# Presentation: 438979

## Classified and Controlled Information Awareness TrainingNick ProsperoOffice of Quality ManagementOffice of ClassificationOffice of Security and Safety Performance Assurance

## Purpose

- To ensure that DOE security specialists who prepare initial and annual refresher awareness training for classified and controlled information understand the current requirements.

## Spectrum of Sensitivity of Information

**Not Sensitive**

**Sensitive**

**Publicly**
**Releasable**

**UCNI **
**OUO**

**RD**
**FRD**
**NSI**

**Unclassified   |   Classified**

- Spectrum of Controls

**Controlled**

## CLASSIFICATION AWARENESS TRAINING

## What is Classification?

## Why is it Important?

***If you don’t ***_***identify***_*** it, ******you can’t ***_***protect***_*** it.***

- You can’t mark and secure it.
- You can’t limit access to only those with a proper security clearance and a need to know.

## Where are the Requirements for Classification Awareness Training Identified?

- Executive Order 12958 Implementing Directive:  NSI only
- 10 CFR Part 1045, Nuclear Classification and Declassification:  RD/ FRD only
- Applies to all government agencies

## DOE Classification Awareness Training Requirements

- DOE Manual 475.1-1A, Identifying Classified Information
- Applies to  RD, FRD, and NSI
- Covers identifying classified information only
- Does not cover protection requirements (other than limited marking procedures)

## DOE M 475.1-1A Should Be Your Sole Source...But?

- It is too vague
- Initial Training:  *All cleared individuals must understand their classification/declassification responsibilities.*
- Annual Training:
- CO insures annual refresher training is conducted.
- Coverage:
- Same as initial
- Emphasis changes to policies, principles, guidance, and procedures.

## Roles Classification Officials

- Classification Officers (CO)
- Classification Representatives (CR)
- Original Classifiers
- Derivative Classifiers
- Derivative Declassifiers

## Roles of the CO/CR

- Administers classification and declassification programs in their organizations
- Ensures proper reviews of material are conducted
- Serves as point of contact with Headquarters (SP-50 or NA-70) for all classification and Unclassified Controlled Nuclear Information matters

**Notes:**
Classification Officers assist or act for the head of a field element or field contractor organization on classification and declassification issues and serve as the point of contact between their organization and OD.  They are responsible for establishing internal directives and local procedures to implement the classification and declassification program within their organization.  DOE COs review nominations for appointment of contractor COs for organizations under their purview and recommend OD approval.  COs are responsible for designating and maintaining a list of Secret and Confidential derivative classifiers for their organization, and requesting Top Secret Derivative and Secret Original Classification Authority and Derivative Declassification Authority from OD.  COs also assure appropriate participation in new program planning in those areas with potential for generating classified information, documents, or material.

## Role of Derivative Classifiers (DC)

- Determine if newly generated _documents_ or _material_ contain classified information using existing guidance

- Only DCs can make this determination
- Decision must be made on existing guidance

## Role of Original Classifiers

- Determine if new _information_ that is not covered by current classification guidance is classified as_ NSI_.

- Decision is reported so it can be recorded in classification guide for future use by DCs

## Role of Derivative Declassifiers (DD)

- Determine if documents or material that are currently marked as being classified can be declassified.

## Document Review Requirements

- Documents generated in a potentially classified subject area that are intended for _routine distribution_ must be reviewed by a _Derivative Classifier_.
- Documents generated in a potentially classified subject area and intended for _public release_ or such widespread distribution that public release is likely must be submitted to the _Classification Officer_ for review.

## Document Review Requirements (Continued)

- The prepared text of oral presentations in a classified subject area must be submitted to the Classification Officer for review prior to the presentation.

## Individual Responsibility

- Ensure that documents generated in a classified subject area are properly reviewed.
- Be aware of classified subject areas in their areas of responsibilities.
- Protect potentially sensitive documents and materials prior to reviews.
- Don’t use unclassified commuters or telecommunication systems when generating potentially classified documents until consulting with a DC.

