|
This file is available on a Cryptome DVD offered by Cryptome. Donate $25 for a DVD of the Cryptome 10-year archives of 35,000 files from June 1996 to June 2006 (~3.5 GB). Click Paypal or mail check/MO made out to John Young, 251 West 89th Street, New York, NY 10024. Archives include all files of cryptome.org, cryptome2.org, jya.com, cartome.org, eyeball-series.org and iraq-kill-maim.org. Cryptome offers with the Cryptome DVD an INSCOM DVD of about 18,000 pages of counter-intelligence dossiers declassified by the US Army Information and Security Command, dating from 1945 to 1985. No additional contribution required -- $25 for both. The DVDs will be sent anywhere worldwide without extra cost. | |||
10 October 2006. Cryptome filed on 9 October 2006 an FOIA request to the National Security Agency for all the CNSS restricted documents:
http://cryptome.org/nsa-cnss-foia.htm
8 October 2006
What is most disturbing about this list of COMSEC documents is how few of these documents are available to the public for use in protecting communication and privacy, and in turn, democracy. Although funded by the public, far too few are available for public use against the increasing onslaught of commercial and governmental spying and violation of privacy.
In 1999 NSA released under FOIA a few documents to Cryptome relating to TEMPEST, with many redacted. The argument Crytome made for release then was that the public needed to know more how to protect itself from TEMPEST attacks, then little-known outside government communications as a threat. A similar argument can be made for the release of many more of the restricted COMSEC documents listed here; there is a greater need now than in 1999 due to the tremendous worldwide growth of technologies and businesses to support personal, commercial and governmental spying. Protection of national security should include maximum release of information to protect the public against sophisticated techological threats which underly these "national security issuances."
CNSS should consider releasing the FOUO documents for a start, and FOIA requests should free more for publication.
Included are links to some of the restricted documents on Cryptome provided by NSA and other sources. Copies of restricted (unlinked) documents welcomed. Send to: jya[at]cryptome.net
This index supercedes that of 1998: http://cryptome.org/nstissc-idx.htm
Related documents: http://cryptome.org/nsa-tempest.htm
http://www.cnss.gov/Assets/pdf/CNSS-INDEX.pdf (for the Index)
http://www.cnss.gov/full-index.html (for CNSS links to documents)
[CNSS documents linked are in PDF.]
July 2006
This Index of Issuances supersedes all previous editions. Representatives of the Committee on National Security Systems (CNSS) may obtain copies of these documents from:
CNSS Secretariat (I01C)
National Security Agency
9800 Savage Road STE 6716
Ft. Meade, MD 20755-6716
(410) 854-6805 or toll free at (888) NSTISSC
U.S. Government contractors should contact their Contracting Officer Representative regarding distribution of these documents.
[Classification Symbols: U = Unclassified; FOUO = For Official Use Only; C = Classified; S = Secret; SNF = Secret No Foreign Distribution]
NO. |
TITLE |
DATE |
CLASS |
1 |
(CNSS) National Policy for Safeguarding and Control of COMSEC Materials | Sept 2004 |
U |
3 |
(NTISS) National Policy for Granting Access to U.S. Classified Cryptographic Information (U) | 19 Dec 88 |
FOUO |
4 |
(NSTISS) National Policy on Electronic Keying (U) | 16 Nov 92 |
FOUO |
5 |
(NCSC) National Policy on Use of Cryptomaterial by Activities Operating in High Risk Environments | 16 Jan 81 |
U |
| Appendix I to NCSC-5, Guidelines for Identifying High Risk Environments (U) | 16 Jan 81 |
C |
|
| Appendix II to NCSC-5, Priorities for Selecting Machine Cryptosystems for Use in High Risk Environments (U) | 16 Jan 81 |
FOUO |
|
5 |
