DAFI16-1401 governs the oversight, management, and execution of information protection programs throughout the Department of the Air Force.
View DAFI16-1401 on armypubs.army.mil
DAFI16-1401 establishes an integrated security framework covering controlled unclassified information, industrial security, information security, and personnel security. It requires annual self-assessments and compliance inspections, mandatory security training, and training commensurate with specified duties.
To develop policy and an integrated security framework and strategic plan for the management and oversight of the information protection program, which consists of the controlled unclassified information (CUI), and the industrial, information, and personnel security programs. (paragraph 1)
Commanders/directors must ensure annual self-assessments and program inspections, are completed, as required. (paragraph 3)
Annual compliance inspections consist of the information protection office analyzing the supported activity’s security metrics, data systems, inspection reports, inventory controls, requests for assistance, and MICT SACs, to evaluate compliance. (paragraph 3)