CNSSI 4001
(CCI)
(CCI)
What does CCI stand for?
Controlled Cryptographic Item(s)
Who can access CCI storages (i.e: Safes)
People who have been read in and have the correct need to know.
What is GEM One?
Remote encryptor management solution system.
When mailing CCI, what is one of the most important steps to take?
Mail the Crypto Ignition Key (CIK) separately in a different box.
COMSEC is stored in what kind of facility?
Sensitive Compartmented Information Facility (SCIF)
This free version of GEM One is designed for users with smaller networks.
GEM One Basic
According to CNSSI 4001, what is the definition of Communications Security (COMSEC)?
The protection of classified and unclassified telecommunications from unauthorized access or interception.
How often should safe inventories be conducted?
Daily security checks, but inventoried once a month.
This feature in GEM One allows administrators to fine-tune access permissions for individual users based on their role.
Role Based Access Control (RBAC)
CNSSI 4001 defines five components of COMSEC. Name two of them.
Cryptographic security, transmission security, emission security, traffic-flow security, and physical security.
What is the primary focus of CNSSI 4005?
It establishes cryptographic security standards for National Security Systems (NSS).
GEM One provides visualization of devices using two different network layers.
Layer 2 and Layer 3
CCI transferred between Departments and Agencies are considered to be what?
Permanent Transfer. Unless a formal written agreement has been established beforehand.
What does CNSSI 4005 specify about the lifespan of cryptographic keys?
Crypto keys must be periodically replaced based on risk assessments and classified data protection requirements.
GEM One supports up to this many concurrent remote users.
150 remote users