1 Virginia Army National Guard Personnel Security Initial Security Education Briefing 12 May 2005.

11

Virginia Army National GuardVirginia Army National GuardPersonnel SecurityPersonnel Security

Initial Security Education Initial Security Education

BriefingBriefing

12 May 2005

22

References:References:

AR 380-67 Personnel Security Program, 9 AR 380-67 Personnel Security Program, 9 September 1988September 1988

AR 380-5 Department of the Army Information AR 380-5 Department of the Army Information Security Program, 29 September 2000Security Program, 29 September 2000

DoD 5200.2-R Personnel Security Program, DoD 5200.2-R Personnel Security Program, January 1987 (with changes to 8 Nov 1995)January 1987 (with changes to 8 Nov 1995)

E.O. 12958 Classified National Security E.O. 12958 Classified National Security Information, as Amended 25 March 2003Information, as Amended 25 March 2003

33

Security ClearanceSecurity Clearance

A security clearance is a determination of A security clearance is a determination of trust, which makes you trust, which makes you eligibleeligible for access to for access to classified informationclassified information

A security clearance is not permanent. It A security clearance is not permanent. It expires at a time frame dependent on the expires at a time frame dependent on the type of investigation - 10 years for Secret type of investigation - 10 years for Secret and 5 years for Top Secret.and 5 years for Top Secret.

44

Requirements for holding a Requirements for holding a security clearancesecurity clearance

Attend a briefing designed to teach you Attend a briefing designed to teach you proper procedures for handling and protecting proper procedures for handling and protecting classified information. Attend a refresher classified information. Attend a refresher briefing each year. For reference see: briefing each year. For reference see: www.archives.gov/isoo/security_forms/standard_form_312.pdfwww.archives.gov/isoo/security_forms/standard_form_312.pdf

Sign a Non-Disclosure Agreement Sign a Non-Disclosure Agreement

(SF-312)(SF-312)

55

What is an SF-312 What is an SF-312 Non-Disclosure Agreement?Non-Disclosure Agreement?

A legally binding agreement between A legally binding agreement between US Government and you. It is a life US Government and you. It is a life long agreement.long agreement.

It is to ensure that you understand the It is to ensure that you understand the damage to National Security which damage to National Security which could occur from unauthorized could occur from unauthorized disclosure of classified informationdisclosure of classified information

66

SF-312 Non-Disclosure SF-312 Non-Disclosure AgreementAgreement

Agree to pre-publication reviewAgree to pre-publication review

Classified information is United States Classified information is United States GOVERNMENT PROPERTY. It is NOT GOVERNMENT PROPERTY. It is NOT yours to disclose in any wayyours to disclose in any way

77

SF-312 and the Penalties of SF-312 and the Penalties of DisclosureDisclosure

Should you improperlyShould you improperly

disclose classified informationdisclose classified information

Under E.O. 12958, Section 5.5. Under E.O. 12958, Section 5.5. Sanctions:Sanctions:

88

SF-312 and the Penalties of DisclosureSF-312 and the Penalties of Disclosure

Loss or denial of security clearanceLoss or denial of security clearance

Termination of employmentTermination of employment

Criminal prosecution (prison/fines)Criminal prosecution (prison/fines)

Loss of monetary gains made from Loss of monetary gains made from improper disclosureimproper disclosure

99

National Security InformationNational Security Information

Official information which relates to the Official information which relates to the national defense or foreign relations of national defense or foreign relations of the United States, which has been the United States, which has been deemed to require protection from deemed to require protection from unauthorized disclosure.unauthorized disclosure.

1010

National Security InformationNational Security Information

There are levels of classification to describe There are levels of classification to describe national security information. Unauthorized national security information. Unauthorized disclosure of this information could cause disclosure of this information could cause damage to our nation’s security damage to our nation’s security – CONFIDENTIALCONFIDENTIAL- Damage- Damage– SECRETSECRET- Serious Damage- Serious Damage– TOP SECRETTOP SECRET-- Exceptionally Grave Damage Exceptionally Grave Damage

1111

The ThreatThe Threat

Why must we protect classified information?Why must we protect classified information?

