This handbook is designed to introduce you to some of the basicsecurity principles and procedures with which all NSA employees must comply.It highlights some of your security responsibilities, and provides guidelinesfor answering questions you may be asked concerning your association with thisAgency. Although you will be busy during the forthcoming weeks learning yourjob, meeting co-workers, and becoming accustomed to a new work environment, youare urged to become familiar with the security information contained in thishandbook. Please note that a listing of telephone numbers is provided at theend of this handbook should you have any questions or concerns.
Introduction
In joining NSA you have been given an opportunity to participate in theactivities of one of the most important intelligence organizations of the UnitedStates Government. At the same time, you have also assumed a trust whichcarries with it a most important individual responsibility--the safeguarding ofsensitive information vital to the security of our nation.
While it is impossible to estimate in actual dollars and cents the value of thework being conducted by this Agency, the information to which you will haveaccess at NSA is without question critically important to the defense of theUnited States. Since this information may be useful only if it is kept secret,it requires a very special measure of protection. The specific nature of thisprotection is set forth in various Agency security regulations and directives.The total NSA Security Program, however, extends beyond these regulations. Itis based upon the concept that security begins as a state of mind. The programis designed to develop an appreciation of the need to protect information vitalto the national defense, and to foster the development of a level of awarenesswhich will make security more than routine compliance with regulations.
At times, security practices and procedures cause personal inconvenience. Theytake time and effort and on occasion may make it necessary for you tovoluntarily forego some of your usual personal perogatives. But yourcompensation for the inconvenience is the knowledge that the work you areaccomplishing at NSA, within a framework of sound security practices,contributes significantly to the defense and continued security of the UnitedStates of America.
I extend to you my very best wishes as you enter upon your chosen career orassignment with NSA.
Philip T. Pease
Director of Security
INITIAL SECURITY RESPONSIBILITIES
Anonymity
Perhaps one of the first security practices with which new NSA personnel shouldbecome acquainted is the practice of anonymity. In an open society such as ours,this practice is necessary because information which is generally available tothe public is available also to hostile intelligence. Therefore, the Agencymission is best accomplished apart from public attention. Basically, anonymitymeans that NSA personnel are encouraged not to draw attention to themselves norto their association with this Agency. NSA personnel are also cautioned neitherto confirm nor deny any specific questions about NSA activities directed to themby individuals not affiliated with the Agency.
The ramifications of the practice of anonymity are rather far reaching, and itssuccess depends on the cooperation of all Agency personnel. Described below youwill find some examples of situations that you may encounter concerning youremployment and how you should cope with them. Beyond the situations cited, yourjudgement and discretion will become the deciding factors in how you respond toquestions about your employment.
Answering Questions About Your Employment
Certainly, you may tell your family and friends that you are employed at orassigned to the National Security Agency. There is no valid reason to deny themthis information. However, you may not disclose to them any informationconcerning specific aspects of the Agency's mission, activities, andorganization. You should also ask them not to publicize your association withNSA.
Should strangers or casual acquaintances question you about your place ofemployment, an appropriate reply would be that you work for the Department ofDefense. If questioned further as to where you are employed within theDepartment of Defense, you may reply, "NSA." When you inform someone that youwork for NSA (or the Department of Defense) you may expect that the nextquestion will be, "What do you do?" It is a good idea to anticipate thisquestion and to formulate an appropriate answer. Do not act mysteriously aboutyour employment, as that would only succeed in drawing more attention toyourself.
If you are employed as a secretary, engineer, computer scientist, or in aclerical, administrative, technical, or other capacity identifiable by a generaltitle which in no way indicates how your talents are being applied to themission of the Agency, it is suggested that you state this general title. Ifyou are employed as a linguist, you may say that you are a linguist, ifnecessary. However, you should not indicate the specific language(s) with whichyou are involved.
The use of service specialty titles which tend to suggest or reveal the nature ofthe Agency's mission or specific aspects of their work. These professionaltitles, such as cryptanalyst, signals collection officer, and intelligenceresearch analyst, if given verbatim to an outsider, would likely generatefurther questions which may touch upon the classified aspects of your work.Therefore, in conversation with outsiders, it is suggested that such job titlesbe generalized. For example, you might indicate that you are a "researchanalyst." You may not, however, discuss the specific nature of your analyticwork.
Answering Questions About Your Agency Training
During your career or assignment at NSA, there is a good chance that you willreceive some type of job-related training. In many instances the nature of thetraining is not classified. However, in some situations the specializedtraining you receive will relate directly to sensitive Agency functions. Insuch cases, the nature of this training may not be discussed with personsoutside of this Agency.
If your training at the Agency includes language training, your explanation forthe source of your linguistic knowledge should be that you obtained it whileworking for the Department of Defense.
You Should not draw undue attention to your language abilities, and you may notdiscuss how you apply your language skill at the Agency.
If you are considering part-time employment which requires the use of languageor technical skills similar to those required for the performance of your NSAassigned duties, you must report (in advance) the anticipated part-time workthrough your Staff Security Officer (SSO) to the Office of Security's ClearanceDivision (M55).