(NSTISS) National Policy for Incident Response and Vulnerability Reporting for National Security Systems (U) | 30 Aug 93 |
FOUO |
6 |
(CNSS) National Policy on Certification and Accreditation of National Security Systems | Nov 05 |
U |
7 |
(NSTISS) National Policy on Secure Electronic Messaging Services | 21 Feb 95 |
U |
8 |
(NSTISS) National Policy Governing the Release of INFOSEC Products or Associated INFOSEC Information to Foreign Governments (U) | 13 Feb 97 |
FOUO |
10 |
(CNSS) National Policy Governing the Use of Approved Security Containers in Information Systems Security Applications | 16 Dec 04 |
U//FOUO |
11 |
(NSTISS) National Policy Governing the Acquisition of Information Assurance (IA) and IA-Enabled Information Technology (IT) Products (Unclassified Fact Sheet available) | Jun 03 |
FOUO |
12 |
(NSTISS) National Information Assurance (IA) Policy for U.S Space Systems (Unclassified Fact Sheet available) | Jan 01 |
U//FOUO |
14 |
(CNSS) National Policy Governing the Release of INFOSEC Products or Associated INFOSEC Information to Authorized U.S. Activities that are not a Part of the Federal Government | Nov 02 |
U |
15 |
(CNSS) National Policy on the Use of the Advanced Encryption Standard (AES) to Protect National Security Systems and National Security Information (Unclassified Fact Sheet available) | Feb 03 |
U//FOUO |
16 |
(CNSS) National Policy for the Destruction of COMSEC Paper Material | Oct 02 |
U//FOUO |
17 |
(CNSS) National Information Assurance (IA) Policy on Wireless Capabilities | Aug 2005 |
U |
18 |
(CNSS) National Policy on Classified Information Spillage | Jul 2006 |
U |
101 |
(NSTISS) National Policy on Securing Voice Communications | Sep 99 |
U |
200 |
200 National Policy on Controlled Access Protection (U) | 15 Jul 87 |
U |
300 |
(CNSS) National Policy on Control of Compromising Emanations | Apr 2004 |
U//FOUO |
NO. |
TITLE |
DATE |
CLASS |
500 |
(CNSS) Information Assurance (IA) Education, Training, and Awareness | Aug 2006 |
U |
501 |
(NSTISS) National Training Program for Information Systems Security (INFOSEC) Professionals (U) | 16 Nov 92 |
U |
502 |
(CNSS) National Directive on Security of National Security Systems | Dec 04 |
U |
503 |
(NSTISS) Incident Response and Vulnerability Reporting for National Security System (U) | 30 Aug 93 |
FOUO |
600 |
(NSTISS) Communications Security (COMSEC) Monitoring (U) | 10 Apr 90 |
FOUO |
900 |
(CNSS) Governing Procedures of the Committee on National Security Systems (CNSS) | 16 Dec 04 |
U |
901 |
(CNSS) Committee on National Security Systems Issuance System (U) | 16 Dec 04 |
U |
NO. |
TITLE |
DATE |
CLASS |
2005 |
(NACSI) Communications Security (COMSEC) End Item Modification (U) | 28 May 81 |
FOUO |
6001 |
(NACSI) Foreign Military Sales of Communications Security Articles and Services to Foreign Governments and International Organizations (U) | 21 Sep 84 |
C |
6002 |
(NACSI) Protection of Government Contractor Telecommunications | 04 Jun 84 |
U |
8105 |
(NACSI) Operational Doctrine for TSEC/KG-45 (SANCHEZ) (U) | 16 Dec 80 |
S |
8116 |
(NACSI) Operational Doctrine for the TSEC/CI-10 (ELWELL II) (U) | 01 Feb 93 |
C |
NO. |
TITLE |
DATE |
CLASS |
1000 |
(NSTISS) (U) National Information Assurance Certification and Accreditation Process (NIACAP) | Apr 2000 |
U |
3000 |
(NTISS) Security Doctrine for the TSEC/KW-46 Fleet Broadcast System (U) | 04 Apr 86 |
C |
3001 |
(NTISS) Operational Security Doctrine for the Automanual (AMS) (U) | 30 Oct 89 |
C |
3002 |
(NTISS) Operational Doctrine for the KGV-9 Removable Key Stream Generator Module (U) | 05 Sep 86 |
FOUO |
3003 |
(NSTISS) Operational Security Doctrine for the KG-66/KG-66A/SO-66/KGR-66/KGV-68/KGR-68/KGV-68B (U) [Cryptome Version] | Aug 2000 |
FOUO |
3005 |
(NTISS) Safeguarding & Control of Data Encryption Standard (DES) Equipment & Associated Unclassified Communications Security Aids (U) | 16 Mar 87 |
FOUO |
3006 |
