; _THIS PAGE INTENTIONALLY LEFT BLANK_
Documents
Resources
Learning Center
Upload
Plans & pricing Sign in
Sign Out
Your Federal Quarterly Tax Payments are due April 15th Get Help Now >>

_THIS PAGE INTENTIONALLY LEFT BLANK_

VIEWS: 11 PAGES: 109

  • pg 1
									        Appendix B: Privileged Users Guide




(THIS PAGE INTENTIONALLY LEFT BLANK)




               WÏCRËT7NQEQRN/
                   Page 12 of 138
               77SEOILT, ?V#£Q&VL

         Appendix B: Privileged Users Guide




(THIS PA GE INTENTIONALL Y LEFT BLANK)




               MSFCRtfTWffrrmN/
                    Page 14 of 138
                     //SECRET/NOFORN/


       Appendix C: Configuration Management Plan


  F E D E R A L B U R E A U OF INVESTIGATION
                   Operations Technology Division
Telecommunication Intercept and Collection Technology Unit (TICTU)




DCS-5000 Configuration Management Plan

                           April 2, 2004

                            Version 1.1
                    Federal Bureau of Investigation
                     935 Pennsylvania Avenue, NW
                             Room 9364


                Washington, DC 20530




                     //SECRET/NOFORN/
                            Page 25 of 138
      Appendix C: Configuration Management Plan




(THIS PAGE INTENTIONALLY LEFT BLANK)




               ^ÏÏSECRttffiÓÉQEN/
                     Page 26 of 138
                     //SEÇfŒTfNQFORN/



          Appendix D: DCS-5000 Contingency Plan


  F E D E R A L B U R E A U OF INVESTIGATION
                   Operations Technology Division
Telecommunication Intercept and Collection Technology Unit (TICTU)




           DCS-5000 Contingency Plan

                        15 September 2005

                            Version 1.1


                    Federal Bureau of Investigation
                    935 Pennsylvania Avenue, NW
                             Room 9364
                        Washington, DC 20530




                            Page 36ofîS8       —
           ^J/SEe^miSFORN/

       Appendix D: DCS-5000 Contingency Plan




(THIS PAGE INTENTIONALLY LEFT BLANK)




               //SECRmTmm
                   -"•"fage 37 of 138
                     //SECREWS&FQ&N/


          Appendix E: DCS-5000 Rules of Behavior


  F E D E R A L B U R E A U OF INVESTIGATION
                   Operations Technology Division
Telecommunication Intercept and Collection Technology Unit (TICTU)




           DCS-5000 Rules of Behavior

                          April 30, 2004

                            Version 1.0

                    Federal Bureau of Investigation
                   • 935 Pennsylvania Avenue, NW
                             Room 9364

                Washington, DC 20530




                     //sEgmzmQFORN/
                         ""Page 51 o f i ^ - ^ .
  Appendix E: DCS-5000 Rules of Behavior




(This page intentionally left blank)




                                 >




          //SECRMJ^smm,82^"
               Page 52 of 138
               ÇESfàgFoÎw

Appendix E: DCS-5000 Rules of Behavior




   (This page intentionally left blank)




                           7RN/
              Page124of 138
  Appendix F: DCS-5000 Security Training and Awareness


  F E D E R A L B U R E A U OF INVESTIGATION
                   Operations Technology Division
Telecommunication Intercept and Collection Technology Unit (TICTU)




DCS-5000 Security Training and Awareness

                       15 September 2005

                            Version 1.1

                    Federal Bureau of Investigation
                    935 Pennsylvania Avenue, NW
                             Room 9364
                        Washington, DC 20530




                            Page124of 138
Appendix F: Security Training and Awareness




     (This page intentionally left blank)




                                            I




           T/SEçœmœmBû/
                Page 71 of 138
           //SÈVRE^ia^ORN/

Appendix F: Security Training and Awareness




     (This page intentionally left blank)




                 Page124of 138
                     ifSEGjgxätcrFow/


       Appendix G: DCS-5000 Incident Response Plan


  F E D E R A L B U R E A U OF INVESTIGATION
                   Operations Technology Division
Telecommunication Intercept and Collection Technology Unit (TICTU)




       DCS-5000 Incident Response Plan

                       15 September 2005

                            Version 1.1

                    Federal Bureau ofInvestigation
                    935 Pennsylvania Avenue, NW
                             Room 9364
                        Washington, DC 20530




                     /¿SE€RE^N0£QRN/
                            Page 75 of 138
       //sECREmtefmiy/

Appendix V: Incident Response Plan




 (This page intentionally left blank)
Appendix G: Incident Response Plan




 (This page intentionally left blank)




       //SE^RE^aSom/
            Page 78 of 138
                      //SEQ                ORN/


          Appendix H: DCS-5000



              U
   F , EDERAL B U R E A U OF INVESTIGATION
                    Operations Technology Division
 Telecommunication Intercept and Collection Technology Unit (TICTU)




DCS-5000 System Security Subcomponent Plan

                                 For



                            15 Sept 2005

                             Version 1.1

                     Federal Bureau of Investigation
                      935 Pennsylvania Avenue, NW
                              Room 9364
Appendix H: Work Flow Manager (WFM)




   (This page intentionally left blank)




         //SE£RE¥fmEOKN/
         •—   Page 108 of 138"—
Appendix H: Work Flow Manager (WFM)




   (This page intentionally left blank)




       JfèEm&mSEQRN/
              Page 110 o f l ì T
                      /ŒEœErm&mw/


                     Appendix I:


   F E D E R A L B U R E A U OF INVESTIGATION
                    Operations Technology Division
 Telecommunication Intercept and Collection Technology Unit (TICTU)




DCS-5000 System Security Subcomponent Plan
                   For


                         15 September 2005

                             Version 1.1


                     Federal Bureau of Investigation
                      935 Pennsylvania Avenue, NW
                              Room 9364
                         Washington, DC 20530




                      /jSM&œmœEQRN/
                            Page 121 of 138        •
      77SE£Z£T/KOFmmZ

      Appendix /:




(This page intentionally left blank)




           Page 122 of 138
                                       b2
                                       b7E
      Appendix I:I




(This page intentionally left blank)




           Page 124 of 138
                          b2
                      !   'T_ -7
Appendix I:




    Page 124 of 138
                                 FEDERAL BUREAU OF INVESTIGATION
                                        FOIPA

                                 DELETED PAGE INFORMATION SHEET

    Serial Description ~ COVER SHEET

Total Deleted Page(s) ~ 264
Page 5 ~ b2, b4, b7E
Page 6 ~ b2, b4, b7E
Page 7 - b2, b4, b7E
Page 8 - b2, b4, b7E
Page 10 ~ b2 b4 b7E
Page 11~ b2 b4 b7E
Page 12 ~ b2 b4 b7E
Page 13 ~ b2 b4 b7E
Page 14 ~ b2 b4 b7E
Page 15 ~ b2 b4 b7E
Page 16 ~ b2 b4 b7E
Page 17 ~ b2 b4 b7E
Page 18 ~ b2 b4 b7E
Page 19 ~ b2 b4 b7E
Page 20 ~ b2 b4 b7E
Page 21 ~ b2 b4 b7E
Page 22 ~ b2 b4 b7E
Page 23 ~ b2 b4 b7E
Page 24 ~ b2 b4 b7E
Page 25 ~ b2 b4 b7E
Page 26 ~ b2 b4 b7E
Page 27 ~ b2 b4 b7E
Page 28 ~ b2 b4 b7E
Page 29 ~ b2 b4 b7E
Page 30 ~ b2 b4 b7E
Page 31 ~ b2 b4 b7E
Page 32 ~ b2 b4 b7E
Page 33 ~ b2 b4 b7E
Page 34 ~ b2 b4 b7E
Page 35 ~ b2 b4 b7E
Page 36 ~ b2 b4 b7E
Page 37 ~ b2 b4 b7E
Page 38 ~ b2 b4 b7E
Page 39 ~ b2 b4 b7E
Page 40 ~ b2 b4 b7E
Page 41 ~ b2 b4 b7E
Page 42 ~ b2 b4 b7E
Page 43 ~ b2 b4 b7E
Page 44 ~ b2 b4 b7E
Page 45 ~ b2 b4 b7E
Page 46 ~ b2 b4 b7E
Page 47 ~ b2 b4 b7E
Page 48 ~ b2 b4 b7E
Page 49 ~ b1 b2 b4, b7E



