VULNERABILITY ASSESSMENTS OF THE MARINE CORPS ENTERPRISE NETWORK (MCEN)
Date Signed: 1/15/2009 | MARADMINS Number: 0030/09
MARADMINS : 0030/09

R 151917Z Jan 09
UNCLASSIFIED//
MARADMIN 0030/09
MSGID/GENADMIN/CMC WASHINGTON DC//
SUBJ/VULNERABILITY ASSESSMENTS OF THE MARINE CORPS ENTERPRISE NETWORK (MCEN)//
REF/A/MSGID:DOC/HQMC C4/DTG:171700ZJAN06// REF/B/MSGID:DOC/ACMC/YMD:20020909//
REF/C/MSGID:DOC/DOD/8510.01/YMD:20071128//
REF/D/MSGID:DOC/DOD/YMD:20030206//
REF/E/MSGID:DOC/DOD/YMD:20021024//
REF/F/MSGID:DOC/HQMC C4/DTG:051046ZMAY08//
REF/G/MSGID:DOC/DOD/DTG 221355ZNOV08//
POC/LETTEER, R. A./GS-15/HQMC C4 IA/-/TEL:703-693-3490 /EMAIL:RAY.LETTEER@USMC.MIL//
POC/CRAWFORD, J. A./MGYSGT/HQMC C4 IA/-/TEL:703-693-3490/EMAIL:JAMES.A.CRAWFORD@USMC.MIL//
NARR/REF A ESTABLISHES THE MARINE CORPS IA DIVISION.  REF B IS THE MARINE CORPS CHIEF INFORMATION OFFICER (CIO) CHARTER. REF C ESTABLISHES THE DIACAP REQUIREMENTS AND PROCESSES. REF D IS THE DEPARTMENT OF DEFENSE (DOD) 8500.2 DOD INFORMATION ASSURANCE (IA) IMPLEMENTATION GUIDE.  REF E IS DODD 8500.1, INFORMATION ASSURANCE WHICH ESTABLISHES POLICY AND ASSIGNS RESPONSIBILITIES IN ORDER TO ACHIEVE INFORMATION ASSURANCE THROUGH A DEFENSE IN DEPTH APPROACH.  REF F IS THE HEADQUARTERS MARINE CORPS (HQMC) C4 MESSAGE ESTABLISHING THE REGIONAL BLUE TEAMS.  REF G IS THE DOD DIRECTION TO MOVE TO INFORMATION CONDITION (INFOCON) 3.//
GENTEXT/REMARKS/1.  TO ENSURE COMPLIANCE WITH INFOCON POSTURES DIRECTED BY JTF-GNO, THE USMC DESIGNATED ACCREDITING AUTHORITY (DAA) HOLDS THE AUTHORITY TO SCAN ANY EQUIPMENT ATTACHED TO THE MCEN AT ANY TIME PER REFS A, B, AND C.  THIS INCLUDES ALLOWING REGIONAL BLUE TEAMS OR MARINE CORPS NETWORK OPERATIONS AND SECURITY CENTER (MCNOSC) TO SCAN AND MONITOR NETWORKS AND ENCLAVES.//
2.  SCANNING WILL VERIFY IA POLICY COMPLIANCE AND SYSTEM SECURITY STATUS IAW ACCREDITATION DOCUMENTATION AND REQUIREMENTS PER REFS D AND E.  SCANNING IS TO BE DONE BY USMC IA ASSESSMENT TEAMS OR MCNOSC, AS OUTLINED IN REF F AND TO PROVIDE COMPLIANCE WITH DOD PER REF G.//
3.  HQMC C4 WILL CONTINUE TO DEVELOP SCANNING RESPONSIBILITY AND AUTHORITY POLICIES IN ORDER TO MAINTAIN A SECURE NETWORK. C4 WELCOMES INPUT TO THESE POLICIES.//
4.  QUESTIONS MAY BE DIRECTED TO THE POCS.//
5.  CANCELLATION CONTINGENCY.  THIS MARADMIN, UNLESS SUPERCEDED, IS CANCELLED 1 DECEMBER 2010.//
6.  RELEASE AUTHORIZED BY BGEN G.J. ALLEN, DIRECTOR, COMMAND, CONTROL, COMMUNICATIONS, AND COMPUTERS/CHIEF INFORMATION OFFICER OF THE MARINE CORPS.//