SANITIZED COPY DIRECTOR OF CENTRAL INTELLIGENCE DIRECTIVE NO. 1/11? SECURITY COMMITTEE rr (Eifective 23 August 1974) 7 In support of the DCI’s statutory responsibilities anceof his efforts to - improve the Intellizence Community's product and to achieve more ¢iit-- cient use of intelligence resources, the community’s security policies and. procedures must be efiective and consistent for the protection of intelli- . ‘gence and of intelligence sources and methods,? and must ensure tirme- oS liness and economy in the handling of compartrented information, Therefore, pursuant to provisions of Subsection 102 (d) of the National Security Act of 1947, as amended, to provisions of NSCID 1 and to para- graph 2.b of NSAM 317, anew standing Corumittee of the USL2 is hereby established. ne ud 1. Name of ‘the Committee a tts + ‘The commitiee will be known as the Security Committee. The mission of the committee is to provide the means by whick the Director of Central Intelligence, with the advice of United States in telligence Board principals, can: ° a. Ensure establishment of security policies and procedures # includ ing recommendations for legislation for the protection of intelligence and intelligence sources and methods from unauthorized disclosure. ° b. Review and formulate personnel, physical end document security policies, standards and practices and dissemination procedures applica~ ble to all government departments and agencies as such policies, stand~ ards, practices and procedures relate to the protection of invelligence *Supersedes DCID 1/13, effective 23 April 1065 and DcImD vit eftective 2s December 1964. ' *The term intelligence 2s used in this document applies only to information covered by statute, Executive Order, or other authority consonant with the DCT’s statutory responsibility for foreign intelligence and for the protection of inteDi~ gence and intelligence sources and methods from unauthorized disclosure... .
ANITIZED COPY Sources and metheds in consideration of the elfectiveress, Tiss2 206 cost factors involved. c. Review and formulate policies and procedures & governing the re~ . lease of intelligence to foreign govermments ard international organiza- tions and the review of classified intelligence proposed for release to . the public through declassification or other acticn. With resvect to oa foreign csclosure, ensure that releases are in consonance with U.S security policy, / , ang that the intelligence itself is accorded a Cegree of protection eaual to that afforded by the United States. With respect to public release, ensure that disclosure or declassijication actions are taken pursuant to Proper . authority and taat they are accomplished so as to minimize the risks’ to other intelligence sources and methods. d@ Ensure that appropriate investigations are made of avy unauthor- - Jzed disclosure or compromise of intelligerce or of intelligence sources - and methods and that the results of such investigations, along witb. Te appropriate recommendations, are provided to the Director of Central -- Gevelop proposals for any necessary changes to achieve optimurm use - g e.| f. Review special security and compartmentation procedures end —_ of intelligence consistent with protection of sensitive intelligence sources and mathats. -_ g. Ensure the development, review and rnaintenance of securliy . standards and procedures for the protection of intelligence stored in or ae - processed by computers. -priate in the development and review of security policies, standards, . "te occurring within their departments and agencies; to report the results - ° "The functions of the committee are: oy ee a. To advise and assist the Director of Central Intellige nee as appro . Se procedures and practices for the protection of intelligence and intel gence sources and methods from unauthorized disclosures. - ee b. To review, formulate and recommend to the Director of Centrat , a ae Intelligence policies, standards and procedures for the dissemination - tote of intelligence materials, for the release of such materials to foreion governments, end for the review of classified intelligence proposect tor Ste uSe in unclassified activities. : eo ts c. On behalf of the Director of Central Intelligence, to call upon -- departments and agencies to investigate any unauthorized cisclosnre - 8 or compromise of intelligence or of intelligence sources and methods
-SANITIZED COPY of these investigations to the Director of Central Intelligence, through the United States Intelligence Board. Such reports will (1). assess the disclosure’s impact on tre U.S. intelizence process, and its implications for national! seczrity and foreign relations, (2) dceseribe corrective’ measures taken or needed to prevent such disclosures in the future or to minimize the adverse effects of the case at hand, and (3) xcccrarend any appropriate additional actions. : da. The functions of the committee as they relate to! / , computer security and special security corm- partmentation are set forth in attachments 1, 2, and 3 2. = 4. Community y Responsibilities -° & Upon request of the committee chairman, USIB deparanents and agencies shall furnish to the committee within established security safeguards particular information needed by the committee and perti- nent to its functions. Temporary material and ad hoc personnel sup- port will be provided to the committee as needed and as mutually * agreed upon by the departments and agencies represented on. the cor- mittee. b. Each USES principal is responsible for investigation of any unau- thorized disclosure or compromise of intelligence or intelligence sources and methods occurring within his department or agency. When investi- gation determines that the possibility of comprornise cannot be dis- counted, and the interests of the USIB or another USIB principal are involved or affected, the results of investigation will be forwarded to the Security Committee for review and nossible remedial action as de~ termined appropriate by the committee. eo 5. Composition and Organization a. The committee will consist of a full-time chairman designated by the DCI, representatives of the chiefs of departments and agencies who. are members of the USIB, and the representatives of the Departments of the Army, Navy, and Air Force. The chairman may invite a repre- sentafive of the chief of any other department or agency having func- tions related to matters being considered by the committee to sit with © the committee whenever matters within the purview of that depart- ment or agency are to be discussed. b. The committee will be supported by” subcommittees as needed and ¢ as approved by the DCI and by ad hoc working groups as approved. by the chairman. The chairman of subcommittees vill be designated by the committee chairman with the concurrence of the DCI. Membership on the subcommittees and ad hoc working groups need not be limited to member agencies of the commitvee, but may he 3