(NSTISS) (U) Operational Security Doctrine for the NAVSTAR Global Position System (GPS) Precise Positioning Service (PPS) User Segment Equipment | Aug 2001 |
FOUO |
3008 |
(NTISS) Operational Security Doctrine for Type I Communications Equipment Containing the FASCINATOR Secure Voice Module (SVM) (U) | 01 May 89 |
FOUO |
3010 |
(NTISS) Operational Security Doctrine for the KY-65A/75A (U) | 19 Jul 89 |
S//NF |
3011 |
(NTISS) Operational Security Doctrine for KY-57/58, KY-67 & KYV-2/2A (U) | 13 Oct 89 |
FOUO |
3012 |
(NTISS) Operational Security Doctrine for the KY-71 (U) | 27 Nov 89 |
FOUO |
3013 |
(NTISS) Operational Security Doctrine for the Secure Telephone Unit III (STU-III) Type I Terminal (U) | 08 Feb 90 |
FOUO |
| Annex E, System Security Guidance for the Motorola Vehicular-Mounted STU-III Cellular Telephone (Type 1) (U) | 22 Feb 91 |
FOUO |
|
| Annex F, Supplemental Operational Security Doctrine for the STU-III/A Terminal (Type 1) (U) | 22 Feb 91 |
FOUO |
|
| Annex G, System Security Guidance for the AT&T STU-III Access Control System (SACS) (Type 1) (U) | 22 Feb 91 |
FOUO |
|
| Annex H, STU-III Data Port Guidance (U) | 27 Nov 91 |
FOUO |
|
3014 |
(NSTISS) Management of Off-Line Cryptosystems (U) | 01 Feb 91 |
FOUO |
3015 |
(NSTISS) Operational Security Doctrine for the Fiber Alarmed Modem (FAM)-131 Intrusion Detection Optical Communications System (IDOCS) (U) | 28 Feb 91 |
FOUO |
3016 |
(NSTISS) Operational Security Doctrine for GILLAROO Personal Computer Security Device (PCSD) (U) | 02 Jul 91 |
FOUO |
3017 |
(NSTISS), Operational Security Doctrine for Non-TRI-TAC KG-84A, KG-84C, KIV-7, and KIV-7HS, KIV-7HSA, and KIV-7HSB | Mar 03 |
C |
3018 |
(NSTISS) Operational Security Doctrine for the GUARDSMAN 100 and 100T (U) | 08 Jan 92 |
FOUO |
3019 |
(NSTISS) Operational Security Doctrine for the FASTLANE (KG-075 and KG-75A) | 30 Oct 01 |
U//FOUO |
3020 |
(NSTISS) Operational Security Doctrine for the KL-51 (RACE) (U) | 11 Feb 92 |
FOUO |
3021 |
(CNSS) Operational Security Doctrine for the AN/CYZ-10/10A Data Transfer Device (DTD) (U) | Sep 02 |
FOUO |
3022 |
(NSTISS) Operational Security Doctrine for Trunk Encryption Devices (TEDs) KG-81, KG-94 Family, KG-95 Family, KG-194 Family, and KIV-19 in Stand-Alone Applications | Jul 99 |
U//FOUO |
3024 |
(NSTISS) (U) Operational Security Doctrine for KG-189 Strategic Trunk Encryptor | Jan 00 |
U//FOUO |
3025 |
(NSTISS) (U) Operational Security Doctrine for CIPHERTAC 2000 (CTAC 2000) | Aug 99 |
U//FOUO |
3026 |
(NSTISS) Operational Security Doctrine for the Motorola Network Encryption System (NES) | Apr 99 |
U//FOUO |
3028 |
(NSTISS) Operational Security Doctrine for the FORTEZZA User PCMCIA Card | Dec 01 |
U |
3029 |
(CNSS) Operational Systems Security Doctrine for TACLANE (KG-175) | May 04 |
U//FOUO |
|
CNSS-089-04, Changes for CNSS Instruction No. 3029 | 25 Aug 04 |
U//FOUO |
|
CNSS-057-06, Changes for CNSS Instruction No. 3029 | 19 Apr 06 |
U//FOUO |
3030 |
(NSTISS) Operational Systems Security Doctrine for the FORTEZZA PLUS (KOV-14) and Cryptographic Card and Associated Secure Terminal Equipment (STE) | 26 Oct 01 |
U//FOUO |
3031 |
(CNSS) Operational Systems Security Doctrine for the SecteraTM In-Line Network Encryptor (KG-235) | Feb 03 |
U//FOUO |
3032 |
(CNSS) Operational Security Doctrine for the VIASAT Internet Protocol (VIP) Crypto Version 1 (KIV-21) | August 2003 |
U//FOUO |
3034 |
(CNSS) Operational Security Doctrine for the SECNET TM 11 Wireless Local Area Network Interface Card | Apr 2004 |
U//FOUO |
4000 |
(NSTISS) Communications Security Equipment Maintenance & Maintenance Training (U) | Jan 98 |
FOUO |
4001 |
(NSTISS) Controlled Cryptographic Items (U) | Jul 96 |
FOUO |
4002 |
Classification Guide for COMSEC Information (U) | 05 Jun 86 |
S//NF |
| CNSS-066-04 authorizes pen & ink changes for NTISSI 4002 (U) | 2 Jul 04 |
U//FOUO |
|
4003 |
(NSTISS) Reporting and Evaluating COMSEC Incidents (U) | 02 Dec 91 |
