BY ORDER OF THE AIR FORCE INSTRUCTION 16-1404 …

1 BY ORDER OF THE SECRETARY AIR FORCE INSTRUCTION 16-1404 . OF THE AIR FORCE . 29 MAY 2015. AIR FORCE MATERIEL COMMAND. Supplement 17 FEBRUARY 2016. Operations Support AIR FORCE INFORMATION SECURITY. PROGRAM. COMPLIANCE WITH THIS PUBLICATION IS MANDATORY. ACCESSIBILITY: Publications and forms are available for downloading or ordering on the e- Publishing website at RELEASABILITY: There are no releasability restrictions on this publication OPR: SAF/AAZ Certified by: SAF/AA. (Ms. Zarodkiewicz). Supersedes: AFI 31-401, 1 November 2005; Pages: 110. AFI 31-406, 29 July 2004. (AFMC). OPR: HQ AFMC/IP Certified by: HQ AFMC/IP. (Mr David D Day).

2 Supersedes: AFI 31-401_AFMCSUP, Pages:25. 19 March 2014. This publication implements Air FORCE Policy Directive (AFPD) 16-14, Security Enterprise Governance; Department of Defense (DoD) Directive , Management of Serious Security Incidents Involving Classified Information, DoD INSTRUCTION (DoDI) , Access and Dissemination of RD and FRD, DoDI , DoD Unclassified Controlled Nuclear Information (UCNI), DoD Manual (DoDM) , DoD Information Security Program, Volume 1, Volume 2, Volume 3, and Volume 4; and DoDM , Instructions for Developing Security Classification Guides. It applies to individuals at all levels who create, handle, or store classified information and CUI, including Air FORCE Reserve, Air National Guard (ANG), and contractors when stated in the contract or DD Form 254, Department of Defense Contract Security Classification Specification, except where noted otherwise.

3 This AFI may be supplemented at any level, but all supplements will be routed to the Office of Primary Responsibility (OPR) prior to certification and approval. Refer recommended changes and questions about this publication to the OPR listed above using the AF Form 847, Recommendation for Change of Publication; route AF Form 847 from the field through the 2 AFI16-1404_AFMCSUP 17 FEBRUARY 2016. appropriate chain of command. The authorities to waive wing/unit level requirements in this publication are identified with a Tier ( T-0, T-1, T-2, and T-3 ) number following the compliance statement. See AFI 33-360, Publications and Forms Management, Table for a description of the authorities associated with the tier numbers.

4 Submit requests for waivers through the chain of command to the appropriate tier waiver approval authority, or alternately, to the publication OPR for non-tiered compliance items. Ensure that all records created as a result of processes prescribed in this publication are maintained in accordance with Air FORCE Manual (AFMAN) 33-363, Management of Records, and disposed of in accordance with the Air FORCE Records Information Management System (AFRIMS) Records Disposition Schedule (RDS). The use of the name or mark of any specific manufacturer, commercial product, commodity, or service in this publication does not imply endorsement by the Air FORCE .

5 (AFMC) This INSTRUCTION extends the guidance of AFI 16-1404 , Air FORCE Information Security Program. This supplement replaces AFMC supplement to AFI 31-401; major change includes open storage supplemental controls can only be 4 hour checks or intrusion detection system. Supplement adds requirements of Top Secret accountability, Security Manager Meetings, and the visit of Center/Wing organizations to complete the Center/Wing Annual Self-Inspection Report. This supplement is applicable to US Air FORCE Reserve units and personnel tenant on AFMC. Installations. This publication does not apply to the Air National Guard. This publication may be supplemented at any level, but all Supplements must be routed to the OPR of this publication for coordination prior to certification and approval.

6 Refer recommended changes and questions about this publication to the Office of Primary Responsibility (OPR) using AF Form 847, Recommendation for Change of Publication; route AF Forms 847 from the field through the appropriate functional chain of command to HQ AFMC/IP. Submit written requests for clarification to this supplement to HQ AFMC/IP. The authorities to waive wing/unit level requirements in this publication are identified with a Tier ( T-0, T-1, T-2, T-3 ) number following the compliance statement. See AFI 33-360, Publications and Forms Management, for a description of the authorities associated with the Tier numbers. Submit requests for waivers through the chain of command to the appropriate Tier waiver approval authority, or alternately, to the Publication OPR for non-tiered compliance items.

7 Ensure that all records created as a result of processes prescribed in this publication are maintained in accordance with (IAW) Air FORCE Manual (AFMAN) 33-363, Management of Records, and disposed of IAW Air FORCE Records Information Management System (AFRIMS) Records Disposition Schedule (RDS). SUMMARY OF CHANGES. The publication has been substantially revised and must be completely reviewed. Chapter 1 PROGRAM OVERVIEW AND ADDITIONAL ROLES AND. RESPONSIBILITIES 8. Air FORCE Security Enterprise.. 8. (AFMC) Air FORCE Security Enterprise.. 8. Information Protection.. 8. Information Protection Oversight.. 8. AFI16-1404_AFMCSUP 17 FEBRUARY 2016 3.

8 Information Protection Managers.. 9. Information Protection Implementation.. 9. Air FORCE Information Security.. 10. Other Roles and Responsibilities.. 11. Chapter 2 AIR FORCE INFORMATION SECURITY IMPLEMENTATION 13. Security Program Executives (SPE).. 13. MAJCOM/DRU Director, Information Protection.. 14. MAJCOM/DRU Information Security Specialist.. 14. Wing Commanders.. 15. (AFMC) Wing Commanders.. 15. Wing Chief, Information Protection.. 16. (AFMC) Wing Chief, Information Protection.. 16. Wing Information Security Specialist.. 17. (AFMC) Wing Information Security Specialist.. 17. Commanders and Directors.. 19. (AFMC) Commanders and Directors.

9 19. Security Managers.. 22. Chapter 3 CLASSIFICATION, DECLASSIFICATION, AND MANDATORY. DECLASSIFICATION REVIEW (MDR) PROGRAM 23. Classification.. 23. Original Classification.. 23. Tentative Classification.. 25. Derivative Classification.. 25. Declassification and Changes in Classification.. 25. Mandatory Declassification Review (MDR) Program.. 27. Chapter 4 MARKING CLASSIFIED INFORMATION AND CONTROLLED. UNCLASSIFIED INFORMATION (CUI) 31. Classified Information.. 31. Controlled Unclassified Information (CUI).. 33. Chapter 5 SAFEGUARDING, STORAGE AND DESTRUCTION, TRANSMISSION. AND TRANSPORTATION OF CLASSIFIED AND CONTROLLED. UNCLASSIFIED INFORMATION (CUI) 34.

10 Safeguarding.. 34. 4 AFI16-1404_AFMCSUP 17 FEBRUARY 2016. Storage and Destruction.. 37. Transmission and Transportation.. 40. (Added-AFMC) Administrative Control of Top Secret Information.. 41. Chapter 6 SECURITY EDUCATION AND TRAINING AWARENESS 44. General Requirement.. 44. (AFMC) General Requirement.. 44. Initial Orientation Training.. 44. (AFMC) Initial Orientation Training.. 44. Special Training Requirements.. 45. Annual Refresher Training.. 45. (AFMC) Annual Refresher Training.. 45. OCA and Derivative Classifier Training Waivers.. 46. (AFMC) Center CIPs will submit waiver requests to HQ AFMC/IP through their Center/CV.. 46. Declassification Authority Training and Certification Program.