MARKING CLASSIFIED MATERIAL www.ispcert.com

CONTENTS Marking requirements Test How do classified items receive their designations? Who is responsible for marking classified material? What recourse do security managers have after discovering a classification error? These are questions that come to mind of those who perform classified work. This training will familiarize the student with how to mark, declassify, downgrade and upgrade classified material. There is also training in length on the derivative classification process. www.ispcert.com

WHAT IS A CLASSIFICATION MARKING A classification marking is a physical designation designed to notify and warn the holder that the information they are in possession of is classified and to what level of classification The classification marking has to be clear enough to notify the holder of the level of classification, which sections are classified, the period of classification endurance and other requirements for protection. www.ispcert.com

WHERE DO MARKINGS APPEAR? Classification markings are require to be annotated on all forms and media of classified material: Computers Disks Papers Magnetic tape Books Classification markings are required for all classified documents regardless of the media or form. The purpose is to warn and notify of the level of clearance required and the level of protection necessary. www.ispcert.com

THREE DESINGNATIONS FOR CLASSIFIED CONFIDENTIAL information could reasonably be expected cause damage SECRET could reasonably be expected to cause serious damage TOP SECRET could reasonably be expected to cause exceptionally grave damage to national security. There are currently three levels of classification. Each having increasing degrees of consequences for unauthorized disclosure. Ensure that they are clearly marked on all applicable classified media. Caution: Classified information designated CONFIDENTIONAL should not be confused with the proprietary information sometimes referred to as company confidential. www.ispcert.com

IDENTIFICATION MARKINGS Must put reason for classification Who classified the material (office or person) Annotate date or event marking the duration of classification Classified material should always display proper markings at all times Users of classified material should understand the level of classification with which they are working. The classifier not only classifies the information, but tells why it is classified, what level of damage to national security the information may affect and the date or event for the duration of the classification. The classifier must also identify the office or person classifying the information. Classification must be evident and marked clearly for easy identification Whether a document or end item, individual components must be marked at the appropriate level www.ispcert.com

TYPES OF MARKINGS Overall Marking-This is the highest level of classified information found in the classified document. This is place prominently on the top and bottom of the outside, front cover, the title page, first page and the back of the document. If it is not possible to stamp, write, type or mark otherwise, then a label can be attached. Page marking-Mark the highest level of classified information contained on each internal page. If the page is UNCLASSIFIED, it can be marked as such. For efficiency or if contract specifies, each internal page can be marked with the overall document classification. Component Marking-Attachments to letters, annexes or appendixes to documents could be used as a separate document. In that case, the component is marked as a separate document. Overall Marking-This is the highest level of classified information found in the classified document. This is place prominently on the top and bottom of the outside, front cover, the title page, first page and the back of the document. If it is not possible to stamp, write, type or mark otherwise, then a label can be attached. Page marking-Mark the highest level of classified information contained on each internal page. If the page is UNCLASSIFIED, it can be marked as such. For efficiency or if contract specifies, each internal page can be marked with the overall document classification. Component Marking-Attachments to letters, annexes or appendixes to documents could be used as a separate document. In that case, the component is marked as a separate document. Portion Markings-Each part, section paragraph or other portion of a document has to be marked to appropriately identify the classification level. These markings are put at the end of the portion, or if there are no numbers or letters separating the portion they should be put at the beginning. (U, C, S, TS) Subject and title markings-If at all practical assign unclassified titles or subjects to a document. If titles or subjects are classified, use the appropriate classification symbol after it. (U, C, S, TS) www.ispcert.com

TYPES OF MARKINGS Portion Markings-Each part, section paragraph or other portion of a document has to be marked to appropriately identify the classification level. These markings are put at the end of the portion, or if there are no numbers or letters separating the portion they should be put at the beginning. (U, C, S, TS) Subject and title markings-If at all practical assign unclassified titles or subjects to a document. If titles or subjects are classified, use the appropriate classification symbol after it. (U, C, S, TS) Overall Marking-This is the highest level of classified information found in the classified document. This is place prominently on the top and bottom of the outside, front cover, the title page, first page and the back of the document. If it is not possible to stamp, write, type or mark otherwise, then a label can be attached. Page marking-Mark the highest level of classified information contained on each internal page. If the page is UNCLASSIFIED, it can be marked as such. For efficiency or if contract specifies, each internal page can be marked with the overall document classification. Component Marking-Attachments to letters, annexes or appendixes to documents could be used as a separate document. In that case, the component is marked as a separate document. Portion Markings-Each part, section paragraph or other portion of a document has to be marked to appropriately identify the classification level. These markings are put at the end of the portion, or if there are no numbers or letters separating the portion they should be put at the beginning. (U, C, S, TS) Subject and title markings-If at all practical assign unclassified titles or subjects to a document. If titles or subjects are classified, use the appropriate classification symbol after it. (U, C, S, TS) www.ispcert.com