FOUO |
4004 |
(CNSS) Destruction and Emergency Protection Procedures for COMSEC and Classified Material | Aug 2006 |
U//FOUO |
4005 |
(NSTISS) Safeguarding Communications Security (COMSEC) Facilities and Materials (U) | Aug 97 |
FOUO |
|
Amendment to NSTISSI 4005 (NSTISSC-003-98) | 02 Mar 98 |
U |
|
Amendment to NSTISSI 4005 (CNSS-079-03) | 05 Aug 03 |
U//FOUO |
|
Amendment to NSTISSI 4005 (CNSS-045-05) | 28 Sep 05 |
U//FOUO |
4006 |
(NSTISS) Controlling Authorities for COMSEC Material (U) | 02 Dec 91 |
FOUO |
4007 |
(NTISS) Communications Security Utility Program (U) | 30 Oct 89 |
FOUO |
4008 |
(NSTISS) Program for the Management and Use of National Reserve Information Systems Security (INFOSEC) Material (U) | 09 Aug 91 |
FOUO |
4009 |
(CNSS) National Information Assurance (IA) Glossary (U) | June 2006 |
U |
4010 |
(NSTISS) Keying Material Management (U) | 17 Jun 93 |
FOUO |
4011 |
(NSTISS) National Training Standard for INFOSEC Professionals | 20 Jun 94 |
U |
4012 |
(CNSS) National Training Standard for Senior System Managers (SSMs) | Jun 04 |
U |
4013 |
(CNSS) National Information Assurance Training Standard for System Administrators (SA) (U) | Mar 04 |
U |
4014 |
(CNSS) National Training Standard for Information Systems Security Officers (ISSO) (U) | Apr 04 |
U |
4015 |
(NSTISS) National Training Standard for System Certifiers | Dec 00 |
U |
4016 |
(CNSS) National Training Standard for Risk Analysts | Nov 05 |
U |
7000 |
(CNSS) TEMPEST Countermeasures for Facilities (U) | May 04 |
C//REL |
7001 |
(NSTISS) NONSTOP Countermeasures (U) | 15 Jun 94 |
S//NF |
7002 |
(NSTISS) TEMPEST Glossary (U) | 17 Mar 95 |
S//NF |
7003 |
(NSTISS) Protected Distribution Systems (PDS) | 13 Dec 96 |
U |
NO. |
TITLE |
DATE |
CLASS |
IA/01-04 |
(CNSS) Security Through Product Diversity | Jul 04 |
U |
IA/02-04 |
(CNSS) Retirement of Data Encryption Standard (DES) Based Cryptography to Protect National Security Systems | Mar 05 |
U |
IA/03-04 |
(CNSS) Advanced Encryption Standard (AES) Implementation | Nov 04 |
U//FOUO |
INFOSEC 1-99 |
(NSTISS) The Insider Threat to U.S. Government Information Systems | Jul 99 |
U |
INFOSEC 1-00 |
(NSTISS) Use of the Federal Information Processing Standards (FIPS) 140-1 Validated Cryptographic Modules in Protecting Unclassified National Security Systems | 8 Feb 00 |
U |
INFOSEC 2-00 |
(NSTISS) Strategy for Using the National Information Assurance Partnership (NIAP) for the Evaluation of Commercial Off-the-Shelf (COTS) Security Enabled Information Technology Products | 8 Feb 00 |
U |
INFOSEC 3-00 |
(NSTISS) Advisory Memorandum on Web Browser Security Vulnerabilities | Aug 00 |
U |
INFOSEC 01-02 |
(CNSS) Advisory Memorandum for Common Terminology Associated with the Electronic Key Management System (w/change pages Sep 02) | Mar 02 |
U//FOUO |
COMSEC |
Release of Communications Security Equipment, Material or Information to Foreign Enterprises (U) | 29 Oct 85 |
U |
COMSEC |
TRI-TAC Keying Concepts (U) | 22 Oct 87 |
C |
COMSEC |
Nomenclature for Communications Security Material (U) | 14 Oct 93 |
FOUO |
COMSEC 1-98 |
AN/CYZ-10/10A Data Transfer Device (DTD) Training | Aug 98 |
U |
COMSEC 2-98 |
Secure Terminal Equipment (STE) - A Strategy for Evolution to Secure Digital Capabilities | Dec 98 |
FOUO |
COMPUSEC |
Office Automation Security Guidelines (U) | 16 Jan 87 |
U |
COMPUSEC |
(NSTISS) Protection of Information Systems (IS) Outside the Continental United States (OCONUS) (U) | 14 Sep 90 |
FOUO |
COMPUSEC |
(NSTISS) The Role of Firewalls and Guards in Enclave Boundary Protection | Dec 98 |
U |
COMPUSEC |
(NSTISS) The Transition from the Trusted Computer System Evaluation Criteria to the International Common Criteria for Information Technology Security Evaluation | 11 Mar 99 |
U |
TEMPEST |
(NSTISS) Compromising Emanations Analysis Handbook (U) | 20 Dec 91 |
C |
TEMPEST |
