Attachment 0028 - PEO CSCSS Armoring SCG.pdf

ISSUED BY:

Security Classification Guide (SCG)

COMBAT SUPPORT AND COMBAT SERVICE SUPPORT

ARMORING SYSTEMS

Program Executive Officer Combat Support & Combat Service Support 6501 E. 11 Mile Road Warren, Ml 48397

APPROVED BY:

Program E ecutive Officer, Combat Support & Combat Service Support

EFFECTIVE DATE: 7 NOV 2017

DISTRIBUTION STATEMENT C: Distribution authorized to US Government Agencies and their contractors. Date of determination is date of document creation. For other Armoring Systems SCG requests send to: SFAE-CSS/Security, 6501 E. 11 Mile Road, MS 332, Warren, Ml 48397-5000, COM (586) 282-8448, DSN 786-8448.

WARNING - This document contains technical data whose export is restricted by the Arms Export Control Act (Title 22, U.S.C., Sec 2751, et seq.) or the Export Administration Act of 1979 (Title 50, U.S.C., App 2401 et seq.), as amended. Violations of these export laws are subject to severe criminal penalties. Disseminate in accordance with provisions of DoD Directive (DoDD) 5230.25.

This document contains information that may be exempt from mandatory disclosure under the Freedom of Information Act (FOIA).

AUTHORITY: This guide issued under the provisions of Chapter 2, Section IV, AR 380-5, Department of The Army Security Program, Dated: 29 September 2000.

This SCG applies to US Army Programs.

SUPERSEDES: Security Classification Guide for Combat Support and Combat Service Support Armoring Systems, dated 31 August 2012 issued by Program Executive Officer Combat Support and Combat Service Support.

DESTRUCTION NOTICE: Destroy by any method (i.e., shredder or fire bag) that will prevent disclosure of contents or reconstruction of the document.

UNCLASSIFIED//FOR OFFICIAL USE ONLY

Table of Contents

SECTION I - GENERAL INFORMATION

1. Purpose

2. Authority

3. Threat/Background

4. Office of Primary Responsibility (QPR)

5. Classification Challenges

6. Compilation of Information

7. Threat/Intelligence Information

8. Other Systems, Material and Information

9. FOR OFFICIAL USE ONLY (FOUO) Caveat

10. Marking Requirements and Distribution Statements

11. Export Controlled Information and Marking

12. Reproduction, Extraction, and Dissemination

13. Release of Information

14. Foreign Disclosure

15 Loss, ·Compromise, or Suspected Compromise

16. Patents 13

17. Marking Requirements 13

18. Foreign Government Information (FGI) 13

19. Foreign Military Sales (FMS) 13

20. Operations Security (OPSEC) 14

21. Security Classification Guides for Program Components 14

22. Special Instructions 15

23. Definitions 17.

SECTION II - OVERALL EFFORT/Security Classification Guidance Table 25

1. Information Disclosing the Threats

2. Information Disclosing Armor Testing and Results

3. Information Disclosing Tactics, Techniques and Procedures

4. Information Disclosing Drawings, Diagrams, Photos & Videos

5. Information Disclosing Manufacturing Standards

6. Information Disclosing Armor Samples Plate and Non-Metallic Criteria

7. Armor Performance Standards

8. Maintenance Data

9. Information Disclosing Battlefield and Battle Damage Assessments

10. Information Disclosing an Attack Against Armored Vehicles

11. Information Disclosing Personnel in Attacks Against Armored Vehicles

12. Information Disclosing Shipping and Receiving

13. Modeling and Simulations (M&S)

14. Requirements Documents

15. Contractor Requirements

16. Demilitarization and Disposal

Notes

SECTION Ill - ADDITIONAL INFORMATION

1.

2.

3.

4.

5.

6.

7.

Special Instructions

Armo_ring Systems Platform Demilitarization

Examples of when you might need to use a Security Classification Guide

Acronyms

References

PEO OPSEC Review Process

OPSEC Review Form STA 7114-2 PEOv2

UNCLASSIFIED//FOR OFFICIAL USE ONLY

SECTION I - GENERAL INFORMATION:

1. (U) Purpose:

(FOUO) This Security Classification Guide (SCG) provides instructions and guidance on the classification and declassification of information, qualification testing, production, and material pertaining to Program Executive Office (PEO), Combat Support and Combat Service Support (PEO CS&CSS) Armoring Systems (hereinafter referred to as armoring systems).