DERIVATIVE CLASSIFICATION RESPONSIBILITIES Derivative classification means extracting, summarizing, or deriving classification from another source FSO ensures contractor is training and has resources Contractor ensures: Use of Security Classification Guide Mark derived copy with the same classification as original Challenge classification when necessary Carry over longest period of classification to the new document Maintain list of sources used to compile the derivative document In many cases those performing on classified contracts may assemble, modify, or construct classified information, reports, hardware and etc. into a new product. In that case the new product is an item derived from different sources. Both the contractor and the government have responsibilities. The Cognizant Security Agency provides the instruction and resources and the contractor complies. www.ispcert.com

DERIVATIVE CLASSIFICATION RESPONSIBILITIES In many cases those performing on classified contracts may assemble, modify, or construct classified information, reports, hardware and etc. into a new product. In that case the new product is an item derived from different sources. Both the contractor and the government have responsibilities. The Cognizant Security Agency provides the instruction and resources and the contractor complies. In many cases those performing on classified contracts may assemble, modify, or construct classified information, reports, hardware and etc. into a new product. In that case the new product is an item derived from different sources. Both the contractor and the government have responsibilities. The Cognizant Security Agency provides the instruction and resources and the contractor complies. www.ispcert.com

“DERIVED FROM” LINE The “Derived From” line connects the classified material incorporated in a new document with the source document or the security classification guide The contractor annotates the reasoning or source of the classification This authorization includes the security classification guide listed on the DDForm254 The “derived from” line continues the record of accountability for classified material. Those who create derivative documents are not acting as Original Classification Authorities and don’t need such appointment or authority. They are only transferring original document information into a new document while keeping accountability. These documents are tracked by referenced contract number. www.ispcert.com

“DERIVED FROM” LINE The “derived from” line continues the record of accountability for classified material Those who create derivative documents are not acting as Original Classification Authorities and don’t need such appointment or authority They only transfer original document information into a new document while keeping accountability The “derived from” line continues the record of accountability for classified material. Those who create derivative documents are not acting as Original Classification Authorities and don’t need such appointment or authority. They are only transferring original document information into a new document while keeping accountability. These documents are tracked by referenced contract number. www.ispcert.com

“DERIVED FROM” LINE Use the term “multiple sources” on the derivative document where more than one source document is used maintain records of the multiple sources If the Contract Security Classification Specification (DD Form 254) is the sole source, put the date of the specification and the contract number in the “Derived From” line Derivative information could come from a single source or multiple sources. The “Derived From” line warns and notifies that the information has been taken from another source. The source information is transferred to the new document for accountability. www.ispcert.com

EXAMPLES OF DOCUMENT MARKINGS Overall classification from source document Paragraph from source to derived document These are examples of classified documents. Notice that the first document has a top and bottom marking at the highest level of classification on the page and each has appropriate levels of classification for the information in the paragraph. The document on the right is a classified document with correct information on where it was derived or taken from to create the new document. The Memorandum subject line from original document is in the derived from line of the derivative document Paragraph 2 from the original document is incorporated into paragraph 1 of the derived document The overall classification in the derived document is the overall page classification based on paragraph 1 “Derived From” line based on information from source documents www.ispcert.com

“DECLASSIFY ON” LINE The “Declassify On” line provides declassification instructions and is referenced with: Contract Security Classification Specification Security classification guide Or, carry forward the duration instruction from the source document or classification guide (e.g., date or event). “Declassify On” notifies the contractor of declassification instructions for the classified material. “Declassify On” line notifies the contractor of declassification instructions www.ispcert.com

