The OSY InfoSec Program is responsible for providing and ensuring compliance with several types of briefings and training to Department employees, contractors and affiliates who are granted access to Classified National Security Information (CNSI). 

Executive Order 13526 and 32 CFR part 2001 and 2003 provide the guidelines for required classification management training. All personnel who work with classified information must receive an active security clearance. The clearance is activated after initial CNSI training and signing a nondisclosure agreement (NDA) known as an SF-312. Additional requirements for all individuals that work with CNSI include annual refresher training, derivative classification training, annual training for original classification authorities and Sensitive Compartmented Information refresher training that depends on duties.

Security briefings are scheduled for initial clearance activation at the Herbert C. Hoover Building (HCHB). Contact InfoSec for the date, time and location. For personnel located outside of HCHB, please contact your Field Security Office.

Initial CNSI/Derivative Classification and Annual Refresher Training

After NSI access approval and before such access occurs, confirm the need-to-know basis and conduct a briefing about proper information management. It should cover dissemination, safeguarding and storage with a signed SF 312.

Initial CNSI Training and refresher training should cover:

• Basic security policies in E.O. 13526, Sec. 4.1 / 32 CFR 2001.71(b)
• Principles of E.O. 13526, Sec. 1.7
• Criminal, civil and administrative penalties in E.O. 13526, Sec. 5.5 
• Best Practices

An individual completes an NDA and initial CNSI training to activate their access to classified information after his or her clearance is adjudicated. The annual refresher training is required to maintain an active security clearance.

The initial CNSI training includes derivative classification responsibilities. Incorporation, paraphrasing and restating of information that is already classified are examples of derivative classification actions that regularly occur in CNSI handling. CNSI training can help prevent the loss and unauthorized disclosures of information that may damage the national security of the United States.

CNSI References:

• Principles of derivative classification (E.O. 13526, Sec. 2.1)
• Classification levels (E.O. 13526, Sec. 1.2)
• Duration of classification (E.O. 13526, Sec. 1.5 / 32 CFR 2001.12)
• Identification and markings (E.O. 13526, Sec. 1.6 / 32 CFR 2001 Subpart C)
• Classification prohibitions and limitations (E.O. 13526, Sec. 1.7)
• Sanctions (E.O. 13526, Sec. 5.5)
• Classification challenges (E.O. 13526, Sec. 1.8 / 32 CFR 2001.14)
• Security classification guides (E.O. 13526, Sec. 2.2 / 32 CFR 2001.15)

Original Classification Authority (OCA) Training

Information related to one of the categories of information identified by Executive Order (E.O.) 13526, the loss or unauthorized disclosure of which has been determined, would damage U.S. national security that has not previously been classified, i.e., information which is not derivative must be classified. Such information, however, may only be classified by an individual who, by position, has been designated an OCA. Before an individual is designated as an OCA, they must complete the initial OCA training. The Information Security Division, which provides OCA training for the Department, can be reached at osy_infosec@doc.gov.

• Classification standards (E.O. 13526, Sec. 1.1 / 32 CFR 2001.10)
• Classification levels (E.O. 13526, Sec. 1.2)
• Classification Authority (E.O. 13526, Sec. 1.3)
• Classification Categories (E.O. 13526, Sec. 1.4)
• Duration of Classification (E.O. 13526, Sec. 1.5 / 32 CFR 2001.12)
• Identification and Markings (E.O. 13526, Sec. 1.6 / 32 CFR 2001 Subpart C)
• Classification prohibitions and limitations (E.O. 13526, Sec. 1.7)
• Sanctions (E.O. 13526, Sec. 5.5)
• Classification challenges (E.O. 13526, Sec. 1.8 / 32 CFR 2001.14)
• Security classification guides (E.O. 13526, Sec. 2.2 / 32 CFR 2001.15)
• Information sharing

Security Debriefing

As clearances belong to a position, not the employee, employees separating from the Department for any reason—retirement, resigning, transitioning to a new agency—must receive a security debriefing. The debriefing requires an endorsement of the Security Debriefing Acknowledgement portion of the SF-312. If a person is moving into a new position within the Department that does not require access to classified information, they are debriefed. Contact your servicing Field Security Office to schedule a debriefing.