Verifying Your Employment
On occasion, personnel must provide information concerning their employment tocredit institutions in connection with various types of applications for credit.In such situations you may state, if you are a civilian employee, that you areemployed by NSA and indicate your pay grade or salary. Once again, generalizeyour job title. If any further information is desired by persons or firms withwhom you may be dealing, instruct them to request such information bycorrespondence addressed to: Director of Civilian Personnel, National SecurityAgency, Fort George G. Meade, Maryland 20755-6000. Military personnel shoulduse their support group designator and address when indicating their currentassignment.
If you contemplate leaving NSA for employment elsewhere, you may be required tosubmit a resume/job application, or to participate in extensive employmentinterviews. In such circ*mstances, you should have your resume reviewed by theClassification Advisory Officer (CAO) assigned to your organization. Your CAOwill ensure that any classified operational details of your duties have beenexcluded and will provide you with an unclassified job description. Should youleave the Agency before preparing such a resume, you may develop one and send itby registered mail to the NSA/CSS Information Policy Division (Q43) for review.Remember, your obligation to protect sensitive Agency information extendsbeyond your employment at NSA.
The Agency And Public News Media
>From time to time you may find that the agency is the topic of reports orarticles appearing in public news media--newspapers, magazines, books, radioand TV. The NSA/CSS Information Policy Division (Q43) represents the Agency inmatters involving the press and other media. This office serves at theAgency's official media center and is the Director's liaison office for publicrelations, both in the community and with other government agencies. TheInformation Policy Division must approve the release of all information for andabout NSA, its mission, activities, and personnel. In order to protect theaspects of Agency operations, NSA personnel must refrain from either confirmingor denying any information concerning the Agency or its activities which mayappear in the public media. If you are asked about the activities of NSA, thebest response is "no comment." You should the notify Q43 of the attemptedinquiry. For the most part, public references to NSA are based upon educatedguesses. The Agency does not normally make a practice of issuing publicstatements about its activities.
GENERAL RESPONSIBILITIES
Espionage And Terrorism
During your security indoctrination and throughout your NSA career you willbecome increasingly aware of the espionage and terrorist threat to the UnitedStates. Your vigilance is the best single defense in protecting NSAinformation, operations, facilities and people. Any information that comes toyour attention that suggests to you the existence of, or potential for,espionage or terrorism against the U.S. or its allies must be promptly reportedby you to the Office of Security.
There should be no doubt in your mind about the reality of the threats. Youare now affiliated with the most sensitive agency in government and areexpected to exercise vigilance and common sense to protect NSA against thesethreats.
Classification
Originators of correspondence, communications, equipment, or documents withinthe Agency are responsible for ensuring that the proper classification,downgrading information and, when appropriate, proper caveat notations areassigned to such material. (This includes any handwritten notes which containclassified information). The three levels of classification are Confidential,Secret and Top Secret. The NSA Classification Manual should be used asguidance in determining proper classification. If after review of this documentyou need assistance, contact the Classification Advisory Officer (CAO) assignedto your organization, or the Information Policy Division (Q43).
Need-To-Know
Classified information is disseminated only on a strict "need-to-know" basis.The "need-to-know" policy means that classified information will bedisseminated only to those individuals who, in addition to possessing a properclearance, have a requirement to know this information in order to performtheir official duties (need-to-know). No person is entitled to classifiedinformation solely by virtue of office, position, rank, or security clearance.
All NSA personnel have the responsibility to assert the "need-to-know" policyas part of their responsibility to protect sensitive information.Determination of "need-to-know" is a supervisory responsibility. This meansthat if there is any doubt in your mind as to an individual's "need-to-know,"you should always check with your supervisor before releasing any classifiedmaterial under your control.
For Official Use Only
Separate from classified information is information or material marked "FOROFFICIAL USE ONLY" (such as this handbook). This designation is used toidentify that official information or material which, although unclassified, isexempt from the requirement for public disclosure of information concerninggovernment activities and which, for a significant reason, should not be givengeneral circulation. Each holder of "FOR OFFICAL USE ONLY" (FOUO) informationor material is authorized to disclose such information or material to personsin other departments or agencies of the Executive and Judicial branches when itis determined that the information or material is required to carry our agovernment function. The recipient must be advised that the information ormaterial is not to be disclosed to the general public. Material which bearsthe "FOR OFFICIAL USE ONLY" caveat does not come under the regulationsgoverning the protection of classified information. The unauthorizeddisclosure of information marked "FOR OFFICIAL USE ONLY" does not constitute anunauthorized disclosure of classified defense information. However, Departmentof Defense and NSA regulations prohibit the unauthorized disclosure ofinformation designated "FOR OFFICIAL USE ONLY." Appropriate administrativeaction will be taken to determine responsibility and to apply corrective and/ordisciplinary measures in cases of unauthorized disclosure of information whichbears the "FOR OFFICIAL USE ONLY" caveat. Reasonable care must be exercised inlimiting the dissemination of "FOR OFFICIAL USE ONLY" information. While youmay take this handbook home for further study, remember that is does contain"FOR OFFICIAL USE ONLY" information which should be protected.