(FOUO) This SCG only governs information pertaining to PEO CS&CSS armored systems that do not have their own SCG. Programs including but not limited to: JL TV, MRAP, JAB, Robotics, Army Watercraft, etc, will continue to follow and abide by their respective SCGs. Please contact SFAE-CSS/Security, 6501 E. 11 Mile Road, MS 332, Warren, Ml 48397-5000, COM (586) 282-8448, DSN 786-8440 to determine the appropriate course of action for elements that are missing or do not fit into the categories defined in this guide.

2. (U) At,1thority:

a. (U) This SCG is issued under the authority of DoD Manual (DoDM) 5200.01 Volume 1-4, DoD Information Security Program; Army Regulation (AR) 380-10 Foreign Disclosure and Contacts with Foreign Representatives; AR 380-5 Department of the Army (DA) Information Security Program; DoD 5220.22M National Industrial Security Program; DoD Instruction 5230-24 Distribution Statements on Technical Documents;

and Executive Order (EO) 13526. There are three classification levels: Confidential, Secret and Top Secret. Two classification levels apply to this guide and individuals must handle classified information In Accordance With (IAW) AR 380-5; the two classifications covered in this SCG are:

(1) CONFIDENTIAL (C), the unauthorized disclosure could cause damage to national security. Although this classification level is rarely used, CONFIDENTIAL information is CLASSIFIED and requires protection as such.

(2) SECRET (S), the unauthorized disclosure could cause serious damage to national security and includes information related to mission essential equipment or operations.

b. (U) This guide constitutes original determination by authority of the PEO. Cite this guide as the basis for classification or declassification of information concerning armored systems.

c. (U) NOTE: DoDM 5200.01 Volumes 1-4, with Volumes 1-3 only Incorporating Change 2, 19 March 2013, provide a new format for derivative classification markings.

d. (U) Information or material classified usihg this guide, and other security classification guidance, shall cite "Multiple Sources" on the "Derived from" line and the list of multiple sources shall be included with -or annotated on- the derivative document.

If the document has a bibliography or reference list, individuals can use this as a list of sources.

3. (U) Threat/Background:

(FOUO) Armoring system platforms operate in combat support and combat service support roles. In the current conflict environment, as defined by the System Threat Assessment Report (STAR) produced for the Tactical Wheeled Vehicles, dated June 2017, armoring system platforms operate within the battlespace. and are subject to direct and indirect fire, mines, RocketPropelled Grenades (RPG) and Improvised Explosive Devices (IEDs).

4. (U) Office of Primary Responsibility (OPR):

(U) Address all inquiries concerning content and interpretation, as well as any recommendations for changes, deletions, and additions to:

PEO CS&CSS

SFAE-CSS/Security 6501 E. 11 Mile Road, MS 332, Warren, Ml 48397-5000, COM (586) 282-8448, DSN 786-8448

5. (U) Classification Challenges:

a. (U) Direct questions, concerning the content and interpretation of this guide, to the OPR. Submit recommendations to the OPR; recommendations shall be justified in writing, i.e., if current conditions, progress made in this effort, scientific or technological developments, advances, or other factors indicate a need for change. Protect the information involved at the security classification level dictated by this SCG pending a final decision. All users of this guide are encouraged to assist in improving its _accuracy,

· efficiency and adequacy. Bring over-classification or incorrect classification to the attention of the OPR. Make changes to this guide by the issuance of a numbered change letter with corrected page.

b. (U) All information or material that is classified solely using this guide shall cite this guide as the authority for classification and shall reflect such on the "Derived from" line. When citing this guide, the appropriate entry is:

(1) Classified by: Name of person making derivative classification decision and duty title Derived from: PEO CS&CSS Armoring Systems SCG, dated (date of this guide)

Declassify on: 25 years from the date of the created document (YYYYMMDD) (Refer to Section II note 2 to determine the date)

c. (U) Information or material classified using this guide -and other security classification guidance- shall cite "Multiple Sources" on the "Derived From" line and the list of multiple sources shall be included with -or annotated on- the derivative document.

