Implementation of an electronic media security system

摘要

Recent security lapses within the Department of Energy Laboratories prompted the establishment and implementation of additional procedures and training for operations involving classified removable electronic media (CREM) storage. In addition, the definition of CREM has been expanded and the number of CREM has increased significantly. Procedures now require that all CREM be inventoried and accounted for on a weekly basis. Weekly inventories consist of a physical comparison of each item against the reportable inventory listing. Securing and accounting for CREM is a continuous challenge for existing security systems. To address the challenge, Pacific Northwest National Laboratory (PNNL) has developed an automated electronic media security system (EMSS) for a weekly CREM inventory collection and reporting system. The EMSS approach is to tag the CREM with an electronically readable unique identification code and automatically collect data on the inventory in each security container or vault at a user-defined interval and upon detection of an access event, thus eliminating the need for hand-written inventory sheets while allowing automated transfer of the collected inventory data to an electronic reporting system. An electronic log of CREM access events is maintained, providing enhanced accountability for daily/weekly checks, routine audits, and follow-up investigations. The key attributes of the EMSS include improved accountability, reduced risk of human error, improved accuracy and timeliness of inventory data, and reduced costs as a result of man-hour reductions.