HomeNewsArticle Display

KNOW THE RULES: Removable Media

  • Published
  • By 72nd Air Base Wing Communications Directorate
TINKER AIR FORCE BASE, Okla. --  At some point during your government career, you will come in contact with a computer. Knowing the rules and regulations established by the Air Force will enable you to protect the government network.

To help assist you with your cyber responsibilities, there is a commander/director- appointed position: the cybersecurity liaison (formerly the information assurance officer).

In addition, there is an entire Air Force regulation that describes what you can and cannot do on the Air Force Network: AFMAN 33-152 - User Responsibilities and Guidance for Information Systems. 

"AFMAN 33-152 discusses everyone's responsibilities for proper use or interaction with the Air Force network. The goal is to protect the government network from potential security threats," said Matthew Ivester, information technology specialist with the 72nd Air Base Wing Cybersecurity Office. "If you have not already done so, consider reviewing AFMAN 33-152 and talking with your cybersecurity liaison to ensure you are in compliance."

Mr. Ivester said the realm of cybersecurity is complex, impacting not only the Air Force mission, but potentially the personal lives of fellow Wingmen.

"I would advise everyone to take a couple minutes of their day to evaluate all that is at stake," he said. 

You don't have to become a cybersecurity expert overnight, but Mr. Ivester said you need to make sure you are following the Air Force rules already in place. 

"Those same rules and the security mentality you practice here can be applied outside of work to help secure you and your family from potential cyber threats," he said. 

For security reasons, cybersecurity policy details can't be publicized; however, a major change was released affecting removable media.

According to Air Force regulations, removable media refers to portable computer storage media that can be removed from its reader device. Among the most common types of removable media are floppy disks, compact discs, DVDs, phones, photo cards and external hard drives.

One of the many removable media Air Force policy requirements is now being enforced in a big way. You must obtain guidance or approval from your organizational cybersecurity liaison before attaching any external storage devices to the network.

  Those who do not receive proper approval may find their government-issued removable media device no longer works properly.

If you are issued or work in or around removable media, it is important to know the rules.  Depending on the type you are trying to use, there may be additional policy requirements, but here are a few consistent requirements:

Obtain guidance and/or approval from the organizational cybersecurity liaison before attaching any external storage devices to the network.

Safeguard, mark and label removable media according to the requirements for the highest level of information contained on the media.

Do not remove removable media with sensitive information from protected workplaces.
Immediately report loss or suspected loss of removable media containing classified, CUI, or PII to your cybersecurity liaison.

Immediately contact the cybersecurity liaison if it appears information of higher classification is introduced onto a lower classification information system. If this happens:

1) Disconnect the network cable.
2) Contact your cybersecurity liaison.
3) Secure the removable media.

Writing to any type of removable media from classified systems is prohibited unless appropriately approved. Talk to your cybersecurity liaison for more information.
Scan approved removable media devices for viruses before and after use. 

Do NOT connect government issued removable media to personally owned devices.
You cannot take a government issued external hard drive home and connect it to your personal home computer.

Do NOT connect personally owned removable media devices to government information systems (computers).

Do not connect personally-owned removable media devices (including, but not limited to, music/video CD/DVDs, I-devices, commercial MP3 players, external hard drives, etc.) to Air Force computers.