What is AFI17-130?
AFI17-130 refers to the AirForce regulation titled "Cybersecurity Program Management." It provides guidelines and requirements for managing cybersecurity programs within the Air Force.
Who is responsible for implementing AFI17-130?
The responsibility for implementing AFI17-130 lies with the Chief Information Officer (CIO) of the Air Force and the Commander, Air Force Space Command (AFSPC).
What is the purpose of AFI17-130?
The purpose of AFI17-130 is to establish policies and procedures governing cybersecurity program management within the Air Force, ensuring the protection of Air Force information systems and data.
What are the key components of AFI17-130?
AFI17-130 covers a wide range of cybersecurity program management components, including risk management, security controls, incident response, vulnerability management, information assurance, and cybersecurity workforce management.
Are all Air Force personnel required to comply with AFI17-130?
Yes, all Air Force personnel, including military, civilian, and contractor employees, are required to comply with AFI17-130 in order to ensure the security and readiness of Air Force information systems.
How often is AFI17-130 updated?
AFI17-130 is reviewed and updated at least every three years to address emerging cyber threats and adapt to evolving technologies, policies, and practices.
Can waivers be granted for non-compliance with AFI17-130?
Waivers may be granted by the CIO or a designated authority based on special circumstances, but they are considered exceptions and must be justified with proper documentation.
What actions should be taken in the event of a cybersecurity incident?
AFI17-130 provides detailed guidance on incident response, including reporting the incident, preserving evidence, and notifying appropriate authorities within specified timeframes.
How is compliance with AFI17-130 monitored?
Compliance with AFI17-130 is monitored through various means, including inspections, security assessments, audits, and continuous monitoring.