R 021943Z DEC 24 MARADMIN 580/24 MSGID/GENADMIN/CMC DCI IC4 WASHINGTON DC // SUBJ/UPDATED GUIDANCE REGARDING OUT-PROCESSING, ACCOUNT MANAGEMENT,  AND RECORD REQUIREMENTS FOR MARINE CORPS ENTERPRISE NETWORK USERS// REF/A/GENADMIN/CMC DCI IC4 WASHINGTON DC/221730Z MAR 19// REF/B/DOC/DISA/WINDOWS 10 STIG V-63359// REF/C/DOC/DISA EXCHANGE 2010 MAILBOX SERVER STIG EXCH-1-301// REF/D/DOC/MCO 5239.2B/05 NOV 15// REF/E/DOC/OMB M-12-18/24 AUG 12// REF/F/DOC/GENERAL RECORDS SCHEDULE 5.1: COMMON OFFICE RECORDS/ 28 JUL 2017// REF/G/DOC/GENERAL RECORDS SCEHDULE 6.1: EMAIL AND OTHER ELECTRONIC MESSAGES MANAGED UNDER A CAPSTONE APPROACH/JAN 2023// REF/H/DOC/GENERAL RECORDS SCHEDULE 6.1-0127-2022-0001: UNITED STATES MARINE CORPS RECORD GROUP NUMBER 0127/21 APR 2023// REF/I/DOC/ENTERPRISE CYBERSECURITY MANUAL 007: RESOURCE ACCESS GUIDE /01 FEB 2024// NARR/REF A IS MARADMIN 192-19, GUIDANCE REGARDING OUT-PROCESSING,  ACCOUNT MANAGEMENT, AND RECORD REQUIREMENTS FOR MARINE CORPS  ENTERPRISE NETWORK USERS. REF B IS DISA SECURITY TECHNICAL  IMPLEMENTATION GUIDE (STIG) FOR MANAGEMENT OF DORMANT, OUTDATED OR  UNUSED ACCOUNTS.  REF C IS A DISA STIG PERTAINING TO EXCHANGE 2010  MAILBOX SERVER MANAGEMENT.  REF D IS MARINE CORPS ORDER,  CYBERSECURITY.  REF E IS THE MANAGING GOVERNMENT RECORDS DIRECTIVE. REF F OUTLINES REQUIREMENTS FOR NON-RECORDKEEPING COPIES OF  ELECTRONIC RECORDS.  REF G IS THE RECORDS MANAGEMENT GUIDANCE ISSUED BY THE NATIONAL ARCHIVES DETAILING THE EMAIL RETENTION REQUIREMENTS  FOR FEDERAL AGENCIES.  REF H IS THE LIST OF MARINE CORPS CAPSTONE  OFFICIAL BILLETS FOR PERMANENT EMAIL PRESERVATION; APPROVED BY THE  DIRECTOR, MARINE CORPS STAFF (DMCS) AND THE CHIEF RECORDS OFFICER  FOR THE UNITED STATES.  REF I IS THE MARINE CORPS CYBERSECURITY  MANUAL 007, RESOURCE ACCESS GUIDE.  REFERENCES LISTED ABOVE CAN BE  FOUND IN THE POLICY SECTION AT THE FOLLOWING LINK:  HTTPS://USMC.SHAREPOINT-MIL.US/SITES/DCI_IC4_CY// POC/WILLIAM J. BUSH/CIV/HQMC DC I IC4 ICC CY/TEL (COMM): 703-693-3490/EMAIL: [email protected]// POC/DANIEL R. NORTON/CIV/HQMC DC I IC4 ICC CY/TEL(COMM): 703-784-6075/EMAIL: [email protected]// GENTEXT/REMARKS/1.  Purpose.  This MARADMIN replaces and updates  policy previously issued in reference (a) and provides amplifying  guidance regarding references (b) through (i), related to Marine  Corps Enterprise Network (MCEN) account management on both  Unclassified and Classified Networks. These updates will be  incorporated into future issuances of reference (i). 2.  Background.  The Marine Corps has a large number of Marines,  Civilians and Contracted Staff routinely entering and departing  active service.  Upon completion of active service, they no longer  require access to the MCEN through their assigned Network Account(S).  Failure to disable and remove these accounts in a  timely manner constitutes a cybersecurity risk and creates an  unnecessary financial cost.  The Marine Corps has a federally  mandated obligation to retain specific data from these accounts for period of time described in references (f) and (g).  In order to  mitigate the cybersecurity risk and eliminate the financial cost due to mismanaged accounts, the policies described in references (b),  and (e) through (i) shall be followed with regard to the disablement and appropriate archival of inactive accounts. 3.  Actions.  Effective upon release of this message: 3.A. Commanding Generals and Commanding Officers. 3.A.1. Ensure policies and procedures for In-Processing/ Out-Processing personnel are updated to meet Marine Corps Enterprise Network E-Mail Account and Record Management requirements in  accordance with (IAW) references (e) through (g) to Include the use  of the NAVMC 11786, Records Management Checklist for departing USMC  employee’s form. 3.A.2. Ensure local admin office generates a monthly report of out  processed personnel (to include Military, Civilian, And Contractor)  and provides this information to the local G-6/S-6/Network Battalion (NETBN)/Network Activity (NetAct) personnel for network account  management purposes.  This Information will include: Name, Rank or  Rate, Email Address and purpose for Out-Processing; e.g., Permanent Change of Station/Assignment (PCS/PCA), End of Active Service (EAS), Separation/Retirement, Contract Expiration, etc.  for Marines,  include the Marines PCS/PCA, or EAS date to ensure that Marines  maintain access to required applications such as Outlook Web Access (OWA)/Webmail during PCS/PCA, Terminal Leave, etc. 3.A.3.  Update local policies and procedures requiring all Marine  Corps personnel with MCEN non-classified Internet Protocol (IP)  Router Network (NIPRNET) or Secret Internet Protocol Router Network (SIPRNET) accounts properly coordinate and out-process with local  G-6/S-6/NETBN/NETACT prior to PCS/PCA or departure from the Marine  Corps.3.A.4. Ensure all account movement, Check-Out and account  Deactivation/Deletion Procedures IAW reference (i) (to include use  of remedy checkout service requests) to prevent unauthorized access  to the MCEN or compromise of information and information systems on  the network. 3.A.5. Ensure user accounts are annotated with inactivity and email  retention exemptions, IAW reference (i), in extension attribute 12  located in the attribute editor tab.  3.A.6. Disable and remove all accounts that have been inactive for  more than 180 days, unless they have been annotated with an  inactivity exemption IAW reference (i). 3.B.  Director Administration and Resource Management Division (AR), Headquarters Marine Corps: 3.B.1. Ensure that HQMC IC4 and MFCC are updated regarding any  changes to reference (f) through (h). 3.C.  Director HQMC IC4:  Update reference (i) to incorporate policy updates included in this message and related directives. 3.D.  MCEN Information System Users: 3.D.1  Fully complete check in and out procedures. 3.D.2  Fully understand and comply with relevant Records Management  requirements. 3.D.3  Back up pertinent personal, and Records Management required  data. 4.  Applicability.  This message is applicable to the Marine Corps  Total Force and to all contractors who support the Marine Corps. 5.  Questions should be directed to listed points of contact. 6.  Release authorized by LtGen Melvin G. Carter, Headquarters  Marine Corps, Deputy Commandant for Information.//