                                       XXXXXXXXXXXXXXXXXXXXXXXX
                                       X Deleted Pagete) X
                                       X No Duplication Fee X
                                       X for this Page    X
                                       XXXXXXXXXXXXXXXXXXXXXXXXX
Page 50       b2,   b4,   b7E
Page 51 m»    b2,   b4,   b7E
Page 52 ^
              b1,   b2,   b4, b7E
Page 53       b1,   b2,   b4, b7E
Page 54       b2,   b4,   b7E
Page 55       b2,   b4,   b7E
Page 56       b2,   b4,   b7E
Page 58       b2,   b4,   b7E
Page 59 ***
              b2,   b4,   b7E
Page 63       b2,   b4,   b7E
Page 64       b2,   b4,   b7E
Page 65       b2,   b4,   b7E
Page 66       b2,   b4,   b7E
Page 67       b2,   b4,   b7E
Page 69       b2,   b4,   b6, b7C,   b7E
Page 70       b2,   b4,   b6, b7C,   b7E
Page 71       b2,   b4,   b6, b7C,   b7E
Page 72       b2,   b4,   b6, b7C,   b7E
Page 73       b2,   b4,   b7E
Page 74       b2,   b4,   b7E
Page 75       b2,   b4,   b7E
Page 76       b2,   b4,   b7E
Page 77       b2,   b4,   b7E
Page 78       b2,   b4,   b7E
Page 79       b2,   b4,   b7E
Page 80       b2,   b4,   b7E
Page 82       b2,   b4,   b7E
Page 83       b2,   b4,   b7E
Page 84       b2,   b4,   b7E
Page 85       b2,   b4,   b7E
Page 86       b2,   b4,   b7E
Page 87       b2,   b4,   b7E
Page 88       b2,   b4,   b7E
Page 89       b2,   b4,   b7E
Page 90       b2,   b4,   b7E
Page 91       b2,   b4,   b7E
Page 92       b2,   b4,   b7E
Page 93       b2,   b4,   b7E
Page 94       b2,   b4,   b7E
Page 95       b2,   b4,   b7E
Page 96       b2,   b4,   b7E
Page 97       b2,   b4,   b7E
Page 98       b2,   b4,   b7E
Page 99       b2,   b4,   b7E




                                           xxxxxxxxxxxxxxxxxxxxxxxx
                                           X Deleted Pagete) X
                                           X No Duplication Fee X
                                           )boa)oB(>^xSxxx&xxxxxxxxx
Page   100         b2,   b4,   b7E
Page   101         b2,   b4,   b7E
Page   102         b2,   b4,   b7E
Page   103         b2,   b4,   b7E
Page   104         b2,   b4,   b7E
Page   105         b2,   b4,   b7E
Page   106         b2,   b4,   b7E
Page   107         b2,   b4,   b7E
Page   108   **
                   b2,   b4,   b7E
Page   109         b2,   b4,   b7E
Page   111         b2,   b4,   b7E
Page   112         b2,   b4,   b7C
Page   113         b2,   b4,   b7E
Page   115         b2,   b4,   b7E
Page   116         b2,   b4,   b7E
Page   117         b2,   b4,   b7E
Page   118         b2,   b4,   b7E
Page   119         b2,   b4,   b7E
Page   120         b2,   b4,   b7E
Page   121   ***
                   b2,   b4,   b7E
Page   122   **
                   b2,   b4,   b7E
Page   123         b2,   b4,   b7E
Page   124         b2,   b4,   b7E
Page   125         b2,   b4,   b7E
Page   126         b2,   b4,   b7E
Page   127         b2,   b4,   b7E
Page   128         b2,   b4,   b7E
Page   129         b2,   b4,   b7E
Page   130         b2,   b4,   b7E
Page   131         b1,   b2,   b4, b7E
Page   132         b2,   b4,   b7E
Page   133         b2,   b4,   b7E
Page   134         b2,   b4,   b7E
Page   135         b2,   b4,   b7E
Page   136         b2,   b4,   b7E
Page   137         b2,   b4,   b7E
Page   138         b2,   b4,   b7E
Page   139         b2,   b4,   b7E
Page   140         b2,   b4,   b7E
Page   141         b2,   b4,   b7E
Page   143         b2,   b4,   b7E
Page   144         b2,   b4,   b7E
Page   145         b2,   b4,   b7E
Page   146         b2,   b4,   b7E




                                         xxxxxxxxxxxxxxxxxxxxxxxx
                                         X Deleted Page(s) X
                                         X No Duplication Fee X
                                         X for this Page    X
                                         XXXXXXXXXXXXXXXXXXXXXXXXX
Page 147   0**
                 b2   b4, b7E
Page 148         b2   b4, b7E
Page 149         b2   b4, b7E
Page 150         b2   b4, b7E
Page 151         b2   b4, b7E
Page 152         b2   b4, b7E
Page 153         b2   b4, b7E
Page 154   **
                 b2   b4, b7E
Page 155         b2   b4, b7E
Page 156         b2   b4, b7E
Page 157         b2   b4, b7E
Page 158         b2   b4, b7E
Page 159         b2   b4, b7E
Page 160         b2   b4, b7E
Page 161         b2   b4, b7E
Page 162         b2   b4, b7E
Page 163         b2   b4, b7E
Page 164         b2   b4, b7E
Page 165         b2   b4, b7E
Page 166         b2   b4, b7E
Page 167         b2   b4, b7E
Page 168         b2   b4, b7E
Page 169         b2   b4, b7E
Page 170         b2   b4, b7E
Page 171         b2   b4, b7E
Page 172         b2   b4, b7E
Page 173         b2   b4, b7E
Page 174         b2   b4, b7E
Page 175         b2   b4, b7E
Page 176         b2   b4, b7E
Page 177   **
                 b2   b4, b7E
Page 178         b2   b4, b7E
Page 179         b2   b4, b7E
Page 180         b2   b4, b7E
Page 181         b2   b4, b7E
Page 182         b2   b4, b7E
Page 183         b2   b4, b7E
Page 184         b2   b4, b7E
Page 185         b2   b4, b7E
Page 186         b2   b4, b7E
Page 187         b2   b4, b7E
Page 188         b2   b4, b7E
Page 189         b2   b4, b7E
Page 190   0*0
                 b2   b4, b7E




                                xxxxxxxxxxxxxxxxxxxxxxxx
                                X Deleted Page(s) X
                                X No Duplication Fee X
                                X for this Page    X
                                XXXXXXXXXXXXXXXXXXXXXXXXX
Page   191   b2,b4, b7E
Page   192   b2,b4, b7E
Page   193   b2,b4, b7E
Page   194   b2,b4, b7E
Page   195   b2,b4 b7E
Page   196   b2,b4 b7E
Page   197   b2,b4, b7E
Page   198   b2,b4, b7E
Page   199   b2,b4, b7E
Page   200   b2,b4, b7E
Page   201   b2,b4, b7E
Page   202   b2,b4, b7E
Page   203   b2,b4, b7E
Page   204   b2,b4, b7E
Page   205   b2,b4, b7E
Page   206   b2,b4, b7E
Page   207   b2,b4, b7E
Page   208   b2,b4 b7E
Page   209   b2,b4 b7E
Page   210   b2,b4 b7E
Page   211   b2,b4 b7E
Page   212   b2,b4 b7E
Page   213   b2,b4, b7E
Page   214   b2,b4, b7E
Page   215   b2,b4, b7E
Page   216   b2,b4, b7E
Page   217   b2,b4, b7E
Page   218   b2,b4, b7E
Page   219   b2,b4, b7E
Page   222   Duplicate DIVISION   DOCUMENTS SECTION 15 FOIPA 1062404-01
Page   224   Duplicate DIVISION   DOCUMENTS SECTION 13 FOIPA 1062404-01
Page   225   Duplicate DIVISION   DOCUMENTS SECTION 13 FOIPA 1062404-01
Page   226   Duplicate DIVISION   DOCUMENTS SECTION 13 FOIPA 1062404-01
Page   227   Duplicate DIVISION   DOCUMENTS SECTION 13 FOIPA 1062404-01
Page   228   Duplicate DIVISION   DOCUMENTS SECTION 6 FOIPA 1062404-01
Page   229   Duplicate DIVISION   DOCUMENTS SECTION 13 FOIPA 1062404-01
Page   232   Duplicate DIVISION   DOCMENTS SECTION 13 FOIPA 1062404-01
Page   234   Duplicate DIVISION   DOCMENTS SECTION 13 FOIPA 1062404-01
Page   235   Duplicate DIVISION   DOCMENTS SECTION 13 FOIPA 1062404-01
Page   236   Duplicate DIVISION   DOCMENTS SECTION 13 FOIPA 1062404-01
Page   237   Duplicate DIVISION   DOCMENTS SECTION 13 FOIPA 1062404-01
Page   238   Duplicate DIVISION   DOCMENTS SECTION 13 FOIPA 1062404-01
Page   239   Duplicate DIVISION   DOCMENTS SECTION 13 FOIPA 1062404-01
Page   240   Duplicate DIVISION   DOCMENTS SECTION 13 FOIPA 1062404-01




                                             xxxxxxxxxxxxxxxxxxxxxxxx
                                             X Deleted Pagete) X
                                             X No Duplication Fee X
                                             X for this Page    X
                                             XXXXXXXXXXXXXXXXXXXXXXXXX
Page   241 -   Duplicate   DIVISION DOCMENTS SECTION 13 FOIPA 1062404-01
Page   242 ~   Duplicate   DIVISION DOCMENTS SECTION 13 FOIPA 1062404-01
Page   243 -   Duplicate   DIVISION DOCMENTS SECTION 13 FOIPA 1062404-01
Page   246 ~   Duplicate   DIVISION DOCMENTS SECTION 13 FOIPA 1062404-01
Page   247 -   Duplicate   DIVISION DOCMENTS SECTION 13 FOIPA 1062404-01
Page   248 ~   Duplicate   DIVISION DOCMENTS SECTION 13 FOIPA 1062404-01
Page   249 -   Duplicate   DIVISION DOCMENTS SECTION 13 FOIPA 1062404-01
Page   250 ~   Duplicate   DIVISION DOCMENTS SECTION 13 FOIPA 1062404-01
Page   251 ~   Duplicate   DIVISION DOCMENTS SECTION 13 FOIPA 1062404-01
Page   252 ~   Duplicate   DIVISION DOCMENTS SECTION 13 FOIPA 1062404-01
Page   253 -   Duplicate   DIVISION DOCMENTS SECTION 13 FOIPA 1062404-01
Page   254 -   Duplicate   DIVISION DOCMENTS SECTION 13 FOIPA 1062404-01
Page   257 -   Duplicate   DIVISION DOCMENTS SECTION 13 FOIPA 1062404-01
Page   258 -   Duplicate   DIVISION DOCMENTS SECTION 13 FOIPA 1062404-01
Page   259 -   Duplicate   DIVISION DOCMENTS SECTION 13 FOIPA 1062404-01
Page   260 ~   Duplicate   DIVISION DOCMENTS SECTION 13 FOIPA 1062404-01
Page   261 -   Duplicate   DIVISION DOCMENTS SECTION 13 FOIPA 1062404-01
Page   262 -   Duplicate   DIVISION DOCMENTS SECTION 13 FOIPA 1062404-01
Page   263 ~   Duplicate   DIVISION DOCMENTS SECTION 13 FOIPA 1062404-01
Page   264 -   Duplicate   DIVISION DOCMENTS SECTION 13 FOIPA 1062404-01
Page   265 -   Duplicate   DIVISION DOCMENTS SECTION 13 FOIPA 1062404-01
Page   266 -   Duplicate   DIVISION DOCMENTS SECTION 13 FOIPA 1062404-01
Page   267 ~   Duplicate   DIVISION DOCMENTS SECTION 13 FOIPA 1062404-01
Page   268 ~   Duplicate   DIVISION DOCMENTS SECTION 13 FOIPA 1062404-01
Page   269 ~   Duplicate   DIVISION DOCMENTS SECTION 13 FOIPA 1062404-01
Page   272 -   Duplicate   DIVISION DOCUMENTS SECTION 15 1062404
Page   274 -   Duplicate   OTD SPTU DOCUMENTS CRR CD5 1083022
Page   275-    Duplicate   OTD SPTU DOCUMENTS CRR CD5 1083022
Page   276 -   Duplicate   OTD SPTU DOCUMENTS CRR CD5 1083022
Page   277 -   Duplicate   OTD SPTU DOCUMENTS CRR CD5 1083022
Page   278 -   Duplicate   OTD SPTU DOCUMENTS CRR CD5 1083022
Page   279-    Duplicate   OTD SPTU DOCUMENTS CRR CD5 1083022
Page   280-    Duplicate   OTD SPTU DOCUMENTS CRR CD5 1083022
Page   281 -   Duplicate   OTD SPTU DOCUMENTS CRR CD5 1083022
Page   282 -   Duplicate   OTD SPTU DOCUMENTS CRR CD5 1083022
Page   283 -   Duplicate   OTD SPTU DOCUMENTS CRR CD5 1083022
Page   284 -   Duplicate   OTD SPTU DOCUMENTS CRR CD5 1083022
Page   285 -   Duplicate   OTD SPTU DOCUMENTS CRR CD5 1083022
Page   286-    Duplicate   OTD SPTU DOCUMENTS CRR CD5 1083022
Page   287 -   Duplicate   OTD SPTU DOCUMENTS CRR CD5 1083022
Page   288 -   Duplicate   OTD SPTU DOCUMENTS CRR CD5 1083022
Page   291 -   Duplicate   DIVISION DOCUMENTS SECTION 13 1062404-01
Page   293 -   Duplicate    DIVISION DOCUMENTS SECTION 13 1062404-01
Page   296 -   Duplicate    DIVISION DOCUMENTS SECTION 13 1062404-01
                                                               ALL INFORMATION CONTAINED.
                     / / e D l o o r T A A r/                  HEREIN IS UNCLASSIFIED EXCEPT

                     //SmET/NO^N/                              ^     % m m   oraERUISE



            DCS-5000 System Security Plan (SSP)
  F E D E R A L B U R E A U OF INVESTIGATION
                   Operations Technology Division
Telecommunication Intercept and Collection Technology Unit (TICTU)


                                                        DATE: 05-01-2009
                                                        CLASSIFIED BY 60322 UC LP/PLJ/LC®
                                                        REASON: 1.4 (g)
                                                        DECLASSIFY ON: 05-01-2034




                         DCS-5000
                 System Security Plan

                     15 December 2005

                  Version - DCS-5000 SSP Rev 3.5


                           Prepared By:
                              TICTU

                   CiassifwdB^BI/O/V/TICTU
                  Reason: G-3       SectyMEOl3292
                  Declassify On 150)ecentbe^2025




                     //skmET/NO^dm/
                         / Pagel o f $ A
                          VOFORN/

   DCS-5000 System Security Plan (SSP)




(This page intentionally left blank)




          //SECß^Tff^QRN/
            " " P a g e 2 of 58
   DCS-5000 System Security Plan (SSP)




(This page intentionally left blank)




         //SEGiUmWfFORN/
//SECRl   WRN/
                                                    DECLASSIFIED BY 60322 UC LP/PLJ/LCtf
                     ^ ^                            OH 05-04-2009
                     7/5Èe£ÉT/NOFORN/

            DCS-5000 System Security Plan (SSP)


  F E D E R A L B U R E A U OF INVESTIGATION
                   Operations Technology Division
Telecommunication Intercept and Collection Technology Unit (TICTU)




                           DCS-5000
                 System Security Plan

                           05 June 2006

                  Version - DCS-5000   SSP Rev 4.0a


                            Prepared By:
                               TICTU

                   Classified  by^RBI/OTD/TICTU
                  Reason: G-3     Secb%4c/EO13292
                  Declassify On 22fFeb<uary 2026




                     //SMea^T/NOFORN/
                             Page 1 of49
          //SËCR^mOFORN/

   DCS-5000 System Security Plan (SSP)




(This page intentionally left blank)




                                \




                Page124of 138
       ^j/s^ts&müFeSm

   DCS-5000 System Security Plan (SSP)




(This page intentionally left blank)




               Page 8 of 49
                        //ÌÈ&&UT//NOFORN

                 DCS-5000 System Security Plan (SSP)

        Secret                   •                     h2
    I I Top Secret               Q "other              b7E

    Q   Other:




/




                        //SE&CeF/NOFORN/
                             Page 2 l o f 49
                                                    ALL INFORMATION CONTAINED
                                                    HEREIN IS UNCLASSIFIED EXCEPT
                                                    WHERE SHOWN OTHERWISE '



                                               DATE: 05-04-2009 •
                                               CLASSIFIED BY 60322 UC LP/PLJ/LCtf
                                               REASON: 1.4 (g)
                                               DECLASSIFY ON: 05-04-2034




Federal Bureau of Investigation (FBI)
  SYSTEM SECURITY PLAN (SSP)

         DCS-5000 Red Wolf
   System Security Plan




         Date: 30 September 2006

               Version: 4.0c

          [SSP Template Rev. 3.0]




   System Owner: FB1/OTD/TICTU




   .S
(J L I L L ASA I Hfcl I); / FOR OFFICIAL USE ONLY




slDR^iL
         RECORD OF CHANGES AND REVIEW
Number        Date        Description   Entered By
        SE'                >FORN
Figure 2. DCS-5000 WFM Top Level BlockDi!
DATE: 05-04-2009
                                                                           ALL INFORMATION CONTAINED
CLASSIFIED BY 60322 UC LP/PLJ/LCU
                                                                           HEREIN IS UNCLASSIFIED EXCEPT
REASON: 1.4 (g)
                                                                           WHERE SHOWN OTHERWISE
DECLASSIFY ON: 05-04-2034



                               Appendix A: DCS-5000 General Users Guide


                        F E D E R A L B U R E A U OF INVESTIGATION
                                         Operations Technology Division
                      Telecommunication Intercept and Collection Technology Unit (TICTU)




                 DCS-5000 GENERAL USER SECURITY GUIDE

                                                  Version 2.0

                                               24 August 2005

                                          Federal Bureau ofInvestigation
                                           935 Pennsylvania Avenue, NW
                                                   Room 9364
                                              Washington, DC 20530



                                            Derived Phqr G-3
                                       Declassify oft: 26 August 2030




                                           //SßCReiYNQFORN/
                                                  Page 1 of
          /¡SEC^E^SSOFORN

     Appendix A: General Users Guide




(This page intentionally left blank)




          ^SECÏÏf^fQ^QRN/
              ^?age2ofl38   •
      //SEQ.

Appendix A: General Users Guide




(This page intentionally left blank)




      //SECßmmQEQRN/
        •   Page 4 of 138
                     //SECRET/NOFORN/


       Appendix B: DCS-5000 Privileged Users Guide



  F E D E R A L B U R E A U OF INVESTIGATION
                   Operations Technology Division
Telecommunication Intercept and Collection Technology Unit (TICTU)




        DCS-5000 Privileged Users Guide


                            Version 1.1

                           15 Sept 2005

                    Federal Bureau of Investigation
                     935 Pennsylvania Avenue, NW
                             Room 9364
                        Washington, DC 20530




                      Derive<Nfrom: G-3
                 Declassifam: 24 August 2030


                     //SECRET/NOFORN/
                            Page 11 of 138 •
        Appendix B: Privileged Users Guide




                                             \



(THIS PAGE INTENTIONALLY LEFT BLANK)




              //sßstemwtEQBN/
                   Page 12 of 138
         Appendix B: Privileged Users Guide




(THIS PA GE INTENTIONALL Y LEFT BLANK)




               //SECßMmQFORN/
               ^ - ^ P a g e 14 o f Ì K
                     //SEÇRET7N&mRN/


        Appendix C: Configuration Management Plan


  F E D E R A L B U R E A U OF INVESTIGATION
                   Operations Technology Division
Telecommunication Intercept and Collection Technology Unit (TICTU)




DCS-5000 Configuration Management Plan

                           April 2, 2004

                            Version 1.1
                    Federal Bureau of Investigation
                     935 Pennsylvania Avenue, NW
                             Room 9364


                Washington, DC 20530




                     //sEÇRmrm^QRN/
                            Page 25 of 138
      Appendix C: Configuration Management Plan




(THIS PAGE INTENTIONALLY LEFT BLANK)




                //SEÇKET/NÔfmUM
                    Page 26 of 138
                     //SEOŒT/WFORN/



          Appendix D: DCS-5000 Contingency Pian


     DERAL U
  F EEDERAL U B R E A U OF INVESTIGATION
                   Operations Technology Division
Telecommunication Intercept and Collection Technology Unit (TICTU)




           DCS-5000 Contingency Plan

                        15 September 2005

                            Version 1.1


                    Federal Bureau of Investigation
                     935 Pennsylvania Avenue, NW
                             Room 9364
                        Washington, DC 20530




                     //SEÇœTfNQEQRN/
                      —     Page 36 of 138    -
       Appendix D: DCS-5000 Contingency Plan




(THIS PAGE INTENTIONALLY LEFT BLANK)




                    Page124of 138
                     //SECREpmEQRN/


          Appendix E: DCS-5000 Rules of Behavior


             JLFUREAU OF INVESTIGATION
  F , EDERAL B
                   Operations Technology Division
Telecommunication Intercept and Collection Technology Unit (TICTU)




           DCS-5000 Rules of Behavior

                          April 30, 2004

                            Version 1.0

                    Federal Bureau of Investigation
                     935 Pennsylvania Avenue, NW
                             Room 9364

                Washington, DC 20530




                     //SECRET/NG&mN/
                            Page 51 of 138
  Appendix E: DCS-5000 Rules of Behavior




(This page intentionally left blank)




           //SEÇRËT/mFQMN/
                Page 52 of 138
         //SECRm^iQFORN/

Appendix E: DCS-SOOO Rules of Behavior




   (This page intentionally left blank)
  Appendix F: DCS-5000 Security Training and Awareness


 F    EDERAL B U R E A U OF T
                            INVESTIGATION
                   Operations Technology Division
Telecommunication Intercept and Collection Technology Unit (TICTU)




DCS-5000 Security Training and Awareness

                       15 September 2005

                            Version 1.1

                    Federal Bureau of Investigation
                    935 Pennsylvania Avenue, NW
                             Room 9364
                        Washington, DC 20530




                     //SpGRET7NO¥i
                            Page 70 of 138
           //SËp^^QEQRN/

Appendix F: Security Training and Awareness




     (This page intentionally left blank)
           //SECg&mOFORN/

Appendix F: Security Training and Awareness




     (This page intentionally left blank)




           //SECBE^rmFi
                Page 73 of 138
       Appendix G: DCS-5000 Incident Response Plan


     DERAL B
  F EEDERAL JLJUREAU OF INVESTIGATION
                   Operations Technology Division
Telecommunication Intercept and Collection Technology Unit (TICTU)




       DCS-5000 Incident Response Plan

                       15 September 2005

                            Version 1.1

                    Federal Bureau ofInvestigation
                     935 Pennsylvania Avenue, NW
                             Room 9364
                         Washington, DC 20530
Appendix G: Incident Response Plan




 (This page intentionally left blank)




       //SECSEimGZSRN/
      —-    Page 76 of 138   ""
                                 FEDERAL BUREAU OF INVESTIGATION
                                        FOIPA

                                 DELETED PAGE INFORMATION SHEET

    Serial Description ~ COVER SHEET

Total Deleted Page(s) ~ 271
Page 2 ~ Duplicate
Page 3 ~ Duplicate
Page 4 ~ Duplicate
Page 5 ~ Duplicate
Page 6 - Duplicate
Page 7 - Duplicate
Page 8 ~ Duplicate
Page 9 - Duplicate
Page 10 ~ Duplicate
Page 11 ~ Duplicate
Page 12 ~ Duplicate
Page 13 ~ Duplicate
Page 14 ~ Duplicate
Page 15 ~ Duplicate
Page 16 - Duplicate
Page 17 ~ Duplicate
Page 18 ~ Duplicate
Page 19 ~ Duplicate
Page 20 ~ Duplicate
Page 21 ~ Duplicate
Page 22 - Duplicate
Page 23 ~ Duplicate
Page 24 ~ Duplicate
Page 25 ~ Duplicate
Page 26 ~ Duplicate
Page 27 ~ Duplicate
Page 28 ~ Duplicate
Page 29 ~ Duplicate
Page 32 ~ Duplicate
Page 33 ~ Duplicate
Page 34 ~ Duplicate
Page 35 ~ Duplicate
Page 36 ~ Duplicate
Page 37 ~ Duplicate
Page 38 ~ Duplicate
Page 39 ~ Duplicate
Page 40 ~ Duplicate
Page 41 ~ Duplicate
Page 42 ~ Duplicate
Page 43 ~ Duplicate
Page 46 ~ Duplicate
Page 48 ~ Duplicate
Page 49 ~ Duplicate
Page 50 ~ Duplicate




                                        xxxxxxxxxxxxxxxxxxxxxxxx
                                        X Deleted Page(s) X
                                        X No Duplication ree X
                                        XXXXXXXXXXXXXXXXXXXXXXXX
Page 51 - Duplicate
Page 52 ~ Duplicate
Page 53 ~ Duplicate
Page 54 ~ Duplicate
Page 55 ~ Duplicate
Page 56 - Duplicate
Page 58 ~ Duplicate
Page 59 - Duplicate
Page 60 ~ Duplicate
Page 61 ~ Duplicate
Page 64 ~ Duplicate
Page 66 ~ Duplicate
Page 67 - Duplicate
Page 68 ~ Duplicate
Page 69 ~ Duplicate
Page 70 ~ Duplicate
Page 71 ~ Duplicate
Page 74 - Duplicate
Page 76 ~ Duplicate
Page 77 ~ Duplicate
Page 78 ~ Duplicate
Page 79 ~ Duplicate
Page 80 ~ Duplicate
Page 81 ~ Duplicate
Page 82 ~ Duplicate
Page 83 ~ Duplicate
Page 8 4 - Duplicate
Page 85 ~ Duplicate
Page 88 ~ Duplicate
Page 89 - Duplicate
Page 90 ~ Duplicate
Page 91 ~ Duplicate
Page 92 ~ Duplicate
Page 93 ~ Duplicate
Page 94 ~ Duplicate
Page 95 ~ Duplicate
Page 96 ~ Duplicate
Page 99 ~ Duplicate
Page 100 ~ Duplicate
Page 101 ~ Duplicate
Page 102 ~ Duplicate
Page 103 ~ Duplicate
Page 104 ~ Duplicate
Page 105 ~ Duplicate




                       XXXXXXXXXXXXXXXXXXXXXXXX
                       X Deleted Pageis) X,
Page   106 ~   Duplicate
Page   107 ~   Duplicate
Page   108 ~   Duplicate
Page   109 -   Duplicate
Page   110 ~   Duplicate
Page   111 ~   Duplicate
Page   114 ~   Duplicate
Page   116 ~   Duplicate
Page   117 ~   Duplicate
Page   118 ~   Duplicate
Page   119 ~   Duplicate
Page   120-    Duplicate
Page   121 -   Duplicate
Page   122-    Duplicate
Page   123-    Duplicate
Page   124 -   Duplicate
Page   125 -   Duplicate
Page   126 -   Duplicate
Page   127-    Duplicate
Page   128-    Duplicate
Page   129-    Duplicate
Page   130-    Duplicate
Page   133-    Duplicate
Page   135 -   Duplicate
Page   138 -   Duplicate Division Documents Section 13
Page   140 -   Duplicate Division Documents Section 13
Page   141 -   Duplicate
Page   142 -   Duplicate
Page   143 -   Duplicate
Page   144 -   Duplicate
Page   145 -   Duplicate
Page   146 -   Duplicate
Page   147 -   Duplicate
Page   148 -   Duplicate
Page   149 -   Duplicate
Page   150-    Duplicate
Page   151-    Duplicate
Page   152-    Duplicate
Page   153 -   Duplicate
Page   154 -   Duplicate
Page   155 -   Duplicate
Page   156-    Duplicate
Page   157 -   Duplicate
Page   158-    Duplicate




                                               XXXXXXXXXXXXXXXXXXXXXXXX
                                               X Deleted Page(s) X ,
                                               X No Duplication Tee X
                                               XXXXXXXXXXXXXXXXXXXXXXXX
Page 159 ~     Duplicate
Page 1 6 0 -   Duplicate
Page 161 ~     Duplicate
Page 162 ~     Duplicate
Page 1 6 3 -   Duplicate
Page 164 ~     Duplicate
Page 165 ~     Duplicate
Page 1 6 6 -   Duplicate
Page 167 ~     Duplicate
Page 170 ~     Duplicate
Page 172 -     Duplicate
Page 173 -     Duplicate
Page 174 -     Duplicate
Page 175 ~     Duplicate
Page 176 ~     Duplicate
Page 177 ~     Duplicate
Page 178 ~     Duplicate
Page 179 ~     Duplicate
Page 1 8 0 -   Duplicate
Page 181 ~     Duplicate
Page 184 ~     Duplicate
Page 186 ~     Duplicate
Page 187 ~     Duplicate
Page 1 8 8 -   Duplicate
Page 1 8 9 -   Duplicate
Page 1 9 0 -   Duplicate
Page 191 -     Duplicate
Page 1 9 2 -   Duplicate
Page 1 9 3 -   Duplicate
Page 194 -     Duplicate
Page 1 9 6 -   Duplicate
Page 197 -     Duplicate
Page 1 9 8 -   Duplicate
Page 1 9 9 -   Duplicate
Page 202 -     b2, b7E
Page 203 -     b2, b7E
Page 204 -     b2, b7E
Page 205 -     b2, b7E
Page 206 -     b2, b4, b6, b7C, b7E
Page 207 -     b2, b4, b6, b7C, b7E
Page 208 -     b2, b6, b7C, b7E
Page 209 -     b2, b4, b6, b7C, b7E
Page 210 -     b2, b4, b6, b7C, b7E
Page 211 -     b2, b4, b7E




                                      XXXXXXXXXXXXXXXXXXXXXXXX
                                      X Deleted Pagete) X w
                                      X No Duplication Fee X
                                      XXXXXXXXXXXXXXXXXXXXXXXX
Page 212   b2, b4, b6,
Page 213   b2, b4, b7E
Page 214   b2, b4, b7E
Page 215   b2, b4, b7E
Page 216   b2, b4, b7E
Page 217   b2, b4, b7E
Page 218   b2, b4, b7E
Page 219   b2, b4, b7E
Page 220   b2, b4, b7E
Page 221   b2, b4, b7E
Page 222   b2, b4, b7E
Page 223   b2, b4, b7E
Page 224   b2, b4, b7E
Page 225   b2, b4, b7E
Page 226   b2, b4, b7E
Page 227   b2, b4, b7E
Page 228   b2, b4, b7E
Page 229   b2, b4, b7E
Page 230   b2, b4, b7E
Page 231   b2, b4, b7E
Page 232   b2, b4, b7E
Page 233   b2, b4, b7E
Page 234   b2, b4, b7E
Page 235   b2, b4, b7E
Page 236   b2, b4, b7E
Page 237   b2, b4, b7E
Page 238   b2, b4, b7E
Page 239   b2, b4, b7E
Page 240   b2, b7E
Page 241   b2, b7E
Page 242   b2, b7E
Page 243   b2, b4, b7E
Page 244   b2, b4, b7E
Page 245   b2, b4, b7E
Page 246   b2, b4, b7E
Page 247   b2, b4, b7E
Page 248   b2, b4, b7E
Page 249   b2, b4, b7E
Page 250   b2, b4, b7E
Page 252   b2, b7E
Page 253   b2, b7E
Page 257   Duplicate
Page 258   Duplicate
Page 259   Duplicate




                         xxxxxxxxxxxxxxxxxxxxxxxx
                         X Deleted Pagete) X
                         X No Duplication Fee X
                         X for this Page    X
                         XXXXXXXXXXXXXXXXXXXXXXXXX
Page 260 ~   Dupl cate
Page 262 ~   Dup! cate
Page 263 ~   Dupl cate
Page 264 ~   Dupl cate
Page 265 ~   Dupl cate
Page 266 ~   Dupl cate
Page 267 ~   Dupl cate
Page 268 ~   Dupl cate
Page 269 ~   Dupl cate
Page 270 ~   Dupl cate
Page 271 ~   Dupl cate
Page 272 ~   Dupl cate
Page 273 ~   Dupl cate
Page 274 ~   Dupl cate
Page 275 ~   Dupl cate
Page 276 ~   Dupl cate
Page 277 ~   Dupl cate
Page 278 ~   Dupl cate
Page 279 ~   Dupl cate
Page 280 ~   Dupl cate
Page 281 ~   Dupl cate
Page 282 ~   Dupl cate
Page 283 ~   Dupl cate
Page 284 ~   Dupl cate
Page 285 ~   Dupl cate
Page 286 ~   Dupl cate
Page 287 ~   Dupl cate
Page 288 ~   Dupl cate
Page 289 ~   Dupl cate
Page 290 ~   Dupl cate
Page 291 ~   Dupl cate
Page 292 ~   Dupl cate
Page 293 ~   Dupl cate
Page 294 ~   Dupl cate
Page 295 ~   Dupl cate
Page 296 ~   Dupl cate
Page 297 ~   Dup! cate
Page 298 ~   Dup! cate
Page 299 ~   Dupl cate
Page 300 ~   Dupl cate
Page 301 ~   Dup cate
Page 302 ~   Dup cate
Page 303 ~   Dup cate
Page 304 ~   Dup cate




                         XXXXXXXXXXXXXXXXXXXXXXXX
                         X Deleted Page(s) X
                         X No Dup.licationTee X
                         XXXXXXXXXXXXXXXXXXXXXXXX
Page   305 ~   Duplicate
Page   306 ~   Duplicate
Page   307 ~   Duplicate
Page   308 ~   Duplicate
Page   309 ~   Duplicate
Page   310-    Duplicate
Page   311 ~   Duplicate




                           xxxxxxxxxxxxxxxxxxxxxxxx
                           X Deleted Page(s) X.
                           X No Duplication Fee X
                           XXXXXXXXXXXXXXXXXXXXXXXX
                                       //SE€REÏ/NOFORN/

                                Appendix G: Incident Response Plan

                                                                    DATE: 04-20-2009
                                                                    CLASSIFIED BY 60322 UC LP/PLJ/LCW
ALL INFORMATION CONTAINED                                           REASON: 1.4 (g)
HEREIN IS UNCLASSIFIED EXCEPT                                       DECLASSIFY ON: 04-28-2034
WHERE SHOWN.OTHERWISE




                                 (This page intentionally left blank)




                                      •//SECRET/NOFORN/
                                            Page51of .138
                      //SECRET/NO FORN/


         Appendix H: DCS-5000 Work Flow Manager



   F E D E R A L B U R E A U OF INVESTIGATION
                    Operations Technology Division
 Telecommunication Intercept and Collection Technology Unit (TICTU)




DCS-5000 System Security Subcomponent Plan

                                 For

                  Work Flow Manager

                            15 Sept 2005

                             Version 1.1

                     Federal Bureau of Investigation
                      935 Pennsylvania Avenue, NW
                              Room 9364
                          Washington, DC 20530

                        //SECRET/NOFORN/
                            Page121of 138
         /fSECRET/NOFORN/

Appendix H: Work Flow Manager (WFM)




   (This page intentionally left blank)




         •//SECRET/NOFORN/
              Page 51 of .138
                      //SECRET/NOFORN/


                     Appendix I:


   F E D E R A L B U R E A U OF INVESTIGATION
                    Operations Technology Division
 Telecommunication Intercept and Collection Technology Unit (TICTU)




DCS-5000 System Security Subcomponent Plan
                   For


                        15 September 2005

                             Version 1.1


                     Federal Bureau of Investigation
                      935 Pennsylvania Avenue, NW
                              Room 9364
                         Washington, DC 20530




                      /7SE€RE¥/NOFORN/
                            Page 121 of 138
      //SECRET/NO FORN/

      Appendix I.\
                                       b2
                                       b7E




(This page intentionally left blank)




      //SECRET/NOFORN/
           Page121of 138
                                                                         DATE: 04-28-2009
ALL INFORMATION CONTAINED
HEREIN 15 UNCLASSIFIED EXCEPT           //SECRET/NOFORN                  CLASSIFIED BY 60322 UC LP/PLJ/LCW
                                                                         REASON: 1.4 (g)
WHERE SHOWN OTHERWISE
                                                                         DECLASSIFY ON: 04-28-2034


                            Appendix A: DCS-5000 General Users Guide


                                D
                     F I EDERAL B U R E A U OF INVESTIGATION
                                      Operations Technology Division
                   Telecommunication Intercept and Collection Technology Unit (TICTU)




              DCS-5000 GENERAL USER SECURITY GUIDE

                                               Version 2.0

                                            24 August 2005

                                       Federal Bureau of Investigation
                                        935 Pennsylvania Avenue, NW
                                                Room 9364
                                           Washington, DC 20530



                                         Derivefrßztim: G-3
                                    Declassifystm: 26^ïtgust 2030




                                        //SECRET/NOFORN/
                                               Page lof 138
     Appendix A: General Users Guide




