ACCEPTABLE USE OF AUTHORIZED PERSONAL PORTABLE ELECTRONIC DEVICES IN SPECIFIC DEPARTMENT OF THE NAVY SPACES

[Tony]

RTTUZYUW RUEWMCS0019 0851830-UUUU--RUCRNAV.
ZNR UUUUU
R 251830Z MAR 16
FM SECNAV WASHINGTON DC
TO ALNAV
INFO SECNAV WASHINGTON DC
CNO WASHINGTON DC
CMC WASHINGTON DC
BT
UNCLAS
ALNAV 019/16
MSGID/GENADMIN/SECNAV WASHINGTON DC/-/MAR//
SUBJ/ACCEPTABLE USE OF AUTHORIZED PERSONAL PORTABLE ELECTRONIC DEVICES IN 
SPECIFIC DEPARTMENT OF THE NAVY SPACES//
REF/A/DOC/APR 2010//
REF/B/DOC/FEB 2012//
REF/C/DOC/OCT 2015//
REF/D/DOC/FEB 1996//
REF/E/DOC/APR 2004//
REF/F/DOC/NOV 2009//
REF/G/DOC/JUN 2006//
REF/H/DOC/JUN 2006//
REF/I/MSG/JAN 2016//

NARR/REF A is Committee on National Security Systems Instruction No. 4009, 
"National Information Assurance Glossary".  REF B is DoDM 5200.01-Volume 3, 
Department of Defense (DoD) Information Security Program:  Protection of 
Classified Information.  REF C is Deputy Director of Naval Intelligence 
(N2N6I):  Department of the Navy Sensitive Compartmented Information Facility 
Personal Portable Electronic Devices Clarification Memorandum, dated 26 
October 2015.  REF D is Federal Communications Commission Office of 
Engineering and Technology Bulletin Number 62, Understanding the FCC 
Regulations for Computers and Other Digital Devices.  REF E is DoDD 8100.02, 
Use of Commercial Wireless Devices, Services, and Technologies in the 
Department of Defense (DoD) Global Information Grid (GIG).  REF F is DoDI 
8420.01, Commercial Wireless Local-Area Network (WLAN) Devices, Systems, and 
Technologies.  REF G is SECNAV M-5510.36, Department of the Navy Information 
Security Program Manual.  REF H is SECNAV M-5510.30, Department of the Navy 
Personnel Security Program Manual.  REF I is ALNAV 001/16, Unauthorized 
Disclosures of Classified Information or Controlled Unclassified Information 
on Department of the Navy Information Systems//

POC/Mr. Mark Myers/CIV/DUSN(P) Security/TEL: (703)601-1019/DSN: 225-
1019/EMAIL:  mark.a.myers2@navy.mil/ Mr. James Mauck/CIV/DON CIO 
Cybersecurity and Infrastructure Team/TEL:  703-695-1893/EMAIL:  
James.Mauck@navy.mil//

RMKS/1.  This is a coordinated Deputy Under Secretary of the Navy Policy 
(DUSN(P)) Security, and Department of the Navy Chief Information Officer (DON 
CIO) message as part of the Department of the Navy's (DON) cyber/traditional 
security partnership for the protection of national security information and 
information systems.

2.  Purpose and Definitions.  The purpose of this ALNAV is to provide interim 
policy for acceptable use of personal portable electronic devices (PPEDs) in 
specific DON spaces based on device capability.  Terms used in this ALNAV are 
defined below:

    a.  A portable electronic device (PED) is defined in REF A as any non-
stationary electronic apparatus with singular or multiple capabilities of 
recording, storing, and/or transmitting data, voice, video, or photo images 
(e.g., cell phones, laptops, tablets, and wearable devices such as fitness 
bands and smart watches).

    b.  "Personal" in this message refers to PEDs personally owned by DON 
Sailors, Marines, civilians, and support contract personnel.

    c.  Commanding Officer (CO) in this message is a generic term used to 
identify a position of authority at any DON organization, base, station, 
unit, laboratory, installation, facility, center, activity, detachment, 
squadron, ship, battalion, regiment, etc.
   
    d.  Homeland connotes the continental United States, Alaska, Hawaii, 
United States possessions and territories, and surrounding territorial waters 
and airspace, per REF B.

    e.  Near Field Communication (NFC) connotes a short-range wireless 
communication system employing radio waves to enable a mobile device to 
interact with another device or card reader when within 10 cm (4 in) of each 
other.

