R 241240Z APR 20
MARADMIN 263/20
MSGID/GENADMIN/CMC DCI IC4 WASHINGTON DC//
SUBJ/MODIFICATION TO POLICY FOR PORTABLE ELECTRONIC DEVICES//
REF/A/DOC/ECSM 005/HQMC C4 CY/1JUL2016//
REF/B/DOC/DEPSECDEF/22MAY2018//
REF/C/MEMO/DIA WASHINGTON DC/1MAY2014//
REF/D/GENADMIN/SECNAV WASHINGTON DC/2281830Z MAR 16/ALNAV 019-16//
REF/E/MEMO/DOD CIO/21APR2016//
REF/F/DOC/DODM 5200.01, VOLUME 3/24FEB2016//
REF/G/DOC/SECNAV M-5510.30/JUN2006//
REF/H/GENADMIN/CMC C FOUR CP WASHINGTON DC/211737Z JAN 15//
REF/I/GENADMIN/ CMC C FOUR CP WASHINGTON DC/222020Z OCT 15//
NARR/REF (A) IS MARINE CORPS ENTERPRISE SECURITY MANUAL (ECSM) 005, PORTABLE ELECTRONIC DEVICES AND WIRELESS LOCAL AREA NETWORK TECHNOLOGIES. REF (B) IS DEPSECDEF MEMORANDUM, MOBILE DEVICE RESTRICTIONS IN THE PENTAGON. REF (C) IS DIA MEMORANDUM, POLICY CLARIFICATION FOR PORTABLE ELECTRONIC DEVICES, INTRODUCTION OF PWFD AND PERSONAL HEADPHONES. REF (D) IS ALNAV 019-16, ACCEPTABLE USE OF AUTHORIZED PERSONAL PORTABLE ELECTRONIC DEVICES IN SPECIFIC DEPARTMENT OF THE NAVY SPACES. REF (E) IS DOD CIO MEMORANDUM, INTRODUCTION AND USE OF WEARABLE FITNESS DEVICES AND HEADPHONES WITHIN DOD ACCREDITED SPACES AND FACILITIES. REF (F) IS DOD MANUAL 5200.01, VOL 3, DOD INFORMATION SECURITY PROGRAM: PROTECTION OF CLASSIFIED INFORMATION. REF (G) IS THE SECNAV M-5510.30, DON PERSONNEL SECURITY PROGRAM. REF (H) IS MCENMSG-UNIFICATION 002-15 - WEBCAM AUTHORIZATION ON MCEN-N. REF (I) IS MCENMSG-UNIFICATION 009-15 - WEBCAM AUTHORIZATION ON MCEN-S//
POC/R. A. LETTEER/GS15/DC I IC4 ICC CYBERSECURITY/-/TEL: 703-693-3490/EMAIL: RAY.LETTEER@USMC.MIL//
GENTEXT/REMARKS/1. This is a coordinated Headquarters, U.S. Marine Corps (HQMC), Deputy Commandant for Information (DC I), Information Command, Control, Communications, and Computers (IC4) Division and Marine Forces Cyberspace Command message.
2. SCOPE AND APPLICABILITY. This MARADMIN supplements the direction provided in refs (a) through (g) and provides policy relating to the use of specific electronic peripherals such as headphones, microphones, web cameras, Common Access Card (CAC) readers, and printers with unclassified government-owned/government-funded equipment (GFE), when used in unclassified-only areas. This MARADMIN does not apply to, or modify, existing policy regarding the use of unclassified or classified PEDs or peripherals in Marine Corps spaces where collateral classified information is processed, stored or discussed, or in Marine Corps Sensitive Compartmented Information Facilities (SCIF).
