Reference & AI

DAFMAN 17-1301

Air Force

COMPUTER SECURITY (COMPUSEC)

Reviewed by Guilherme Correia, active-duty U.S. Air Force

DAFMAN 17-1301, "COMPUTER SECURITY (COMPUSEC)", is a Department of the Air Force publication, dated December 9, 2024.

Published

December 9, 2024

OPR

SAF/CN

Headquarters, Department of the Air Force

Official document

Open the PDF

on static.e-publishing.af.mil

DAFMAN 17-1301 — index record

NumberDAFMAN 17-1301
TitleCOMPUTER SECURITY (COMPUSEC)
PublishedDecember 9, 2024
Certified currentDecember 9, 2024
Office of primary responsibilitySAF/CN
Issued byHeadquarters, Department of the Air Force
Status on the indexCurrent
Last index actionRewrite, December 9, 2024
Source indexAir Force e-Publishing
Index last readOctober 20, 2026

Copied from Air Force e-Publishing (index). The publication itself is the authority; this page does not summarize or interpret it. Verify the current edition on the index before acting.

From the publication itself

Text below is lifted mechanically from the official PDF (32 pages, read October 20, 2026) with no editing or interpretation. Quote the document, not this page.

Purpose, in the publication’s words

This publication is available for downloading or ordering on the e- Publishing website at www.e-Publishing.af.mil. RELEASABILITY: There are no releasability restrictions on this publication.

Summary of changes, as printed

This manual, formerly issued as AFMAN 17-1301, has been updated and reissued as DAFMAN 17-1301. Significant revisions have been made to clarify COMPUSEC requirements and ensure alignment with DAFMAN 90-161. Key updates include clearer guidance on accountability and responsibilities for military personnel, civilian employees, and contractors, and revised sections on Ports, Protocols, and Services Management, as well as IT hardware procurement. User Agreements (DAF Forms 4433 and 4394) are now referenced as Prescribed Forms with their intent clarified, and a Virtual Mobile Infrastructure User Agreement for mobile devices has been attached to DAF Form 4433. Redundancies were eliminated, SAP equities references were removed, chapters were reorganized, and the section on abbreviations, acronyms, and terms was expanded. Additionally, a new table of valid URL references and governance document references has been added, along with guidance on safeguarding classified data at rest. Prohibitions on connecting Internet of Things devices to DAF systems and government-furnished equipment were introduced, and responsibilities for Wing or Delta Cybersecurity Offices were updated. Further changes include adding a required Privacy Act statement for forms collecting personal information, proper tiering of T-0 based on federal law, and greater specificity regarding roles and exceptions.

