Document
U.S. DEPARTMENT OF TRANSPORTATION FEDERAL AVIATION ADMINISTRATION Eastern Region Jamaica, New York SUBJ:
Management of the Internet Monitoring Function in the Eastern Region
1. PURPOSE. T h i s O r d e r e s t a b l i s h e s r e g i o n a l p o l i c y , p r o c e d u r e s and g u i d e l i n e s on F e d e r a l A v i a t i o n A d m i n i s t r a t i o n (FAA) E a s t e r n Region I n t e r n e t M o n i t o r i n g of FAA E a s t e r n Region employees and FAA c o n t r a c t o r s .
2. DISTRIBUTION. T h i s O r d e r i s d i s t r i b u t e d t o D i v i s i o n a n d S t a f f O f f i c e Branch Managers and above: a l l F i e l d O f f i c e s and F a c i l i t i e s .
3. BACKGROUND. The F l i g h t S t a n d a r d s D i v i s i o n , AEA-200, i s r e s p o n s i b l e f o r m a i n t a i n i n g t h e E a s t e r n Region i n t e r n e t a c c e s s p o i n t ( I A P ) . AEA-200 h a s i n s t a l l e d m o n i t o r i n g s o f t w a r e a t t h i s IAP which h a s t h e a b i l i t y t o c a p t u r e , a n a l y z e and r e p o r t on i n t e r n e t b r o w s e r a c t i v i t y .
The A v i a t i o n and I n f o r m a t i o n S e r v i c e s D i v i s i o n , AEA-60, i s r e s p o n s i b l e f o r m a i n t a i n i n g t h e c o n n e c t i o n between t h e AE9 R e g i o n a l O f f i c e a n d t h e FAA Agency Data Telecommunications Network (ADTN). A l l AEA R e g i o n a l O f f i c e i n t e r n e t t r a f f i c n o t u s i n g t h e AEA-200 IAP, u s e s one of t h e o t h e r FAA IAPs housed and m a i n t a i n e d a t o t h e r FAA l o c a t i o n s . Such t r a f f i c must p a s s t h r o u g h t h e ADTN c o n n e c t i o n . I t i s n e i t h e r d e s i r a b l e n o r p r a c t i c a l t o r e s t r i c t a l l i n t e r n e t t r a f f i c t o one IAP.
However, t o d a t e t h e r e i s no m o n i t o r i n g s o f t w a r e i n p l a c e t o c a p t u r e , a n a l y z e , and r e p o r t on i n t e r n e t b r o w s e r a c t i v i t y p a s s i n g t h r o u g h t h e ADTN c o n n e c t i o n .
4. EXISTING POLICY. E x i s t i n g agency p o l i c i e s t h a t a r e a l r e a d y i n p l a c e a d d r e s s i n a p p r o p r i a t e and u n l a w f u l b e h a v i o r r e g a r d i n g web i n t e r n e t a c c e s s . These p o l i c i e s a r e e x c e r p t e d i n Appendix 1. The m o n i t o r i n g t o o l s t h i s document a d d r e s s e s w i l l h e l p e n f o r c e t h e s e p o l i c i e s .