-~ “om SANITIZED COPY “ extended by the chairman to representatives of other departments and. agencies having related functional responsibiliies or support capahbui- ties. ; Loot, c. The committee will have a full-time support staff to be provided by USIS departments and agencies as arranged and approved by the DCL. ane 6. Rules of Procedure a. The committee shall mest upon the cell cf the chairman or at the request of any of its members. Items may be placed on the agenda by the DCI or by the chairman or any member of the comzpittea. - b. Decisions or recornmendations will be formulated by the chairman after giving consideration to the views of the members. At the request of a dissenting memier, the chairman will refer the decision or rec- ommendation along with dissenting opinion or opizions to the DCL W. E. Colby Director of Central Intelisence
o rer Lo {Attachment 1) ENTIRE TEXT EXEMPTED FROM DISCLOSURE “DIRECTOR OF CENTRAL INTELLIGENCE DIRECTIVE NO. 1/17
This attachment downgraded of Sec 3(A),E0 11652 on 12/16/76 by 246321 | ee eee ak —-. tye eee - 2 2. vet yes DIRECTOR OF CENTRAL INTELLIGENCE DIRECTIVE NO. 1/11 (Attachment 2) Computer Security The functions of the Security Committee include: (1) To review, formulate and recommend to the DCI policies, standards, and procedures to protect intelligence data storec or processed by computer. (2) To advise and assist the DCI, the Intelligence Community Staff, Committees of the United States Intelligence Board, USIB member agencies and departments, and other intelligence users with respect to all computer security issues and to resolve conflicts that may arise in connection therewith. (3). To formulate and recommend to the DCI. resource pro-. gramming objectives for USIB departments and agencies in the - fiela of computer security in consideration of current and foreseen vulnerabilities and threats and with regard for the effective and efficient use. of resources; to foster and to monitor an aggressive | program of computer security. research and development in the Intelligence Community in order to avoid unwarranted duplication and to assure the pursuit of an effective effort at resolving techni- cal probiems associated with the protection of computer operations, . (4) To coordinate all aspects of Intelligence Community efforts in defense against hostile penetration of Community computer systems as feasible to support otmer Government and national efforts aimed at improving computer security technology; to foster a coordinated program of Intelligence Community computer se- curity training and indoctrination. (5) To facilitate within the Intelligence Community the ex- change of information relating to computer security threats, vul- nerabilities, and countermeasures by providing a focal pein’ jor the . evaluation of foreign intentions and capabilities to exploit Com- — munity computer operations, for central notification of hostile exploitation attempts, for the preparation of damage assessments of incidents of foreign exploitation of intelligence computer opera- tions, and for the formulation of Community policy on the release of computer security information to foreign governments and in- ternational organizations. 1 oo oo Copy Ajo <a
Attachment 2 CECE (6) To review, formulate and recommend minimum computer security st:.ndards, prccedures and criteria as guidance for system design, evaluation and certizication of acceptable levels of security for computer systems. ef . te a wees
SANITIZED COPY Coe Sn! DIRECTOR OF ca AL IN TELLIGENCE DIREC TIVE NO O: aia . The functions of Shc nani aca : se et tion controls are:? " Lae TG weet eM Ag ed “A. To develop and recommend to the Dcy, ‘With ‘the atlyice of -* en the United States Intelligence Board, technical guidance for the estab— tr lishment, tmaintenance and improvement of coordinated. commpartmenta~ a tion systems. mo a . wale: trode. el. . oS. . . - plas . (1) Providing special protection to sensitive intelligence, ioe Ot ; ae telligence information and intelligence sources and methols under 2... 7 0 ne *. (the authority of Section 9 of Executive Order 11652. --:--..-:-:- 3 Bo (2) Exsurine the establishment and disestablishment ofecom~ °°. 4 a partmentation of intelligence and intelligence information on the 7. 7 2 Sth instructiors of the DCL as Jit (3) Ensuring coherent control by the DCI of the processeg - v3 -. os 7, for access approvals to compartmenied intelligence and intchi- . o “ . fence information and of the processes for dissemination, Seniiize- . ; a tion or release of such intelligence information. . toe So, (4) Ensuring the establishment and promulgation or appro- _ - priate criteria for security and need-to-know access approvals. Lo et B. To formulate, coordinate, maintain and promulgate technical =~ = Y- guidance for use in the administration of comparimentation controls - * ot tie - aball echelcns of departmentandagency = | Mie lactivity, SF 4 bo te _ feoncerning: ae! (1) Access approval eriteria| i _ “yo . . Q) Physical Security. Ct ye test UD Inks . oe” Tle” . we et "2 *The term “compartmentation” 2s used In this directiva refess to ) tha systern,. . ; : .. “ whereby special Intelligence Community controls indicating res‘ticted handling —- wt tel within collection programs and thetr end products are applied fo certain types | 2 ott ty of intelligence Information and materi2l The term does nob inclisa Rasttitted ~ > - 7° 7 oe Data 2s defined in Section 11, Atomic Energy Act of 1953, a5 emanced ae » Doe, ; Lo. Lou ueeees 8 eee eee eck 7, ; ta . | = oes -.- - ! -
DANLELZ&uU curr . Attachment 3 \ \ (3) Document identification, handling, accountability and destruction. ; . (4) Automatic data proeessing and associated materials. C. To furnish technical guidance and assistance| iin connection with their sanitization, downgrading, declassl~ fication and decontrol resvonsibilities, vale ~ D. To review and survey, when 2ppropriate, with tha cooperation and assistance of the USIS Princinal concerned, the security standards, © - ‘practices and procedures employed by USIS departments and egencies -- jin relation to approved compartmentation policies, | procedures and controls; and to make recommendations for practical . improvements to the USIB Principals concerned througn the DCL . . F. To recommend security policies, in coordination with appropriate = USIB committees, governing the release or disclosure of compartmented ... ! 10