Which Of The Following Statements Concerning Derivative Classification Is True

Understanding Derivative Classification: Separating Fact from Fiction

Derivative classification is a cornerstone concept within the United States government's information security framework, yet it is frequently misunderstood. At its heart, derivative classification is the process of determining the classification level for information that is derived from, incorporated into, or summarized from already classified source material. The fundamental rule is unequivocal: the derivative product must bear at least the same level of classification as the highest classification level of the source material it is based upon. This principle ensures the consistent protection of national security information across all documents and products. Therefore, the true statement concerning derivative classification is that the classification of the derivative document cannot be lower than the highest classification of the source material it incorporates. All other common statements that suggest flexibility, independent judgment on the content's sensitivity, or the ability to "downgrade" based on personal analysis are categorically false. This article will dissect this core truth, explore the mechanics of the process, and clarify pervasive misconceptions.

The Foundational Principle: The "Source Material" Rule

The entire edifice of derivative classification rests on a single, non-negotiable mandate. When a creator, editor, or compiler generates a new document—be it a report, briefing, email, or database entry—and incorporates any portion of pre-existing classified information, the new document inherits the classification of that source material. This is not a suggestion; it is a legal and regulatory requirement under Executive Order 13526 and implementing directives from the Information Security Oversight Office (ISOO).

• The "Highest Classification" Standard: If a new report quotes a paragraph from a Secret document and a sentence from a Confidential document, the entire new report must be classified as Secret. The derivative classifier does not have the authority to assess the context or combined sensitivity of the information and assign a lower level. The rule is based on the source, not the derivative's perceived sensitivity.
• Incorporation is Broad: "Incorporation" is interpreted expansively. It includes direct quotations, paraphrases, summaries, and even detailed references that reveal the substance of classified information. If the new work allows a reader to reconstruct the essence of the classified source, it is considered incorporated and must be classified accordingly.
• Original vs. Derivative Authority: This rule highlights the critical distinction between Original Classification Authority (OCA) and derivative classification. Only an individual with OCA (a designated senior official) can initially classify information based on an original evaluation of its content against classification criteria. A derivative classifier has no such authority; their role is purely mechanical and administrative—to apply the classification from the authorized sources they use.

Common Misconceptions: Evaluating "False" Statements

To solidify understanding, it is essential to examine statements that are often mistaken as true but are, in fact, violations of the core principle.

Misconception 1: "I can classify the derivative document based on my own judgment of its overall sensitivity." This is false. The derivative classifier's judgment is confined to identifying all classified source materials used. Their personal opinion on whether the combination of facts seems more or less sensitive is irrelevant. The classification is derived, not original. If the sources are Secret, the product is Secret, full stop.

Misconception 2: "If I only use a small amount of classified information, I can classify the rest of the document at a lower level or leave it unclassified." This is a dangerous fallacy. Classification is not additive by paragraph. The document as a whole is classified at the level of its highest classified component. A single classified sentence in an otherwise unclassified memo renders the entire memo classified at that level. Portions that are not derived from classified sources do not "pull down" the classification of the classified portions.

Misconception 3: "I can declassify information in my derivative document if I believe it is now publicly available or has lost its sensitivity." Absolutely false. Derivative classifiers have no declassification authority. Only the original classification authority (or a successor with delegated OCA) can declassify information. A derivative classifier must preserve the classification markings from the source material. If there is a question about whether source material should be declassified, the derivative classifier must consult the originating agency or hold the document at the source classification level until an official determination is made.

Misconception 4: "Classification decisions are a matter of personal interpretation and can vary." This contradicts the purpose of a standardized system. Derivative classification is a deterministic process. It follows a clear checklist: 1) Identify all source materials. 2) Determine the highest classification level among those sources. 3) Apply that level to the new document. 4) Apply all applicable classification caveats (e.g., NOFORN, ORCON) and dissemination limitations from the source material. There is no room for interpretive variance in this administrative step.

The Step-by-Step Process of Proper Derivative Classification

Executing derivative classification correctly requires a disciplined, methodical approach:

1. Source Identification: Before writing, compile a list of all source materials to be used—previous reports, data extracts, briefings, etc. Verify their current classification level and any associated markings.

2. Determine the Highest Level: Scan the list and identify the single highest classification level (Top Secret, Secret, Confidential). This becomes the baseline for your new document.

3. Incorporate All Caveats: Examine the source materials for any mandatory dissemination or handling restrictions (e.g., NOFORN - not for foreign nationals, NOCONTRACT - no contractors). These "caveats" must be carried forward to the derivative document

4. Mark the Document Prominently and Accurately: Apply the determined classification level and all inherited caveats to the document's header, footer, and each page. The marking must be unambiguous (e.g., "TOP SECRET//NOFORN"). If the document contains both classified and unclassified material, clearly delineate the classified portions and apply the overall classification to the entire document, as established by the highest component.

5. Handle Unclassified Material with Precision: Any portion of the derivative document not sourced from classified material must still be evaluated. If it is truly public domain or independently generated unclassified information, it does not lower the document's overall classification. However, it must be clearly separable (e.g., in a distinct section or annex) to avoid the false impression that the entire document is unclassified. The default remains that the document is classified at the highest level of its sourced content.

Conclusion

Derivative classification is not an act of personal judgment or editorial discretion; it is a precise, administrative duty with profound implications for national security. The process is a mechanical application of source authority, requiring the classifier to function as a careful conduit, not an originator. The core principles are immutable: the whole inherits the classification of its highest part, caveats are binding, and declassification is not within the derivative classifier's purview. Adherence to this systematic protocol ensures consistency, prevents unauthorized disclosure, and maintains the integrity of the classification system itself. Ultimately, proper derivative classification is a foundational element of responsible information stewardship, where procedural fidelity directly safeguards the assets and personnel it is designed to protect.

Continued

6. Address Compiling Information: When combining information from multiple sources with differing classification levels, always default to the highest level present. It’s tempting to attempt a “lowest common denominator” approach, but this is a critical error. The presence of even a single paragraph marked “Secret” necessitates classifying the entire document as “Secret,” even if the majority is unclassified or “Confidential.” This principle extends to charts, graphs, and tables – if any data point within them is classified, the entire visual representation is classified at that level.

7. Exercise Caution with Summarization & Paraphrasing: Simply re-writing classified information does not declassify it. Summarization, paraphrasing, or abstracting classified data still results in classified information. The derivative classifier must apply the original classification markings to the newly worded content. In fact, paraphrasing can sometimes increase risk, as a less precise formulation might inadvertently reveal sensitive details not explicitly stated in the original source.

8. Seek Guidance When Uncertain: Derivative classification can be complex, particularly when dealing with nuanced caveats or ambiguous source markings. When in doubt, always consult with a qualified security professional or the originating agency’s classification authority. It is far better to err on the side of caution and over-classify than to risk an unauthorized disclosure. Documenting the consultation and the rationale for the classification decision is also crucial for accountability.

9. Maintain a Record of Derivative Classification Actions: A log or record of derivative classification actions is essential. This should include the original source document(s), the classification level assigned to the derivative document, the caveats applied, and the date of the classification decision. This record serves as an audit trail and demonstrates due diligence in adhering to classification guidelines.

Ultimately, proper derivative classification is a foundational element of responsible information stewardship, where procedural fidelity directly safeguards the assets and personnel it is designed to protect.