## Classification Challenges

- Who?	Authorized holders of information
- What?	Encouraged and expected to challenge classification status of information and documents
- When?	Believe classified unnecessarily, improperly, or for inappropriate length of time
- How?	In accordance with Departmental procedures

## No Comment Policy

- Applies to classified information appearing in the public domain
- Not automatically declassified
- Employees with access authorizations must not comment on accuracy, classification, or technical merit of such information
- Fact that classified information has appeared publicly may be classified.

## Who Should You Contact for Classification Questions?

- HQ Organizations -- Classification Representatives
- Field Organizations – Classification Officers (POCs/CRs)

## Releasing Unclassified Documents to the Public

**A determination that a document is unclassified does not mean that it can be released to the public**
**Many statutes and Executive orders govern the release of information (e.g., FOIA)**

**Notes:**
Declassification Reviews - General (cont.)
Remember that declassification of a document does not mean that the document may be publicly releasable.  There are somewhere around 150 different statutes which effect the release of information, documents, and material.  Some of these include Export Control Laws, the International Traffic in Arms Act, the FOIA, the Patent Act, and the Privacy Act, to name a few.  Just because a document has been declassified does not mean it can be released.

## Spectrum of Sensitivity of Information

**Not Sensitive**

**Sensitive**

**Publicly**
**Releasable**

**UCNI **
**OUO**

**RD**
**FRD**
**NSI**

**Unclassified   |   Classified**

##    Unclassified      Controlled         Nuclear             Information

**Notes:**
Now let’s turn our attention to UCNI.

## Unclassified Controlled Nuclear Information  (UCNI)

- DOE Manual 471.1-1, Identification and Protection of UCNI

**Unclassified Controlled Nuclear Information  (UCNI)**

**Notes:**
UCNI.
Additional information on UCNI can be found in the DOE Order 471.1, the brochure “Understanding UCNI, and the UCNI Marking Book, all of which are included in your handout material.

## Unclassified information concerning certain design and security information concerning nuclear facilities, material, and weapons that must be protected

Based on section 148 of the Atomic Energy Act

**Based on section 148 of the Atomic Energy Act**

**What is UCNI?**

**Notes:**
Unclassified Controlled Nuclear Information.
UCNI is based upon section 148 of the Atomic Energy Act.  In the 1970s, terrorists were reeking havoc in the world.  In the late 1970s the NRC determined that civilian nuclear power reactor were inviting targets for potential sabotage.  Civilian reactors had safeguards and security in-place but the information could not legally be protected.  It was, after all, not government information so it could not be NSI and it did not fit the definition for RD/FRD so it could not be protected under the Atomic Energy Act.  The information was freely available to anyone who would spend a little time acquiring it.  The NRC sought to modify the Atomic Energy Act to allow safeguards and security information on civilian power reactors to be withheld from public dissemination.  The Atomic Energy Act was amended and section 147 was born.
DOE looked at section 147 and determined that it had similar problems to that experienced by the civilian nuclear power industry.  DOE had production reactors, the blue prints for these reactors needed to be shared with civilian fire department and police forces so they could not be classified.  State police had to be informed when radioactive waste or special nuclear material had to be transported through their jurisdictions so this information could not be classified, etc.  A mechanism needed to be found to restrict certain information to only those individual who needed to know the information in their official capacities.  These individuals frequently did not have security clearances, thus the information could not be classified.  On December 6, 1980, the Atomic Energy Act was again amended and UCNI was born. 

##   Only individuals designated in writing as UCNI Reviewing Officials may determine that a document contains UCNI when guidance is available. 

- Who Can Make UCNI Determinations?

**Notes:**
Reviewing Officials.
At HQ, OD trains and appoints all Reviewing Officials.  These individuals are required to attend a two hour briefing on UCNI and are given copies of all UCNI Guidelines they request.  Each Reviewing Official receives an appointment letter, an authority description, and a certificate.  Reviewing Official authority is good until cancelled.

