CYBER HYGIENE AUTHORIZATION TO USE PERSONAL WEARABLE FITNESS DEVICES (E.G. FITBIT, JAWBONE UP, ETC.) IN NAVY SPACES:
UNCLASSIFIED
ROUTINE
R 141502Z SEP 15
FM CNO WASHINGTON DC
TO NAVADMIN
INFO CNO WASHINGTON DC
BT
UNCLAS
NAVADMIN 216/15
MSGID/GENADMIN/CNO WASHINGTON DC/N2N6BC/AUG//
SUBJ/ CYBER HYGIENE AUTHORIZATION TO USE PERSONAL WEARABLE FITNESS DEVICES
(E.G. FITBIT, JAWBONE UP, ETC.) IN NAVY SPACES//
REF/A/DOC/US Defense Intelligence Agency Ser U-15-0001/CIO-3 memo of May
2014//
REF/B/DOC/DoDM 5200.01, Volume 3
REF/C/DOC/Federal Communications Commission Office of Engineering and
Technology Bulletin Number 62, February 1996, Understanding the FCC
Regulations for Computers and Other Digital Devices
REF/D/DOC/SECNAV M-5510.30
AMPN/Reference (a) is the Defense Intelligence Agency (DIA) policy regarding
the use of personal wearable fitness devices in DIA spaces. Reference (b)
sets forth information security requirements/direction for Command Security
Managers to follow. Reference (c) defines the baseline for devices being
categorized as a Class B. Reference (d) provides personnel security
requirements/direction for Command Security Managers.// POC/Ms. Brooke
Zimmerman/CIV/OPNAV N2N6BC4/TEL: (571)256-8521/
DSN: 260-8521/E-MAIL: brooke.zimmerman@navy.mil////
RMKS/1. Consistent with references (a) and (b), Personal Wearable Fitness
Devices (PWFD) are hereby authorized in Navy spaces in accordance with the
specifications below.
2. Scope and Applicability. This message applies to all Navy military,
civilian, and support contractor personnel. Visitors not meeting the scope
and applicability of this message are not authorized to introduce these
devices in Navy spaces where collateral classified information is processed,
stored or discussed.
3. Discussion.
a. Consistent with references (a) and (b), effective immediately, all
Navy personnel are hereby authorized, subject to local policy and capability
limitations below, to wear PWFDs (e.g., Fitbit, Jawbone Up, Nike Fuel Band,
etc.) in all Navy spaces where collateral classified information and
controlled unclassified information is processed, stored, or discussed. This
authorization is applicable to Navy spaces located within the Continental
United States, Alaska, and Hawaii. This authorization does not address
wearing PWFDs in Sensitive Compartmented Information Facilities.
b. PWFDs are permitted:
(1) If commercially available in the United States (U.S.) or through
a U.S. military exchange, marketed primarily as fitness or sleep devices, and
designated as Federal Communication Commission (FCC) Class B digital devices
(denoted as FCC Class B certified, or FCC Class B exempt) as described in
reference (c).
(2) If they have Bluetooth, GPS (receive only), accelerometer,
altimeter, gyroscope, heart activity, vibration feature, or near field
communication capabilities.
(3) If they receive and contain vendor-supplied software updates that
do not add any features or capabilities prohibited below.
c. PWFDs are prohibited:
(1) If they contain any external or conflicting hardware or software
modifications, including the installation of third party apps.
(2) If they contain cellular or Wi-Fi, photographic, video
capture/recording, microphone, or audio recording capabilities.
(3) In conjunction with USB accessories, including but not limited to
Bluetooth dongles and charging cables.
(4) From being connected to any government information systems.
d. Responsibilities:
(1) Commands must ensure all personnel have read and understand this
NAVADMIN in its entirety, and must ensure personnel know PWFD electronic
emanations are subject to inspection and monitoring.
(2) Personnel who introduce PWFDs into areas where collateral
classified information and controlled unclassified information is processed,
stored, or discussed are responsible for ensuring their PWFDs meet the
criteria outlined above.
(3) Personnel who knowingly or willfully violate the requirements in
this NAVADMIN may be subject to a preliminary inquiry in accordance with
reference (b) and an incident report in the Joint Personnel Adjudication
System per reference (d).
4. This message was coordinated with Deputy Under Secretary of the Navy
(DUSN) for Policy Security as part of the Department of the Navys
cybersecurity/traditional security partnership for the protection of national
security information and information systems.
5. This NAVADMIN will remain in effect until cancelled or superseded.
6. Released by VADM Ted N. Branch, Deputy Chief of Naval Operations,
Information Dominance, OPNAV N2/N6.//
BT
#0001
NNNN
UNCLASSIFIED//