(This page intentionally left blank)




          •//SECRET/NOFORN/
               Page51of .138
                     77SECREWNOFORN


       Appendix B: DCS-5000 Privileged Users Guide



  F E D E R A L B U R E A U OF INVESTIGATION
                   Operations Technology Division
Telecommunication Intercept and Collection Technology Unit (TICTU)




        DCS-5000 Privileged Users Guide


                            Version 1.2

                           22 Sept 2005

                    Federal Bureau of Investigation
                     935 Pennsylvania Avenue, NW
                             Room 9364
                        Washington, DC 20530




                      Derìveà^am: G-3
                 Declassify onj^Phiugust 2030



                            Page 11 of 138
               MSECRET/NOFORN

         Appendix B: Privileged Users Guide




(THIS PA GE INTENTIONALL Y LEFT BLANK)




               •//SECRET/NOFORN/
                    Page51of .138
                     //SECRET/NO FORN/


       Appendix C: Configuration Management Plan


  F E D E R A L B U R E A U OF INVESTIGATION
                   Operations Technology Division
Telecommunication Intercept and Collection Technology Unit (TICTU)




DCS-5000 Configuration Management Plan

                           Aprii 2, 2004

                            Version 1.1
                    Federal Bureau of Investigation •
                     935 Pennsylvania Avenue, NW
                             Room 9364


                Washington, DC 20530




                     //SECRET/NOFORN/
                            Page121of 138
                //SE€RET/NOFORN

      Appendix C: Configuration Management Plan




(THIS PAGE INTENTIONALLY LEFT BLANK)




                •//SECRET/NOFORN/
                     Page51of .138
                     /TSE€RET/NOFORN/



          Appendix D: DCS-5000 Contingency Plan


  F E D E R A L B U R E A U OF INVESTIGATION
                   Operations Technology Division
Telecommunication Intercept and Collection Technology Unit (TICTU)




           DCS-5000 Contingency Plan

                       15 September 2005

                            Version 1.1


                    Federal Bureau of Investigation
                     935 Pennsylvania Avenue, NW
                             Room 9364
                        Washington, DC 20530




                     •//SECRET/NOFORN/
                            Page51of .138
               //SECRET/NOFORN/

       Appendix D: DCS-5000 Contingency Plan




(THIS PAGE INTENTIONALLY LEFT BLANK)




                 •//SECRET/NOFORN/
                     Page51of .138
                     ^/SECRET/NOFORN/


          Appendix E: DCS-5000 Rules of Behavior


  F E D E R A L B U R E A U OF INVESTIGATION
                   Operations Technology Division
Telecommunication Intercept and Collection Technology Unit (TICTU)




           DCS-5000 Rules of Behavior

                          April 30,2004

                            Version 1.0

                    Federal Bureau of Investigation
                     935 Pennsylvania Avenue, NW
                             Room 9364

                Washington, DC 20530




                     •//SECRET/NOFORN/
                            Page 51 of .138
          //SECRET/NOFORN/

  Appendix E: DCS-5000 Rules of Behavior




(This page intentionally left blank)




           •//SECRET/NOFORN/
                Page51of .138
                     //SECRET/NO FORN/


  Appendix F: DCS-5000 Security Training and Awareness


  F E D E R A L B U R E A U OF INVESTIGATION
                   Operations Technology Division
Telecommunication Intercept and Collection Technology Unit (TICTU)




DCS-5000 Security Training and Awareness

                        15 September 2005

                            Version 1.1

                    Federal Bureau of Investigation
                     935 Pennsylvania Avenue, NW
                             Room 9364
                         Washington, DC 20530




                     //SECRET/NOFORN/
                            Page121of 138
           //SECRET/NOFORN/

Appendix F: Security Training and Awareness




     (This page intentionally left blank)




           •//SECRET/NOFORN/
                 Page51of .138
                    mEGRET/NOFORN/


       Appendix G: DCS-5000 Incident Response Plan


  F E D E R A L B U R E A U OF INVESTIGATION
                   Operations Technology Division
Telecommunication Intercept and Collection Technology Unit (TICTU)




       DCS-5000 Incident Response Plan

                        15 September 2005

                            Version 1.1

                    Federal Bureau of Investigation
                     935 Pennsylvania Avenue, NW
                             Room 9364
                        Washington, DC 20530




                     •//SECRET/NOFORN/
                            Page51of .138
       //SECRET/NOFORN/

Appendix G: Incident Response Plan




 (This page intentionally left blank)




       //SECRET/NOFORN/
            Page 76 of 138 .
                      //SECRET/NO FORN/


         Appendix H: DCS-5000 Work Flow Manager



   F E D E R A L B U R E A U OF INVESTIGATION
                    Operations Technology Division
 Telecommunication Intercept and Collection Technology Unit (TICTU)




DCS-5000 System Security Subcomponent Plan

                                 For

                  Work Flow Manager

                            15 Sept 2005

                             Version 1.1

                     Federal Bureau of Investigation
                      935 Pennsylvania Avenue, NW
                              Room 9364
                         Washington, DC 20530

                      //SECRET/NOFORN/
                            Page121of 138
         #SE€RET/NOFORN/

Appendix H: Work Flow Manager (WFM)




   (This page intentionally left blank)




               •//SECRET/NOFORN/
              Page 51 of .138
                      //SECRET/NO FORN/


                     Appendix I:


   F E D E R A L B U R E A U OF INVESTIGATION
                    Operations Technology Division
 Telecommunication Intercept and Collection Technology Unit (TICTU)




DCS-5000 System Security Subcomponent Plan
                   For


                         15 September 2005

                             Version 1.1


                     Federal Bureau of Investigation
                     935 Pennsylvania Avenue, NW
                              Room 9364
                         Washington, DC 20530




                      //SECRET/NOFORN/
                            Page 121 of 138
      //SECRET/NOFORN/
                                       b2
                                       b7E
      Appendix I.




(This page intentionally left blank)




     -//SEOŒT7NOFORN/
           Page 122 of 138
                                                                     ALL INFORMATION CONTAINED
                                                                     HEREIN 15 UNCLASSIFIED EXCEPT
                     MSECRETMOFOmV
                                                                     WHERE SHOOT OTHERWISE

            DCS-5000     System    Security   Plan   (SSP)


             JJUREAU OF XNVESTIGATION
  F I EDERAL B
                   Operations Technology Division
Telecommunication Intercept and Collection Technology Unit (TICTU)



                                                                 DATE: 04-28-2009
                                                                 CLASSIFIED BY 60322 UC LP/PLJ/LCU
                                                                 REASON: 1.4 (g)
                                                                 DECLASSIFY ON: 04-28-2034




                          DCS-5000
                 System Security Plan

                       26 September 2005

                   Version - DCS-5000 SSP Rev 3.4

                            Prepared By:
                               TICTU

                         Derived
                   Declassify On    2£&ptembez2025




                       //,SECRETMOFOmY
                             Page 1 of55
          /7SECRET/NOFORN/

   DCS-5000 System Security Plan (SSP)




(This page intentionally left blank)




          //SECRET/NO     FORN/
                Page 2 of55
MSECRETi'NOFOm7




//SECRE   T/NOFORN/
     Page 52 of 55
DATE: 04-28-2009
CLASSIFIED BY 60322 UC LP/PLJ/LCTJ                                     ALL INFORMATION CONTAINED
REASON: 1.4 (g)                                                        HEREIN IS. UNCLASSIFIED EXCEPT
DECLASSIFY ON: 04-28-2034              //SECRET/NOFORN/                WHERE SHOOT OTHERWISE


                              DCS-5000 System Security Plan (SSP)


                   F E D E R A L B U R E A U OF INVESTIGATION
                                    Operations Technology Division
                 Telecommunication Intercept and Collection Technology Unit (TICTU)




                                            DCS-5000
                                     System Security Plan

                                        16 November 2005

                                     Version - DCS-5000 SSP Rev 3.4b


                                              Prepared By:
                                                 TICTU

                                      ClassiftHMy:   FBI/p2B7TICTU
                                     Reason:         G^^1.4c/EO13292
                                     Decla^srffOn lfrNovember   2025




                                        //SECRET/NOFORN/
                                               Page 1 of58
          //SECRET/NOFORN/

   DCS-5000 System Security Plan (SSP)




(This page intentionally left blank)




          //SE€RET/NOFORN/
                Page 2 of 58
                                    FEDERAL BUREAU OF INVESTIGATION
                                           FOIPA

