Commentary - Things to know as Laughlin prepares for IAAP inspection

  • Published
  • By Master Sgt. Vincent Lewis
  • 47 Flying Training Wing information assurance manager
LAUGHLIN AIR FORCE BASE, Texas --  The Air Force Network Integration Center at Scott Air Force Base will be sending a team to conduct our Wing Information Assurance Assessment and Assistance Program Inspection. The IAAP inspection is a "find and fix" review of all areas of Information Assurance to assess the effectiveness of the 47th Flying Training Wing Information Assurance office and unit IA programs.

Preparations are under way at Laughlin for this inspection, which will take place Feb. 2 - 4.

The main thing to focus on is to help our base community secure information and avoid unwanted dissemination of important and classified information.

The inspection includes computer security, emissions security and communications security. It is critical in identifying and correcting vulnerabilities in our network and computer security practices, policies and procedures. The Telecommunications Monitoring and Assessment Program, as well as the Certification and Accreditation Program, will be assessed to ensure all systems utilized on Department of Defense networks have valid authorization.

Using the Air Force Form 4160 checklist, inspectors will canvas Laughlin, visiting at least 30 percent of the unit Information Assurance Officers and all of our communications security accounts. In preparation for the upcoming inspection, the Wing Information Assurance Office, in conjunction with your unit IAOs, will be conducting self inspections on all base agencies on the installation.

An important point to remember with COMPUSEC is Universal Serial Bus devices must be approved. Most USB devices are prohibited including thumb drives, camera memory cards and iPods. Also, it is important to ensure that virus definitions are up-to-date on all systems.

Emission security ensures all areas where classified information is processed are approved and secured. Telecommunications monitoring and assessment program also ensures the security of classified information by ensuring unsecured systems, such as telephones and fax machines, have required stickers that remind users not to use them for classified information.

The 47th Communications Squadron will be inspected, but all 47th FTW personnel will be affected. Most base personnel will probably not be aware the inspection is taking place. Offices that process classified information are subject to inspection, but other offices may also receive random visits to check on things such as making sure unsecured phones have the required stickers on them.

The most important thing is to know who your information assurance officer is. If you should have a problem or question, contact your unit IAO or supervisor.

Using sound cyber security practices goes a long way in keeping our networks safe from attackers, and the IAAP inspection is one tool to help us meet those challenges.

The IAAPs purpose per Air Force Instruction 33-230, Communications and Information, is to "find and fix" wing-level IA problems, but it is also applicable throughout the Laughlin base community. The IAAP report identifies deficiencies and impacts if not corrected, significant problems, problems resolved on site, problems that still require resolution with recommendations and any additional assistance provided by the IAAP team.

Individual users can prepare by practicing a few security measures prior to the inspection:

- Know who your unit IAO is.
- Use "Privacy Act" cover sheets to protect personal identifiable information.
- Know virus reporting procedures.
- Remove your common access card from your computer when not in the immediate area.
- Do not bring any cell phones or electronic devices into classified processing areas.
- Ensure unauthorized software is not loaded on government systems.
- Ensure stand-alone computers performing unit specifics functions are properly patched and updated.
- Refrain from using wireless keyboards on government computers.
- Label CDs, DVDs, external hard drives, floppy disks and removable media with the proper classification stickers.
- Ensure a DoD form 2056 is on all government phones and fax machines.
- Obtain Wing IA approval before connecting devices or systems to the base network.

The inspection measures compliance, but it also has a great secondary effect. It raises overall awareness of how our everyday activities can impact the security posture of our critical information and ultimately our mission.