5. DELEGATION OF AUTHORITY. The S e c u r i t y & Hazardous M a t e r i a l s D i v i s i o n , AEA-700, d e r i v e s i t s a u t h o r i t y t o c o n d u c t i n v e s t i g a t i o n s from t h e F e d e r a l A v i a t i o n Act of 1 9 5 8 a n d T i t l e 5 USC 73, which p e r t a i n s t o s e c u r i t y , s u i t a b i l i t y and c l e a r a n c e s and i s t h e a u t h o r i t y f o r employee and a p p l i c a n t i n v e s t i g a t i o n s . I n v e s t i g a t i v e j u r i s d i c t i o n i s e x e r c i s e d g e n e r a l l y t o c o n d u c t i n v e s t i g a t i o n s f o r s e v e r a l p u r p o s e s i n c l u d i n g a s s u r i n g t h e h i g h e s t p o s s i b l e s t a n d a r d s o f i n t e g r i t y and e t h i c a l c o n d u c t a r e m a i n t a i n e d by agency employees and r e p r e s e n t a t i v e s a n d i n a l l a g e n c y o p e r a t i o n s (FAA O r d e r 1600.20B Civil A v i a t i o n S e c u r i t y I n v e s t i g a t i o n s Handbook). Am-700 i s o f t e n r e q u e s t e d t o c o n d u c t t h o r o u g h i n v e s t i g a t i o n s i n t o m i s c o n d u c t by employees and c o n t r a c t o r s c o n c e r n i n g m i s u s e of government p r o p e r t y ( i . e . computers, i n t e r n e t a c c e s s ) . I n a d d i t i o n , t h e S e c u r i t y & Hazardous M a t e r i a l s D i v i s i o n , AEA-700, i s a l s o r e s p o n s i b l e f o r i n v e s t i g a t i n g c o m p l a i n t s r e f e r r e d from t h e A c c o u n t a b i l i t y Board w i t h i n 30 working days {FAA o r d e r 1110.125 A c c o u n t a b i l i t y B o a r d ) . A c c o u n t a b i l i t y Board c o m p l a i n t s i n c l u d e a l l e g a t i o n s of i n t i m i d a t i n g , h o s t i l e , o r o f f e n s i v e work e n v i r o n m e n t b a s e d on r a c e , c o l o r , r e l i g i o n , g e n d e r , s e x u a l o r i e n t a t i o n , n a t i o n a l o r i g i n , a g e o r d i s a b i l i t y , s e x u a l h a r a s s m e n t o r m i s c o n d u c t o f a s e x u a l n a t u r e and r e l a t e d r e p r i s a l .
Distribution: A-XEA-3; FOF-0; AEA-60 (5cys) Initiated By:AEA-62 6 . PROCEDURES. The m o n i t o r i n g s o f t w a r e c u r r e n t l y u s e d t o c a p t u r e , a n a l y z e , a n d r e p o r t on i n t e r n e t b r o w s e r a c t i v i t y p a s s i n g t h r o u g h t h e IAP m a i n t a i n e d by AEA-200 d i l l a l s o be i n s t a l l e d a t t h e AEA-FAA c o n n e c t i o n m a i n t a i n e d by AEA-60.
411 r e q u e s t s f o r i n t e r n e t u s a g e i n f o r m a t i o n w i l l b e made i n w r i t i n g t o t h e Manage.
S e c u r i t y & Hazardous M a t e r i a l s D i v i s i o n , Am-700, from t h e Manager of t h e r e q u e s t i n g D i v i s i o n o r S t a f f O f f i c e u s i n g t h e a p p r o p r i a t e I n t e r n e t Use Request EA Form 1 3 7 0 - 5 3 ( 1 2 - 0 3 ) . T h i s form i s p r e s e n t e d i n Appendix 2 . Managers and S u p e r v i s o r s a r e n o t t o r e q u e s t i n t e r n e t u s a g e i n f o r m a t i o n from Am-200, AEA-60, o.
3ny I T s t a f f d i r e c t l y . R e q u e s t s i n c o n n e c t i o n w i t h s u s p e c t e d a c c e s s t o s e x u a l l y 2 x p l i c i t w e b s i t e s must f i r s t b e r e p o r t e d t o t h e A c c o u n t a b i l i t y Board, i n accordant d t h FAA Order 1110.125.
In o r d e r t o p r o p e r l y i n v e s t i g a t e a l l e g a t i o n s c o n c e r n i n g i n t e r n e t m i s u s e , i n t e r n e t usage i n f o r m a t i o n w i l l b e r e t a i n e d a s c a p t u r e d by AEA-200 a n d AEA-60 f o r a minimu~ 3f 90 d a y s , o r l o n g e r i f s p e c i f i c a l l y r e q u e s t e d by AEA-700, p e r t h e a p p r o p r i a t e I n t e r n e t M o n i t o r i n g Extended Time E A Form 1 3 7 0 - 5 3 - l ( 1 2 - 0 3 ) . T h i s form i s presentee i n Appendix 3 .
I n t e r n e t u s a g e i n f o r m a t i o n w i l l b e u s e d t o s u p p o r t i n v e s t i g a t i o n s c o n d u c t e d by AEi 700. I n a d d i t i o n , d i v i s i o n / s t a f f managers, i n s u p p o r t o f i n t e r n a l i n v e s t i g a t i o n s , may a l s o u s e i n t e r n e t u s a g e d a t a , p r o v i d e d t h a t t h e manager r e q u e s t s t h e i n f o r m a t i o n from AEA-700 i n w r i t i n g .