– Economic espionage is on the riseEconomic espionage is on the rise– Intelligence needs are economic as well as Intelligence needs are economic as well as

militarymilitary– Present/former adversaries and our allies are Present/former adversaries and our allies are

conducting intelligence activities against us.conducting intelligence activities against us.

1212

““Countries don’t have friends, Countries don’t have friends, they have interests”they have interests”

Charles deGaulleCharles deGaulle

1313

The ThreatThe Threat

Don’t forget the Don’t forget the insider!insider!

Counterintelligence Counterintelligence is your responsibilityis your responsibility

Report suspicious Report suspicious activities to your activities to your Security Officer Security Officer immediatelyimmediately

1414

Classification of InformationClassification of InformationHow does information become How does information become classified?classified?

– Original ClassificationOriginal Classification: initial : initial determination that information, in the determination that information, in the interests of national security, needs interests of national security, needs protectionprotection

– Derivative ClassificationDerivative Classification: incorporating, : incorporating, paraphrasing, restating, or generating in paraphrasing, restating, or generating in new form, information that is already new form, information that is already classifiedclassified

1515

National Security InformationNational Security Information

Classified information must fall under one of the Classified information must fall under one of the following categories:following categories:– Military plans, weapons systems or operationsMilitary plans, weapons systems or operations

– Foreign government informationForeign government information

– Intelligence activities, sources or methods to include Intelligence activities, sources or methods to include cryptologycryptology

– Foreign relations or foreign activities of the U.S., Foreign relations or foreign activities of the U.S., including confidential sourcesincluding confidential sources

1616

National Security InformationNational Security Information

– Scientific, technological, or economic matters Scientific, technological, or economic matters relating to national security, which includes relating to national security, which includes defense against transnational terrorismdefense against transnational terrorism

– Programs for safeguarding nuclear materials or Programs for safeguarding nuclear materials or facilitiesfacilities

– Vulnerabilities or capabilities of systems, Vulnerabilities or capabilities of systems, installations, infrastructures, projects, plans, or installations, infrastructures, projects, plans, or protection services relating to national security, protection services relating to national security, which includes defense against transnational which includes defense against transnational terrorismterrorism

– Weapons of mass destructionWeapons of mass destruction

1717

Reasons to NOT classify Reasons to NOT classify informationinformation

To conceal violation of law, inefficiency, To conceal violation of law, inefficiency, or administrative erroror administrative error

To prevent embarrassment to a person, To prevent embarrassment to a person, organization, or agencyorganization, or agency

1818

Reasons to NOT classify Reasons to NOT classify informationinformation

To restrain competitionTo restrain competition

To prevent or delay the release of To prevent or delay the release of information that does not require information that does not require protection in the interests of national protection in the interests of national securitysecurity

1919

DeclassificationDeclassification Documents are marked for automatic Documents are marked for automatic

declassification within ten years unless:declassification within ten years unless:

– The document is exempt from automatic The document is exempt from automatic declassification at 10 years under E.O. declassification at 10 years under E.O. 12958. Additional reviews at 10 and 5 year 12958. Additional reviews at 10 and 5 year intervalsintervals

– All classified documents are declassified at All classified documents are declassified at 25 years (with a few exceptions). 25 years (with a few exceptions).

2020

Marked DocumentsMarked Documents

Title and/or subject should be markedTitle and/or subject should be marked

Paragraphs and sub-paragraphs must be Paragraphs and sub-paragraphs must be markedmarked

Illustrations and pictures alsoIllustrations and pictures also

2121

Marked DocumentsMarked Documents

Overall classification is determined by the Overall classification is determined by the highest portion markinghighest portion marking

Classification marked on top/bottom of Classification marked on top/bottom of every pageevery page

2222

Derivative ClassificationDerivative Classification

When incorporating classified When incorporating classified information, be sure to:information, be sure to:– Observe and respect original markings.Observe and respect original markings.

– Carry forward all classification markings.Carry forward all classification markings.

