Thursday, March 11, 2010

DoD allows use of thumb drives for mission-essential operations

Although the Department of Defense (DoD) ban on thumb drives, memory sticks and other removable media remains in effect for all personnel until further notice, the Defense Department has issued new guidance that allows the use of removable media only in ‘‘mission-essential operations” and only after strict compliance requirements are met. Furthermore, usage is restricted to the transfer of data only when ‘‘other authorized network resources are unavailable”.

Previously, DoD created a waiver process for granting exceptions, on a case-by-case basis, but has since acknowledged the need for a policy that delineates specific responsibility for the safe use of removable media, under strictly limited conditions.

The policy applies only to authorized personnel who have been issued approved government-owned and procured devices, which contain security features and are uniquely and electronically identifiable for use in support of mission-essential functions on DoD networks only. Both users and the removable media will be subject to ‘‘periodic auditing” to ensure regulations are being followed.

Until further notice, employees should continue to operate under the original constraints and continue to use alternative methods of transferring data and information. Those who feel they have a mission-essential requirement for removable media should obtain their program manager⁄department head (06⁄GS-15) approval, and then contact the site information assurance manager for an authorized exception. A list of site information assurance managers is located on the NAVAIR Office of CIO Community of Interest at https:⁄⁄mynavair.navair.navy.mil⁄cio.