US Defense Secretary Chuck Hagel has directed that Department of Defense (DoD) organisations take additional steps to ensure unclassified controlled technical information is protected from cyber intrusions. He said unclassified controlled technical data losses have become a major problem for the US and its industrial base.

Data and intellectual property concerning defence systems requirements, concepts of operations, technologies, designs, engineering, systems production and component manufacturing are all being targeted. While such information is unclassified, its loss still represents a significant threat to US national security.

To that end, Defense Secretary Hagel has directed that the offices of the Under-Secretaries of Defense for acquisition, technology and logistics, policy, and intelligence, as well as the DoD’s Chief Information Officer (CIO), work together to develop any necessary changes to policy, guidance and rule-making activities to improve the protection of unclassified controlled technical information that resides on or passes through US military contractor systems or networks.

The DoD has also proposed an amendment to its acquisition and contracting regulations. The amendment would add language to defence contracts requiring contractors to incorporate established security standards on their networks, and to report cyber intrusions that result in the loss of unclassified controlled technical information.

Other actions directed in Mr Hagel’s memorandum include the establishment of a joint analysis cell to assess losses of technical information. The cell, to be led by the Under-Secretary of Defense for acquisition, technology and logistics, will determine the consequences of those losses and develop necessary responses.

In addition, Mr Hagel directed the military departments to identify critical acquisition and technology programmes that require additional protection. This process will include a review of the classification guidance for those programmes.

Finally, the DoD CIO, the National Security Agency and the Defense Information Systems Agency will continue to identify the technical standards needed to protect unclassified information in the Joint Information Environment.