Command, Control, Communications, Computers and Information Technology (C4&IT) Information Assurance (IA) Policy

TECHNOLOGY (C4&IT) INFORMATION ASSURANCE (IA) POLICY

Ref:

(a)

Establishment of the CG-6 Directorate and Associated Duties, COMDTINST 5401.5

(series)

1. PURPOSE. This Instruction establishes the authority, roles, and responsibilities governing the

enterprise Information Assurance (IA) program. The IA program addresses information protection,

detection, and reaction for Command, Control, Communications, Computers and Information

Technology (C4&IT) systems, identifies system vulnerabilities, establishes disaster recovery

procedures, and manages the IA security awareness and education program. A robust IA program

defends information and information systems by ensuring their availability, integrity, authentication,

confidentiality, and non-repudiation. This policy applies to C4&IT assets, including systems and

products that enable C4&IT capability in support of the Coast Guard's missions or business

functions. For systems governed by separate IA authorities, as listed in the C4&IT System

Inventory, this policy governs the interfaces between those systems and other Coast Guard C4&IT

systems. All Coast Guard organizations involved in the planning, acquisition, production,

deployment, support, operation, and disposition of C4&IT assets shall employ the IA policy and

adhere to the roles defined herein.

2. ACTION. Area and District commanders, commanders of maintenance and logistics commands,

commanding officers of Headquarters units, assistant commandants for directorates, Chief Counsel,

and special staff offices at Headquarters shall ensure that all Coast Guard and contractor support

personnel or organizations involved in the acquisition, development, operations, maintenance, or use

of Coast Guard C4&IT assets comply with the provisions of this Instruction. Internet release is

authorized.

3. DIRECTIVES AFFECTED. None

DISTRIBUTION SDL No. 141

NON-STANDARD DISTRIBUTION: