Unified Command Management of SAO Computer Systems: The EUCOM Solution - Security Assistance Office; European Command

DISAM Journal, Summer, 2000 by Mark Ahles

A number of articles in the DISAM Journal have discussed Security Assistance Office (SAO) and Office of Defense Cooperation (ODC) computer requirements. "Planning, Designing, and Operating Local Area Networks," (DISAM Journal, Summer 1997, Vol-19/N-4,p.115-123) dealt with the general requirements for setting up a network of computers in an SAO or ODC. "ODC Information Management," (DISAM Journal, Fall 1997, Vol-20/N-2, p. 70-88) looked specifically at one ODCs detailed planning and analysis of their local computer needs. "DISAM Supports Security Assistance Organization's Automation Needs," (DISAM Journal, Winter 1999-2000, Vol-22/N4, p.85-88) discussed support DISAM provided in meeting SAO/ODC computer requirements.

These articles have provided good information on SAO/ODC computer needs, but did not directly suggest a detailed road map of exactly what an office needed to do to install, maintain, and pass inspection on their computer systems. Rick Dyer, Training Manager for the U.S. European Command, decided in 1998 to compile all of the guidance in one place for EUCOM SAOs.

With assistance from DISAM, and much hard work from some EUCOM computer experts (Tsgt Don Lewis and Main Marquart), EUCOM has just published its Security Assistance Office Automation Guide (SAOAG).

The SAOAG provides outstanding guidance from basic conceptual definitions (what is a LAN?) to an actual sample SAO/ODC ADP Plan. Although the EUCOM SAOAG was written specifically for EUCOM, almost all of the guidance contained is valuable to any SAO or ODC.

The guide opens with a general section on information assurance. This section provides good general information on computer use for any office. For example, personal use of government computers states:

We have detailed rules for appropriate and inappropriate use of government computers. We also have rules governing how you may use your government computer for personal use. The U.S. government provides you with a computer to do your assigned duties. The rules are simple and clear. Government computers may be used only by government employees for the following:

* Official business related to your official duties.

* Authorized personal use includes brief access and searches for information on the internet and sending short e-mail messages.

* Security assistance office chiefs and supervisors must make every effort to. ensure that personal use of government computers.

** Does not adversely affect the performance of official duties.

** Is limited to reasonable duration and frequency and, when possible, done during off-duty hours.

** Serves a legitimate public interest, such as keeping employees at their desks, furthering the education and self improvement of employees, improving employee morale and welfare, or job-searching in response to downsizing.

** Personal use of government computers must not overburden the communications system.

** Personal use of government computers must not reflect adversely on DoD or DoD components.

** Misuse of government computers includes hacking or using hacker tools, visiting hacker websites, deliberately installing viruses on DoD computers, trying to mask or hide your identity, attempting to bypass security policy, using internet telephony, streaming audio/video (such as receiving hourly stock updates), and using Hotmail, Rocketmail, and Yahoomail for other than morale, welfare, and recreation.

* Penalties for misuse of government computers range from courts-martial to nonjudicial and administrative actions, such as letters of reprimand.

The guide also addresses a number of other often confusing computer use areas. The SAOAG discusses laptop use, problem reporting, computer hoaxes, and other topics. By clearly detailing the restrictions on computer use and the penalties that can result, EUCOM has summarized numerous DoD regulations and messages into a few short, easy to read paragraphs.

The second section of the SAOAG discusses automation hardware. The section does a good job of describing the major pieces of equipment available for most offices. Everything from personal computers to telephones to digital assistance is defined. The buying advice and EUCOM guidance included will also help in making purchasing decisions. The section ends with the following suggest equipment for small to mid size offices.

Section three continues the explanation of automation requirements by detailing software requirements. This section details what software EUCOM will support. It also details what computer programs EUCOM requires: antivirus software.

Office local area networks are explained in section four. The SAOAG provides details of everything from wire types to server maintenance. Once again, the guide provides an overview of the technology with easy to understand explanations. The purpose is to provide readers with the information needed to make an informed decision on how to implement a local area network for your office. The section closes with specific guidance on what local area networks should work best for most offices (l0BaseT Ethernet with a central hub and peer-to-peer networking). The solution proposed is relatively inexpensive to install and support, even in small offices.