Prepublication Review
All NSA personnel (employees, military assignees, and contractors) must submitfor review any planned articles, books, speeches, resumes, or public statementsthat may contain classified, classifiable, NSA-derived, or unclassifiedprotected information, e.g., information relating to the organization, mission,functions, or activities of NSA. Your obligation to protect this sensitiveinformation is a lifetime one. Even when you resign, retire, or otherwise endyour affiliation with NSA, you must submit this type of material forprepublication review. For additional details, contact the Information PolicyDivision (Q43) for an explanation of prepublication review procedures.
Personnel Security Responsibilities
Perhaps you an recall your initial impression upon entering an NSA facility.Like most people, you probably noticed the elaborate physical securitysafeguards--fences, concrete barriers, Security Protective Officers,identification badges, etc. While these measures provide a substantial degreeof protection for the information housed within our buildings, they representonly a portion of the overall Agency security program. In fact, vast amountsof information leave our facilities daily in the minds of NSA personnel, andthis is where our greatest vulnerability lies. Experience has indicated thatbecause of the vital information we work with at NSA, Agency personnel maybecome potential targets for hostile intelligence efforts. Special safeguardsare therefore necessary to protect our personnel.
Accordingly, the Agency has an extensive personnel security program whichestablishes internal policies and guidelines governing employee conduct andactivities. These policies cover a variety of topics, all of which aredesigned to protect both you and the sensitive information you will gainthrough your work at NSA.
Association With Foreign Nationals
As a member of the U.S. Intelligence Community and by virtue of your access tosensitive information, you are a potential target for hostile intelligenceactivities carried out by or on behalf of citizens of foreigncountries. A policy concerning association with foreign nationals has beenestablished by the Agency to minimize the likelihood that its personnel mightbecome subject to undue influence or duress or targets of hostile activitiesthrough foreign relationships.
As an NSA affiliate, you are prohibited from initiating or maintainingassociations (regardless of the nature and degree) with citizens or officialsof communist-controlled, or other countries which pose a significant threat tothe security of the United States and its interests. A comprehensive list ofthese designated countries is available from your Staff Security Officer or theSecurity Awareness Division. Any contact with citizens of these countries, nomatter how brief or seemingly innocuous, must be reported as soon as possibleto your Staff Security Officer (SSO). (Individuals designated as StaffSecurity Officers are assigned to every organization; a listing of StaffSecurity Officers can be found at the back of this handbook).
Additionally, close and continuing associations with any non-U.S. citizens whichare characterized by ties of kinship, obligation, or affection are prohibited.A waiver to this policy may be granted only under the most exceptionalcirc*mstances when there is a truly compelling need for an individual'sservices or skills and the security risk is negligible.
In particular, a waiver must be granted in advance of a marriage to orcohabitation with a foreign national in order to retain one's access to NSAinformation. Accordingly, any intent to cohabitate with or marry a non-U.S.citizen must be reported immediately to your Staff Security Officer. If awaiver is granted, future reassignments both at headquarters and overseas maybe affected.
The marriage or intended marriage of an immediate family member (parents,siblings, children) to a foreign national must also be reported through yourSSO to the Clearance Division (M55).
Casual social associations with foreign nationals (other than those of thedesignated countries mentioned above) which arise from normal living andworking arrangements in the community usually do not have to be reported.During the course of these casual social associations, you are encouraged toextend the usual social amenities. Do not act mysteriously or draw attentionto yourself (and possibly to NSA) by displaying an unusually wary attitude.
Naturally, your affiliation with the Agency and the nature of your work shouldnot be discussed. Again, you should be careful not to allow these associationsto become close and continuing to the extent that they are characterized byties of kinship, obligation, or affection.
If at any time you feel that a "casual" association is in any way suspicious,you should report this to your Staff Security Officer immediately. Wheneverany doubt exists as to whether or not a situation should be reported or made amatter of record, you should decided in favor of reporting it. In this way,the situation can be evaluated on its own merits, and you can be advised as toyour future course of action.
Correspondence With Foreign Nationals
NSA personnel are discouraged from initiating correspondence with individualswho are citizens of foreign countries. Correspondence with citizens ofcommunist-controlled or other designated countries is prohibited. Casualsocial correspondence, including the "penpal" variety, with other foreignacquaintances is acceptable and need not be reported. If, however, thiscorrespondence should escalate in its frequency or nature, you should reportthat through your Staff Security Officer to the Clearance Division (M55).
Embassy Visits
Since a significant percentage of all espionage activity is known to beconducted through foreign embassies, consulates, etc., Agency policydiscourages visits to embassies, consulates or other official establishments ofa foreign government. Each case, however, must be judged on the circ*mstancesinvolved. Therefore, if you plan to visit a foreign embassy for any reason(even to obtain a visa), you must consult with, and obtain the prior approvalof, your immediate supervisor and the Security Awareness Division (M56).
Amateur Radio Activities
Amateur radio (ham radio) activities are known to be exploited by hostileintelligence services to identify individuals with access to classifiedinformation; therefore, all licensed operators are expected to be familiarwith NSA/CSS Regulation 100-1, "Operation of Amateur Radio Stations" (23October 1986). The specific limitations on contacts with operators fromcommunist and designated countries are of particular importance. If you arean amateur radio operator you should advise the Security Awareness Division(M56) of your amateur radio activities so that detailed guidance may befurnished to you.