                                    DELETED PAGE INFORMATION SHEET

    Serial Description ~ COVER SHEET

Total   Deleted Page(s) ~ 105
Page    4 ~ b2, b4, b6, b7C, b7E
Page    5 ~ b2, b4, b6, b7C, b7E
Page    6 ~ b2, b4, b6, b7C, b7E
Page    7 ~ b2, b4, b6, b7C, b7E
Page    44 ~ b2, b4, b7E
Page    45 ~ b2, b4, b7E
Page    46 ~ b2, b4, b7E
Page    47 ~ b2, b4, b7E
Page    48 ~ b2, b4, b7E
Page    49 ~ b2, b4, b6, b7C, b7E
Page    50 ~ b2, b7E
Page    60 ~ Duplicate
Page    6 2 - Duplicate
Page    64 ~ b2, b4, b7E
Page    65 ~ Duplicate
Page    66 ~ b2, b4, b7E
Page    67 - b2, b4, b7E
Page    68 ~ b2, b4, b7E
Page    69 ~ b2, b4, b6, b7C, b7E
Page    7 0 - b2, b7E
Page    71 ~ Duplicate
Page    73 ~ Duplicate
Page    75 - b2, b4, b7E
Page    76 ~ Duplicate
Page    77 - b2, b4, b7E
Page    78 ~ Duplicate to pg 67 of 1083022 OTD/SPTU Documents CRR-CD7
Page    79 - Duplicate to pg 68 of 1083022 OTD/SPTU Documents CRR-CD7
Page    80 ~ b2, b4, b6, b7C, b7E
Page    81 ~ b2, b7E
Page    84 ~ Duplicate to pg 42 of 1083022 OTD/SPTU Documents CRR-CD7
Page    86 ~ Duplicate to pg 44 of 1083022 OTD/SPTU Documents CRR-CD7
Page    87 ~ b2, b4, b7E
Page    88 - b2, b4, b7E
Page    89 - b2, b4, b7E
Page    90 ~ b2, b4, b6, b7C, b7E
Page    91 ~ b2, b7E
Page    92 ~ Duplicate
Page    94 ~ Duplicate
Page    96 ~ b2, b4, b7E
Page    97 ~ Duplicate OTD/SPTU DOCUMENTS CRR-CD7 PG45 OF 1083022
Page    98 ~ b2, b4, b7E
Page    99 ~ Duplicate to pg 47 of 1083022 OTD/SPTU Documents CDD-CD7
Page    100 ~ Duplicate to pg 48 of 1083022 OTD/SPTU Documents CRR-CD7
Page    101 - b2, b4, b6, b7C, b7E



                                            xxxxxxxxxxxxxxxxxxxxxxxx
                                            X Deleted Pagete) X
                                            X No Duplication i=ee X
                                            X for this Page     X
                                            XXXXXXXXXXXXXXXXXXXXXXXXX
Page   102     Duplicate to pg 50 of   OTD/SPTU Documents CRR-CD7
Page   113     b2 b4 b7E
Page   114     b2 b4 b7E
Page   115     b2 b4 b7E
Page   116     b2 b4 b7E
Page   117     b2 b4 b6, b7C, b7E
Page   118     b2 b7E
Page   127     b2 b4 b6, b7C, b7E
Page   128     b2 b4 b6, b7C, b7E
Page   129     b2 b4 b6, b7C, b7E
Page   130     b2 b4 b6, b7C, b7E
Page   131     b2 b4 b6, b7C, b7E
Page   132     b2 b4 b6, b7C, b7E
Page   161     b1 b2 b4, b7E
Page   162     b1 b2 b4, b7E
Page   163     b1 b2 b4, b7E
Page   164     b1 b2 b4, b7E
Page   165     b1 b2 b4, b7E
Page   166     b1 b2 b4, b7E
Page   167     b1 b2 b4, b7E
Page   168     b1 b2 b4, b7E
Page   169     b1 b2 b4, b7E
Page   170     b1 b2 b4, b7E
Page   171     b1 b2 b4, b7E
Page   172 m   b1 b2 b4, b7E
Page   173     b1 b2 b4, b7E
Page   174     b1 b2 b4, b7E
Page   175     b1 b2 b4, b7E
Page   176     b1 b2 b4, b7E
Page   177     b1 b2 b4, b7E
Page   178     b1 b2 b4, b7E
Page   179     b1 b2 b4, b7E
Page   180     b1 b2 b4, b7E
Page   181     b1 b2 b4, b7E
Page   182     b1 b2 b4, b7E
Page   183     b1 b2 b4, b7E
Page   184     b1 b2 b4, b7E
Page   185     b1 b2 b4, b7E
Page   186     b1 b2 b4, b7E
Page   187     b1 b2 b4, b7E
Page   188     b1 b2 b4, b7E
Page   189     b1 b2 b4, b7E
Page   190     b1 b2 b4, b7E
Page   191     b1 b2 b4, b7E




                                          xxxxxxxxxxxxxxxxxxxxxxxx
                                          X Deleted Pagete) X
                                          X No Duplication Fee X
                                          >bo(xxxx>Jcx!xxx&(xxxxxxxx
Page 192     b1   b2,   b4, b7E
Page 193     b1   b2,   b4, b7E
Page 194     b1   b2,   b4, b7E
Page 195     b1   b2,   b4, b7E
Page 196     b1   b2,   b4, b7E
Page 197     b1   b2,   b4, b7E
Page 198     b1   b2,   b4, b7E
Page 199     b1   b2,   b4, b7E
Page 200     b1   b2,   b4, b7E
Page 201     b2   b4,   b7E
Page 202     b1   b2,   b4, b7E
Page 203     b1   b2,   b4, b7E
Page 204     b1   b2,   b4, b7E
Page 205     b1   b2,   b4, b7E
Page 206     b1   b2,   b4, b7E
Page 207     b1   b2,   b4, b7E
Page 208 •   b2   b4,   b7E




                                  XXXXXXXXXXXXXXXXXXXXXXXX
                                  X Deleted Page(s) X
                                  X No Duplication ree X
                                  X for this Page    X
                                  XXXXXXXXXXXXXXXXXXXXXXXXX
                                                             DECLASSIFIED BY UC 60322   LP/STP/S2
(Rev. 01-31-2003)                                            ON 05-05-2009




                       FEDERAL BUREAU OF INVESTIGATION

          Precedence :         PRIORITY                      Date:    12/17/2003

          To :      Finance                       Attn:                                             b2
                                                             Building L (Enc)                       b6
                                                                         J-ERF (Enc)                b7C
                    Counterintelligence                               Rm 9469
                    Information Resources                            _ Rm 1B475
                    Security                                         Rm 3662 (Enc)

          From:       Investigative Technology •
                         Electronic Surveillance Technology Section/TICTU,] [-ERF
                         Contact:

          Approved By:




          Drafted By:

          Case ID #:      (U)

          Title: (U)           DCS-5000

          Synopsis:  (U) To request that the Finance Division. Engineering
                                                                                                    b2
          Contract Unit (ECU). issue a|                                                             b7E




                         (U)         Deri-tfed/From : G-3
                                     Declassify On: XI

          Enclosure(s):          (U) FD^369           in the amount of

          Details :      The Investigative Technology Division, Electronic
          Surveillance Technology Section, Télécommunications Intercept
          Collection and Technology Unit (TICTU), is responsible for
          providing[                                               '



m


                                                                               Req 128871.wpd
         To :   Finance     From :     Investigative Technology
         Re:    (U)                         12/17/2003 .                                             •b2
                                                                                                     b7E



                          lrequirement, approval has been given to provide




m-

                                                                      will be used
         on the T                               1 which will comprise the



                     ] To    snsiirs    rnmnahihi 1itv   and   ease   maintenance   issues
         this             ig following




                   (U) The second phase of|        IRedWolf systems is
         scheduled to begin installation on 02/02/2004, and ideally, the
                    ¡should be installed prior to this phase.

                   (U) Allocation of the funding for this effort was
         confirmed during a meeting betweenl                   I                                     b6
                                                                                                     b7C
         Investigative Technology Division, and!
(U)
         Counterintelligence Division. The funding for th'e listed
         equipment is available from Budget Item IK in the amount of


                        Funding for above equipment purchase is provided                             b2
(u> —.
         through the Counterintelligence Division, Budget Item IK.                                   b7E


                        Therefore, it is requested that the Finance
         Division. ECU, issue al


         for the amount                     J using Budget Item IK.




                                                                                    Req I2887l.wpd
To :   Finance    From :     Investigative Technology
Re:    (U)                        12/17/2003 .                                b2
                                                                              blE



LEAD(s):

Set Lead 1:       (Action)

       FINANCE

            AT WASHINGTON, DC

            (U) The Finance Division. ECU, is requested to
 expeditiouslyI
I                                                          I in the
 amount

Set Lead 2:       (Info)

       INFORMATION RESOURCES

            AT WASHINGTON. DC

            (U)    For information only.

Set Lead 3 :      (Action)

       COUNTERINTELLIGENCE

            AT WASHINGTON. DC

          (U)      The Counterintelligence Division is requested to
approve the                             ¡using Budget Item IK.

Set Lead 4:       (Info)

       SECURITY

            AT WASHINGTON. DC

            For information only.