(NSTISS) Compromising Emanations Laboratory Test Requirements, Electromagnetics (U) | 15 Dec 92 |
C |
| Appendix C of NSTISSAM TEMPEST/1-92 (U) (Issued via NSTISSC Memo, Serial: NSTISSC-002/94) | 19 Jan 94 |
C |
|
| Appendix E of NSTISSAM TEMPEST/1-92 (U) (Issued via NSTISSC Memo, Serial: NSTISSC-014/93) | 11 May 93 |
U |
|
| Section 6 Change to NSTISSAM TEMPEST/1-92 (U) (Issued via NSTISSC Memo, Serial: NSTISSC-017/94) | 27 May 94 |
FOUO |
|
TEMPEST |
(NSTISS) Procedures for TEMPEST Zoning (FOUO) | 30 Dec 92 |
FOUO |
TEMPEST |
(NSTISS) Compromising Emanations Field Test Requirements, Electromagnetics (U) | 30 Aug 93 |
C |
TEMPEST |
(NSTISS) Rationale for Compromising Emanations Laboratory and Field Test Requirements, Electromagnetics (U) | 14 Oct 93 |
S |
| Appendix J of NSTISSAM TEMPEST/2-93 (U) (Issued via NSTISSC Memo, Serial: NSTISSC-008/94) | 07 Mar 94 |
C |
|
TEMPEST |
(NSTISS) Shielded Enclosures (U) | 30 Jan 95 |
FOUO |
TEMPEST |
(NSTISS) RED/BLACK Installation Guidelines (U) | 12 Dec 95 |
FOUO |
|
Amendment to TEMPEST 2/95 | 3 Feb 00 |
FOUO |
TEMPEST |
Maintenance and Disposition of TEMPEST Equipment | Dec 00 |
U |
TEMPEST |
(CNSS) Non-stop Evaluation Standard | Oct 02 |
C |
NO. |
TITLE |
DATE |
CLASS |
4004 |
Communications Security Survey Guide (U) | 03 Jul 80 |
C |
5000 |
TEMPEST Fundamentals (U) | 01 Feb 82 |
C |
7002 |
(NACSEM) COMSEC Guidance for ADP Systems (U) | Sep 75 |
C |
| NO. | TITLE | DATE | CLASS |
| NSTISSC-034-99 | Position Paper on Information Assurance | Apr 1999 |
U//FOUO |
| NSTISSAM INFOSEC/1-99 |
The Insider Threat to U.S. Government Information Systems | Jul 1999 |
U |
| CNSS-075-03 | Foreign Influence on U.S. Information Technology | Sep 2003 |
U//FOUO |
| CNSS-067-06 | 10th Annual Assessment of Information Assurance for National Security Systems of the USG | May 2006 |
U//FOUO |
CANCELLED OR SUPERSEDED ISSUANCES
DOCUMENT |
CANCELLED OR SUPERSEDED BY |
DATE |
NCSC POLICIES |
||
| NCSC 1 16 Jan 81 |
CNSS Policy 1, National Policy for Safeguarding and Control of COMSEC Materials | Sep 2004 |
| NCSC 2 7 Jul 83 |
CNSS Policy 14, National Policy Governing the Release of INFOSEC Products or Associated INFOSEC Information to Authorized U.S. Activities that are not a Part of the Federal Government | Nov 02 |
NCSC 3, |
NSTISSI 7002, TEMPEST Glossary | 17 Mar 85 |
NCSC 4, |
NTISSP 300, National Policy on Control of Compromising Emanation | 3 Oct 88 |
NCSC 6,
NACAM-83/1, |
NSTISSP 8, National Policy Governing the Release of INFOSEC Products
or Associated INFOSEC Information to Foreign Governments
Advisory Memorandum on Protection of Communications Security Information Released to Foreign Governments and International Organizations |
13 Feb 97 |
NCSC 7, |
Cancelled via memorandum, NSTISSC-003-94 | 2 Feb 94 |
NCSC 9, |
NSTISSI 4009, National Information Systems Security (INFOSEC) Glossary | 5 Jun 92 |
| NCSC 10, 26 aPR 82 |
NTISSP 1, National Policy on Applications of Communications Security to U.S. Civil and Commercial Space Systems | 17 Jun 85 |
NCSC 11 |
Cancelled via memorandum, NSTISSC-052-95 (This also cancels NACAM 84/1) | 4 Dec 95 |
|
||
NTISS POLICIES |
||
| NSTISSP 1 17 Jun 85 |
Superceded by NSTISSP No. 12, National Information Assurance (IA) Policy for U.S. Space Systems | Jan 01 |
| NSTISSP 6 8 Apr 1994 |
CNSSP 6, National Policy on Certification and Accreditation of National Security Systems | Nov 05 |
| NSTISSP 10 21 Jul 99 |
Superceded by CNSSP No. 10, National Policy Governing Use of Approved Security Containers in Information Security Applications | 16 Dec 04 |
| NSTISSP 11 Jan 00 |
(NSTISSP) National Policy Governing the Acquisition of Information Assurance (IA) and IA-Enabled Information Technology (IT) Products | Jun 03 |
| NSTISSP 100 14 Sep 99 |
Superceded by NSTISSP No. 12, National Information Assurance (IA) Policy for U.S. Space Systems | Jan 01 |
NTISSP 2, |
Cancelled via memorandum, SSSG-003/87 | 28 Jul 87 |
