(U//FOUO) DoD Manual: Defense Industrial Base (DIB) Cybersecurity Program Classification Manual

The following manual is part of a series of “limited release” DoD doctrine publications that are not released to the public.

Manual O-5205.13: Defense Industrial Base (DIB) Cyber Security and Information Assurance (CS/IA) Program Security Classification Manual (SCM)

32 pages
For Official Use Only
April 26, 2012

1. GENERAL

a. This enclosure provides guidance on the level and duration of classification for each specific topic covered by this SCM, as determined by the OCA. References (b) and (e) provide further guidance on the level and duration of classification and describe all classification duration options available to the OCA.

b. DIB CS/IA is the DoD program to protect critical DoD unclassified program, technology, and operational information residing on, or transiting, DIB unclassified networks. DoD Components and industry participants collaborate to protect DoD information through the development, implementation, and execution of DoD and DIB processes and procedures.

c. Classification of specific system capabilities is generally addressed in individual DoD Component program, system, or operations planning security classification guides or manuals. For security classification guidance on threat, intelligence information, or information related to other DoD programs that may be included in information and materials produced under the DIB CS/IA program, refer to the appropriate published security classification guide or manual or the agency that originated the information in question.

d. DoD Components are responsible for validating compliance with this SCM for their specific contractor or industry support.

2. REASONS AND LENGTH OF CLASSIFICATION

a. Classification is reserved for specific categories of information, or the compilation of related information, meeting the standards and criteria for classification as defined in Reference (e) and DoD Manual 5200.01-V2 (Reference (m)).

b. References (b) and (e) provide guidance on the duration of classification.

3. CLASSIFICATION STANDARDS

a. Information and materials produced under the DIB CS/IA program must meet the standards for classification as cited in Reference (b) and implemented by Reference (e). When determining classification of information produced under the DIB CS/IA program, the OCA must determine whether:

(1) Information and materials produced under the DIB CS/IA program is owned by, produced by or for, or is under the control of the U.S. Government. In this context “control”

…