Relevant Security™ - Protecting Sensitive Compartmented Information Within Information Systems

Protecting Sensitive Compartmented Information Within Information Systems

An overview of how RPM maps to the DCID 6/3 SCI security policies

This overview is intended to give the reader an introduction to Relevant Security’s Real Privacy Management™ (RPM) technology and its relevance to the Director of Central Intelligence Directive (DCID 6/3) and protecting sensitive compartmented information within information systems.

DCID 6/3 establishes the security policies and procedures for storing, processing, and communicating classified intelligence information in information systems. Information from the intelligence community constitutes an asset vital to the effective performance of national security roles.

RPMis a secret-key, key generation and key management method for performing continuous authentication and security of electronic communications. It provides a control mechanism for verifying keys and identities with a message key for securing each communication that is owned and identified by each participant. RPM performs encryption of communications between participants using standard ciphers.

DCID 6/3 notes that intelligence information must be properly managed, and that its confidentiality, integrity, and availability be ensured. DCID 6/3 promotes the use of efficient procedures and cost-effective, computer-based security features and assurances.

DCID 6/3 Level-of-Concern:

Within DCID 6/3 the Level-of-Concern is a rating assigned to an information system. A separate Level-of-Concern is assigned to each information system based on confidentiality, integrity, and availability. The Level-of-Concern for confidentiality, integrity, and availability can be Basic, Medium, or High.

The Level-of-Concern assigned to an information system for confidentiality is based on the sensitivity of the information it maintains, processes, and
The Level-of-Concern assigned to an information system for integrity is based on the degree of resistance to unauthorized modifications.
The Level-of-Concern assigned to an information system for availability is based on the needed availability of the information maintained, processed and transmitted by the system for mission accomplishment, and how much tolerance for delay is allowed

Download RPM Protecting SCI

Get RPM for your application