| 2.3.12-11-1 Ensure coordination with Service Cryptologic Organization(s) (Service Cryptologic Organization(s)) and National Security Agency during development, review, and validation of the system key management architecture |
Phase A |
Phase B |
|
Ensure early input from NSA, since NSA will be approving the key management plan.
|
NA
|
NA
|
AIR FORCE MANUAL 33-283, 3 Sep 2014, Communications and Information COMMUNICATIONS SECURITY (COMSEC) OPERATIONS; CNSSP 12 National IA Policy for Space Systems Used To Support National Security Missions; Department of Defense Directive Number 8581.1, June 21, 2005, Cybersecurity Policy for Space Systems Used by the Department of Defense
|
| 2.3.12-11-2 Ensure the development and National Security Agency approval of a Level 1 KMP, if required, for each new Type-1 or Type-2 product |
Phase B |
Phase C |
|
Ensure early input from National Security Agency since National Security Agency will be approving the key management plan. Aerospace, or other oversight organization should always clarify with NSA if a KMP is required to make sure it isn't an oversight if one is left out of required documents lists for a new device or system.
|
NA
|
NA
|
AIR FORCE MANUAL 33-283, 3 Sep 2014, Communications and Information COMMUNICATIONS SECURITY (COMSEC) OPERATIONS; CNSSP 12 National IA Policy for Space Systems Used To Support National Security Missions; Department of Defense Directive Number 8581.1, June 21, 2005, Cybersecurity Policy for Space Systems Used by the Department of Defense
|
| 2.3.12-11-3 Ensure coordination with the Service Cryptologic Organization and solicit National Security Agency assistance in key specifications development as needed |
Phase D1 |
|
Ensure coordination with Service Cryptologic Organization(s) (Service Cryptologic Organization(s)) to meet key production meets schedule.
|
NA
|
NA
|
AIR FORCE MANUAL 33-283, 3 Sep 2014, Communications and Information COMMUNICATIONS SECURITY (COMSEC) OPERATIONS; CNSSP 12 National IA Policy for Space Systems Used To Support National Security Missions; Department of Defense Directive Number 8581.1, June 21, 2005, Cybersecurity Policy for Space Systems Used by the Department of Defense
|
| 2.3.12-11-4 Ensure key orders are processed (submission, agreed to delivery method, receipt) are planned and completed to support key development milestones (test key for payload integration, operational key for on-orbit testing and OUE events). We have numerous lessons-learned from the key ordering and delivery process being ignored and impacting critical milestones |
Phase A |
Phase B |
Phase D1 |
Phase D2 |
Phase D3 |
|
Ensure key orders are processed (submission, agreed to delivery method, receipt) are planned and completed to support key development milestones (test key for payload integration, operational key for on-orbit testing and Operational Unit Evaluation (OUE) events). Key ordering and delivery process being ignored impact critical milestones.
|
NA
|
NA
|
AIR FORCE MANUAL 33-283, 3 Sep 2014, Communications and Information COMMUNICATIONS SECURITY (COMSEC) OPERATIONS; CNSSP 12 National IA Policy for Space Systems Used To Support National Security Missions; Department of Defense Directive Number 8581.1, June 21, 2005, Cybersecurity Policy for Space Systems Used by the Department of Defense
|