A l l e g a t i o n s i n v o l v i n g a c c e s s t o c h i l d pornography, o r a n y o t h e r c r i m i n a l a c t i v i t y , d i l l b e r e f e r r e d by AEA-700 t o t h e p r o p e r l a w e n f o r c e m e n t agency f o r i n v e s t i g a t i o ~ and p r o s e c u t i o n .
r o m a i n t a i n employee p r i v a c y and t o e n s u r e t h e i n t e g r i t y o f e v i d e n c e , a c c e s s t o I n t e r n e t u s a g e i n f o r m a t i o n w i l l b e a c c e s s i b l e t o Am-700 i n v e s t i g a t o r s v i a a d e d i c a t e d w o r k s t a t i o n i n t h e o f f i c e s o f t h e S e c u r i t y & Hazardous M a t e r i a l s D i v i s i o n . AEA-200 w i l l c o o r d i n a t e w i t h AEA-700 t o e n s u r e t h e w o r k s t a t i o n meets the t e c h n i c a l s p e c i f i c a t i o n s t o b e a b l e t o a c c e s s t h e s o f t w a r e a n d d a t a . AEA-200 w i l l s r o v i d e t e c h n i c a l a s s i s t a n c e t o AEA-700 when needed. AEA-200 w i l l a l s o b e r e s p o n s i b l e f o r s o f t w a r e m a i n t e n a n c e , i n c l u d i n g o b t a i n i n g newer v e r s i o n s o f t h e s o f t w a r e when needed, and i n s t a l l i n g any n e c e s s a r y p a t c h e s . To e n s u r e t h a t AEA-70( i n v e s t i g a t o r s c a n r e a d i l y o b t a i n any and a l l a v a i l a b l e r e p o r t s , Am-700 w i l l c o o r d i n a t e w i t h AEA-200 and AEA-60.
--
._
4 r l e n e B . Feldman Regional A d m i n i s t r a t o r APPENDIX 1 FAA ORDER 1370.79A, INTERNET USE POLICY ABSTRACTS kcording to FAA Order 1 3 7 0 . 7 9 A , Internet Use Policy, FAA Internet resources shall be used within prescribed mandates, laws and restrictions to improve information dissemination and to support business transactions. FAA Internet resources shall be used for valid work requirements and for limited personal use, p.rovided such use does not: Interfere with FAA computer or networking services Burden FAA with additional incremental cost Interfere with an FAA user's employment or other obligations to the government Reflect negatively on the FAA or its employees Violate any Federal or FAA rules, regulations or policies According to FAA O r d e r 1 3 7 0 . 7 9 A S e c t i o n 6 ( a ) (2) Improper Use of FAA Internet resources includes: Using the Internet for any purpose that violates the law or FAA rules, regulations and policies Concealing or misrepresenting user identity or affiliation in electronic messages Accessing or altering source or destination addresses of e-mail Interfering with the supervisory or accounting functions of computer resources, including attempts to obtain system privileges unless authorized by system owners Propagating chain letters, broadcasting inappropriate or unsolicited messages to lists or individuals, and comparable resource-intensive unofficial activity Using FAA Internet resources for any commercial purpose, for financial gain (Including gambling) or in support of outside individuals or entities Seeking, viewing, transmitting, collecting or storing vulgar, abusive, discriminatory, obscene (including sexually explicit or pornographic materials) or harassing messages or material Attempting to libel, slander, or harass other users Posting to external newsgroups, bulletin boards, or other public forums, unless it is a business-related requirement, closely related to the employee's area of expertise and appropriate office approvals have been obtained Engaging in matters directed toward any unauthorized fundraising, lobbying or partisan political activities Page 3 I n t e r f e