Podcast
Questions and Answers
What is unauthorized disclosure?
What is unauthorized disclosure?
The communication or physical transfer of classified or controlled unclassified information to an unauthorized recipient.
What three requirements must authorized recipients meet to access classified information?
What three requirements must authorized recipients meet to access classified information?
- A favorable determination of eligibility at the proper level for access. 2. A need-to-know for access. 3. Signed an SF-312, Classified Information Nondisclosure Agreement (NDA).
What is unauthorized disclosure of classified information characterized as?
What is unauthorized disclosure of classified information characterized as?
A type of security incident that can be characterized as an infraction or violation.
In what ways can unauthorized disclosure of classified information occur?
In what ways can unauthorized disclosure of classified information occur?
What are leaks in the context of unauthorized disclosure?
What are leaks in the context of unauthorized disclosure?
What are spills regarding unauthorized disclosure of classified information?
What are spills regarding unauthorized disclosure of classified information?
What is the most common way that spills happen?
What is the most common way that spills happen?
What real danger does posting unclassified defense and U.S. Government information data elements to public sites pose?
What real danger does posting unclassified defense and U.S. Government information data elements to public sites pose?
What does espionage include?
What does espionage include?
Is classified information in the public domain still classified?
Is classified information in the public domain still classified?
What are cleared personnel legally bound not to do regarding classified information?
What are cleared personnel legally bound not to do regarding classified information?
What must be done if a cleared employee views classified information online?
What must be done if a cleared employee views classified information online?
What misconception exists regarding cleared employees and unauthorized disclosure protection?
What misconception exists regarding cleared employees and unauthorized disclosure protection?
What potential impacts can unauthorized disclosure of classified information have?
What potential impacts can unauthorized disclosure of classified information have?
What is the potential damage caused by the unauthorized disclosure of Confidential information?
What is the potential damage caused by the unauthorized disclosure of Confidential information?
What could be the outcome of the unauthorized disclosure of Secret information?
What could be the outcome of the unauthorized disclosure of Secret information?
What could happen if Top Secret information is disclosed without authorization?
What could happen if Top Secret information is disclosed without authorization?
When must classified information be handled properly?
When must classified information be handled properly?
Where must classified information be stored?
Where must classified information be stored?
What are the requirements for protecting classified information when using social networking services according to DoD Manual 5200.01?
What are the requirements for protecting classified information when using social networking services according to DoD Manual 5200.01?
What should you never publicly acknowledge?
What should you never publicly acknowledge?
Who should you refer all media to?
Who should you refer all media to?
What does public release include?
What does public release include?
What should you remember about prepublication review?
What should you remember about prepublication review?
What must you never submit for prepublication review?
What must you never submit for prepublication review?
Who should you engage with when dealing with the news media?
Who should you engage with when dealing with the news media?
What is the first step if you see or suspect unauthorized disclosure of classified information?
What is the first step if you see or suspect unauthorized disclosure of classified information?
What should you do if you see or hear about suspected classified information in the media?
What should you do if you see or hear about suspected classified information in the media?
What must you do if a classified data spill occurs?
What must you do if a classified data spill occurs?
What are the steps to isolate and contain a data spill?
What are the steps to isolate and contain a data spill?
What is the final step in handling a data spill?
What is the final step in handling a data spill?
What is the next step after responding to actual or suspected unauthorized disclosure?
What is the next step after responding to actual or suspected unauthorized disclosure?
If you are a DoD employee, to whom should you report a security incident?
If you are a DoD employee, to whom should you report a security incident?
If you are a cleared contractor, to whom should you report a security incident?
If you are a cleared contractor, to whom should you report a security incident?
What must DoD security managers do regarding classified data spills?
What must DoD security managers do regarding classified data spills?
What must all serious security incidents be reported to?
What must all serious security incidents be reported to?
What type of incidents must be reported to OUSD(I)?
What type of incidents must be reported to OUSD(I)?
What action must DoD report to Congress?
What action must DoD report to Congress?
What must the OUSD(I) report to Congress?
What must the OUSD(I) report to Congress?
What must the Secretary of Energy report to Congress?
What must the Secretary of Energy report to Congress?
What happens after reporting a security incident?
What happens after reporting a security incident?
Who initiates the investigation for DoD incidents?
Who initiates the investigation for DoD incidents?
If responsibility for investigating unauthorized public media disclosure is unclear, who refers the matter?
If responsibility for investigating unauthorized public media disclosure is unclear, who refers the matter?
What does the FSO do for cleared companies?
What does the FSO do for cleared companies?
Who does the FSO notify after discovering an unauthorized disclosure?
Who does the FSO notify after discovering an unauthorized disclosure?
What may happen after the investigation is conducted regarding unauthorized disclosure?
What may happen after the investigation is conducted regarding unauthorized disclosure?
Who conducts a damage assessment in response to unauthorized disclosure?
Who conducts a damage assessment in response to unauthorized disclosure?
What must be conducted for all incidents of unauthorized disclosure?
What must be conducted for all incidents of unauthorized disclosure?
What are potential penalties for unauthorized disclosure of classified information?
What are potential penalties for unauthorized disclosure of classified information?
Who should cleared contractor employees report suspected incidents of unauthorized disclosure to?
Who should cleared contractor employees report suspected incidents of unauthorized disclosure to?
Study Notes
Unauthorized Disclosure Overview
- Unauthorized disclosure involves communicating classified or controlled unclassified information to unauthorized recipients.
- It can occur as a security incident classified as an infraction or violation based on severity.
Authorized Recipients
- Individuals must meet eligibility criteria for accessing classified information:
- A favorable determination of eligibility at the proper access level.
- A demonstrated "need-to-know" for information access.
- Signing an SF-312 Classified Information Nondisclosure Agreement (NDA).
Methods of Unauthorized Disclosure
- Disclosure can be intentional or accidental, through means such as leaks, spills, espionage, and failure to adhere to proper procedures.
- Leaks refer to deliberate information leaks to media outlets.
- Spills involve potential compromises of information involving systems and are treated cautiously until assessed.
Risks and Precautions
- Posting unclassified information on public platforms can lead to classified compilations, jeopardizing national security.
- Cleared personnel cannot confirm or acknowledge classified information in the public domain without consequences.
- If classified information is viewed online inadvertently, it must be reported and contained as a data spill.
Reporting and Response
- Unauthorized disclosures must be reported promptly to relevant authorities.
- DoD employees should report incidents to their security managers; cleared contractors should contact their Facility Security Officers (FSOs).
Investigation and Consequences
- An investigation follows a reported incident, determining causation and responsibility.
- Possible sanctions for unauthorized disclosure include loss of pay, rank, job, or criminal prosecution.
Damage Assessment
- A damage assessment must be conducted for all unauthorized disclosure incidents to evaluate impacts on national security.
- Serious incidents must be reported to Congress, with possible involvement from the Director of National Intelligence and the Federal Bureau of Investigation.
Social Media and Public Release Guidelines
- Information shared on social media or public platforms requires the same protection as classified information across all media.
- All requests for public disclosures, including speeches and publications, must undergo prepublication review.
Studying That Suits You
Use AI to generate personalized quizzes and flashcards to suit your learning preferences.
Description
Test your understanding of unauthorized disclosure of classified information. This quiz covers the criteria for authorized recipients, methods of disclosure, and associated risks. Assess your knowledge on how classified information can be compromised and the precautions necessary to prevent breaches.