When is declassification of data appropriate What are the se

When is declassification of data appropriate? What are the security implications of insufficient data classification? How can the lack of requirements analysis and project planning impact the rollout of a content management system?

Solution

When originally classifying a document, an Original Classification Authority (OCA) assigns an overall classification level based on the highest level of information it contains. In addition, the OCA specifies downgrading and declassification instructions (e.g. dates, events, and exemptions) to protect information as long as necessary, at its designated classification level.

Note: This Short addresses only downgrading and declassification dates. It does not cover events and exemptions.

Executive Order 13526 provides the guidance for identifying downgrading and declassification instructions. Its goal is to balance the demands of national security with the need to inform the American people of the Government’s activities. The result is that classified information is to be protected no longer than what is necessary to protect national security. . Volume 1 of DoD Manual 5200.01 provides specific guidance on downgrading and declassification. As a derivative classifier of information, you are responsible for protecting classified information by ensuring that the appropriate classification, downgrading, and declassification instructions are carried forward from one or more source documents to a derived document.

Downgrading refers to lowering the classification level of a document. Top Secret documents can be downgraded to Secret or Confidential, while Secret documents can be downgraded to Confidential. A document may not have any downgrading instructions, but if it does, they will be noted in the Classification Authority Block on the first page of the document. Declassification refers to the authorized change of a document’s classified status that results in an unclassified document; however, it is critical to remember that just because a document has been declassified, does not mean the information can automatically be released to the public. For example, a declassified document may still contain controlled unclassified information, or CUI, which is not publically releasable. A document’s declassification instructions appear in the Classification Authority Block. Documents containing national security information will always have declassification instructions, for example, date, event, or exemption associated with it

Implementation and Roll-out Strategy :

The strategy to implement the new centrally supported WCMS and roll out a standard site migration process includes the following work elements.

• Procurement – negotiate a contract with the vendor and complete the purchase of the application

. • System Design and Installation – design and installation of hardware, software, and process components supporting the application environment

• Requirements, Configuration, and Development – requirements elicitation, configuration and development of the application to meet user requirements

• Site Migrations and Standard Migration Process – migrate 3 or more sites into the WCMS, train users, and develop a high level standard migration process based on lessons learned during project migrations.

• Deployment Management – create a deployment plan for release of infrastructure, configurations, development projects, and migrations and assure release readiness

.• Documentation and Communication – collect and organize documentation and project communication

Implementation and Roll-out Plan :

The high-level timeline follows for implementation and rollout. [A key weakness in estimating dates is the current unknown availability date of the vendor. Here we assume availability to develop SOW as soon as the contract is finalized.] Assumptions for the following timeline include:

Contract negotiations are successful

Actual award is not delayed after successful negotiations

Vendor can engage as soon as contract negotiations are complete

Two weeks off over winter break and one week over Thanksgiving break