“DECLASSIFY ON” LINE These markings are no longer authorized “Declassify on:” could display one of the following: X1-X8 Decl: OADR Never mark RD or FRD with a “declassify on” line Everything should Typically, classified information will maintain its status for 10 years. In the event national security sensitivity requires, this date can be set for 25 years in the future. In some cases the original classification authority can change the classification level, reclassify, or extend the duration of classified information based on the requirements addressed earlier. Unless specifically identified as exempt from declassification, classified records that are over 25 years old should be automatically declassified by the 31st of December of the 25th year. In any event, information that no longer meets the requirements for classification under EO 13526 should be declassified. Items that continue to meet the requirements should remain classified unless challenged. I have declassification instructions except RD and FRD Typically, classified information will maintain its status for 10 years. In the event national security sensitivity requires, this date can be set for 25 years in the future. www.ispcert.com

“DECLASSIFY ON” LINE A “Declassify on” should be in accordance with Sec. 2001.12 of ISOO Directive No. 1: A date or event less than 10 years from the date of the document; or A date 10 years from the date of the document; or A date greater than 10 and less than 25 years from the date of the document; or A date 25 years from the date of the document. Everything should Typically, classified information will maintain its status for 10 years. In the event national security sensitivity requires, this date can be set for 25 years in the future. In some cases the original classification authority can change the classification level, reclassify, or extend the duration of classified information based on the requirements addressed earlier. Unless specifically identified as exempt from declassification, classified records that are over 25 years old should be automatically declassified by the 31st of December of the 25th year. In any event, information that no longer meets the requirements for classification under EO 13526 should be declassified. Items that continue to meet the requirements should remain classified unless challenged. I have declassification instructions except RD and FRD www.ispcert.com

“DOWNGRADE TO” LINE Use “Downgrade To” line when downgrading instructions are included in the Contract Security Classification Specification, classification guide or source document "DOWNGRADE TO" Line. Be sure to coordinate with the Government contracting agency BEFORE downgrading classified material. Information that loses sensitivity based on time or event is downgraded or declassified. The action is taken based on formal notification or from the Contract Security Classification Guidance. Contractors should consult with the GCA prior to taking downgrade or declassification action. Once approved, documentation and remarking should take place concurrently. For example: CLASSIFIED BY: Multiple Sources DOWNGRADE TO (SECRET or CONFIDENTIAL) ON: XXXXX DECLASSIFY ON: XXXXX www.ispcert.com

“DOWNGRADE TO” LINE SECRET CONFIDENTIAL "DOWNGRADE TO" Line. Be sure to coordinate with the Government contracting agency BEFORE downgrading classified material. Information that loses sensitivity based on time or event is downgraded or declassified. The action is taken based on formal notification or from the Contract Security Classification Guidance. Contractors should consult with the GCA prior to taking downgrade or declassification action. Once approved, documentation and remarking should take place concurrently. "DOWNGRADE TO" Line. Be sure to coordinate with the Government contracting agency BEFORE downgrading classified material. Information that loses sensitivity based on time or event is downgraded or declassified. The action is taken based on formal notification or from the Contract Security Classification Guidance. Contractors should consult with the GCA prior to taking downgrade or declassification action. Once approved, documentation and remarking should take place concurrently. SECRET CONFIDENTIAL www.ispcert.com

“CLASSIFIED BY” LINE "CLASSIFIED BY" Line and "REASON CLASSIFIED" Line are used primarily on originally classified material Some agencies may require that derivative classifiers put identify their office and reason for classification For example: CLASSIFIED BY: Department 5 Office of Good Works REASON CLASSIFIED: Section 2.1 Security Classification Guide DECLASSIFY ON: X-1 www.ispcert.com

PREVIOUS EXECUTIVE ORDERS Classified generated under previous executive orders need not be re-marked Most contain proper portion markings, if not, carry over highest classification of source document The originator, not contractor, is responsible for classification markings There is usually no need to re-mark classified material produced under previous executive orders. The originator has resonsibility of classifying the original work. However, the contractor should report serious discrepancies in classification markings to the originator. www.ispcert.com

SPECIAL TYPES OF MATERIAL Classification markings must be clear, no matter the media Files, folders or groups of documents must be marked at highest level within Email and other electronic messages have to be marked the same as any document Microform is tiny, but the media has to be marked to be seen by the unaided eye and within the microform document Translations of U.S. classified information is marked with U.S. as country of origin and the classification in English and foreign language All media, regardless of form must be marked to the proper level to ensure that the classification of the item is clear to the holder. All media, regardless of form must be marked to the proper level to ensure that the classification of the item is clear to the holder. www.ispcert.com

TRANSMITTAL DOCUMENTS Transmittal documents are marked with the highest classification of the entire document packet and with notation of classification level once removed from document packet Must carry all classification markings of any classified document If unclassified when removed put: Unclassified with separated from classified enclosures. If classified with higher classification documents included put: CONFIDENTIAL or SECRET when separated from enclosures www.ispcert.com

