CONTENTS • General Requirements • Control and Accountability • Storage • Transmission • Disclosure • Reproduction
GENERAL REQUIREMENTS • Contractors protect classified material under their control • Individuals protect classified information entrusted to them How well? To the level necessary to prevent unauthorized disclosure The FSO leads and implements the security program designed to protect classified information and prevent unauthorized disclosure
GENERAL REQUIREMENTS • Protect oral discussion • Use secure devices • Speak in closed meetings • Ensure area is cleared for classified presentation Classified conversations should only be conducted in authorized areas. Classified meetings are sponsored by the government and all outside visitors will need to file a visit authorization ahead of time. Ensure classified phone conversations take place in a cleared area on a secure line.
GENERAL REQUIREMENTS • Complete end of day security checks • Ensure classified is stored properly • Checks are for last shift where classified material was removed from storage Security checks are necessary to ensure classified material has been returned to the authorized storage area and the classified storage has been properly secured. Checks are not necessary during 24hour operations.
GENERAL REQUIREMENTS • Establish perimeter controls • Deter and detect unauthorized removal or entry of classified • Persons entering or exiting facility is subject to search • Develop emergency procedures • Protect classified information in any emergency situation
GENERAL REQUIREMENTS • Perimeter controls help prevent unauthorized entry or exit of classified material. All classified material is to be introduced and removed only through the security office. This discourages losing control of classified material and the resulting security violation. • All personnel entering and exiting a cleared facility are subject to random search. Notices of such searches should be posted. • Regardless of motivation, employees provide the largest security risk. Unauthorized introduction or removal of classified material is far too common. • Procedures should be in place to arrange for the accountability of classified during any emergency. Define emergency procedures for: tornado, flood, fire, hurricane or tragedy at campus or during courier operations
CONTROL AND ACCOUNTABILITY • Classified material is on site for legal, U.S. Government purposes only. When contract expires, classified material must be returned to customer within two years or if approved for retention validated with final DD Form 254. • The FSO develops documenting and accounting procedure to ensure items are cataloged and retrievable within a reasonable amount of time.
CONTROL AND ACCOUNTABILITY • Contractors designate TOP SECRET control officials to: • Receive • Transmit • Maintain access and accountability • Conduct annual inventory • TOP SECRET has continuous transmittal receipt process to maintain accountability and prevent loss or compromise.
CONTROL AND ACCOUNTABILITY • Each TOP SECRET item must be numbered in series • Received classified • Check for tamper • Check for accuracy against receipt • If all good, sign and return receipt to sender
CONTROL AND ACCOUNTABILITY • Maintain a continuous record for all documents transmitted from your site. This includes mail, courier, email, and etc. Each item of TOP SECRET material has to be catalogued and numbered in a series. • Those who receive classified material are responsible that they are receiving items as indicated on the receipt. They should inspect the package for evidence of tampering and compare the classified items with the receipt. The classified item should have an unclassified title.
CONTROL AND ACCOUNTABILITY • Account for all produced TOP SECRET when: • A finished product • Retained for over 30 days (notes, files, workbook, final) • Transmitted outside of facility • Classified information not a finished product-No problem • Mark date created • Mark classification level • Annotate “Working Papers” • Working papers are to be marked as finished document when: • Over 30 days old for TOP SECRET • Over 180 days for SECRET and CONFIDENTIAL • Sent outside of facility
CONTROL AND ACCOUNTABILITY Re-cap: • TOP SECRET material must also be accounted for when in an unfinished state for over 30 days or transmitted outside of the facility. This process further reduces employee error and security violations. • SECRET and CONFIDENTIAL material should be brought into accountability 180 days after creation if in an unfinished state. • Regardless of stated, classified information should be accounted for prior to release from a facility.
CLASSIFIED STORAGE • TOP SECRET and SECRET is stored in GSA approved container, approved vault or approved closed area with supplemental controls • SECRET can also be stored as followed until Oct 1, 2012 • Safe, steel file cabinet or safe type container with automatic lock • Requires supplemental protection after hour • Any steel cabinet with four sides, top, bottom and a rigid bar with approved locks • CONFIDENTIAL material doesn’t need supplemental controls
CLASSIFIED STORAGE Restricted areas are used when controlling access to classified material in a large area. There does not need to be physical barriers, but access control is necessary. Restricted areas are for temporary use of classified material and all classified material needs to be returned to the repository. • Only used during working areas • Used for unique size, mission or other issues • Classified must be returned to proper storage when complete • Employees challenge all who enter to ensure clearance and NTK
CLASSIFIED STORAGE • Closed areas are a more permanent solution for the classified items that are difficult to store. These difficulties arise from size, bulk or unique mission requirements. FSO’s limit access and provide supplemental controls for anything SECRET or above in closed areas.
CLASSIFIED STORAGE • Closed areas are used to store classified material that won’t fit into a GSA approved container • Access is controlled • Supplemental protection for SECRET and TOP SECRET • Qualify structural integrity at required intervals • CSA approves open shelf/bin storage of SECRET and CONFIDENTIAL • No open shelf or bin storage of TOP SECRET
CLASSIFIED STORAGE As with security clearances, keep the amount of authorized employees having knowledge of combinations to the minimum amount necessary. Keep records of those who have the combination. Remind employees that the combinations are to be protected at the highest level of classified stored inside the container.
CLASSIFIED STORAGE • Lock combinations given as few employees as necessary • Keep a record of those knowledgeable • Protect combinations at the highest level stored • Only assign to those with clearance and NTK (not the locksmith) • Lock all approved containers when not under direct viewing of authorized persons
Security containers should not be altered, painted or labeled with the security classification level of the contents Change combinations upon initial use, change in status of authorized users, compromise or suspected compromise of container or combination, when safe is left open or when required by FSO or CSA CLASSIFIED STORAGE SECRET
Control access and accountability to keys and locks and: Appoint a custodian Maintain register of lock and keys Audit keys and locks monthly Inventory keys upon change of custody Keep keys on premises Rotate or change locks annually CLASSIFIED STORAGE For example, keys and locks should be documented and protected at the appropriate security level. They should remain in a secure location. Just as combinations should never be written down, locks should never be removed from the facility nor should unauthorized copies be made.
CLASSIFIED STORAGE • Repairs to GSA approved containers shall be made by cleared or escorted personnel trained in approved methods. Repairs should be made with approved parts or approved cannibalized parts. Ensure certificate of repair is on file. • Access control can be used to limit access to closed areas DURING WORK HOURS. Must be approved by FSO and meet criteria in 5-313 and 5-314 of NISPOM
TEST Click on the correct answers
TEST-SELECT THE CORRECT ANSWER • All of the following are methods of protecting classified conversations EXCEPT: • Use secure phone lines • Speak in a closed area • Whisper when in public areas • When should combinations be changed on GSA approved containers? • Upon change in status of knowledgeable person • When safe is left unattended • Upon compromise of combination • All the above • Lock combinations should be changed by a training lock smith • True • False • All apply to Restricted areas EXCEPT: • Does not require physical boundaries • For permanent continuous use • Control access of personnel • For temporary use
CERTIFICATE I HAVE RECEIVED TRAINING AND UNDERSTAND THE CONTENTS OF: Safeguarding Classified Information ANY QUESTIONS THAT I HAVE RAISED WERE ADDRESSED BY THE FSO: NAME: DATE: FSO Verification: