Computer Security for Classified Automatic Data Processing Systems; Handbook, AL Manual 5636.2

Albuquerque, NM: U. S. Department of Energy, Albuquerque Operations Office, Safeguards and Security Division, 1982. Presumed First Edition, First printing thus. Binderclipped loose three hole punched pages. Good. Stiff covers (front and back), v, [1], 57 pages (most sheets printed double-sided), and 8 illustrations (single-sided). References. Glossary. Guidelines for Computer Security Personnel. Three-hole punched, but not in a binder. Held together with a binder clip. It was the policy of the DOE ALO that Restricted Data, Formerly Restricted Data, and classified National Security Information be adequately protected. Classified data stored in or processed by computers, computer networks, word processing systems, and other electronic equipment had to be protected against unauthorized disclosure, destruction, and modification. The level of protection implemented at a specific ADP facility was to be based on the volume and sensitivity of the data processes, the operational requirements imposed by the organization's mission, and the risks presented at the site. The DOE computer security program was designed to be consistent with all applicable Federal policies, procedures, and standards. The DOE computer security program was structured as a hierarchy of several levels with the Office of Safeguards and Security at the top, directing and overseeing the overall program, with the Heads of Headquarters Elements and the Managers of Field Offices directing, managing, and accrediting their ADP systems, and each DOE or contractor office at the lower level certifying that adequate computer security measures had been implemented. The Manager, Albuquerque Operations Office was responsible for directing managing and accrediting ADP systems used by ALO and ALO contractors. This manual provided uniform computer security guidelines for the DOE ALO Classified Computer Security Program and was applicable to all DOE ALO and ALO contractor classified ADP systems. It was left to the responsible computer security professionals to determine and apply the most cost-effective computer security measures that met the security requirements.