Unofficial Foreign Travel
In order to further protect sensitive information from possible compromiseresulting from terrorism, coercion, interrogation or capture of Agencypersonnel by hostile nations and/or terrorist groups, the Agency hasestablished certain policies and procedures concerning unofficial foreigntravel.
All Agency personnel (civilian employees, military assignees, and contractors)who are planning unofficial foreign travel must have that travel approved bysubmitting a proposed itinerary to the Security Awareness Division (M56) atleast 30 working days prior to their planned departure from the United States.Your itinerary should be submitted on Form K2579 (Unofficial Foreign TravelRequest). This form provides space for noting the countries to be visited,mode of travel, and dates of departure and return. Your immediate supervisormust sign this form to indicate whether or not your proposed travel poses arisk to the sensitive information, activities, or projects of which you mayhave knowledge due to your current assignment.
After your supervisor's assessment is made, this form should be forwarded tothe Security Awareness Director (M56). Your itinerary will then be reviewed inlight of the existing situation in the country or countries to be visited, anda decision for approval or disapproval will be based on this assessment. Thepurpose of this policy is to limit the risk of travel to areas of the worldwhere a threat may exist to you and to your knowledge of classified Agencyactivities.
In this context, travel to communist-controlled and other hazardous activityareas is prohibited. A listing of these hazardous activity areas isprohibited. A listing of these hazardous activity areas can be found in AnnexA of NSA/CSS Regulation No. 30-31, "Security Requirements for Foreign Travel"(12 June 1987). From time to time, travel may also be prohibited to certainareas where the threat from hostile intelligence services, terrorism, criminalactivity or insurgency poses an unacceptable risk to Agency employees and tothe sensitive information they possess. Advance travel deposits made withoutprior agency approval of the proposed travel may result in financial losses bythe employee should the travel be disapproved, so it is important to obtainapproval prior to committing yourself financially. Questions regarding whichareas of the world currently pose a threat should be directed to the SecurityAwareness Division (M56).
Unofficial foreign travel to Canada, the Bahamas, Bermuda, and Mexico does notrequire prior approval, however, this travel must still be reported using FormK2579. Travel to these areas may be reported after the fact.
While you do not have to report your foreign travel once you have ended youraffiliation with the Agency, you should be aware that the risk incurred intravelling to certain areas, from a personal safety and/or counterintelligencestandpoint, remains high. The requirement to protect the classifiedinformation to which you have had access is a lifetime obligation.
Membership In Organizations
Within the United States there are numerous organizations with membershipsranging from a few to tens of thousands. While you may certainly participatein the activities of any reputable organization, membership in any internationalclub or professional organization/activity with foreign members should bereported through your Staff Security Officer to the Clearance Division (M55).In most cases there are no security concerns or threats to our employees oraffiliates. However, the Office of Security needs the opportunity to researchthe organization and to assess any possible risk to you and the information towhich you have access.
In addition to exercising prudence in your choice of organizationalaffiliations, you should endeavor to avoid participation in public activitiesof a conspicuously controversial nature because such activities could focusundesirable attention upon you and the Agency. NSA employees may, however,participate in bona fide public affairs such as local politics, so long as suchactivities do not violate the provisions of the statutes and regulations whichgovern the political activities of all federal employees. Additionalinformation may be obtained from your Personnel Representative.
Changes In Marital Status/Cohabitation/Names
All personnel, either employed by or assigned to NSA, must advise the Office ofSecurity of any changes in their marital status (either marriage or divorce),cohabitation arrangements, or legal name changes. Such changes should bereported by completing NSA Form G1982 (Report of Marriage/Marital StatusChange/Name Change), and following the instructions printed on the form.
Use And Abuse Of Drugs
It is the policy of the National Security Agency to prevent and eliminate theimproper use of drugs by Agency employees and other personnel associated withthe Agency. The term "drugs" includes all controlled drugs or substancesidentified and listed in the Controlled Substances Act of 1970, as amended,which includes but is not limited to: narcotics, depressants, stimulants,cocaine, hallucinogens ad cannabis (marijuana, hashish, and hashish oil).The use of illegal drugs or the abuse of prescription drugs by persons employedby, assigned or detailed to the Agency may adversely affect the nationalsecurity; may have a serious damaging effect on the safety and the safety ofothers; and may lead to criminal prosecution. Such use of drugs either withinor outside Agency controlled facilities is prohibited.
Physical Security Policies
The physical security program at NSA provides protection for classifiedmaterial and operations and ensures that only persons authorized access to theAgency's spaces and classified material are permitted such access. Thisprogram is concerned not only with the Agency's physical plant and facilities,but also with the internal and external procedures for safeguarding theAgency's classified material and activities. Therefore, physical securitysafeguards include Security Protective Officers, fences, concrete barriers,access control points, identification badges, safes, and thecompartmentalization of physical spaces. While any one of these safeguardsrepresents only a delay factor against attempts to gain unauthorized access toNSA spaces and material, the total combination of all these safeguardsrepresents a formidable barrier against physical penetration of NSA. Workingtogether with personnel security policies, they provide "security in depth."
