DODD 8500.01E(D) 04/23/07

Abstract

<u>APPLICABILITY AND SCOPE</u> <br>This Directive applies to: <br>The Office of the Secretary of Defense, the Military Departments, the Chairman of the Joint Chiefs of Staff, the Combatant Commands, the Inspector General of the Department of Defense, the Defense Agencies, the DoD Field Activities, and all other organizational entities within the Department of Defense (hereafter referred to collectively as "the DoD Components"). <br>All DoD-owned or -controlled information systems that receive, process, store, display or transmit DoD information, regardless of mission assurance category, classification or sensitivity, including but not limited to: <br>DoD information systems that support special environments, e.g., Special Access Programs (SAP) and Special Access Requirements (SAR), as supplemented by the special needs of the program. <br>Platform IT interconnections, e.g., weapons systems, sensors, medical technologies or utility distribution systems, to external networks. <br>Information systems under contract to the Department of Defense. <br>Outsourced information-based processes such as those supporting e-Business or e-Commerce processes. <br>Information systems of Nonappropriated Fund Instrumentalities. <br>Stand-alone information systems. <br>Mobile computing devices such as laptops, handhelds, and personal digital assistants operating in either wired or wireless mode, and other information technologies as may be developed. <br>Nothing in this policy shall alter or supercede the existing authorities and policies of the Director of Central Intelligence (DCI) regarding the protection of Sensitive Compartmented Information (SCI) and special access programs for intelligence as directed by Executive Order 12333 (reference (g)) and other laws and regulations. <br><u>PURPOSE</u> <br>This Directive: <br>Establishes policy and assigns responsibilities under reference (a) to achieve Department of Defense (DoD) information assurance (IA) through a defense-in-depth approach that integrates the capabilities of personnel, operations, and technology, and supports the evolution to network centric warfare. <br>Supersedes DoD Directive 5200.28, DoD 5200.28-M, DoD 5200.28-STD, and DoD Chief Information Officer (CIO) Memorandum 6-8510 (references (b), (c), (d), and (e)). <br>Designates the Secretary of the Army as the Executive Agent for the integration of common biometric technologies throughout the Department of Defense. <br>Authorizes the publication of DoD 8500.1-M consistent with DoD 5025.1-M (reference (f)).