AR 380-53 — Communications Security Monitoring
AR 380-53 governs Army communications security monitoring, Information Operations Red Team activities, and Computer Defense Association Program activities.
- Publication number: AR 380-53
- Title: COMMUNICATIONS SECURITY MONITORING
- Date: 12/23/2011
- Proponent: G-2
- Status: ACTIVE
View AR 380-53 on armypubs.army.mil
It covers authorization, notification, training, operations, reporting, equipment safeguards, red teaming, and network assistance. It requires approval, formal training, privacy protections, notification, and oversight for covered activities.
Applies to: The principles of this regulation apply to all forms of COMSEC monitoring conducted by Army elements.
Topics covered
- Communications security monitoring
- Information Operations Red Team activities
- Computer Defense Association Program activities
- Monitoring notification procedures
- Penetration testing
- Foreign language communications
- Monitoring reports
- Persistent penetration testing
Questions and answers
What notice must users receive about official DOD telecommunications systems?
Official DOD telecommunications systems are subject to monitoring at all times. (paragraph 2-4)
What training is required for personnel conducting COMSEC monitoring?
Each individual involved in the conduct (collection and analysis) of COMSEC monitoring will receive formal training before participating in monitoring or penetration operations. (paragraph 2-4)
What approval is required for a Red Team rules of engagement?
A defined rules of engagement (ROE) (support agreement and charter) must be developed and signed prior to all Red Team assessments. (paragraph 3-2)
How often can persistent penetration testing be conducted?
The execution of tactical overwatch operations and network surveillance of Army networks and networked devices connected to the LWN that may be performed on a 24 hours a day/7 days a week basis. (paragraph 3-5)
How must violations of covered activities be reported?
Individuals who discover a violation of the activities described in this regulation will promptly report the violation to the unit commander, IG, intelligence oversight officer, or the command security manager. (paragraph 5-2)