## 
   All employees are responsible for ensuring that documents generated in an UCNI area are reviewed prior to release.

-    All employees are responsible for ensuring that documents generated in an UCNI area are reviewed prior to release.

- Who Decides When a Document Needs to Be Reviewed for UCNI

**Notes:**
Reviewing Officials.
At HQ, OD trains and appoints all Reviewing Officials.  These individuals are required to attend a two hour briefing on UCNI and are given copies of all UCNI Guidelines they request.  Each Reviewing Official receives an appointment letter, an authority description, and a certificate.  Reviewing Official authority is good until cancelled.

## Recognizing UCNI Documents

**NOT FOR PUBLIC DISSEMINATION**
**Unauthorized dissemination subject to civil and criminal sanctions under Section 148 of the Atomic Energy Act of 1954, as amended (42 U.S.C. 2168).**
**Reviewing Official: **________________________________________________** **
**Date: **___________________________________________________________
**Guidance Used: **__________________________________________________

**(Name/Organization)**

**(List all UCNI Guidance used)**

**Recognizing UCNI Documents**

**UNCLASSIFIED CONTROLLED NUCLEAR INFORMATION**

**UCNI**

**or**

**Front Marking**

**Page Marking**

- (If space is limited)

**Notes:**
Documents that contain UCNI should have an UCNI reviewer stamp on the first page.  Additionally, they  would have the words “Unclassified Controlled Nuclear Information” or “UCNI” at the top and bottom of each page.

## Who can Decontrol UCNI?

- UCNI RO when guidance states that the information is no longer UCNI
- SP-50 when guidance to decontrol is not available
- UCNI denying official

## Authorized individual (Government or contractor employee with a need to know). 
Access granted if an authorized individual gives UCNI to another individual authorized for routine access.

Non-U.S. Citizen have more stringent requirements.

Security clearance is not required

See DOE M 471.1-1, page II-2

- Access granted if an authorized individual gives UCNI to another individual authorized for routine access.
- Non-U.S. Citizen have more stringent requirements.
- Security clearance is not required
- See DOE M 471.1-1, page II-2

**Routine Access to UCNI**

**Notes:**
Access to UCNI.
Access to UCNI is limited to authorized Government or contractor employees with a need to know.  Routine access is granted whenever an authorized individual passed the UCNI to another individual.

## Granted to individuals who cannot be authorized routine access.
Requested from and approved by cognizant Secretarial Officer, NNSA Deputy Administrator or Chief of Defense Nuclear Security.
Further dissemination not authorized.
“Special Access Cover Sheet” (DOE F 5639.1) may be used to convey instructions on protection.

- Requested from and approved by cognizant Secretarial Officer, NNSA Deputy Administrator or Chief of Defense Nuclear Security.
- Further dissemination not authorized.
- “Special Access Cover Sheet” (DOE F 5639.1) may be used to convey instructions on protection.

**Special Access**

**Notes:**
Special Access.
Special access can be granted to individuals who are not authorized routine access to UCNI.  A request for Special Access must be approved by the cognizant secretarial officer.  Individuals who are granted special access to UCNI are not authorized to further disseminate this information.  A “Special Access Cover Sheet” is required before transmittal to the individual.

## Internal building security during non-duty hours, may store in unlocked receptacles such as file cabinets, desks, or bookcases 
No internal building security during non-duty hours, must store in a locked cabinet, locked desk drawer, or locked room

- No internal building security during non-duty hours, must store in a locked cabinet, locked desk drawer, or locked room

**Storage**

**Notes:**
Storage.
UCNI does not have to be locked in a safe.  It can be stored out of sight in a limited or exclusion area, or it can be stored in a locked cabinet, locked desk drawer, or locked room.

## Minimum extent necessary 
Originator permission not required 
Ensure markings are on all copies

- Originator permission not required
- Ensure markings are on all copies

**Reproduction**

**Notes:**
Reproduction.
Reproduction of UCNI should be kept to the minimum extent necessary.  All copies should include the appropriate markings.  Originator permission is not required to reproduce UCNI.