NTISSP 300, |
NSTISSP No. 300, National Policy on Control of Compromising Emanations | 29 Nov 93 |
NTISSP 300, |
(CNSSP) 300, National Policy on Control of Compromising Emanations (U) | Apr 2004 |
|
||
DIRECTIVES |
||
NSTISSD 500 |
Information Assurance (IA) Education, Training, and Awareness | Aug 2006 |
NSTISSD 502 |
Superceded by CNSSD No. 502, National Directive on Security of National Security Systems | 16 Dec 04 |
NSTISSD 900 |
Superceded by CNSSD 900, Governing Procedures of the Committee on National Security Systems (CNSS) | 16 Dec 04 |
NSTISSD 901 |
Superceded by CNSSD 901, Committee on National Security Systems (CNSS) Issuance System | 16 Dec 04 |
|
||
NACSI |
||
NACSI 1001A, |
NTISSD 901, National Telecommunications and Information Systems Security Issuance System |
25 Sep 85 |
NACSI 2001, |
NSTISSI 4008, Program for the Management and Use of National Reserve Information Systems Security (INFOSEC) Material | 9 Aug 91 |
NACSI 2002(C), |
NACSI 2002A, Keying Material Management | 26 Sep 83 |
NACSI 2002A, |
NSTISSI 4010, Keying Material Management | 17 Jun 93 |
NACSI 2005, |
NACSI 2005, COMSEC End Modification | 28 May 81 |
NACSI 2007, |
NACSI 2007, Standard Criteria for Controlling COMSEC Equipment Loans | 11 Nov 77 |
NACSI 2007, |
Cancelled via memorandum, NSTISSC-052-95 | 4 Dec 95 |
NACSI 4000, |
NACSI 4000A, Guidelines for the Conduct of Communications Security (COMSEC) Monitoring Activities | 9 Feb 84 |
| NACSI 4000A, 9 Feb 84 |
NTISSD 600, Communications Security (COMSEC) Monitoring | 10 Apr 90 |
| NACSI 4001, 19 Jun 70 |
NACSI 4005, Standard Criteria for Safeguarding Communications Security Material | 22 Aug 73 |
| NACSI 4002, 10 Aug 70 |
NACSI 4002, KY-8 Wireline Usage | 23 Sep 77 |
| NACSI 4002, 23 Sep 77 |
NTISSI 3007, Operational Security Doctrine for the KY-8/28/38 | 14 Mar 89 |
| NACSI 4003, Mar 73 |
NACSI 4003, Classification Guidelines for COMSEC Information | 1 Dec 78 |
| NACSI 4003, 1 Dec 78 |
NTISSI 4002, Classification Guide for COMSEC Information | 5 Jun 86 |
| NACSI 4004, 14 Sep 70 |
NACSI 4004, Controlling Authority Responsibilities | 8 Sep 78 |
| NACSI 4004, 8 Sep 78 |
NACSI 4004, Controlling Authorities for COMSEC Keying Material | 23 Jun 82 |
| NACSI 4004, 23 Jun 82 |
NTISSI 4006, Controlling Authorities for COMSEC Keying Material | 2 May 89 |
| NACSI 4005, 22 Aug 73 |
NACSI 4005, Safeguarding and Control of Communications Security Material | 12 Oct 79 |
| NACSI 4005, 12 Oct 79 |
NSTISSI 4005, Control of TOP SECRET Keying Material | Aug 97 |
| NACSI 4006, 20 Oct 83 |
NTISSI 4003, Reporting COMSEC Insecurities | 3 Nov 86 |
| NACSI 4007, 27 Jul 76 |
NSTISSI 3014, Management of Off-line Cryptosystems | 1 Feb 91 |
| NACSI 4008, 4 Mar 83 |
NSTISSI 4005, Control of TOP SECRET Keying Material | Aug 97 |
| NACSI 4009, 30 Dec 81 |
NSTISSI 7003, Protected Distribution Systems | 13 Dec 96 |
| NACSI 4010 23 Feb 82 |
NTISSI No. 4004, Routine Destruction and Emergency Protection of COMSEC Material | 11 Mar 87 |
| NACSI 5001, 7 Sep 82 |
Cancelled via memorandum NSTISSC-041-93 | 1 Oct 93 |
| NACSI 5002, 1 Feb 82 |
Cancelled via memorandum NSTISSC-041-93 | 1 Oct 93 |
| NACSI 5003, 31 Oct 80 |
Cancelled via memorandum, NSTISSC-052-95 | 4 Dec 95 |
| NACSI 5004, 1 Jan 84 |
NTISSI 7000, TEMPEST Countermeasures for Facilities | 17 Oct 88 |
| NACSI 5005, 1 Jan 84 |
NTISSI 7000, TEMPEST Countermeasures for Facilities | 17 Oct 88 |
| NACSI 7001, 12 Apr 72 |
NTISSI 4000, Communications Security Equipment Maintenance and Training | 14 Jul 86 |
| NACSI 7002 1 Apr 82 |
Cancelled via memorandum, NSTISSC-054-00 | 14 Sep 00 |
| NACSI 8101A, 17 Aug 82 |
NTISSI 3010, Operational Security Doctrine for the KY-65A/75A | 19 Jul 89 |
| NACSI 8102, Feb 79 |
NTISSI 3011, Operational Security Doctrine for KY-57/58, KY-67 & KYV-2/2A | 13 Oct 89 |
| NACSI 8104, 16 Dec 80 |
NTISSI 3011, Operational Security Doctrine for KY-57/58, KY-67 & KYV-2/2A | 13 Oct 89 |
