Important Notice: Our web hosting provider recently started charging us for additional visits, which was unexpected. In response, we're seeking donations. Depending on the situation, we may explore different monetization options for our Community and Expert Contributors. It's crucial to provide more returns for their expertise and offer more Expert Validated Answers or AI Validated Answers. Learn more about our hosting issue here.

Regarding the reproduction section of the Information Security manual, why not just recognize that all accountable CREM will be placed into accountability?

0
Posted

Regarding the reproduction section of the Information Security manual, why not just recognize that all accountable CREM will be placed into accountability?

0

The associated requirement was written as a result of extensive discussions with individuals from various sites and programs regarding their local implementations. There were occasions when it was asserted that it was possible to copy some of the data from a piece of ACREM onto separate media in such a way as for that new media to not contain information that requires it to be placed into accountability and that it would not need to be marked at the accreditation level of the system where the source ACREM resided. The expanded language in the Reproduction section is, in part, responsive to this scenario. So, if someone creates a new piece of ACREM, he or she must place it into accountability before writing any information to it that would make the media accountable or placing it into an information system which is accredited for S/RD or higher. No CSA action is required in these cases. However, to EXTRACT a file (say an unclassified document or appendix) from a piece of ACREM – to medi

Related Questions

What is your question?

*Sadly, we had to bring back ads too. Hopefully more targeted.