3.  Scope and Applicability.  This ALNAV applies to all DON Sailors, Marines, 
civilians, and contract personnel regarding the use of PPEDs with specific 
capabilities in spaces where collateral classified information is processed, 
transmitted, stored, or discussed.  Non-DON personnel are prohibited from 
introducing PPEDs into DON spaces.  This ALNAV does not prevent COs from 
issuing stricter policy in accordance with the needs of their commands; 
authorize introduction of PPEDs into any DON spaces located outside the 
homeland or in Sensitive Compartmented Information Facilities (SCIFs) (see 
REF C); or apply to PEDs issued by the DON for official business.

4.  Discussion.  The proliferation of PPEDs in the form of wearable 
technology has increased dramatically since the introduction of wearable 
heart rate monitors in the 1980s. Today's portable electronic activity 
monitoring devices, (e.g., fitness, communication, and medical) offer a wide 
range of personal, professional, and health benefits.  However, these devices 
may pose security risks to DON information and information systems.  This 
message specifically identifies capabilities associated with PPEDs that are 
permitted in DON spaces where collateral classified information is processed, 
transmitted, stored, or discussed in order to allow PPED use while minimizing 
risk to DON information.  It also lays the groundwork for future DON wireless 
policies. 

5.  Action.  Effective immediately, all DON personnel using PPEDs in DON 
spaces where collateral classified information is processed, transmitted, 
stored, or discussed must comply with the requirements and responsibilities 
cited below:  

    a.  PPEDs are permitted:

        (1) If commercially obtained in the U.S. or through a U.S. military 
exchange and assigned a Federal Communication Commission (FCC) Identifier 
denoting compliance with the limits for a Class B digital device designated 
by the FCC, pursuant to Part 15 of the FCC Rules, per REF D.

        (2) If they contain only vendor-supplied software and receive only 
updates that do not add any features or capabilities prohibited in this 
message.
        
        (3) If they have any or all of the following:  Bluetooth, Global 
Positioning System (GPS) (RECEIVE-ONLY), accelerometer, altimeter, gyroscope, 
heart monitor, vibration, and/or NFC capabilities.

        (4) If they have password/pin protections enabled and have up-to-date 
anti-virus software protection installed, where those capabilities exist.

    b.  PPEDs are prohibited:
  
        (1) If they contain cellular and/or Wi-Fi transceivers, or other 
technologies not permitted in para 5.a. of this ALNAV.
   
        (2) If they have photographic, video capture/recording, microphone, 
and/or audio recording capabilities.

        (3) From being connected to any government information system either 
directly or indirectly using wired or wireless accessories (e.g., Bluetooth 
dongles and charging cables).

        (4) If they have removable media installed.

        (5) If they have the capability to perform radio frequency 
transmissions at greater than 100 milliwatts (mW) Equivalent Isotropically 
Radiated Power (EIRP).  Where feasible, EIRP shall be determined using FCC 
data.

    c.  Commanding Officers:

        (1) Ensure dissemination and enforcement of this policy, employing 
either technical monitoring per REFs E and F or through physical checks, spot 
checks, and/or physical searches.

        (2) Ensure compliance with the security incident reporting 
requirements of REFs B, G, H and I.  DON personnel who knowingly and 
willfully violate the requirements in this message are subject to preliminary 
inquiry and incident reporting in the Joint Personnel Adjudication System, 
potential loss of information system access, and possible punitive or 
administrative action.  
   
        (3) May grant interim approval for medically related PPEDs when the 
capabilities they possess are prohibited by this message.  In those 
instances, the Navy or USMC Authorizing Official must be notified within 30 
days of device make/model, the capability presenting risk, and the proposed 
mitigation. 

    d.  DON personnel:

        (1) Ensure PPEDs meet the criteria in para 5.a, prior to introducing 
them into areas where collateral classified information is processed, 
transmitted, stored, or discussed. 

        (2) Ensure the CO has not levied additional restrictions or 
prohibitions prior to introducing PPEDS in DON spaces where collateral 
classified information is processed, transmitted, stored, or discussed.

        (3) Obtain approval, per para 5.c(3) of this ALNAV, for any medically 
related PPEDs prior to introduction into areas where collateral classified 
information is processed, transmitted, stored, or discussed.

6.  This ALNAV remains in effect until incorporated in future DON wireless 
policy and REF G for safeguarding and reporting requirements.

7.  Released by Ray Mabus, Secretary of the Navy.// 
BT
NNNN
UNCLASSIFIED//

[Guest ETSAILING]

Is this ALNAV still valid in whole, today, April 2019?