UNCLASSIFIED// ROUTINE R 211340Z JAN 16 FM CNO WASHINGTON DC TO NAVADMIN CNO WASHINGTON DC BT UNCLAS NAVADMIN 015/16 (Corrected Copy) SUBJ/INSIDER THREAT TO CYBER SECURITY RANDOM COUNTERINTELLIGENCE POLYGRAPH PROGRAM// REF/A/DOC/TITLE 10, SEC 1564A// REF/B/DOC/DODD 5210.48/APR15// REF/C/DOC/DODI 5210.91/OCT13// REF/D/DOC/SECNAV M-5239.1/NOV05// REF/E/DOC/NATIONAL INSIDER THREAT POLICY/NOV12// REF/F/MSG/CNO WASHINGTON DC/132027ZDEC13// NARR/Reference (a) is U.S. code, armed forces, general military law, and counterintelligence polygraph program. Reference (b) is the Department of Defense directive on the Department of Defense polygraph program. Reference (c) is the Department of Defense instruction on polygraph and credibility assessment procedures. Reference (d) is the Secretary of the Navy, Department of the Navy information assurance program manual. Reference (e) is the national insider threat policy. Reference (f) is NAVADMIN 319/13 regarding insider threat to cyber security.// RMKS/1. This NAVADMIN announces the Navy-specific Random Counterintelligence Polygraph Program for privileged users and higher-risk personnel. This program is designed to mitigate and deter the potential insider threat to classified information, systems, and networks. The Navy’s legal authority for this action is listed in references (a), (b) and (c). 2. Definitions. Reference (d) defines privileged users as individuals who have access to system control, monitoring, or administration functions (e.g., system administrator, information assurance officer, system programmers, etc.). Reference (e) defines insider threat as a person who will use her/his authorized access, wittingly or unwittingly, to do harm to the security of the United States (U.S.). This threat can include damage to the U.S. through espionage, terrorism, unauthorized disclosure of national security information, or through the loss or degradation of departmental resources or capabilities. 3. Applicability. In accordance with references (a) and (c), the following privileged users are subject to the Navys Random Counterintelligence Polygraph Program: a. Those whose duties involve access to Top Secret information. b. Those whose duties involve a Special Access Program under Executive Order 12958, as amended. c. Those whose duties involve the creation, use, or handling of classified information related to sensitive intelligence or operational activities. 4. Guidance. Recent high-profile unauthorized disclosures of classified information involving U.S. service members, civilians, and contractors highlights the need to implement this Random Counterintelligence Polygraph Program. The Random Counterintelligence Polygraph Program for privileged users is an additional tool to mitigate and deter the insider threat posed by higher-risk individuals who have elevated access and privileges to classified information, networks, and systems. Insider threats directly imperil our warfighting effectiveness and degrade our readiness. This is an all-hands effort. Commanders are to ensure compliance with the Navy’s Random Counterintelligence Polygraph Program for privileged users. The Deputy Chief of Naval Operations for Information Dominance (OPNAV N2/N6) will publish additional guidance regarding the implementation and execution of this program. a. The Deputy Chief of Naval Operations for Information Dominance (OPNAV N2/N6) will manage, oversee and coordinate the activities of the Random Counterintelligence Polygraph Program to include selection, notification, scheduling, and reporting of results to the appropriate authority. b. OPNAV N2/N6 will select privileged users from the Total Workforce Management System (TWMS) Information Assurance Workforce Module. TWMS is the system of record for documenting privileged users. OPNAV N2/N6 will select higher-risk individuals in coordination and collaboration with Navy commands based on a risk management approach. c. Privileged users and higher-risk individuals will be entered into a software program that will generate a monthly list of randomly selected individuals for counterintelligence polygraph examinations. d. OPNAV N2/N6 will provide the randomly generated list of individuals to the Naval Criminal Investigative Service (NCIS) Office of Polygraph Services. e. NCIS will contact each privileged users or higher-risk individuals Special Security Officer (SSO) or Command Security Manager (CSM) to inform them of the polygraph requirement and coordinate scheduling. NCIS will conduct counterintelligence polygraph examinations in accordance with reference (c). f. Upon completion of counterintelligence polygraph examinations, NCIS will note the results in appropriate security and investigative databases. g. Polygraph examination results indicative of counterintelligence threats or criminal conduct will be resolved in accordance with NCIS counterintelligence and law enforcement policy and procedures. h. OPNAV N2/N6 will notify commands of all counterintelligence polygraph examination results indicative of behavior that causes doubt regarding a privileged users loyalty, judgment, honesty or reliability as it relates to maintaining eligibility to access classified systems or data. 5. Reference (f) outlined several actions designed to reduce threats to classified or sensitive information from insiders. Effectively implementing the Random Counterintelligence Polygraph Program will reduce the risk from insider threats. 6. The Director, Navy Staff serves as the overall OPNAV lead for Navy Insider Threat. OPNAV N2/N6 continues to lead a focused effort to ensure the security of our classified and sensitive information, networks, and systems. The Insider Threat to Cyber Security (ITCS/OPNAV N2/N6IP2) office is charged with coordinating the Navy’s Random Counterintelligence Polygraph Program for privileged users. ITCS will work closely with the Judge Advocate General of the Navy to ensure the program complies with applicable statutes, regulations, and directives. The Naval Criminal Investigative Service will conduct the Random Counterintelligence Polygraph Examinations in accordance with reference (b). 7. For more information on the Navy’s Random Counterintelligence Polygraph Program for privileged users, please contact Mrs. Jennifer Floyd, OPNAV N2/N6, (703) 604-5799; or Mr. Robert Winston, OPNAV N2/N6, (703) 604-5735. DSN: 664. 8. This NAVADMIN will remain in effect until cancelled or superseded. 9. Released by Vice Admiral Ted N. Branch, Deputy Chief of Naval Operations for Information Dominance, OPNAV N2/N6.// BT #0001 NNNN UNCLASSIFIED//