– Carry forward declassification instructions Carry forward declassification instructions (using the most stringent)(using the most stringent)

– List all sourcesList all sources

2323

Accountability of ClassifiedAccountability of ClassifiedInformationInformation

Required for bothRequired for both

Secret and Top SecretSecret and Top Secret

2424

Accountability:Accountability:

Identify who, what, Identify who, what, when, where, howwhen, where, how

Annual inventory is Annual inventory is required!required!

Use cover sheets Use cover sheets and classified and classified receipts!receipts!

2525

Storage of MaterialStorage of Material Sensitive, For Official Use Only (FOUO), Sensitive, For Official Use Only (FOUO),

Privacy Act, proprietary information must Privacy Act, proprietary information must be stored under one level of lock (desk, be stored under one level of lock (desk, drawer, file cabinet)drawer, file cabinet)

Classified information must be stored in a Classified information must be stored in a GSA approved security container (safe) GSA approved security container (safe)

Note that each safe should have a Note that each safe should have a SF700, SF702 and open/closed signSF700, SF702 and open/closed sign

2626

CombinationsCombinations

Security container combinations are Security container combinations are classified at the level of information in classified at the level of information in the safethe safe

Should always be memorized; never Should always be memorized; never write them downwrite them down

Don’t share with anyone who does not Don’t share with anyone who does not need to know itneed to know it

2727

CombinationsCombinations Change your combination when:Change your combination when:

– the security container is found open and the security container is found open and unattendedunattended

– someone who has the combination leavessomeone who has the combination leaves– if you feel the combination has been if you feel the combination has been

compromisedcompromised– when the security container is taken out of when the security container is taken out of

serviceservice

2828

Control and AccessControl and Access You are responsible You are responsible

for protecting and for protecting and controlling classified controlling classified informationinformation

You must limit You must limit access to authorized access to authorized persons by verifying: persons by verifying: – IdentificationIdentification– ClearanceClearance– Need to knowNeed to know

You are responsible for allowing proper access to your

material!!

2929

LEAKSLEAKS Most leaks result Most leaks result

from:from:– Casual Casual

conversationsconversations Don’t discuss Don’t discuss

classified classified information information outside the officeoutside the office!!

– Open SourcesOpen Sources Publication does Publication does

not infer not infer declassification!declassification!

3030

Transmission: Telephone/FaxTransmission: Telephone/Fax

Standard and cell Standard and cell phones are not phones are not securesecure

Is there a secure Is there a secure phone in your phone in your office? If not, where office? If not, where is the nearest one?is the nearest one?

3131

Transmission: Double Transmission: Double WrappingWrapping

Must be done to prepare for hand carry, Must be done to prepare for hand carry, courier, or US Postalcourier, or US Postal

Affords 2 layers of protectionAffords 2 layers of protection

Protects against damageProtects against damage

Use opaque envelopesUse opaque envelopes

Don’t forget a receiptDon’t forget a receipt

3232

TransmissionTransmission Outer Wrapping:Outer Wrapping:

– Full address of receiverFull address of receiver

– Full return addressFull return address

– NO CLASSIFICATION MARKINGSNO CLASSIFICATION MARKINGS

– Recommend that you put “If undeliverable, Recommend that you put “If undeliverable, return to sender”return to sender”

3333

TransmissionTransmission Inner Wrapping:Inner Wrapping:

– full addressfull address

– Return addressReturn address

– Classification markings top/bottom and Classification markings top/bottom and front/backfront/back

– Information and receipt placed insideInformation and receipt placed inside

3434

TransmissionTransmission

To send Top Secret:To send Top Secret: – Call your security officerCall your security officer

Secret and ConfidentialSecret and Confidential– Hand-carryHand-carry– Approved courierApproved courier– US Postal ServiceUS Postal Service

3535

TransmissionTransmission Hand Carry:Hand Carry:

– No overnight stay without proper storageNo overnight stay without proper storage

– No aircraft overseasNo aircraft overseas

– Courier: check authorizationCourier: check authorization

US Postal:US Postal:

– Secret: RegisteredSecret: Registered

– Confidential: Certified, Express or First classConfidential: Certified, Express or First class

3636

Computer SecurityComputer SecurityDo not process classified unless:Do not process classified unless:

You have contacted You have contacted your information your information technology reptechnology rep

Your computer has Your computer has a removable hard a removable hard drivedrive

3737

Computer SecurityComputer SecurityDo not process classified unless:Do not process classified unless:

It is in a stand-alone It is in a stand-alone configuration (no configuration (no modem or network modem or network connection unless it connection unless it has been properly has been properly accredited-accredited-SPRNET)SPRNET)

3838

ReproductionReproduction Various ways to reproduce classified Various ways to reproduce classified

information:information:– Paper (photocopier) – MUST be approved Paper (photocopier) – MUST be approved

copier for classified information…if not, DO copier for classified information…if not, DO NOT copyNOT copy

– ElectronicallyElectronically

– Other means (video and/or cassettes)Other means (video and/or cassettes) Use approved equipment for that purposeUse approved equipment for that purpose

– Account for your copies!Account for your copies!

3939

ReproductionReproduction

Approved photocopiers:Approved photocopiers:– Are in controlled environmentsAre in controlled environments– Do not have memoriesDo not have memories– Are sanitized after classified copies are Are sanitized after classified copies are

mademade– Are serviced by cleared personnel or Are serviced by cleared personnel or

service personnel are monitored while service personnel are monitored while repairs are maderepairs are made

4040

DESTRUCTIONDESTRUCTION

Classified material destructionClassified material destruction– Approved methods:Approved methods:

Burning (at an approved facility)Burning (at an approved facility) Shredding (using an approved cross cut Shredding (using an approved cross cut

shreddershredder))

Use small classified waste “burn bagsUse small classified waste “burn bags””

Other types (FOUO, Privacy Act, Sensitive Other types (FOUO, Privacy Act, Sensitive But Unclassified (SBU), etc.): SBU should But Unclassified (SBU), etc.): SBU should be shredded using cross cut shredder. At be shredded using cross cut shredder. At a minimum tear up other typesa minimum tear up other types

4141

Overseas TravelOverseas Travel Contact your security Contact your security

officer for a briefing officer for a briefing before you gobefore you go

Do not bring Do not bring classifiedclassified

Limit sensitive Limit sensitive informationinformation

Notify U.S. Embassy Notify U.S. Embassy of your visitof your visit

4242

Reporting RequirementsReporting Requirements

All employees must report contact with a All employees must report contact with a foreign national who:foreign national who:– Requests classified informationRequests classified information– Wants more information than they need to knowWants more information than they need to know– Acts suspiciouslyActs suspiciously– Report incidents to your security officer Report incidents to your security officer

immediatelyimmediately

4343

End of Day Security ChecksEnd of Day Security Checks All security containersAll security containers

windows/doorswindows/doors

desk tops for desk tops for classifiedclassified

Complete the SF 701 Complete the SF 701 “Activity Security “Activity Security Checklist.” The office Checklist.” The office manager is manager is responsible for the responsible for the implementation of the implementation of the SF 701SF 701

4444

Your Security OfficerYour Security Officer

Your security officer is Your security officer is there to help you!there to help you!

Report to your Report to your security officer:security officer:– Security violationsSecurity violations– Loss or compromise of Loss or compromise of

classified informationclassified information– Security incidents or Security incidents or

problemsproblems

4545

When You Depart VA ARNGWhen You Depart VA ARNG

If you are leaving If you are leaving the VA ARNG you the VA ARNG you must:must:– Turn all classified Turn all classified

material over to material over to your classified your classified control pointcontrol point

– Contact your Contact your Security Officer Security Officer (S2) for a debriefing(S2) for a debriefing

– Turn in your ID, Turn in your ID, keys, and access keys, and access cardscards

4646

Finally….Finally….

Who is responsible for security in the Who is responsible for security in the Virginia Army National Guard?Virginia Army National Guard?

YOU ARE!YOU ARE!

4747

4848