The physical security program depends on interlocking procedures. Theresponsibility for carrying out many of these procedures rests with theindividual. This means you, and every person employed by, assign, or detailedto the Agency, must assume the responsibility for protecting classifiedmaterial. Included in your responsibilities are: challenging visitors inoperational areas; determining "need-to-know;" limiting classifiedconversations to approved areas; following established locking and checkingprocedures; properly using the secure and non-secure telephone systems;correctly wrapping and packaging classified data for transmittal; and placingclassified waste in burn bags.
The NSA Badge
Even before you enter an NSA facility, you have a constant reminder ofsecurity--the NSA badge. Every person who enters an NSA installation isrequired to wear an authorized badge. To enter most NSA facilities your badgemust be inserted into an Access Control Terminal at a building entrance and youmust enter your Personal Identification Number (PIN) on the terminal keyboard.In the absence of an Access Control Terminal, or when passing an internalsecurity checkpoint, the badge should be held up for viewing by a SecurityProtective Officer. The badge must be displayed at all times while theindividual remains within any NSA installation.
NSA Badges must be clipped to a beaded neck chain. If necessary for the safetyof those working in the area of electrical equipment or machinery, rubbertubing may be used to insulate the badge chain. For those Agency personnelworking in proximity to other machinery or equipment, the clip may be used toattach the badge to the wearer's clothing, but it must also remain attached tothe chain.
After you leave an NSA installation, remove your badge from public view, thusavoiding publicizing your NSA affiliation. Your badge should be kept in a safeplace which is convenient enough to ensure that you will be reminded to bring itwith you to work. A good rule of thumb is to afford your badge the sameprotection you give your wallet or your credit cards. DO NOT write yourPersonal Identification Number on your badge.
If you plan to be away from the Agency for a period of more than 30 days, yourbadge should be left at the main Visitor Control Center which services yourfacility.
Should you lose your badge, you must report the facts and circ*mstancesimmediately to the Security Operations Center (SOC) (963-3371s/688-6911b) sothat your badge PIN can be deactivated in the Access Control Terminals. In theevent that you forget your badge when reporting for duty, you may obtain a"non-retention" Temporary Badge at the main Visitor Control Center which servesyour facility after a co-worker personally identifies your and your clearancehas been verified.
Your badge is to be used as identification only within NSA facilities or othergovernment installations where the NSA badge is recognized. Your badge shouldnever be used outside of the NSA or other government facilities for the purposeof personal identification. You should obtain a Department of Defenseidentification card from the Civilian Welfare Fund (CWF) if you need toidentify yourself as a government employee when applying for "governmentdiscounts" offered at various commercial establishments.
Your badge color indicates your particular affiliation with NSA and your levelof clearance. Listed below are explanations of the badge colors you are mostlikely to see:
Green (*) Fully cleared NSA employees and certain military assignees.
Orange (*) (or Gold) Fully cleared representative of other government agencies.
Black (*) Fully cleared contractors or consultants.
Blue Employees who are cleared to the SECRET level while awaiting completion of their processing for full (TS/SI) clearance. These Limited Interim Clearance (LIC) employees are restricted to certain activities while inside a secure area.
Red Clearance level is not specified, so assume the holder is uncleared.
* - Fully cleared status means that the person has been cleared to the TopSecret (TS) level and indoctrinated for Special Intelligence (SI).
All badges with solid color backgrounds (permanent badges) are kept byindividuals until their NSA employment or assignment ends. Striped badges("non-retention" badges) are generally issued to visitors and are returned tothe Security Protective Officer upon departure from an NSA facility.
Area Control
Within NSA installations there are generally two types of areas,Administrative and Secure. An Administrative Area is one in which storage ofclassified information is not authorized, and in which discussions of aclassified nature are forbidden. This type of area would include thecorridors, restrooms, cafeterias, visitor control areas, credit union, barbershop, and drugstore. Since uncleared, non-NSA personnel are often present inthese areas, all Agency personnel must ensure that no classified information isdiscussed in an Administrative Area.
Classified information being transported within Agency facilities must beplaced within envelopes, folders, briefcases, etc. to ensure that its contentsor classification markings are not disclosed to unauthorized persons, or thatmaterials are not inadvertently dropped enroute.
The normal operational work spaces within an NSA facility are designated SecureAreas. These areas are approved for classified discussions and for the storageof classified material. Escorts must be provided if it is necessary foruncleared personnel (repairmen, etc.) to enter Secure Areas, an all personnelwithin the areas must be made aware of the presence of uncleared individuals.All unknown, unescorted visitors to Secure Areas should be immediatelychallenged by the personnel within the area, regardless of the visitors'clearance level (as indicated by their badge color).
The corridor doors of these areas must be locked with a deadbolt and allclassified information in the area must be properly secured after normalworking hours or whenever the area is unoccupied. When storing classifiedmaterial, the most sensitive material must be stored in the most securecontainers. Deadbolt keys for doors to these areas must be returned to the keydesk at the end of the workday.
For further information regarding Secure Areas, consult the Physical SecurityDivision (M51) or your staff Security Officer.
Items Treated As Classified
For purposes of transportation, storage and destruction, there are certaintypes of items which must be treated as classified even though they may notcontain classified information. Such items include carbon paper, vu-graphs,punched machine processing cards, punched paper tape, magnetic tape, computerfloppy disks, film, and used typewriter ribbons. This special treatment isnecessary since a visual examination does not readily reveal whether the itemscontain classified information.
Prohibited Items
Because of the potential security or safety hazards, certain items areprohibited under normal circ*mstances from being brought into or removed fromany NSA installation. These items have been groped into two general classes.Class I prohibited items are those which constitute a threat to the safety andsecurity of NSA/CSS personnel and facilities. Items in this category include:
a. Firearms and ammunition b. Explosives, incendiary substances, radioactive materials, highly volatile materials, or other hazardous materials c. Contraband or other illegal substances d. Personally owned photographic or electronic equipment including microcomputers, reproduction or recording devices, televisions or radios.
Prescribed electronic medical equipment is normally not prohibited, butrequires coordination with the Physical Security Division (M51) prior to beingbrought into any NSA building.
Class II prohibited items are those owned by the government or contractorswhich constitute a threat to physical, technical, or TEMPEST security.Approval by designated organizational officials is required before these itemscan be brought into or removed from NSA facilities. Examples are:
a. Transmitting and receiving equipment b. Recording equipment and media c. Telephone equipment and attachments d. Computing devices and terminals e. Photographic equipment and film
A more detailed listing of examples of Prohibited Items may be obtained fromyour Staff Security Officer or the Physical Security Division (M51).
Additionally, you may realize that other seemingly innocuous items are alsorestricted and should not be brought into any NSA facility. Some of theseitems pose a technical threat; others must be treated as restricted since avisual inspection does not readily reveal whether they are classified. Theseitems include:
a. Negatives from processed film; slides; vu-graphs b. Magnetic media such as floppy disks, cassette tapes, and VCR videotapes c. Remote control devices for telephone answering machines d. Pagers
Exit Inspection
As you depart NSA facilities, you will note another physical securitysafeguard--the inspection of the materials you are carrying. This inspectionof your materials, conducted by Security Protective Officers, is designed topreclude the inadvertent removal of classified material. It is limited to anyarticles that you are carrying out of the facility and may include letters,briefcases, newspapers, notebooks, magazines, gym bags, and other such items.Although this practice may involve some inconvenience, it is conducted in yourbest interest, as well as being a sound security practice. The inconveniencecan be considerably reduced if you keep to a minimum the number of personalarticles that you remove from the Agency.
Removal Of Material From NSA Spaces
The Agency maintains strict controls regarding the removal of material from itsinstallations, particularly in the case of classified material.
Only under a very limited and official circ*mstances classified material beremoved from Agency spaces. When deemed necessary, specific authorization isrequired to permit an individual to hand carry classified material out of an NSAbuilding to another Secure Area. Depending on the material and circ*mstancesinvolved, there are several ways to accomplish this.
A Courier Badge authorizes the wearer, for official purposes, to transportclassified material, magnetic media, or Class II prohibited items between NSAfacilities. These badges, which are strictly controlled, are made available bythe Physical Security Division (M51) only to those offices which have specificrequirements justifying their use.
An Annual Security Pass may be issued to individuals whose official dutiesrequire that they transport printed classified materials, information storagemedia, or Class II prohibited items to secure locations within the local area.Materials carried by an individual who displays this pass are subject to spotinspection by Security Protective Officers or other personnel from the Officeof Security. It is not permissible to use an Annual Security Pass for personalconvenience to circumvent inspection of your personal property by perimeterSecurity Protective Officers.
If you do not have access to a Courier Badge and you have not been issued anAnnual Security Pass, you may obtain a One-Time Security Pass to removeclassified materials/magnetic media or admit or remove prohibited items from anNSA installation. These passes may be obtained from designated personnelin your work element who have been given authority to issue them. The issuingofficial must also contact the Security Operations Center (SOC) to obtainapproval for the admission or removal of a Class I prohibited item.
When there is an official need to remove government property which is notmagnetic media, or a prohibited or classified item, a One-Time Property Pass isused. This type of pass (which is not a Security Pass) may be obtained fromyour element custodial property officer. A Property Pass is also to be usedwhen an individual is removing personal property which might be reasonably bemistaken for unclassified Government property. This pass is surrendered to theSecurity Protective Officer at the post where the material is being removed.Use of this pass does not preclude inspection of the item at the perimetercontrol point by the Security Protective Officer or Security professionals toensure that the pass is being used correctly.
External Protection Of Classified Information
On those occasions when an individual must personally transport classifiedmaterial between locations outside of NSA facilities, the individual who isacting as the courier must ensure that the material receives adequateprotection. Protective measures must include double wrapping and packaging ofclassified information, keeping the material under constant control, ensuringthe presence of a second appropriately cleared person when necessary, anddelivering the material to authorized persons only. If you are designated as acourier outside the local area, contact the Security Awareness Division (M56)for your courier briefing.