OTHER CLASSIFICATION EVENTS Information that is unclassified when alone and classified when compiled Mark with the highest level of classification Portion markings are not necessary Unclassified material developed while working with classified information should be handled in a way to protect the classified material Training material is marked to indicate that it is UNCLASSIFIED but is assigned a classification for training purposes only UNCLASSIFIED SAMPLE SECRET FOR TRAINING, OTHERWISE UNCLASSIFIED Other material should be protected as classified even if it is not classified. The protection is to ensure that the classified portion is not disclosed without authorization, clearance and need to know. The above are few examples. www.ispcert.com

OTHER CLASSIFICATION EVENTS Other material should be protected as classified even if it is not classified. The protection is to ensure that the classified portion is not disclosed without authorization, clearance and need to know. The above are few examples. Other material should be protected as classified even if it is not classified. The protection is to ensure that the classified portion is not disclosed without authorization, clearance and need to know. The above are few examples. www.ispcert.com

TOP SECRET SECRET UPGRADING Upgrade when there is message notifying to upgrade a classification. For example: SECRET to TOP SECRET Re-mark with new classifications Obliterate former classification markings Enter authority and reason for upgrade Notify other users Upgrading of classified information indicates added sensitivity and should be performed immediately and all users notified. New markings should be annotated and old markings obliterated Upgrading of classified information indicates added sensitivity and should be performed immediately and all users notified. New markings should be annotated and old markings obliterated. TOP SECRET SECRET

INADVERTANT RELEASE If unmarked classified information is removed from facility: Determine clearance and authorized access of holders Assess whether or not control of item has been lost If recipients have clearance and need to know; notify of classification If control has been lost, notify Cognizant Security Agency Anytime classified material is inadvertently released, the FSO should conduct and assessment to determine the damage. If release of classified information happened where there were no classification markings provided assess whether or not authorized users had access. If users were cleared with need to know, provide notification and re-mark. If there was unauthorized access or control was otherwise lost, notify the CSA. www.ispcert.com

INADVERTANT RELEASE Anytime classified material is inadvertently released, the FSO should conduct and assessment to determine the damage. If release of classified information happened where there were no classification markings provided assess whether or not authorized users had access. If users were cleared with need to know, provide notification and re-mark. If there was unauthorized access or control was otherwise lost, notify the CSA. Anytime classified material is inadvertently released, the FSO should conduct and assessment to determine the damage. If release of classified information happened where there were no classification markings provided assess whether or not authorized users had access. If users were cleared with need to know, provide notification and re-mark. If there was unauthorized access or control was otherwise lost, notify the CSA. www.ispcert.com

SUMMARY Mark classified material to the highest level possible Indicate classification authority and reason for classification Provide proper markings for compiled or derived classification Determine marking requirements for special types of material Perform downgrade and upgrade requirements Provide instructions for inadvertent release www.ispcert.com

Click on the correct answers TEST Click on the correct answers The following is a test of what you have learned. Once complete, print of the certificate for proof of attendance. www.ispcert.com

TEST-SELECT THE CORRECT ANSWER All of the following are classifications except: TOP SECRET CONFIDENTIAL SECRET FOR OFFICIAL USE ONLY Guidance for performing on classified contract is found in SF328 DDForm441 SF86 DDForm254 Derivative information involves marking original classified information at the proper level True False All must be considered before the OCA can assign a classification marking except May cause damage to national security Is owned by the Government Displays nuclear vulnerabilities Hide an nationally embarrassing situation www.ispcert.com

TEST-SELECT THE CORRECT ANSWER Which of the following is described as possible damage for unauthorized disclosure of SECRET Causes extremely serious damage Causes damage Causes extremely grave damage Causes serious damage One should NOT coordinate with GCA prior to taking action to downgrade classified material True False www.ispcert.com

Try Again Go Back! www.ispcert.com

Try Again Go Back! www.ispcert.com

Great Job! Go Back! www.ispcert.com

Great Job! Go Back! www.ispcert.com

Marking Classified Material CERTIFICATE I HAVE RECEIVED TRAINING AND UNDERSTAND THE CONTENTS OF: Marking Classified Material ANY QUESTIONS THAT I HAVE RAISED WERE ADDRESSED BY THE FSO: NAME: DATE: FSO Verification: www.ispcert.com