| NACSI 8106, 3 May 84 |
NTISSI 3003, Revised Operational Doctrine for KUTA/NOBLEMAN | 3 Nov 86 |
| NACSI 8107, 26 May 82 |
NSTISSI 3017, Operational Security Doctrine for Stand-Alone KG-84, KG-84A, & KG-84C | 11 Sep 91 |
| NACSI 8108, 22 May 84 |
Cancelled via memorandum, NSA-S-0290-88 | 17 Oct 88 |
| NACSI 8109, 28 Nov 84 |
NTISSI 3012, Operational Security Doctrine for the KY-71 | 27 Nov 89 |
| NACSI 8112, 15 Jun 82 |
Cancelled via memorandum, NSTISSC-052-95 | 4 Dec 95 |
| NACSI 8118, 14 Mar 84 |
NTISSI 3004, Operational Doctrine for AUTOSEVOCOM | 1 Apr 87 |
| NTISSI/NSTISSI | ||
| NTISSI 3001, 14 Aug 86 |
NTISSI 3001, Operational Security Doctrine for the Automanual System (AMS) | 30 Oct 89 |
| NTISSI 3001, Annex B, 8 Jun 87 |
NTISSI 3001, Operational Security Doctrine for the Automanual System (AMS) | 30 Oct 89 |
| NTISSI 3003, 27 Apr 90 |
NSTISSI 3003, Operational Security Doctrine for the KG-66/KG-66A/SO-66/KGR-66/KGV-68/KGR-68/KGV-68B | Aug 00 |
| NTISSI 3004, 1 Apr 87 |
Cancelled via memorandum, NSTISSC-027-92 | 19 May 92 |
| NTISSI 3007, 14 Mar 89 |
Cancelled via memorandum, NSTISSC-027-92 | 19 May 92 |
| NSTISSI 3009, 9 May 89 |
Cancelled by memorandum, NSTISSC-047 and is superseded by NAG 26B, OPSEC Doctrine for KYV-5, KY-99, KY-99A, and KY-100 | 16 May 96 |
| NTISSI 3017, 11 Sep 91 |
NSTISSI 3017, Operational Security Doctrine for Stand-Alone KG-84, KG-84A, and KG-84C | 18 Sep 96 |
| NTISSI 3017, 18 Sep 96 |
NSTISSI 3017, Operational Security Doctrine for Non-TRI-TAC KG-84A, KG-84C, KIV-7, and KIV-7HS, KIV-7HSA, and KIV-7HSB | Mar 03 |
| NSTISS 3021 Sep 97 |
CNSS 3021, Operational Security Doctrine for the ANCYZ-10/10A Data Transfer Device (DTD) | Sep 02 |
| NSTISSI 3029 Feb 02 |
Systems Security Doctrine for the TACLANE (KG-175) | May 04 |
| NSTISSI 4000, 1 Feb 91 |
NSTISSI 4000, Communications Security Equipment Maintenance and Maintenance Training | Jan 98 |
| NTISSI 4001, 25 Mar 85 |
NSTISSI 4001, Controlled Cryptographic Items | 18 Sep 96 |
| NTISSI 4005, 17 Jul 87 |
NSTISSI 4005, Control of TOP SECRET Keying Material | Aug 97 |
| NTISSI 4003, 3 Nov 86 |
NSTISSI 4003, Reporting and Evaluating COMSEC Incidents | 2 Dec 91 |
| NTISSI 4004 11 Mar 87 |
Destruction and Emergency Protection Procedures for COMSEC and Classified Material | Aug 2006 |
| NTISSI 4006, 2 May 89 |
NSTISSI 4006, Controlling Authorities for COMSEC Material | 2 Dec 91 |
| NSTISSI 4009, 5 Jun 92 |
NSTISSI 4009, National Information Systems Security (INFOSEC) Glossary | Aug 97 |
| NSTISSI 4009 Sep 2000 |
CNSS 4009, Information Assurance Glossary | May 2003 |
| NSTISSI 4012 Aug 97 |
CNSS 4012, National Information Assurance Training Standard for Senior System Managers (SSMs) | Jun 2004 |
| NSTISSI 4013 Aug 97 |
CNSS 4013, National Information Assurance Training Standard for System Administrators | Mar 04 |
| NSTISSI 4014 Aug 97 |
CNSS 4014, National Information Assurance Training Standard for Information Systems Security Officers | Apr 04 |
| NTISSI 7000, 17 Oct 88 |
NSTISSI 7000, TEMPEST Countermeasures for Facilities | 29 Nov 93 |
| NSTISSI 7000, Annex A, 3 Jun 91 |
NSTISSI 7000, Annex A | 13 Mar 95 |
| NSTISSI 7000 29 Nov 93 |
CNSSI 7000, TEMPEST Countermeasures for Facilities | May 04 |
| NSTISSAM | ||
| COMPUSEC/1-85 18 Nov 85 |
NSTISSAM COMPUSEC/1-99, The Transition from the Trusted Computer System Evaluation Criteria to the International Common Criteria for Information Technology Security Evaluation | 11 Mar 99 |
| COMPUSEC/2-90, 29 Nov 90 |
Cancelled via memorandum, NSTISSC-052-95 | 4 Dec 95 |
| TEMPEST/1-91, 21 Mar 91 |
NSTISSAM TEMPEST/1-92, Compromising Emanations, Laboratory Test Requirements, Electromagnetics | 15 Dec 92 |
| TEMPEST/3-91 20 Dec 91 |
NSTISSAM TEMPEST/1-00, Maintenance and Disposition of TEMPEST Equipment | Dec 00 |
| COMSEC /1-01 6 Jun 01 |
Canceled via memorandum, CNSS-067-04 | Jul 04 |
| NACSEM | ||