3. POLICY. Effective immediately:
3.a. All Marine Corps personnel are hereby authorized, subject to local policy and capability limitations below, to use headphones, microphones, and web cameras(webcams), on unclassified government portable electronic devices (PEDs), when used in unclassified-only areas (i.e., in unclassified-only government buildings, offices, and spaces, or in authorized telework locations). This supersedes requirements for web cameras as specified in reference (h), specifically that individuals must be designated by their commands to have web cameras installed, and that a user agreement must be completed prior to their use. Requirements within reference (i) continue to apply for the use of webcams peripherals with unclassified PEDs, within classified government spaces and facilities.
3.b. Use of personally-owned printers with GFE PEDs is PROHIBITED.
3.c. USB CAC readers that have been connected to any personal or non-government owned information system may not subsequently be connected to any government information system.
3.d. Limitations/ Caveats:
3.d.1 Headphones, microphones, and web cameras are PERMITTED:
3.d.1.a. If government-procured through General Services Administration (GSA), ServMart, or commercially in the U.S. (through approved DOD open purchase/contracting mechanism). This supersedes some requirements in reference (h). When executing telework, or other authorized work away from government workspaces or facilities, the use of personally-owned, wired (e.g., USB or 35 millimeter audio) peripherals such as webcams, headphones/microphones, keyboards, or mice is permitted. Again, the use of wireless peripherals, and personally-owned printers (either wired or wireless), and CAC readers that have been previously connected to non-government systems are strictly prohibited. Webcams and microphones must be disconnected/disabled on laptops/desktops, when not in use. Additionally, recommendations for web cameras are that they: 1. Have a built-in microphone, and 2. Have a lens cover, to be closed when camera is not in use.
3.d.1.b. If they are embedded, as part of the government PED (i.e., are “on-board” devices”, not requiring any physical installation or hardware modification to the PED).
3.d.1.c If they are “wired” peripherals; specifically, if they physically connect to the PED via wired USB or 3.5 millimeter audio jacks.
3.d.1.d. They are “plug-and-play” for interoperability with current, Marine Corps authorized version(s) of client operating system(s); specifically, aside from driver software native to authorized operating system, devices do not require the installation of additional software or applications, to properly function or interact with the PED.
3.d.1.e For MCEN assets, technical measures may currently be in place that block the use of embedded microphones and cameras, and/or headphones and microphones that connect to 3.5 millimeter audio jacks. The removal of these blocks may require assistance from the local information technology helpdesks. Plug and play USB cameras, headphones, and microphones should not require direct helpdesk interaction, unless unforeseen technical issues are encountered. Therefore, use of USB devices are preferable.
3.d.2. Headphones, microphones, and cameras are PROHIBITED:
3.d.2.a. If they contain any external or conflicting hardware or software modifications, including the installation of third party apps, or add any prohibited features or capabilities.
3.d.2.b. If the devices use wireless communication; including, Bluetooth, cellular or Wi-Fi, or other near field communication.
3.d.2.c. If the peripheral devices contain on-board data storage capability, or have the ability to capture or record photographic, video capture/recording, or audio.
3.d.2.d. Restrictions on the use of headphones, microphones, or cameras with PEDs in classified areas remain as specified within references. For unclassified devices that are typically used in classified areas - if a required, physical or technical means (blocks) to disable specific embedded or external devices is removed (i.e., to enable temporary use of peripherals within unclassified-only areas, such as during telework), these ‘blocks’ must be re-enabled, before the PEDs are re-introduced into classified areas. This will be verified and documented via command/organizational Information System Security Managers.
4. EXCEPTIONS/RESTRICTIONS. Commanders, in coordination with security managers, may determine when/if the introduction of electronic peripheral devices to an unclassified facility will be restricted. If specific devices are restricted from any area, security managers will ensure signs are posted stating so.
5. Personnel who knowingly or willfully violate the requirements in this MARADMIN may be subject legal or administrative actions per references (g) and (h).
6. This MARADMIN will remain in effect until cancelled or superseded.
7. This MARADMIN applies to the Total Force.
8. Release authorized by BGen L. M. Mahlock, Director IC4, Deputy Commandant for Information.//