERATIONS AND ACTIVITIES,
D. SPECULATION OR DISCUSSION OF TERRORIST EVENTS, ACTIVITIES, AND FORCE PROTECTION POSTURE,
E. LOCATION, ACTIVATION, AND MISSIONS OF CG FORCES OR ASSETS,
F. DEPLOYMENT PLANS FOR CG AND OTHER US FORCES INCLUDING PORT SECURITY UNITS,
G. PHYSICAL SECURITY WEAKNESSES OF CG OR OTHER FORCES,
H. MOVEMENT PLANS AND PROCEDURES FOR CG AND NAVAL UNITS,
I. USER ID'S, COMPUTER PASSWORDS AND NETWORK ADDRESSES,
J. EXISTENCE OR DETAILS OF INTRUSIONS INTO NETWORKS,
K. MOVEMENT OF FLAG OFFICERS, VIPS, KEY LEADERS AND KEY COMMAND PERSONNEL INCLUDING ITINERARIES, AGENDAS, HOTEL RESERVATIONS, ETC.,
L. INFORMATION ABOUT UNIT CAPABILITIES, COMPLEMENT AND MISSIONS,
M. MAPS OR SPECIFIC LOCATIONS OF SENSITIVE OPERATIONAL UNITS,
N. INFORMATION ABOUT PORT FACILITIES,
O. FAMILY MEMBER INFORMATION, PERSONAL BIOGRAPHIES, NAMES AND DUTY STATION ADDRESSES,
P. OMBUDSMAN HOME TELEPHONE NUMBERS,
Q. PERSONNEL ROSTERS OF DEPLOYABLE UNITS. THE SAME INFORMATION IS DISCOURAGED FOR NON-DEPLOYABLE UNITS.
R. ALL E-MAIL AND MESSAGES CONTAINING FOUO, SENSITIVE BUT UNCLASSIFIED, PERSONNEL SENSITIVE, PRIVACY ACT DATA, SOURCE SENSITIVE AND OTHER PROPRIETARY INFORMATION ARE SPECIFICALLY PROHIBITED TO BE SENT ON THE INTERNET.
5. ALTHOUGH SENDING E-MAIL TO GOVERNMENT AND PRIVATE E-MAIL ADDRESSES IS A CONCERN, USERS MUST ALSO REFRAIN FROM SENDING OFFICIAL E-MAIL TO PERSONAL ACCOUNTS HOSTED BY INTERNET SERVICE PROVIDERS. THIS IS NOT AN ACCEPTABLE PRACTICE FOR THE CONDUCT OF SENSITIVE COAST GUARD BUSINESS.
6. APPROXIMATELY ONE HUNDRED THOUSAND E-MAILS PER DAY ARE SENT FROM CG USERS TO OUTSIDE ADDRESSES VIA THE INTERNET. BECAUSE OF THE PUBLIC NATURE OF THE INTERNET, EACH USER MUST TAKE APPROPRIATE ACTION TO ENSURE THAT INFORMATION SENT DOES NOT POTENTIALLY COMPROMISE OUR MISSIONS OR THE SAFETY OF OUR PERSONNEL.
7. INTERNET RELEASE AUTHORIZED.
8. MESSAGE RELEASED BY RADM CLIFFORD I. PEARSON, DIRECTOR OF INFORMATION TECHNOLOGY; MR ROBERT HOROWITZ, DIRECTOR OF FINANCE, PROCUREMENT AND INTERNAL SECURITY JOINTLY.
BT
NNNN