Even more basic than these procedures is the individual security responsibilityto confine classified conversations to secure areas. Your home, car pool, andpublic places are not authorized areas to conduct classified discussions--evenif everyone involved in he discussion possesses a proper clearance and"need-to-know." The possibility that a conversation could be overheard byunauthorized persons dictates the need to guard against classified discussionsin non-secure areas.
Classified information acquired during the course of your career or assignmentto NSA may not be mentioned directly, indirectly, or by suggestion in personaldiaries, records, or memoirs.
Reporting Loss Or Disclosure Of Classified Information
The extraordinary sensitivity of the NSA mission requires the prompt reportingof any known, suspected, or possible unauthorized disclosure of classifiedinformation, or the discovery that classified information may be lost, or is notbeing afforded proper protection. Any information coming to your attentionconcerning the loss or unauthorized disclosure of classified information shouldbe reported immediately to your supervisor, your Staff Security Officer, or theSecurity Operations Center (SOC).
Use Of Secure And Non-Secure Telephones
Two separate telephone systems have been installed in NSA facilities for use inthe conduct of official Agency business: the secure telephone system (graytelephone) and the outside, non-secure telephone system (black telephone). AllNSA personnel must ensure that use of either telephone system does notjeopardize the security of classified information.
The secure telephone system is authorized for discussion of classifiedinformation. Personnel receiving calls on the secure telephone may assume thatthe caller is authorized to use the system. However, you must ensure that thecaller has a "need-to-know" the information you will be discussing.
The outside telephone system is only authorized for unclassified officialAgency business calls. The discussion of classified information is notpermitted on this system. Do not attempt to use "double-talk" in order todiscuss classified information over the non-secure telephone system.
In order to guard against the inadvertent transmission of classifiedinformation over a non-secure telephone, and individual using the blacktelephone in an area where classified activities are being conducted mustcaution other personnel in the area that the non-secure telephone is in use.Likewise, you should avoid using the non-secure telephone in the vicinity of asecure telephone which is also in use.
HELPFUL INFORMATION
Security Resources
In the fulfillment of your security responsibilities, you should be aware thatthere are many resources available to assist you. If you have any questions orconcerns regarding security at NSA or your individual securityresponsibilities, your supervisor should be consulted. Additionally, StaffSecurity Officers are appointed to the designated Agency elements to assistthese organizations in carrying out their security responsibilities. There isa Staff Security Officer assigned to each organization; their phone numbers arelisted at the back of this handbook. Staff Security Officers also provideguidance to and monitor the activities of Security Coordinators and Advisors(individuals who, in addition to their operational duties within theirrespective elements, assist element supervisors or managers in dischargingsecurity responsibilities).
Within the Office of Security, the Physical Security Division (M51) will offeryou assistance in matters such as access control, security passes, clearanceverification, combination locks, keys, identification badges, technicalsecurity, and the Security Protective Force. The Security Awareness Division(M56) provides security guidance and briefings regarding unofficial foreigntravel, couriers, special access, TDY/PCS, and amateur radio activities. TheIndustrial and Field Security Division (M52) is available to provide securityguidance concerning NSA contractor and field site matters.
The Security Operations Center (SOC) is operated by two Security Duty Officers(SDOs), 24 hours a day, 7 days a week. The SDO, representing the Office ofSecurity, provides a complete range of security services to include directcommunications with fire and rescue personnel for all Agency area facilities.The SDO is available to handle any physical or personnel problems that mayarise, and if necessary, can direct your to the appropriate security officethat can assist you. After normal business hours, weekends, and holidays, theSOC is the focal point for all security matters for all Agency personnel andfacilities (to include Agency field sites and contractors). The SOC is locatedin Room 2A0120, OPS 2A building and the phone numbers are 688-6911(b),963-3371(s).
However, keep in mind that you may contact any individual or any divisionwithin the Office of Security directly. Do not hesitate to report anyinformation which may affect the security of the Agency's mission, information,facilities or personnel.
Security-Related Services
In addition to Office of Security resources, there are a number ofprofessional, security-related services available for assistance in answeringyour questions or providing the services which you require.
The Installations and Logistics Organization (L) maintains the system for thecollection and destruction of classified waste, and is also responsible for themovement and scheduling of material via NSA couriers and the Defense CourierService (DCS). Additionally, L monitors the proper addressing, marking, andpackaging of classified material being transmitted outside of NSA; maintainsrecords pertaining to receipt and transmission of controlled mail; and issuesproperty passes for the removal of unclassified property.
The NSA Office of Medical Services (M7) has a staff of physicians, clinicalpsychologists and an alcoholism counselor. All are well trained to helpindividuals help themselves in dealing with their problems. Counselingservices, with referrals to private mental health professionals whenappropriate, are all available to NSA personnel. Appointments can be obtainedby contacting M7 directly. When an individual refers himself/herself, theinformation discussed in the counseling sessions is regarded as privilegedmedical information and is retained exclusively in M7 unless it pertains to thenational security.
Counselling interviews are conducted by the Office of Civilian Personnel (M3)with any civilian employee regarding both on and off-the-job problems. M3 isalso available to assist all personnel with the personal problems seriouslyaffecting themselves or members of their families. In cases of seriousphysical or emotional illness, injury, hospitalization, or other personalemergencies, M3 informs concerned Agency elements and maintains liaison withfamily members in order to provide possible assistance. Similar counsellingservices are available to military assignees through Military Personnel (M2).
