R 151449Z JUL 13
UNCLASSIFIED/
MARADMIN 350/13
MSGID/GENADMIN/CMC WASHINGTON DC C4//
SUBJ/USMC PERSONALLY IDENTIFIABLE INFORMATION (PII) BREACH REPORTING AND NOTIFICATION TO AFFECTED INDIVIDUALS//
REF/A/DOC/HQMC C4 CY/30APR2013//
REF/B/DOC/CMC/AUG2011//
NARR/REF A IS THE USMC ENTERPRISE CYBERSECURITY DIRECTIVE (ECSD) 011 V.4 -PII, WHICH IS THE OVERARCHING POLICY IN IMPLEMENTATION OF USMC PRIVACY PROGRAM.  REF B IS THE CMC WHITE LETTER NO. 2-11, WHICH EMPHASIZES COMMAND RESPONSIBILITY AND INDIVIDUAL ACCOUNTABILITY IN RESPONDING TO PII BREACHES AND CONDUCTING REMEDIATION ACTIONS.//
POC/RAY LETTEER/CIV/HQMC C4 CY DIVISION CHIEF/TEL: 703-693-3490/ EMAIL: RAY.LETTEER(AT)USMC.MIL//
POC/STEPHANIE CLEARWATER/CIV/HQMC C4 CY PRIVACY SPECIALIST/TEL: 571-256-8868/EMAIL: STEPHANIE.CLEARWATER(AT)USMC.MIL//
1.  BACKGROUND.  IAW REF A, COMMAND INFORMATION SYSTEMS SECURITY MANAGERS (ISSM) ARE RESPONSIBLE FOR REPORTING PII BREACHES AND TAKING NECESSARY ACTIONS TO ENSURE PROPER CLOSURE OF EACH INCIDENT.  IAW REF B, COMMANDS ARE RESPONSIBLE FOR COST RELATED TO ACTIONS REQUIRED IN RESPONSE TO PII BREACHES TO INCLUDE THE MANPOWER AND FUNDS.  IN COMPLIANCE WITH REFS A AND B, COLLABORATIVE EFFORTS ARE NECESSARY IN RESPONDING, REMEDIATING, AND CLOSING PII BREACHES.
2.  ACTION.  COMMAND ISSM'S SHALL INITIATE AND COORDINATE COLLABORATIVE EFFORTS WITHIN THEIR COMMANDS FOR ACTIONS REQUIRED FOLLOWING THE INITIAL PII BREACH REPORT.  ISSM'S SHALL INFORM COMMAND PRIVACY ACT (PA) AND FREEDOM OF INFORMATION ACT (FOIA) OFFICERS OF OCCURANCE OF EACH INCIDENT AND INCLUDE THEM IN ALL CORRESPONDENCE WITH HQMC C4 CY PRIVACY SPECIALIST.  UPON RECEIVING DETERMINATION AND INSTRUCTIONS REGARDING WRITTEN NOTIFICATION, ISSM'S SHALL PROVIDE TECHNICAL SUPPORT TO ASSIST PA AND FOIA OFFICERS IN FULFILLING THE NOTIFICATION REQUIREMENT.
3.  THIS MARADMIN IS EFFECTIVE UPON RELEASE.  DIRECT ALL QUESTIONS AND/OR COMPLIANCE CONCERNS TO HQMC_CYC4_IDMGT(AT)USMC.MIL.
4.  RELEASE AUTHORIZED BY BGEN K. J. NALLY - DIRECTOR, COMMAND, CONTROL, COMMUNICATIONS, AND COMPUTERS.//