## Standard messenger envelope (SF-65B or equivalent) 
Hand carry by authorized individual or individual granted special access

Access must be controlled 

- Hand carry by authorized individual or individual granted special access
- Access must be controlled

**Transmittal -****Inside Facility**

- ●

- ●

- ●

- ●

- ●

- ●

- ●

- ●

**Notes:**
Transmittal - Inside Facility.
Within DOE, UCNI can be transmitted by Holey Joe or hand carried by an authorized individual.

## In a sealed opaque envelope or wrapper
Single wrapped 
No portion of UCNI matter visible outside of wrapper  
Hand carry by authorized individualor person granted special access.

U.S. mail (First Class, Express, Certified, or Registered) 
Commercial carrier

- Single wrapped
- No portion of UCNI matter visible outside of wrapper
- Hand carry by authorized individualor person granted special access.
- U.S. mail (First Class, Express, Certified, or Registered)
- Commercial carrier

**Transmittal -Outside Facility**

**Notes:**
Transmittal - Outside Facility.
Outside the facility, UCNI should be single wrapped in an opaque envelope or wrapper with no portion of UCNI matter distinguishable from the outside.  It can then be hand carried by an authorized individual, mailed through the U.S. Mail system by first class, express, certified, or registered mail, or sent by common carrier service (with signature service).

## Encryption required 
Emergency waivers may be granted by:
HQ:  Director, HQ Security Operations
Field:  Operations Office Manager or Director of Safeguards and Security

**Emergency waivers may be granted by:**
- HQ:  Director, HQ Security Operations
- Field:  Operations Office Manager or Director of Safeguards and Security

**Telecommunications**

**Notes:**
Telecommunications.
UCNI may be discussed over telecommunications circuits using the most secure circuit available.  If you will be using a publicly switched or open format media like the Internet, the data must be encrypted.  This can be waived by facility management when operationally necessary due to an emergency.
UCNI can also be discussed or transmitted over an unprotected telephone or communications circuit when necessary in an emergency.

## Must be protected against unauthorized access (password, access control)

**Computers**

**Notes:**
Computers.
Computers used for UCNI processing must be protected from unauthorized access, either through the use of a password or other access control.

## Any classified method 
Single direction shredder (1/4 inch) 
Plain brown burn bags

- Single direction shredder (1/4 inch)
- Plain brown burn bags

**Disposal**

**Notes:**
Disposal.
UCNI is disposed of using any classified methods, a single direction shredder with no more than 1/4 inch strips, or other controlled access disposal.

## Infraction
Administrative penalty 
Violation
Civil penalty of up to $100,000 
Criminal penalty of
2 years (without intent)
20 years (with intent)

- Administrative penalty
- Violation
- Civil penalty of up to $100,000
- Criminal penalty of
- 2 years (without intent)
- 20 years (with intent)

**Infractions and Violations**

**Notes:**
Infractions and Violations.
Infractions and violations for disclosing UCNI can be severe, ranging from administrative penalties to civil fines up to $100,000 or criminal penalties with prison time ranging from 2 years to 20 years.

##    Official		Use                                       			Only

***   ******O******fficial******	******	******U******se******                                       ******	******	******	******O******nly***

**Notes:**
Let’s take a closer look at Official Use Only.

## What is OUO Information?

- Certain unclassified information that
- Has the potential to damage governmental, commercial, or private interests if released to persons who don’t need it to do their jobs
- Falls under exemptions 2-9 of FOIA

**AND**

## Suite of Directivesissued 4/9/03

**DOE Order 471.3**
**DOE Manual 471.3-1**
**DOE Guide 471.3-1**

- Requirements and responsibilities

- Detailed instructions for implementing requirements

- Assists an employee to decide whether information falls under one of the eight FOIA exemptions