GUIDE TO SECURITY
M51 PHYSICAL SECURITY 963-6651s/688-8293b (FMHQ)968-8101s/859-6411b (FANX)
CONFIRM and badges Prohibited Items(963-6611s/688-7411b)Locks, keys, safes and alarms SOC (963-3371s/688-6911b)Security/vehicle passes NSA facility protection and complianceVisitor ControlInspectionsRed/blue seal areas New ConstructionPass Clearances (963-4780s/688-6759b)
M52 INDUSTRIAL AND FIELD SECURITY982-7918s/859-6255b
Security at contractor field site facilitiesVerification of classified mailing addresses for contractor facilities
M53 INVESTIGATIONS 982-7914s/859-6464b
Personnel Interview Program (PIP) ReinvestigationsMilitary Interview Program (MIP) Special investigations
M54 COUNTERINTELLIGENCE 982-7832s/859-6424b
Security counterintelligence analysis Security compromises
M55 CLEARANCES 982-7900s/859-4747b
Privacy Act Officer (For review of security files) Continued SCI accessContractor/applicant processing Military access
M56 SECURITY AWARENESS 963-3273s/688-6535b
Security indoctrinations/debriefings Embassy visitsAssociations with foreign nationals Briefings (foreign travel,Security Week ham radio, courier,Security posters, brochures, etc. LIC, PCS, TDY, special access, etc.)Foreign travel approvalMilitary contractor orientationSpecial Access Office (963-5466s/688-6353b)
M57 POLYGRAPH 982-7844s/859-6363b
Polygraph interviews
M509 MANAGEMENT AND POLICY STAFF 982-7885s/859-6350b
STAFF SECURITY OFFICERS (SSOs)
Element Room Secure/Non-SecureA 2A0852B 963-4650/688-7044B 3W099 963-4559/688-7141D/Q/J/N/U 2B8066G 963-4496/688-6614E/M D3B17 968-8050/859-6669G 9A195 963-5033/688-7902K 2B5136 963-1978/688-5052L SAB4 977-7230/688-6194P 2W091 963-5302/688-7303R B6B710 968-4073/859-4736S/V/Y/C/X C2A55 972-2144/688-7549T 2B5040 963-4543/688-7364W 1C181 963-5970/688-7061
GUIDE TO SECURITY-RELATED SERVICES
Agency Anonymity 968-8251/859-4381Alcohol Rehabilitation Program 963-5420/688-7312Cipher Lock Repair 963-1221/688-7119Courier Schedules (local) 977-7197/688-7403Defense Courier Service 977-7117/688-7826Disposal of Classified Waste - Paper only 972-2150/688-6593 - Plastics, Metal, Film, etc 963-4103/688-7062Locksmith 963-3585/688-7233Mail Dissemination and Packaging 977-7117/688-7826Medical Center (Fort Meade) 963-5429/688-7263 (FANX) 968-8960/859-6667 (Airport Square) 982-7800/859-6155NSA/CSS Information Policy Division 963-5825/688-6527Personnel Assistance - Civilian 982-7835/859-6577 - Air Force 963-3239/688-7980 - Army 963-3739/688-6393 - Navy 963-3439/688-7325Property Passes (unclassified material) 977-7263/688-7800Psychological Services 963-5429/688-7311
FREQUENTLY USED ACRONYMS/DESIGNATORS
ARFCOS Armed Forces Courier Service (now known as DCS)AWOL Absent Without LeaveCAO Classification Advisory OfficerCOB Close of BusinessCWF Civilian Welfare FundDCS Defense Courier Service (formerly known as ARFCOS)DoD Department of DefenseEOD Enter on DutyFOUO For Official Use OnlyM2 Office of Military PersonnelM3 Office of Civilian PersonnelM5 Office of SecurityM7 Office of Medical ServicesNCS National Cryptologic SchoolPCS Permanent Change of StationPIN Personal Identification NumberQ43 Information Policy DivisionSDO Security Duty OfficerSOC Security Operations CenterSPO Security Protective OfficerSSO Staff Security OfficerTDY Temporary DutyUFT Unofficial Foreign Travel
A FINAL NOTE
The information you have just read is designed to serve as a guide to assistyou in the conduct of your security responsibilities. However, it by no meansdescribes the extent of your obligation to protect information vital to thedefense of our nation. Your knowledge of specific security regulations is partof a continuing process of education and experience. This handbook is designedto provide the foundation of this knowledge and serve as a guide to thedevelopment of an attitude of security awareness.
In the final analysis, security is an individual responsibility. As aparticipant in the activities of the National Security Agency organization, youare urged to be always mindful of the importance of the work being accomplishedby NSA and of the unique sensitivity of the Agency's operations.
-- Grady Ward | | 'finger' me for information and live+1 707 826 7715 | | samples of Moby lexicons: Moby Words,(voice/24hr FAX) | 15E2ADD3D1C6F3FC | Hyphenator, Part-of-Speech, Pronunciator,[email protected] | 58ACF73D4F011E2F | Thesaurus and Language; all royalty free.
