DoDI 8550.01, September 11, 2012
2extent provided in the contract or other instrument by which such authorized support or access isprovided.d. Does NOT:(1) Prevent unit commanders or Heads of the DoD Components from providingalternate, stand-alone capabilities to allow access to IbC for mission or morale purposes.(2) Prohibit DoD employees from using IbC from personal Internet-capable devices forpersonal purposes.(3) Apply to using IbC specifically for penetration testing, communications securitymonitoring, network defense, personnel misconduct and law enforcement investigations, andintelligence-related operations.3. DEFINITIONS. See Glossary.4. POLICY. It is DoD policy that:a. Decisions to collaborate, participate, or to disseminate or gather information via DoDInternet services or IbC shall balance benefits and vulnerabilities. Internet infrastructure,services, and technologies provide versatile communication assets that must be managed tomitigate risks to national security; to the safety, security, and privacy of personnel; and toFederal agencies.b. DoD Internet services and IbC used to collect, disseminate, store, or otherwise processDoD information shall be configured and operated in a manner that maximizes the protection(e.g., confidentiality, integrity, and availability) of the information, commensurate with the risk and magnitude of harm that could result from the loss, compromise, or corruption of theinformation.(1) For use of DoD Internet services, paragraph 4.b. applies to both public and non-public DoD information.(2) For use of IbC, this applies to the integrity and availability of public DoDinformation. IbC shall not be used to collect, disseminate, store, or otherwise process non-publicDoD information, as IbC are not subject to Federal or DoD information assurance (IA) standards,controls, or enforcement, and therefore may not consistently provide confidentiality.c. DoD information systems (ISs) hosting DoD Internet services shall be operated andconfigured to meet the requirements in DoDD 8500.01E (Reference (f)) and DoDI 8500.2(Reference (g)), and certified and accredited in compliance with DoDI 8510.01 (Reference (h)).