scope:

APPLICABILITY AND SCOPE

This Instruction:

Applies to the Office of the Secretary of Defense (OSD), the Military Departments, the Office of the Chairman of the Joint Chiefs of Staff, the Combatant Commands, the Office of the Inspector General of the Department of Defense, the Defense Agencies, the DoD Field Activities, and all other organizational entities in the Department of Defense (hereafter referred to collectively as the "DoD Components"). The term "Military Services," as used herein, refers to the Army, the Navy, the Air Force, and the Marine Corps.

This Instruction does not authorize, or otherwise apply to, the monitoring of telecommunications systems or testing of DoD information systems for purposes governed by other DoD policy and guidance. This includes, but is not limited to, monitoring or testing for:

Administration and management functions to ensure proper installation, integration, and functioning of equipment and systems (e.g., certification and accreditation activities, internal reviews, connection approvals).

Signals intelligence.

Technical surveillance countermeasures.

Surveillance of non-communications emissions (e.g., emissions from radar or telemetry).

Laboratory research and development testing.

Operational test and evaluation.

Foreign intelligence and counterintelligence purposes.

TEMPEST testing.

Law enforcement purposes.

External reviews and/or independent verification and validation (IV&V).

PURPOSE

This Instruction:

Reissues Reference (a), as a DoD Instruction, under a new number and title, in accordance with the guidance in Reference (b) and the authority in Reference (c).

Implements Reference (d) by establishing DoD policies and responsibilities for conducting COMSEC monitoring of DoD telecommunications systems.

Establishes and implements DoD policies and responsibilities for conducting IA readiness testing of operational DoD information systems in accordance with DoD Directive 8500.1 (Reference (e)).

Authorizes the monitoring of DoD telecommunications systems for COMSEC purposes and the penetration of DoD information systems for IA readiness testing purposes only.