Committee on National Security Systems

Committee on National Security Systems
source
Name	Committee on National Security Systems
Founded	0 1990
Predecessor	National Telecommunications and Information Systems Security Committee
Jurisdiction	United States Government
Headquarters	Fort Meade, Maryland
Parent agency	National Security Agency
Key people	Director of National Intelligence, Secretary of Defense, Chairman of the Joint Chiefs of Staff

Committee on National Security Systems. It is a pivotal United States Government intergovernmental body established to provide a unified framework for the security of all systems handling classified information or critical to national security. The committee sets policy, issues directives, and promulgates standards that govern the operations and assurance of these vital systems across the Executive Branch. Its work directly supports the security posture of agencies like the National Security Agency, the Department of Defense, and the Central Intelligence Agency.

Overview

The committee operates under the authority of a charter issued by the President of the United States, specifically through National Security Directive 42. It serves as the principal authority for the security of systems that handle Sensitive Compartmented Information and other forms of classified information critical to U.S. national security. Its purview extends to cryptography, information assurance, and the technical standards for securing national security systems against threats from adversaries like China and Russia. The committee's directives are mandatory for all Executive Branch departments and agencies, ensuring a cohesive security architecture.

History

The committee was formally established in 1990, succeeding the National Telecommunications and Information Systems Security Committee which had been created during the Cold War era. This reorganization was driven by the evolving technological landscape and the increasing reliance on interconnected information systems following initiatives like the Strategic Defense Initiative. Key legislative actions, including the Clinger–Cohen Act and the Federal Information Security Management Act, further shaped its role by delineating responsibilities between national security and non-national security federal systems. Landmark events such as the September 11 attacks and subsequent operations like Operation Iraqi Freedom underscored the critical need for robust, standardized security protocols across the intelligence community and Department of Defense.

Membership and organization

The committee is chaired by the Director of National Intelligence, with the Secretary of Defense serving as Vice Chair. Its membership comprises senior representatives from over twenty key U.S. Government entities, including the Department of State, the Department of Justice, the Department of Homeland Security, and the Central Intelligence Agency. The Chairman of the Joint Chiefs of Staff and the Director of the National Security Agency are also principal members. Day-to-day operations and technical support are managed by the CNSS Secretariat, which is housed within the National Security Agency at Fort Meade. Subcommittees and working groups focus on specialized areas such as cryptographic modernization and industrial security.

Responsibilities and functions

Its primary responsibility is to develop and issue national-level policy, directives, instructions, and guidance for the security of national security systems. This includes establishing standards for the use of cryptography, approving Type 1 encryption products, and setting requirements for secure communications and data protection. The committee oversees the implementation of the National Information Assurance Policy and coordinates with the National Institute of Standards and Technology on technical standards. It also provides authoritative guidance on mitigating threats from advanced persistent threats, often associated with state actors like North Korea and Iran, and ensures interoperability among the systems of the Department of Defense, the intelligence community, and other security partners.

Publications and standards

The committee is renowned for its library of authoritative publications, most notably the CNSS Instruction 1253, which defines security control baselines for national security systems. Other key documents include CNSS Policy 15 on cryptographic security, CNSS Instruction 4009 for the National Information Assurance Glossary, and the CNSS Advisory Memorandum series. These standards often complement and extend frameworks developed by NIST, such as NIST Special Publication 800-53, for the unique high-security environment of agencies like the National Reconnaissance Office and the Defense Intelligence Agency. The publications govern everything from Tempest standards to the approval of Suite B algorithms.

Relationship with other entities

The committee maintains a critical, collaborative relationship with several other standard-setting and oversight bodies. It works closely with the National Institute of Standards and Technology to ensure harmony between standards for national security and non-national security federal systems, as mandated by the Federal Information Security Modernization Act. Within the Department of Defense, it coordinates with the Defense Information Systems Agency and United States Cyber Command. It also liaises with congressional oversight committees, the Office of Management and Budget, and international partners through agreements like the UKUSA Agreement, which underpins collaboration with the Government Communications Headquarters and other Five Eyes allies.

Category:United States national security Category:Information technology organizations Category:Computer security organizations