UD of Classified Info & CUI

Question 1

Definition of (unauthorized disclosure) UD

Answer 1

Communication or physical transfer of classified information or controlled unclassified information (CUI) to an unauthorized recipient

Question 2

Unauthorized recipient

Answer 2

Does not apply to Controlled Unclassified Information (CUI), see DoDI 5200.48

Question 3

Types of UD

Answer 3

Public domain: release of classified info to pubic (podcasts, print, etc.)

Data spills: willful, negligent, and inadvertent disclosure of classified information or CUI transferred onto an information system not authorized

Espionage: Activates designed to obtain, deliver, communicate or transmit classified info or CUI intended to aid a foreign power

Improper safeguarding of information: using inappropriate measures and controls to protect classified information or CUI

Question 4

Whistleblower Protection Enhancement Act (WPEA)

Answer 4

WEPA: used for an employee to provide evidence on (Five DoD statutes: abuse of authority, substantial danger to public health or safety, gross mismanagement, gross waste of funds, violation of law/rule/reg. Individual provides the right info to the right people while protecting national security from UD.

Question 5

Misconceptions of UD

Answer 5

CUI appearing in public domain (classified even if released)

Journalist privilege: Employees cannot be protected by journalist protection of confidential sources if they give classified information or CUI

Defense Office of Prepublication and Security Review (DOPSR): publications have to go through here

NDA applies for life

Question 6

EO 13526, DoDM 5200.01

Answer 6

provides guidance for safeguarding classified information from UD

Question 7

Classification Types

Answer 7

Original Classification: Initial determination that info needs protection because its disclosure could reasonably be expected to cause identifiable or describable damage to national security.

Derivative Classification: Incorporating, paraphrasing, restating, or generating in new form information that is already classified and marking the newly developed material consistent with the classification markings that apply to the source information.

Question 8

Prepublication review

Answer 8

Has to go through DOPSR

Resume and cover letters are not sent to DOPSR

Question 9

Public Affairs Office

Answer 9

PAO–they do not review content for classified info or CUI.

Question 10

8 Steps of reporting a security incident

Answer 10

Applies to everyone
Safeguard
Report

Applies to FSO:
Inquire
Investigate
Evaluate
Elevate
Correct

Applies to everyone:
Sanction