Navy User Agreement - Standard Mandatory Notice And Consent Provision

USER RESPONSIBILITIES:

I understand that to ensure the confidentiality, integrity, availability, and security of Navy Information Technology (IT) resources and information, when using those resources, I shall:

• Safeguard information and information systems from unauthorized or inadvertent modification, disclosure, destruction, or misuse.
• Protect Controlled Unclassified Information (CUI), to include Personally Identifiable Information (PII), and classified information to prevent unauthorized access, compromise, tampering, or exploitation of the information.
• Protect authenticators (e.g., Password and Personal Identification Numbers (PIN)) required for logon authentication at the same classification as the highest classification of the information accessed.
• Protect authentication tokens (e.g., Common Access Card (CAC), Alternate Logon Token (ALT), Personal Identity Verification (PIV), National Security Systems (NSS) tokens, etc.) at all times. Authentication tokens shall not be left unattended at any time unless properly secured.
• Virus-check all information, programs, and other files prior to uploading onto any Navy IT resource.
• Report all security incidents including PII breaches immediately in accordance with applicable procedures.
• Access only that data, control information, software, hardware, and firmware for which I am authorized access by the cognizant Department of the Navy (DON) Commanding Officer, and have a need-to-know, have the appropriate security clearance. Assume only those roles and privileges for which I am authorized.
• Observe all policies and procedures governing the secure operation and authorized use of a Navy information system.
• Digitally sign and encrypt e-mail in accordance with current policies.
• Employ sound operations security measures in accordance with DOD, DON, service and command directives.

I further understand that, when using Navy IT resources, I shall not:

• Auto-forward any e-mail from a Navy account to commercial e-mail account (e.g, .com).
• Bypass, stress, or test IA or Computer Network Defense (CND) mechanisms (e.g., Firewalls, Content Filters, Proxy Servers, Anti-Virus Programs).
• Introduce or use unauthorized software, firmware, or hardware on any Navy IT resource.
• Relocate or change equipment or the network connectivity of equipment without authorization from the Local IA Authority (i.e., person responsible for the overall implementation of IA at the command level).
• Use personally owned hardware, software, shareware, or public domain software without written authorization from the Local IA Authority.
• Upload/download executable files (e.g., exe, .com, .vbs, or .bat) onto Navy IT resources without the written approval of the Local IA Authority.
• Participate in or contribute to any activity resulting in a disruption or denial of service.
• Write, code, compile, store, transmit, transfer, or Introduce malicious software, programs, or code.
• Use Navy IT resources in a way that would reflect adversely on the Navy. Such uses include pornography, chain letters, unofficial advertising, soliciting or selling except on authorized bulletin boards established for such use, violation of statute or regulation, inappropriately handled classified information and PII, and other uses that are incompatible with public service.
• Place data onto Navy IT resources possessing insufficient security controls to protect that data at the required classification (e.g., Secret onto Unclassified)