| NACSEM 2001, 18 Apr 72 |
NACSEM 2001, Contingency Program for COMSEC Aids | 27 Aug 75 |
| NACSEM 2001, 27 Aug 75 |
Cancelled by memorandum, NTISSC-075-89 | 10 Jul 87 |
| NACSEM 2002, 2 Oct 75 |
NACSIM 2002, COMSEC Nomenclature System | 30 Dec 82 |
| NACSEM 4002, Jul 75 |
Cancelled via memorandum, NSTISSC-052-95 | 4 Dec 95 |
| NACSEM 5100, Mar 74 |
NACSIM 5100A, Compromising Emanations Laboratory Test Requirements, Electromagnetics | 1 Jul 81 |
| NACSEM 5101, Oct 70 |
NSTISSAM TEMPEST /2-93, Rationale for Compromising Emanations Laboratory and Field Test Requirements, Electromagnetics | 14 Oct 93 |
| NACSEM 5102, Oct 70 |
Cancelled via memorandum, NSTISSC-041-93 | 1 Oct 93 |
| NACSEM 5103, Oct 70 |
Cancelled via memorandum, NSTISSC-002-98 | 8 Jan 98 |
| NACSEM 5104, Oct 70 |
Cancelled via memorandum, NSTISSC-002-98 | 8 Jan 98 |
| NACSEM 5105, Oct 70 |
Cancelled via memorandum, NSTISSC-052-95 | 4 Dec 95 |
| NACSEM 5106, Dec 71 |
NSTISSAM TEMPEST/2-91, Compromising Emanations Analysis Handbook | 20 Dec 91 |
| NACSEM 5108, Jul 74 |
Cancelled via memorandum, NSTISSC-041-93 | 1 Oct 93 |
| NACSEM 5109, Mar 73 |
Cancelled via memorandum, NSTISSC-049-94 | 1 Dec 94 |
| NACSEM 5110, Jul 73 |
NSTISSAM TEMPEST/1-93, Compromising Emanations Field Test Requirements, Electromagnetics | 30 Aug 93 |
| NACSEM 5112 Apr 75 |
CNSS Advisory Memorandum TEMPEST 01-02, Non-stop Evaluation Standard | Oct 02 |
| NACSEM 5200, Jun 73 |
NACSEM 5201, TEMPEST Guidelines for Equipment/Systems Design | Sep 78 |
| NACSEM 5201, Sep 78 |
Cancelled via memorandum, NSTISSC-041-93 | 1 Oct 93 |
| NACSEM 5202, May 76 |
NACSEM 5201, TEMPEST Guidelines for Equipment/Systems Design | Sep 78 |
| NACSEM 5204, May 78 |
NSTISSAM TEMPEST/1-95, Shielded Enclosures | 30 Jan 95 |
| NACSEM 7001, Oct 74 |
NACSI 4007 27 | Jul 76 |
| NACSIM | ||
| NACSIM 2002, 30 Dec 82 |
NSTISSAM COMSEC/1-93, Nomenclature for Communications Security Material | 14 Oct 93 |
| NACSIM 5002, 31 Oct 80 |
NSTISSAM TEMPEST /2-93, Rationale for Compromising Emanations Laboratory and Field Test Requirements, Electromagnetics | 14 Oct 93 |
| NACSIM 5100A, 1 Jul 81 |
NSTISSAM TEMPEST/1-91, Compromising Emanations Laboratory Test Requirements, Electromagnetics | 21 Mar 91 |
| NACSIM 5203, 30 Jun 82 |
NSTISSAM TEMPEST/2-95, RED/BLACK Installation Guidance | 12 Dec 95 |
| NACSIM 8000, Nov 82 |
NSTISSAM COMSEC/1-87, TRI-TAC Keying Concepts | 22 Oct 87 |
[Added from the CNSS HTML
index.]
[TSG = Telephone Security Group]
TSG STANDARD 1 Introduction to Telephone Security, dated March 1990
TSG STANDARD 2 TSG Guidelines for Computerized Telephone Systems, dated March 1990
NTSWG STANDARD 2a NTSWG Guidelines for Computerized Telephone Systems Supplemental, dated March 2001
NTSWG STANDARD 2b NTSWG Guidelines for Voice Over Internet Protocol (VoIP) Computer Telephony, dated April 2006
TSG STANDARD 3 Type-Acceptance Program for Telephones used with the Conventional Central Office Interface, dated March 1990
TSG STANDARD 4 Type-Acceptance Program for Electronic Telephones used in Computerized Telephone Systems, dated March 1990
TSG STANDARD 5 On-Hook Telephone Audio Security Performance Specification, dated March 1990
TSG STANDARD 6 Telephone Security Group Approved Equipment, dated March 1990; updated September 2000
TSG STANDARD 7 TSG Guidelines for Cellular Telephones, dated September 1994
TSG STANDARD 8 Microphonic Response Criteria for Non-communications Devices, dated October 1994
TSG Information Series
Computerized Telephone Systems (CTSs): A Review of CTS Deficiencies, Threats and Risks Dated December 1994
Executive Overview Dated January 1996
Central Office (CO) Interfaces Dated November 1997
Everything You Always Wanted to Know About Telephone Security (but were afraid
to ask) Dated December 1998
To obtain an issuance not offered in the CNSS Library, refer to our Contact List for more information.
HTML by Cryptome.