PAM 25-2-16 — Communications Security (comsec)
PAM 25-2-16 governs Army communications security procedures for information technology capabilities and protection of classified information.
- Publication number: PAM 25-2-16
- Title: COMMUNICATIONS SECURITY (COMSEC)
- Date: 04/08/2019
- Proponent: G-6
- Status: ACTIVE
View PAM 25-2-16 on armypubs.army.mil
Related publications
It covers national security systems, controlled unclassified information, cryptographic solutions, wireless systems, key management, and NSA support requests. It requires approved products, accountability for cryptographic material, planning for key and certificate management, and defined request processes.
Topics covered
- Communications security
- National security systems
- Controlled unclassified information
- Cryptographic key and certificate management
- Protected distribution systems
- Radio-frequency wireless systems
- NSA support service requests
- Cryptographic devices
Questions and answers
What COMSEC products can secure national security information?
Only NSA/Central Security Services-approved COMSEC products and services (to include Commercial Solutions for Classified (CSfC) and cryptographic high value property (CHVP)) will be used to secure NSI and systems. (paragraph 2-1)
Can foreign cryptographic systems protect U.S. classified information?
Do not use foreign cryptographic systems or products to protect U.S. classified NSI. (paragraph 2-1)
What must a key and certificate management plan describe?
The KCMP will describe accountability/tracking of the keying material over the entire life cycle of the system from generation, distribution, storage, accounting, and entry of key into the system through use, deletion, and final destruction. (paragraph 1-4)
Are commercial non-encrypted radio systems allowed for command and control?
The use of commercial non-encrypted radio systems in support of command and control functions is strictly prohibited. (paragraph 1-4)
How must an Army organization request NSA security services?
Any Army organization seeking NSA services to support mission requirements must submit a request by means of a client questionnaire. (paragraph 2-8)