## Who Can Identify OUO Information in Documents?

- Any employee, Federal or contractor, makes OUO determination for unclassified documents
- Originated within his/her office,
- Produced for his/her office, or
- Under the control of his/her office
- No special designation required

## How Are OUO Determinations Made?

- To confirm that information _is_ OUO:
- Must be identified as OUO in **guidance** issued by
- Program office (for use only by program office employees)
- Office of Security and Safety Performance Assurance (SSA) (for use by all DOE/NNSA employees)
- DOE/NNSA contractor (consistent with guidance issued by program office and/or SSA)

## How Are OUO Determinations Made? (Continued)

- If no guidance exists, the employee must determine.
- whether information could harm governmental, commercial, or private interests if given to someone who doesn’t need it to perform his or her job or other DOE-authorized activity, and if
- the information falls under one of the **FOIA exemptions 2-9**.
- If so, information _might_ be OUO.

## What Are the FOIA Exemptions?

- Consult DOE G 471.3-1 for explanation of FOIA exemptions 2-9 and examples.
- Seek assistance if unable to make determination.

## What Are the FOIA Exemptions?

**What Are the FOIA Exemptions?**

## Bottom line

- _NO_ GUIDANCE
- &
- _NO_ FOIA EXEMPTION
- means
- _NOT_ OUO

## OUO Document Marking

- Markings on Document are for training purposes only

-  List exemption   number and category
-  Name/Organization
-  Guidance if used

**Notes:**
Documents that contain OUO information will be marked as “Official Use Only” or OUO on the front page of the document.  There should also be a stamp identifying the person who made the OUO determination and why it was made.  However, don’t be surprised if this stamp is not there.

## OUO Stamp (Determination Based on Guidance)

*NOTE:  Exemption numbers and associated category names listed in DOE M 471.3-1, paragraph 3a *

## OUO Stamp (Determination Not Based on Guidance)

**OUO Stamp ****(****Determination **_**Not**_** Based on Guidance)**

## Page Markings

- OFFICIAL USE ONLY
- On bottom of _all_ pages
- 			**OR**
- On bottom of only those
- pages containing OUO
- information

- XXXXX  XX  X  XXXXXX   XXX
- XX  XXXXXXXXXX   XXXXXXXX
- XXXXXXXXX.
- XX  XXXXXXX   XXXXX   XXXX
- XXXXXXXXX  XX  XXXXXX.   XX
- XXXX  XXXXXXX  X   XXXXX
- XXXXXX  XXXX  XXXX.
**OFFICIAL USE ONLY**

## Supplemental Markings on OUO Documents

- Mentioned in Order (paragraph 4i)
- Markings based on law, regulation, or other DOE directive that convey additional advice on handling or access restrictions
- Examples:
- Protected CRADA Information
- Export Controlled Information
- Source Selection Information – See FAR 2.101 and 3.104

## OUO Document Sample Marking

-    XXX XXXXXX  XX XXXXXXX
- XXXXX XXXXXXXXXXXX XXXXXX
- _XXXXXXX_.  Xxxx xxxxxx xxxxxxxxx xxx xxxxxxxx xxxx xxxxxxx xxxxxxxxx xxx xxxxxxxxxxx, xxxxxxx, xxx xxxxxxxxxx Xxxxxxxx Xxx Xxxx (XXX) xxxxxxxxxxx.  Xxxxx xxxxxxxx xxxxxxx xxxxxxxxx xxxxxxxxxx xxx xxxxxxxxxx xxxxxxxxx.  Xxxxxxx X xxxxxxxxx xxx xxxxxxxxxxxx xxx xxxxxxxxxxx xxx xxxxxxx XXX xxxxxxxxxxx; Xxxxxxx XX xxxxxxxxx xxxxxxxxxx XXX xxxxxxxxxxx.  Xxx Xxxxxxxxxx Xxxxxxxxxxxx Xxxxxxxx (XXX), Xxxxxxxxxx x, xxxx xxxxx xxxxxxxxxxxx xx xxx Xxxxxx xxx xxxxx xx xxx/xxxxxxxx xxxxxxxxxx xxxxxxxxxxx.
- XXXXXXX.  Xxxxxxxx xxxxxxxxxx xxxx Xxxxxx xxxxxx xx xxxxxxxxx xx Xxxxxxxxxxx Xxxxxxxxxxxxxx xxx Xxxxxxx Xxxxxx xx xxx-xxx-xxxx.

