INSIDER THREAT TO CYBER SECURITY RANDOM COUNTERINTELLIGENCE POLYGRAPH PROGRAM:
UNCLASSIFIED//
ROUTINE
R 211340Z JAN 16
FM CNO WASHINGTON DC
TO NAVADMIN
CNO WASHINGTON DC
BT
UNCLAS
NAVADMIN 015/16 (Corrected Copy)
SUBJ/INSIDER THREAT TO CYBER SECURITY RANDOM COUNTERINTELLIGENCE POLYGRAPH
PROGRAM//
REF/A/DOC/TITLE 10, SEC 1564A//
REF/B/DOC/DODD 5210.48/APR15//
REF/C/DOC/DODI 5210.91/OCT13//
REF/D/DOC/SECNAV M-5239.1/NOV05//
REF/E/DOC/NATIONAL INSIDER THREAT POLICY/NOV12//
REF/F/MSG/CNO WASHINGTON DC/132027ZDEC13//
NARR/Reference (a) is U.S. code, armed forces, general military law, and
counterintelligence polygraph program. Reference (b) is the Department of
Defense directive on the Department of Defense polygraph program. Reference
(c) is the Department of Defense instruction on polygraph and credibility
assessment procedures. Reference (d) is the Secretary of the Navy,
Department of the Navy information assurance program manual. Reference (e)
is the national insider threat policy. Reference (f) is NAVADMIN 319/13
regarding insider threat to cyber security.//
RMKS/1. This NAVADMIN announces the Navy-specific Random Counterintelligence
Polygraph Program for privileged users and higher-risk personnel. This
program is designed to mitigate and deter the potential insider threat to
classified information, systems, and networks. The Navy’s legal authority
for this action is listed in references (a), (b) and (c).
2. Definitions. Reference (d) defines privileged users as individuals who
have access to system control, monitoring, or administration functions (e.g.,
system administrator, information assurance officer, system programmers,
etc.). Reference (e) defines insider threat as a person who will use her/his
authorized access, wittingly or unwittingly, to do harm to the security of
the United States (U.S.). This threat can include damage to the U.S. through
espionage, terrorism, unauthorized disclosure of national security
information, or through the loss or degradation of departmental resources or
capabilities.
3. Applicability. In accordance with references (a) and (c), the following
privileged users are subject to the Navys Random Counterintelligence
Polygraph Program:
a. Those whose duties involve access to Top Secret information.
b. Those whose duties involve a Special Access Program under Executive
Order 12958, as amended.
c. Those whose duties involve the creation, use, or handling of
classified information related to sensitive intelligence or operational
activities.
4. Guidance. Recent high-profile unauthorized disclosures of classified
information involving U.S. service members, civilians, and contractors
highlights the need to implement this Random Counterintelligence Polygraph
Program. The Random Counterintelligence Polygraph Program for privileged
users is an additional tool to mitigate and deter the insider threat posed by
higher-risk individuals who have elevated access and privileges to classified
information, networks, and systems. Insider threats directly imperil our
warfighting effectiveness and degrade our readiness. This is an all-hands
effort. Commanders are to ensure compliance with the Navy’s Random
Counterintelligence Polygraph Program for privileged users. The Deputy Chief
of Naval Operations for Information Dominance (OPNAV N2/N6) will publish
additional guidance regarding the implementation and execution of this
program.
a. The Deputy Chief of Naval Operations for Information Dominance (OPNAV
N2/N6) will manage, oversee and coordinate the activities of the Random
Counterintelligence Polygraph Program to include selection, notification,
scheduling, and reporting of results to the appropriate authority.
b. OPNAV N2/N6 will select privileged users from the Total Workforce
Management System (TWMS) Information Assurance Workforce Module. TWMS is the
system of record for documenting privileged users. OPNAV N2/N6 will select
higher-risk individuals in coordination and collaboration with Navy commands
based on a risk management approach.
c. Privileged users and higher-risk individuals will be entered into a
software program that will generate a monthly list of randomly selected
individuals for counterintelligence polygraph examinations.
d. OPNAV N2/N6 will provide the randomly generated list of individuals
to the Naval Criminal Investigative Service (NCIS) Office of Polygraph
Services.
e. NCIS will contact each privileged users or higher-risk individuals
Special Security Officer (SSO) or Command Security Manager (CSM) to inform
them of the polygraph requirement and coordinate scheduling. NCIS will
conduct counterintelligence polygraph examinations in accordance with
reference (c).
f. Upon completion of counterintelligence polygraph examinations, NCIS
will note the results in appropriate security and investigative databases.
g. Polygraph examination results indicative of counterintelligence
threats or criminal conduct will be resolved in accordance with NCIS
counterintelligence and law enforcement policy and procedures.
h. OPNAV N2/N6 will notify commands of all counterintelligence polygraph
examination results indicative of behavior that causes doubt regarding a
privileged users loyalty, judgment, honesty or reliability as it relates to
maintaining eligibility to access classified systems or data.
5. Reference (f) outlined several actions designed to reduce threats to
classified or sensitive information from insiders. Effectively implementing
the Random Counterintelligence Polygraph Program will reduce the risk from
insider threats.
6. The Director, Navy Staff serves as the overall OPNAV lead for Navy
Insider Threat. OPNAV N2/N6 continues to lead a focused effort to ensure the
security of our classified and sensitive information, networks, and systems.
The Insider Threat to Cyber Security (ITCS/OPNAV N2/N6IP2) office is charged
with coordinating the Navy’s Random Counterintelligence Polygraph Program for
privileged users. ITCS will work closely with the Judge Advocate General of
the Navy to ensure the program complies with applicable statutes,
regulations, and directives. The Naval Criminal Investigative Service will
conduct the Random Counterintelligence Polygraph Examinations in accordance
with reference (b).
7. For more information on the Navy’s Random Counterintelligence Polygraph
Program for privileged users, please contact Mrs. Jennifer Floyd, OPNAV
N2/N6, (703) 604-5799; or Mr. Robert Winston, OPNAV N2/N6, (703) 604-5735.
DSN: 664.
8. This NAVADMIN will remain in effect until cancelled or superseded.
9. Released by Vice Admiral Ted N. Branch, Deputy Chief of Naval Operations
for Information Dominance, OPNAV N2/N6.//
BT
#0001
NNNN
UNCLASSIFIED//