Addendum Acceptable Use Policy Fort Bliss Campus Area Network and Department of Defense of Non-classified Internet Protocol Network Purpose. This is an addendum to the Fort Bliss Campus Area Network (FBCAN) and Department of Defense (DoD) Non-classified Internet Protocol Network (NIPRNET) Acceptable Use Policy. Nothing in this addendum invalidates the FBCAN AUP that I previously signed. Understanding of User Access Responsibility. Use of any government provided wireless service is for official use and authorized purposes as set forth in DoD 5500.7-R, Joint Ethics Regulation, or as further limited by this policy. Minimum Security Requirements. The following minimum security requirements apply to the use of wireless devices and services. I will be held responsible for damage caused to a Government system or data through negligence or a willful act. I understand that all charges incurred in excess of the normal monthly service charge will be the responsibility of the user. Charges will be incurred for the following misuses of the device: exceeding allocated minutes per month, use of text messaging, downloading of any services, ring tones, games, etc.; neglect or abusive damage to the device or accessory. I am not authorized and will not use Bluetooth technology (to include voice transmission) with Blackberry devices except for the authorized CAC sled found on the Army approved list. I will ensure the Blackberry handheld device is cradled or synchronized at least once every 30 days to the Blackberry Enterprise Server (BES) to receive updated keys and/or software updates. I understand that the BlackBerry will not be connected to the desktop or other network device for battery charging. Only the A/C travel charger will be used. I understand that the Security Timeout feature will be set to fifteen minutes. I understand that wireless devices will not be carried in a classified or restricted area. I understand that the device is wiped and ALL data on the BlackBerry will be deleted after 5 failed login attempts. I understand that if my BlackBerry is not enabled to only use a Common Access Card (CAC) to unlock the device, I am required to have an eight character password that conforms to the Army password standards. At a minimum, the password will contain both lower and upper case letters and a number.

I understand that my password must be changed every 90 days, unless the BlackBerry is enabled to only use a CAC to unlock the device. I understand that the last three passwords are recorded by the system, and cannot be re-used. I understand that emails containing Sensitive But Unclassified and For Official Use Only information should be sent encrypted. I understand that I am not allowed to install or remove any software on the BlackBerry device. I understand that Government owned hardware and software is used for official duties only and that I am the only authorized individual to use the BlackBerry issued to me. I understand that Blackberry devices are scanned with the DoD AutoBerry tool using the following schedule: Scan immediately after BlackBerry is provisioned or reprovisioned (this is the “control” or “baseline” scan). Scan before and after the BlackBerry user travels Outside the Continental United States (OCONUS), if the BlackBerry user is based within Continental United States (CONUS) and perform a comparison of the two scans. BlackBerry devices of executives, senior managers, and staff in sensitive positions should be scanned at least every 90 days, and results from the current scan compared to the previous scan. Commanders and IASOs will designate BlackBerry users who meet these criteria. All other BlackBerry devices shall be scanned at least once every 6 months and results from the scan compared to the previous scan. SMS on Blackberry\Wireless devices. I am aware of the following risks when utilizing the SMS service. Messages are not encrypted and copies are stored in memory on the phone and in the wireless carrier database. Sensitive information should not be sent via SMS/Text/Messages/Multimedia Messaging Service (MMS). URL to hacker web sites can be sent to a SMS/Text Message/MMS. If a user connects to the URL, malware could be downloaded on the phone. Executable files (including malware) can be embedded in SMS/Text Message/MMS. Photos sent via SMS/Text Messages/MMS can have URLs to hacker web sites embedded in the photo. When the photo is view the phone will connect to web site of the embedded we b site.

Photos sent via SMS/Text Messages/MMS can have executable files (including malware) embedded in the photo. When the photo is viewed the phone will execute the file. I understand, in the event of a security incident (e.g., a classified spillage), that I will contact my IASO or call the Fort Bliss NEC Help Desk at 915-568-DOIM (3646). For reporting problems or to ask questions, contact your Information Assurance Security Officer or the Fort Bliss NEC Help Desk. If the BlackBerry is lost or stolen, I will report it immediately to my unit IASO and the Fort Bliss NEC Help Desk. I have completed wireless training located at the following web site: https://iatraining.us.army.mil/_usermgmt/welcome.htm Instructions for registering and completing the training are available in the IA Policy Management Branch section of the Fort Bliss Portal. Acknowledgment. I have read the above requirements regarding the use of the DoD/Army Access Systems. I understand my responsibilities regarding these systems and the information contained in them.

INS, 1AD HHBN __________________________________________ Unit/Directorate/Organization
Torres, Mark A __________________________________________ Last Name, First MI
TORRES.MARK.ANTHON Digitally signed by TORRES.MARK.ANTHONY.1252339830 DN: c=US, o=U.S. Government, ou=DoD, ou=PKI, ou=USA, cn=TORRES.MARK.ANTHONY.1252339830 Y.1252339830 Date: 2011.04.25 15:30:48 -06'00' __________________________________________

04/25/2011 _______________ Date (mm/dd/yyyy)

CPT/O3 _______________ Rank/Grade

Signature

5688547 _______________ Phone Number