**OFFICIAL USE ONLY**

- Protected CRADA Information

## Who Can Remove OUO Markings?

- If markings applied **based on guidance**
- Removed by any employee
- When guidance specifies information is no longer OUO

## Who Can Remove OUO Markings?

- If markings applied **based on FOIA exemptions**
- Employee who initially applied markings
- That employee’s supervisor
- FOIA Authorizing Official who approves release of document requested under FOIA

## How are Markings Removed?

- Person making determination:
- Crosses out OUO front, page, and any supplemental markings
- Places following marking on front of document:

- DOES NOT CONTAIN
- OFFICIAL USE ONLY INFORMATION
- Name/Org: _   Michael Kieszkowski, IM-40   _  Date:  __4/30/03__

## How Do I Mark a Document Transmitting OUO?

- Required if transmittal document itself does not contain classified or controlled information
- Calls attention to presence of OUO information in attachment

- Document transmitted
- contains OUO information

## Sample Marking of Document Transmitting OUO

-    XXX XXXXXX  XX XXXXXXX
- XXXXX XXXXXXXXXXXX XXXXXX
- _XXXXXXX_.  Xxxx xxxxxx xxxxxxxxx xxx xxxxxxxx xxxx xxxxxxx xxxxxxxxx xxx xxxxxxxxxxx, xxxxxxx, xxx xxxxxxxxxx Xxxxxxxx Xxx Xxxx (XXX) xxxxxxxxxxx.  Xxxxx xxxxxxxx xxxxxxx xxxxxxxxx xxxxxxxxxx xxx xxxxxxxxxx xxxxxxxxx.  Xxxxxxx X xxxxxxxxx xxx xxxxxxxxxxxx xxx xxxxxxxxxxx xxx xxxxxxx XXX xxxxxxxxxxx; Xxxxxxx XX xxxxxxxxx xxxxxxxxxx XXX xxxxxxxxxxx.  Xxx Xxxxxxxxxx Xxxxxxxxxxxx Xxxxxxxx (XXX), Xxxxxxxxxx x, xxxx xxxxx xxxxxxxxxxxx xx xxx Xxxxxx xxx xxxxx xx xxx/xxxxxxxx xxxxxxxxxx xxxxxxxxxxx.
- XXXXXXX.  Xxxxxxxx xxxxxxxxxx xxxx Xxxxxx xxxxxx xx xxxxxxxxx xx Xxxxxxxxxxx Xxxxxxxxxxxxxx xxx Xxxxxxx Xxxxxx xx xxx-xxx-xxxx.

## Sample Marking of OUO Transmittal a Classified Document 

-    XXX XXXXXX  XX XXXXXXX
- XXXXX XXXXXXXXXXXX XXXXXX
- _XXXXXXX_.  Xxxx xxxxxx xxxxxxxxx xxx xxxxxxxx xxxx xxxxxxx xxxxxxxxx xxx xxxxxxxxxxx, xxxxxxx, xxx xxxxxxxxxx Xxxxxxxx Xxx Xxxx (XXX) xxxxxxxxxxx.  Xxxxx xxxxxxxx xxxxxxx xxxxxxxxx xxxxxxxxxx xxx xxxxxxxxxx xxxxxxxxx.  Xxxxxxx X xxxxxxxxx xxx xxxxxxxxxxxx xxx xxxxxxxxxxx xxx xxxxxxx XXX xxxxxxxxxxx; Xxxxxxx XX xxxxxxxxx xxxxxxxxxx XXX xxxxxxxxxxx.  Xxx Xxxxxxxxxx Xxxxxxxxxxxx Xxxxxxxx (XXX), Xxxxxxxxxx x, xxxx xxxxx xxxxxxxxxxxx xx xxx Xxxxxx xxx xxxxx xx xxx/xxxxxxxx xxxxxxxxxx xxxxxxxxxxx.
- XXXXXXX.  Xxxxxxxx xxxxxxxxxx xxxx Xxxxxx xxxxxx xx xxxxxxxxx xx Xxxxxxxxxxx Xxxxxxxxxxxxxx xxx Xxxxxxx Xxxxxx xx xxx-xxx-xxxx.

