R 021943Z DEC 24
MARADMIN 580/24
MSGID/GENADMIN/CMC DCI IC4 WASHINGTON DC //
SUBJ/UPDATED GUIDANCE REGARDING OUT-PROCESSING, ACCOUNT MANAGEMENT,
AND RECORD REQUIREMENTS FOR MARINE CORPS ENTERPRISE NETWORK USERS//
REF/A/GENADMIN/CMC DCI IC4 WASHINGTON DC/221730Z MAR 19//
REF/B/DOC/DISA/WINDOWS 10 STIG V-63359//
REF/C/DOC/DISA EXCHANGE 2010 MAILBOX SERVER STIG EXCH-1-301//
REF/D/DOC/MCO 5239.2B/05 NOV 15//
REF/E/DOC/OMB M-12-18/24 AUG 12//
REF/F/DOC/GENERAL RECORDS SCHEDULE 5.1: COMMON OFFICE RECORDS/
28 JUL 2017//
REF/G/DOC/GENERAL RECORDS SCEHDULE 6.1: EMAIL AND OTHER ELECTRONIC
MESSAGES MANAGED UNDER A CAPSTONE APPROACH/JAN 2023//
REF/H/DOC/GENERAL RECORDS SCHEDULE 6.1-0127-2022-0001: UNITED STATES
MARINE CORPS RECORD GROUP NUMBER 0127/21 APR 2023//
REF/I/DOC/ENTERPRISE CYBERSECURITY MANUAL 007: RESOURCE ACCESS GUIDE
/01 FEB 2024//
NARR/REF A IS MARADMIN 192-19, GUIDANCE REGARDING OUT-PROCESSING,
ACCOUNT MANAGEMENT, AND RECORD REQUIREMENTS FOR MARINE CORPS
ENTERPRISE NETWORK USERS. REF B IS DISA SECURITY TECHNICAL
IMPLEMENTATION GUIDE (STIG) FOR MANAGEMENT OF DORMANT, OUTDATED OR
UNUSED ACCOUNTS. REF C IS A DISA STIG PERTAINING TO EXCHANGE 2010
MAILBOX SERVER MANAGEMENT. REF D IS MARINE CORPS ORDER,
CYBERSECURITY. REF E IS THE MANAGING GOVERNMENT RECORDS DIRECTIVE.
REF F OUTLINES REQUIREMENTS FOR NON-RECORDKEEPING COPIES OF
ELECTRONIC RECORDS. REF G IS THE RECORDS MANAGEMENT GUIDANCE ISSUED
BY THE NATIONAL ARCHIVES DETAILING THE EMAIL RETENTION REQUIREMENTS
FOR FEDERAL AGENCIES. REF H IS THE LIST OF MARINE CORPS CAPSTONE
OFFICIAL BILLETS FOR PERMANENT EMAIL PRESERVATION; APPROVED BY THE
DIRECTOR, MARINE CORPS STAFF (DMCS) AND THE CHIEF RECORDS OFFICER
FOR THE UNITED STATES. REF I IS THE MARINE CORPS CYBERSECURITY
MANUAL 007, RESOURCE ACCESS GUIDE. REFERENCES LISTED ABOVE CAN BE
FOUND IN THE POLICY SECTION AT THE FOLLOWING LINK:
HTTPS://USMC.SHAREPOINT-MIL.US/SITES/DCI_IC4_CY//
POC/WILLIAM J. BUSH/CIV/HQMC DC I IC4 ICC CY/TEL (COMM):
703-693-3490/EMAIL: WILLIAM.BUSH@USMC.MIL//
POC/DANIEL R. NORTON/CIV/HQMC DC I IC4 ICC CY/TEL(COMM):
703-784-6075/EMAIL: DANIEL.R.NORTON@USMC.MIL//
GENTEXT/REMARKS/1. Purpose. This MARADMIN replaces and updates
policy previously issued in reference (a) and provides amplifying
guidance regarding references (b) through (i), related to Marine
Corps Enterprise Network (MCEN) account management on both
Unclassified and Classified Networks. These updates will be
incorporated into future issuances of reference (i).
2. Background. The Marine Corps has a large number of Marines,
Civilians and Contracted Staff routinely entering and departing
active service. Upon completion of active service, they no longer
require access to the MCEN through their assigned Network
Account(S). Failure to disable and remove these accounts in a
timely manner constitutes a cybersecurity risk and creates an
unnecessary financial cost. The Marine Corps has a federally
mandated obligation to retain specific data from these accounts for
period of time described in references (f) and (g). In order to
mitigate the cybersecurity risk and eliminate the financial cost due
to mismanaged accounts, the policies described in references (b),
and (e) through (i) shall be followed with regard to the disablement
and appropriate archival of inactive accounts.
3. Actions. Effective upon release of this message:
3.A. Commanding Generals and Commanding Officers.
3.A.1. Ensure policies and procedures for In-Processing/
Out-Processing personnel are updated to meet Marine Corps Enterprise
Network E-Mail Account and Record Management requirements in
accordance with (IAW) references (e) through (g) to Include the use
of the NAVMC 11786, Records Management Checklist for departing USMC
employee’s form.
3.A.2. Ensure local admin office generates a monthly report of out
processed personnel (to include Military, Civilian, And Contractor)
and provides this information to the local G-6/S-6/Network Battalion
(NETBN)/Network Activity (NetAct) personnel for network account
management purposes. This Information will include: Name, Rank or
Rate, Email Address and purpose for Out-Processing; e.g., Permanent
Change of Station/Assignment (PCS/PCA), End of Active Service (EAS),
Separation/Retirement, Contract Expiration, etc. for Marines,
include the Marines PCS/PCA, or EAS date to ensure that Marines
maintain access to required applications such as Outlook Web Access
(OWA)/Webmail during PCS/PCA, Terminal Leave, etc.
3.A.3. Update local policies and procedures requiring all Marine
Corps personnel with MCEN non-classified Internet Protocol (IP)
Router Network (NIPRNET) or Secret Internet Protocol Router Network
(SIPRNET) accounts properly coordinate and out-process with local
G-6/S-6/NETBN/NETACT prior to PCS/PCA or departure from the Marine
Corps.3.A.4. Ensure all account movement, Check-Out and account
Deactivation/Deletion Procedures IAW reference (i) (to include use
of remedy checkout service requests) to prevent unauthorized access
to the MCEN or compromise of information and information systems on
the network.
3.A.5. Ensure user accounts are annotated with inactivity and email
retention exemptions, IAW reference (i), in extension attribute 12
located in the attribute editor tab.
3.A.6. Disable and remove all accounts that have been inactive for
more than 180 days, unless they have been annotated with an
inactivity exemption IAW reference (i).
3.B. Director Administration and Resource Management Division (AR),
Headquarters Marine Corps:
3.B.1. Ensure that HQMC IC4 and MFCC are updated regarding any
changes to reference (f) through (h).
3.C. Director HQMC IC4: Update reference (i) to incorporate policy
updates included in this message and related directives.
3.D. MCEN Information System Users:
3.D.1 Fully complete check in and out procedures.
3.D.2 Fully understand and comply with relevant Records Management
requirements.
3.D.3 Back up pertinent personal, and Records Management required
data.
4. Applicability. This message is applicable to the Marine Corps
Total Force and to all contractors who support the Marine Corps.
5. Questions should be directed to listed points of contact.
6. Release authorized by LtGen Melvin G. Carter, Headquarters
Marine Corps, Deputy Commandant for Information.//