Contents

  1. Chapter 1—INTRODUCTIONp. 6
  2. Chapter 2—ROLES AND RESPONSIBILITIESp. 8
  3. Chapter 3—TRAINING AND RESOURCESp. 16
  4. Chapter 4—ENDPOINT SECURITYp. 21
  5. Chapter 5. DAFMAN17-1301 9 DECEMBER 2024p. 23
  6. Chapter 5—REMANENCE SECURITYp. 35
  7. Chapter 6—PORTS, PROTOCOLS, AND SERVICES MANAGEMENTp. 40
  8. Chapter 7—APPROVED MOBILE DEVICEp. 46
  9. Attachment 1—GLOSSARY OF REFERENCES AND SUPPORTING INFORMATIONp. 49
  10. Attachment 2—REFERENCE UNIFORM RESOURCE LOCATORS (URLS)p. 64
All 71 contents entries
  1. Chapter 1—INTRODUCTIONp. 6
  2. 1.1. Overviewp. 6
  3. 1.2. Applicabilityp. 6
  4. 1.3. Exceptionsp. 6
  5. Chapter 2—ROLES AND RESPONSIBILITIESp. 8
  6. 2.1. Introductionp. 8
  7. 2.2. Chief Information Officer (SAF/CN)p. 8
  8. 2.3. Commander, Headquarters Air Combat Command (ACC)p. 8
  9. 2.4. Space Operations Command (SpOC)p. 8
  10. 2.5. DAF CIO-Appointed Authorizing Officials (AO)p. 8
  11. 2.6. Sixteenth Air Force (Air Forces Cyber)p. 9
  12. 2.7. Headquarters Cyberspace Capabilities Center (HQ CCC)p. 9
  13. 2.8. Space Delta 6 (Cyberspace Operations)p. 10
  14. 2.9. Wing or Delta Cybersecurity Office (or Designated Equivalent)p. 10
  15. 2.10. Commanding Officer (or Equivalent)p. 11
  16. 2.11. Program Manager (PM)p. 11
  17. 2.12. Information System Security Manager (ISSM)p. 12
  18. 2.13. Information System Security Officerp. 13
  19. 2.14. Commanders Support Staff, or Similar Administrative Support Functionp. 14
  20. 2.15. Change Sponsorp. 14
  21. 2.16. Privileged Userp. 14
  22. 2.17. Authorized Userp. 14
  23. Chapter 3—TRAINING AND RESOURCESp. 16
  24. 3.1. Generalp. 16
  25. 3.2. WCO Training Resourcep. 16
  26. 3.3. DAF Cybersecurity Collaborative Environmentp. 16
  27. 3.4. Methods and Procedures Technical Orderp. 17
  28. 3.5. IT Asset Procurementp. 17
  29. 3.6. Configuration Managementp. 19
  30. 3.7. Ports, Protocols, and Services Identification, Declaration, and Registrationp. 19
  31. 3.8. Defense Information Systems Agency Resourcesp. 20
  32. Chapter 4—ENDPOINT SECURITYp. 21
  33. 4.1. Introductionp. 21
  34. 4.2. General Protectionp. 21
  35. Chapter 5. DAFMAN17-1301 9 DECEMBER 2024p. 23
  36. 4.3. Software Securityp. 23
  37. 4.4. Malicious Logic Protectionp. 23
  38. 4.5. Data Spillage/Negligent Discharge of Classified Informationp. 24
  39. 4.6. Data Encryptionp. 24
  40. 4.7. Personally owned hardware and softwarep. 25
  41. 4.8. Wireless Servicesp. 26
  42. 4.9. Mobile Computing Devicesp. 27
  43. 4.10. Peripheral Devicesp. 29
  44. 4.11. Removable Mediap. 31
  45. 4.12. Collaborative Computingp. 32
  46. 4.13. Contractor-Owned Information Systemsp. 33
  47. 4.14. Foreign-Owned Information Systemsp. 34
  48. 4.15. Other Service or Agency Owned Information Systemsp. 34
  49. Chapter 5—REMANENCE SECURITYp. 35
  50. 5.1. Introductionp. 35
  51. 5.2. Sanitizationp. 36
  52. 5.3. Media Reusep. 37
  53. 5.4. Disposalp. 38
  54. 5.5. Mixed Media Devicesp. 39
  55. Chapter 6—PORTS, PROTOCOLS, AND SERVICES MANAGEMENTp. 40
  56. 6.1. Introductionp. 40
  57. 6.2. Ports, Protocols, and Services Managementp. 41
  58. 6.3. Ports, Protocols, and Services Management Registryp. 44
  59. 6.4. Ports, Protocols, and Services Declarationp. 44
  60. 6.5. Ports, Protocols, and Services Registrationp. 44
  61. 6.6. Ports, Protocols, and Services Reviewp. 45
  62. 6.7. Ports, Protocols, and Services Updates/Change Managementp. 45
  63. 6.8. Decommissioning Strategyp. 45
  64. Chapter 7—APPROVED MOBILE DEVICEp. 46
  65. 7.2. A SAF/CN-approved AMD program:p. 46
  66. 7.3. The AMD program is:p. 47
  67. 7.5. All users must:p. 47
  68. 7.6. Failure to observep. 47
  69. 7.7. Users must not:p. 48
  70. Attachment 1—GLOSSARY OF REFERENCES AND SUPPORTING INFORMATIONp. 49
  71. Attachment 2—REFERENCE UNIFORM RESOURCE LOCATORS (URLS)p. 64

Other DAFMAN publications nearby in the series

204 DAFMAN records on the Air Force index. Search the full index.

Works of the United States Government are not subject to copyright (17 U.S.C. § 105). This site is not affiliated with the Department of the Air Force or any government agency.

Air Force index

REF: DAFMAN 17-1301, effective December 9, 2024

Air Force e-Publishing — DAFMAN 17-1301

This is an index record, not the publication. The official PDF is the authority; verify the current edition before acting.

Reviewed by Guilherme Correia · Military Toolkit editorial

Open the official PDF