**SECRET**

**SECRET**

## How Do I Mark An E-mail Message?

- First line of message, insert “OUO” before text
- If attachment to message is OUO:
- Message must so indicate
- Attachment must be marked correctly

## Marking Exceptions – Restricted Access Files

- No OUO marking required:
- When in such files
- If removed temporarily for reference, inventory, etc., and access remains restricted
- Review and OUO marking required:
- If removed and not to be returned
- If copied and copy is not maintained in a restricted access file

## Marking Exceptions – Generated Before Directive Issued

- No review required unless to be publicly released
- Determination made by anyone in organization that currently has cognizance over information in document

## Protection Requirements

- Apply to:
- DOE OUO documents
- Other-agency documents with equivalent markings

**FOUO**

**LOU**

**SBU**

## Who May Have Access?

- Anyone needing the information to perform his/her job or other DOE-authorized activity
- Determination made by _person possessing_ document – _not person wanting_ the document
- No security clearance required

## How Do I Protect?

- In Use
- Take reasonable precautions to prevent access by persons who don’t need the information to do their jobs
- For example, don’t read an OUO document in a public place (in the cafeteria, on public transportation)

## How Do I Protect?

- Storing
- With internal building security during non-duty hours – Unlocked file cabinet, desk, briefcase, etc.
- No internal building security during non-duty hours – Locked room or locked file cabinet, desk, briefcase, etc.

## How Do I Protect?

- Copying
- No permission from originator needed
- Make minimum number of copies
- Mark and protect copies

## How Do I Protect?

- Destroying
- Strip-cut shredder with strips no more than 1⁄4” wide
- Any other method approved by local security office

## How Can I Transmit?

- Transmitting by mail
- Place in sealed, opaque envelope or wrapping with recipient’s address, return address, and “TO BE OPENED BY ADDRESSEE ONLY” on outside
- For delivery outside of facility
- U.S. mail – First Class, Express, Certified, Registered
- Any commercial carrier

## How Can I Transmit?

- Transmitting by hand between facilities or       within a facility
- May be hand-carried
- Must control access to document

## How Can I Transmit?

- Transmitting over telecommunications circuits
- Use encryption whenever possible
- If encryption unavailable and mailing not a feasible alternative, regular e-mail or fax allowed
- If unencrypted fax, call recipient prior to sending to ensure control upon receipt
- If unencrypted e-mail, may put OUO information in a password-protected word processing file, attach to message, and call recipient with password

## How Can I Transmit?  

- Transmitting over voice circuits
- Use encryption whenever possible
- If unavailable and other encrypted means not feasible alternative, regular voice circuits allowed

## How Can I Process on Computer?

- Computer system must provide methods to prevent access by unauthorized persons
- Authentication
- File access controls
- Passwords

## Penalties

- Imposed if person
- _Intentionally_ releases OUO information from document marked “OUO”
- _Intentionally_ or _negligently_ releases an OUO document
- _Intentionally_ does not mark a document known to contain OUO information
- _Intentionally_ marks a document “OUO” known not to contain OUO information

## Penalties

- Examples of penalties (DOE 3750.1)
- Verbal admonishment
- Written reprimand
- Suspension
- Termination

## Contact for Additional Information

- OUTREACH HOTLINE
- Phone: (301) 903-7567
- E-mail: outreach@hq.doe.gov