CC:    I               I-ER: (Enc)
                            -ERF (Enc)
                            -ERF (Enc)                                        b6
                            -ERF (Enc)                                        b7C
                            J-ERF' (Enc)



                                                             Req 128871.wpd
                                           ET
(Rev. 01-31-2003)


                       FEDERAL BUREAU OF INVESTIGATION


          Precedence:         ROUTINE                        Date:     12/17/2003

          To :      Finance                    Attn:                    Rm 10254 (Enc)            b6
                                                                        Rm 10254 (Enc)            b7C
                    Counterintelligence                                  Rm 9469 (Enc)

          From:       Investigative Technology
                         Electronic Surveillance Technology Section/TICTUj \ERF
                         Contact:

          Approved By:
                                                       ALL INFORMATION CONTAINED
                                                       HEREIN IS UNCLASSIFIED
                                                       DATE 05-05-2009 BY UC 60322   LP/STP/SZ



          Drafted By:
                «
          Case ID #:

          Title:       DCS-5000
          Synopsis: Request that the Construction and Laboratory Contracts
          Unit (CLCU) issue a purchase order to                                                  b2
                               in the amount of                                                  b7E


          Enclosure(s):         FD-369,            in the amount of


          Detail's: The Telecommunications Intercept and Collection
          Technology Unit (TICTU) requires the purchase of infrastructure
          equipment and materials associated with the installation of a




          The requested funding represents the current negotiated cost of
          equipment which may change based on the actual order date.
          Fnnri-ma will hp ut.i 1 i zed to purchase the following items for



                                                                               Req 128870. wpd
To:   Finance   From:   Investigative Technology
Re:                     12/17/2003




                                                                           b2
                                                                           b6
          The second phase ofj       RedWolf systems is scheduled          b7C
to begin installation on 02/02/2004, and ideally,                          b7E
should be installed prior to this phase.
                                         nis
          Allocation of the funding for this effort was confirmed
during a meeting between                      Investigative
Technology Division, and                 J~Co
                                           Counterintelligence
Division. The funding for the listed equipment is available from
Budget Item IK in the amount of




                                   2                     Req 128870. wpd
To:   Finance   From :     Investigative Technology
Re:                        12/17/2003 .



LEAD(s):
                                                                             h2
Set Lead 1:     (Action)                                                     hi E

      FINANCE

           AT WASHINGTON. DC

          The CLCU is requested to initiate a purchase order to
   Jfor equipment utilizing the funding identified on FD-369.
number          Funding in the amount of               IS
available from Budget Item IK

Set Lead 2:     (Action)

      COUNTERINTELLIGENCE

           AT WASHINGTON. DC

            The Counterintelligence Division is requested to
approve    contract action [                 using Budget Item IK.

CC:                             I ERF
                         I-ERF (Enc)
                               |-ERF
                            h ERF                                            h2
                             JERF (Enc)                                      he
                              J-ERF (Enc)                                    blC
                              ERF (Enc)




                                       3                   Req ! 28870.wpd
                                                           ALL INFORMATION CONTAINED
                                                           H E R E I N IS UNCLASSIFIED
(Rev. 01-31-2003)                                          DATE 05-05-2009 B Y UC 60322 LP/STP/SZ


                       FEDERAL BUREAU OF INVESTIGATION


            Precedence:     ROUTINE                             Date:     01/28/2004
                                                                                                     b2
            To:     Investigative Technology                                                         h6
                                                                                                     blC
            From:     Investigative Technology                            I ,
                         Electronic Surveillance Technology Section/TICTUj |-ERF
                         Contact :




            Title:    DCS-5000
                      DCS-3000

            Synopsis:     To report the details of travel to                                        b2
                                                                                                    b4
            Florida.
                                                                                                    b6
                                                                                                    b7C
         .Détails;      During   QJ./19-23/2PQ4                                                     b7E




            to install the DCS-5000 RedWolf Title 50 collection system and to
            install upgrades to the DCS-3000 switched based collection
            system.


                   with minimal- issues; all relevant issues were resolved and
            tne system is functional and prepared to
                                               ]for a determined testing
                    !
            period. •
        I
                                                  Upon completion of system
            installation, |                            software was installed in
            preparation for


            The existing DCS-3000 systems were replaced with upgraded
            hardware and software and all existing case information was
            transferred. Additionally new systems in the DCS-3000 network
            were added to allow for the capability I


            the RedWolf system while
To:   Investigative Technology From:   Investigative Technology
Re:                   01/28/2004



A list of the installed equipment follows:

                                                                  b2
                                                                  b4
                                                                  b7E




          All proper paperwork was provided to                    b2
                                                                  b6
CC:                   ]
                     "• ERF                                       blC
                           |ERF
                         FERF
                          [ERF
                      •ERF




                                  2
                                               ALL INFORMATION CONTAINED
                                               HEREIN IS UNCLASSIFIED
(Rev. 01-31-2003)                              DATE 05-05-2009 B Y UC 60322   LP/STP/SZ

                       FEDERAL BUREAU OF INVESTIGATION


          Precedence :       ROUTINE                            Dates     03/22/2004

          To:       Investigative Technology

          From:       Investigative Technology
                         Electronic Surveillance Technology Section/TICTU,]               |-ERF   h2
                         Contact :                                                                b6
                                                                                                  b7C




          Title:       DCS-5000


          Synopsis:       To report the details of travel                         Hawaii.         b2
                                                                                                  b4
          Details: During 03/03-11/2004.                                                          b6
                   __
          traveled to the                      |to install DCS-5000 RedWolf                       b7C
                                                                                                  b7E
          Title 50 collection system equipment consisting of I


          to the DCS-5000 collection system.




          A list of the installed equipment follows:

           MFG          Description                        Serial #               Property #       b2
                                                                                                   b7E
To:   Investigative Technology From:   Investigative Technology   b2
Re:                   01/28/2004                                  b7E




          All proper paperwork was provided to
                                                                        b2
CC:                  I ERF                                              b6
                        J ERF                                           b7C
                     •ERF




                                2
                           ALL INFORMATION CONTAINED
                           HEREIN IS UNCLASSIFIED
                           DATE 05-01-2009 BY 60322 uc/lp/stp/fIs


MessageFrom                             ](ITD) (FBI)
Sent: Tuesday, June 15, 2004 7:54 AM
ToJ                       IriTDHFRn.r                           ](ITD)(FBIi;                    (ITD)   b2
(FBI)                             (ITD) (CON)[                             (ITD) (CON);                 b6
                                                                                                        b7C
          ] (ITD) (FBI)                                                                                 b7E
Subject: FW           JTTF Offsite

UNCLASSIFIED
NON-RECORD



Just a quick heads up - since this seems like a lot has to happen in a short period of time -
such as -determine what size system, and get it there etc...




     Original Message-
 From:                               (FBI)
 Sent: Monday, June 14, 2004 9:23 PM
 To                           (ITD) (FBI);                                    (ITD) (FBI)
  Cc:|                        n (CON);                                      (ITD) (CON); I
                 EPF
 Subject            JTTF Offsite


 UNCLASSIFIED
 NON-RECORD



  As you are aware.             is currently involved with establishing a JTTF Offsite location.
Occupancy of the offsite is scheduled for approximately 08/15/04. Last November, with input from
ERF, the TTAs submitted a proposed monitoring plant which included all the requirements. Nothing
happened until a couple of weeks ago. We were then advised our proposal was not possible and we
had to substantially reduce our horizons.

                                provided us with infrastructure information and provided a drawing
of anl                          monitoring plant. The attached plans depict whatl       Iwas able to
adapt to the limited space. I submitted an RMS to both of you today, requesting equipment. I also
sent a request for               assistance. I am not sure who will be the point on that one at your
end.
 Ti              is th           OC for technical needs concerning DCS matters. I know you have
frequent contact with her.       She is the best.

1     I you will have to put up with me on the RedWolf stuff, and                                 of
course.                                                                                                 b2
                                                                                                        b6
                                                                                                        b7C
 Please let j    |or I know of any possible problems or for any additional info you need. We don't      b7E
have space for any of our                    at the offsite. So we won't have to address that matter.
                                           I
The monitoring plant wi 1 be a remote from the|              |HQ office. The DCS might be another
matter, beyond me..|      ]has ideas.

   ne   rmss   are as ioiiows:
                 CMP Buildout
                 DCS 3000


 Hope to hear from you soon!
 Thanks,




.UNCLASSIFIED




UNCLASSIFIED




                                            2
                      ALL INFORMATION CONTAINED
                      HEREIN IS UNCLASSIFIED
                      DATE 05-01-2009 BY 60322 uc/lp/stp/fIs


    MessageFrom:                        (ITD) (FBI)
    Sent: Friday, October 08. 2004 9:34 AM
    To:                              (ITD) (CON):                              (ITD) (FBI)
    Subject: FW

    UNCLASSIFIED
    NON-RECORD                                                                                           b2
                                                                                                         b6
                                                                                                         b7C
                                                                                                         b7E


    FYI.j    | please prepare an appropiate response. Thanks.



       -Original Message-
    From:[                    ] (ITD) (FBI) On Behalf Of                           (ITD) (FBI)
    Sent: Friday, October 08,2004 9:29 AM
    To:|                   I (ITD) (FBI) J                      (ITD) (FBI);                     (OIO)
    (FBD
    Cc                           (ITD) (FBI);                       (ITD) (FBI);
    (ITD) (CON)
    Subject: FW


    UNCLASSIFIED
    NON-RECORD



    Hi

    TICTU will have to answer your question, so I have forwarded accordingly.
        -Original Message-
    Fromf"                   (OIO) (FBI)
    Sent: Friday. October 08. 2004 9:24 AM
    Tol                       IflTDI ( F B I ) C           ](ITD)(FBI)                           (ITD)

    Cc                                       1 (FBI);                                 (FBI); 1
1                    KFBDJ                                 1 IFBB:L
    (FBI)I                              [FBI):                            BßL)
1     IFOIOHFBDJ                         (OIO) (FBI);|                       L(ITD) (FBI);|

    Subject: RE:

								
To top