r i n g w i t h l e g i t i m a t e I n t e r n e t s e r v i c e s of any a u t h o r i z e d u s e r R e p r e s e n t i n g t h e a g e n c y i n a n o f f i c i a l c a p a c i t y when n o t a u t h o r i z e d t o do s o FAA u s e r s must b e aware t h a t t h e y h a v e no e x p e c t a t i o n of p r i v a c y w h i l e u s i n g z Government-provided a c c e s s t o t h e I n t e r n e t . Employee I n t e r n e t a n d e l e c t r o r messaging a c t i v i t i e s may b e s u b j e c t t o m o n i t o r i n g , r e c o r d i n g , and p e r i o d i c a u d j t o e n s u r e t h a t t h e s y s t e m i s f u n c t i o n i n g p r o p e r l y a n d t o p r o t e c t a g a i r u n a u t h o r i z e d u s e . (FAA O r d e r 1 3 7 0 . 7 9 A 6(e) ( 1 ) ) Page 4 APPENDIX 2
INTERNET USE REQUEST FORM - for use by Division / Staff Office
The D i v i s i o n / S t a f f O f f i c e h a s r e c e i v e d a l l e g a t i o n s o f i n a p p r o p r i a t e c o m p u t e r a c t i v i t y t h a t h a v e o c c u r r e d w i t h i n t h e d i v i s i o n / s t a f f o f f i c e . The s p e c i f i c a c t i v i t y i s u s e of t h e i n t e r n e t t o a c c e s s a n d d i s p l a y i n a p p r o p r i a t e m a t e r i a l on a c o m p u t e r s c r e e n i n t h e w o r k p l a c e .
.rj A n o t i f i c a t i o n o f t h i s a l l e g a t i o n was f i l e d w i t h t h e FAA's A c c o u n t a b i l i t y Board on 3 n e p o t e n t i a l s o u r c e o f i n f o r m a t i o n r e q u i r e d t o a i d u s i n f u r t h e r d e t e r m i n i n g t h e v a l i d i t y o f t h e a l l e g e d a c t i v i t y i s a r e p o r t o f t h e i n t e r n e t s i t e s a c c e s s e d b y t h e i d e n t i f i e d w o r k s t a t i o n .
T h e r e f o r e , w e r e q u e s t a r e p o r t o f i n t e r n e t s i t e s a c c e s s e d b y t h e w o r k s t a t i o n a s s i g n e d t h e i n t e r n e t p r o t o c o l a d d r e s s of f r o m P l e a s e p r o v i d e t h i s i n f o r m a t i o n t o m e b y c l o s e o f b u s i n e s s , . Thank you f o r y o u r c o o p e r a t i o n .
H e r e i s what we c a n i d e n t i f y a b o u t t h e a l l e g e d m i s u s e : EA Form 1370-53 (12-03) Page 5 APPENDIX 3
INTERNET MONITORING EXTENDED TIME FORM - for use by AEA-700
IEA-700 h a s r e c e i v e d a l l e g a t i o n s o f i n a p p r o p r i a t e computer a c t i v i t y t h a t have ~ c c u r r e dw i t h i n t h e d i v i s i o n / s t a f f o f f i c e . The s p e c i f i c a c t i v i t y i s u s e of t h e i n t e r n e t t o a c c e s s a n d d i s p l a y i n a p p r o p r i a t e m a t e r i a l on a computer s c r e e n i n t h e ~ o r k p l a c e .
h e p o t e n t i a l s o u r c e o f i n f o r m a t i o n r e q u i r e d t o a i d u s i n f u r t h e r d e t e r m i n i n g t h e r a l i d i t y o f t h e a l l e g e d a c t i v i t y i s a r e p o r t of t h e i n t e r n e t sites a c c e s s e d by the i d e n t i f i e d w o r k s t a t i o n .
r h e r e f o r e : LI1 W e r e q u e s t t h a t l o g s f o r t h i s w o r k s t a t i o n c o n t i n u e t o b e m a i n t a i n e d from t o i n a n t i c i p a t i o n o f f u t u r e r e t r i e v a l .
P l e a s e r e t u r n t h i s form t o AEA-700, w i t h one o f t h e f o l l o w i n g i t e m s checked o f f , dhen t h i s l o g m a i n t e n a n c e e x t e n s i o n h a s been implemented.
O W e have e x t e n d e d t h e l o g m a i n t e n a n c e a s r e q u e s t e d .
7 W e a r e u n a b l e t o e x t e n d t h e l o g m a i n t e n a n c e a s r e q u e s t e d d u e t o :