Derivative classifiers carry the responsibility of taking existing classified information and incorporating, paraphrasing, restating, or generating it into new material while preserving its protection. Understanding what is required to perform this function is essential for compliance with federal and Department of Defense standards. A common point of confusion in security training centers on the specific prerequisites mandated for individuals before they can apply classification markings.
When examining the foundational prerequisites for handling derivative materials, professionals must possess a valid security clearance, complete formal derivative classification training, and establish a legitimate need-to-know. However, they do not require Original Classification Authority (OCA). Recognizing this distinction protects national security integrity and ensures accountability across federal agencies and defense contractors.
Core Prerequisites for Derivative Classifiers
Before anyone can generate derivative documents or apply classification markings to new files, three vital criteria must be met. These safeguards prevent unauthorized exposure and ensure that sensitive data remains restricted to cleared personnel.
- Security Clearance: You must hold an active security clearance commensurate with the highest level of classification contained in the source material you're using. If you're working with Secret or Top Secret data, your clearance must match or exceed that threshold.
- Derivative Classification Training: Personnel cannot simply start marking documents. Federal guidelines require completing formal training—typically administered through the Center for Development of Security Excellence (CDSE)—before taking on these duties. This training must be renewed periodically to stay current with evolving standards.
- Need-to-Know: Possessing a clearance isn't enough on its own. You must also have a specific, work-related requirement to access the exact information contained in the source documents to perform your official duties.
The One Criterion Not Required: Original Classification Authority
The single element that derivative classifiers do not need is Original Classification Authority (OCA).
An OCA is an official specifically designated by the President, agency heads, or other authorized officials to make the initial determination that information requires protection in the interest of national security. OCAs create new classified categories and determine initial declassification dates.
Derivative classifiers, by contrast, do not have the power to make initial classification decisions. Instead, their job is strictly mechanical and analytical: they take already-classified facts and apply existing guidance—such as Security Classification Guides (SCGs) or source document markings—to new work. You're executing an established policy, not inventing new classification boundaries.
Responsibilities of a Derivative Classifier
Once qualified, a derivative classifier must adhere to strict operational duties to maintain information security compliance. Failing these steps can lead to security violations or compromise sensitive operations.
- Consulting Authorized Sources: You must rely exclusively on authorized sources, such as source documents with proper portion markings or approved SCGs. Relying on memory or unverified assumptions is strictly prohibited.
- Carrying Forward Markings: When you incorporate classified facts into a new document, you must ensure that all relevant classification markings—including downgrading and declassification instructions—are accurately transcribed to the new product.
- Using Portion Markings: Every paragraph, section, and sometimes sentence in a classified document must be marked to indicate its exact classification level (e.g., Confidential, Secret, Top Secret, or Unclassified). This allows future readers to extract portions safely.
- Resolving Ambiguity: If source documents conflict or guidance is unclear, you cannot guess. You must seek assistance from the originating agency or your security manager before finalizing the document.
Common Mistakes in Derivative Classification
Even experienced professionals occasionally stumble when applying derivative rules. Avoiding these frequent missteps protects your organization from compliance audits and security infractions.
- Over-Classification: Adding higher classification markings than the source material warrants out of an abundance of caution. Every classification decision must tie directly back to an authorized source document or guide.
- Improper Declassification Instructions: Forgetting to calculate and include the correct "Declassify On" line. Derivative documents must inherit the declassification instructions of their sources, or follow the instructions specified in the applicable SCG.
- Failing to Identify Multiple Sources: When a new document draws data from two or more classified sources, you must include a comprehensive source list and combine markings properly, rather than attributing the entire product to just one reference.
Frequently Asked Questions
What happens if I make a mistake while applying derivative classification?
Mistakes are treated as security infractions or violations depending on their severity. You must report errors immediately to your facility security officer (FSO) so the document can be retrieved, corrected, or properly destroyed if necessary.
Can a contractor act as a derivative classifier?
Yes. Cleared defense contractors can perform derivative classification as long as they meet the training, clearance, and need-to-know criteria, and their contract requires them to generate classified deliverables.
How often must derivative classification training be renewed?
Under current Department of Defense guidelines, training is generally required at least once every two years, though individual agencies or specific contractor facilities may enforce a more frequent annual schedule.
Where can I find official guidance for marking classified documents?
Official instructions and manuals are published by the Information Security Oversight Office (ISOO) and the Department of Defense, detailing exact standards for portion marking, banner lines, and source attribution.
