Information Security Oversight Office (ISOO)

Home > Information Security Oversight Office (ISOO) > Frequently Asked Questions > Original Classification Authority & Derivative Classification

Original Classification Authority & Derivative Classification

 

 

1. Is the statement, "original classification authority may extend the duration of classification up to 25 years from the date of the origin of the document" intended to allow an Original Classification Authority (OCA) to extend declassification for another 25 years (total 50 years)?

  • There is no intent to allow an OCA to extend classification for another 25 years. This clause relates to the information initially classified for less than 25 years. An OCA may extend the classification up to 25 years from the date of origin of the document. For example, on a document created on April 13, 2005, with a declassification date of April 13, 2015, an OCA may extend the duration of classification up to April 13, 2030.

 

2. Must anyone who creates derivative work be pre-designated as "authorized" to do so and if so, at what level should the training be?

  • No, there is no requirement in E.O. 13526 (the Order) to "pre-designate" an individual. Every agency determines the degree of training required with guidance that is provided in 32 CFR Part 2001.70.

 

3. If an agency is delegated original classification authority (OCA) from another agency (e.g. the ODNI delegating OCA authority to NRO), which agency reports to the Director of ISOO in accordance with the Memorandum for the Heads of Executive Departments and Agencies? Is the ODNI to report, or NRO, or both?

  • The agency that delegates the authority reports the delegation.

 

4. Who can derivatively mark documents?

  • Anyone who has a security clearance and access to classified information as part of their job or who is working in a classified environment has derivative authority. They must also have the required derivative training at a minimum every 2 years. 
  • Center for Development of Security Excellence (CDSE) offers training that meets the requirements of E.O. 13526 and job aids. ISOO also has a derivative classification video. 

 

5. Who is responsible for providing (OCA) training to those designated specifically by the President?

  • Those who are responsible to the Senior Agency Official for the implementation of the program should provide the required training to the OCAs and everyone else in the organization.

 

 

Top