If the document has a bibliography or reference list, this may be used as the list of sources. As a general principle, apply classification criteria contained in such sources rigorously; make a conscious effort to avoid creating new or additional restrictions on information access within armoring system platforms.

6. (U) Compilation of Information:

a. (U) In some circumstances, classification may be required when unclassified elements of information are combined to reveal classified information, or when classified elements combine to reveal information at a higher classification level than the individual elements. Provide an explanation for classification resulting from compilation on the "Derived from" line or within the document. The explanation must clearly describe the circumstances under which the individual portions constitute a classified compilation. The classification and marking process is as follows:

(1) (U) When a document that comprises individually unclassified items of information is classified by compilation, the overall classification shall be marked conspicuously at the top and bottom of each page, top and bottom of the back of the last page, and the outside front and back covers (if applicable), and on the file folder.

Place an explanation of the basis for classification by compilation on the "Derived From" line or within the document. The explanation must clearly describe the circumstances under which the individual portions constitute a classified compilation. The explanation shall be portion marked as needed but at a minimum as "FOR OFFICIAL USE ONLY."

If portions, standing alone, are unclassified, but the document is classified by compilation or association, those portions shall be marked ·"U," and the document and pages shall be marked with the classification of the compilation. A cover email can be marked "unclassified'; and/or marked "unclassified when removed from classified attachment" if it has no classified information.

(2) (U) If individual portions are classified at one level and the compilation is a higher classification, each portion shall be marked with its own classification, and the document and pages shall be marked with the classification of the compilation. An explanation of the classification by compilation is required.

7. (U) Threat/Intelligence Information:

(FOUO) Data or information relating to the threat systems or other intelligence material must show the security markings of that threat/intelligence material. The release of threat/intelligence may require the consent of the originator. The servicing Foreign Intelligence Office (FIO) controls all dissemination of threat/intelligence information.

Threat/intelligence information will not be reproduced, released to contractors, or disseminated unless approved by the FIO and Senior Intelligence Officer (SI0) that supports armoring systems in the G-2, U.S. Army Tank Automotive Command (TACOM) Life Cycle Management Command (LCMC), ATTN: AMSTA-CSS-F, 6501 East 11 Mile Road, MS 105, Warren, Ml 48397-5000, commercial 586-282-5330, DSN 786-5330.

8. (U) Other Systems, Material and Information:

(U) Other Systems, Material and Information used in the operation and sustainment of armoring systems (e.g. Radios, Software, Publications, etc.) will be subject to the security classifications and special handling caveats marking of their respective SCGs.

9. (U) UNCLASSIFIED//FOR OFFICIAL USE ONLY (FOUO) Caveat:

a. (FOUO) FOUO is not a security classification. Information that has not been given a security classification pursuant to the criteria in this guide, but which may be withheld from the public for one or more of the reasons cited in FOIA exemptions within AR 25-55, (Army FOIA), shall be designated FOUO. Information so designated in this guide that warrants FOUO markings will be handled and protected IAW AR 25-55 and Department of Defense Instruction (DoDI) 5230.24, Distribution Statements on Technical Documents, 23 Aug 2012 and DoDI 5230.25, Withholding of Unclassified Technical Data from Public Disclosure. Documents will be marked FOR OFFICIAL USE ONLY in letters equal to or larger than the rest of the text, at the bottom of the front cover, the title page, or the first page, and on the bottom of the outside of the back cover (Font size of 14 point or larger in black ink is recommended). Pages within the document which contain FOUO information will be marked FOR OFFICIAL USE ONLY at the bottom. Apply the following statement to the front cover or title page of the document with the appropriate exemption(s) identified:

(1) This document contains information that may be EXEMPT FROM MANDATORY DISCLOSURE under the Freedom of Information Act (FOIA).

b. (U) FOIA Exemptions identified in this guide:

(1) Number 1, Exemption 1: Information properly and currently classified in the Interest of National Defense or Foreign Policy.

(2) Number 2, Exemption 2: Records containing or constituting regulations, orders, manuals, directives, and instructions.

(3) Number 3, Exemption 3: This exemption incorporates the disclosure prohibitions that are contained in various other federal statutes. As originally enacted in 1966, Exemption 3 was broadly phrased so as to simply cover information "specifically exempted from disclosure by statute." The new Exemption 3 statue prohibits agencies from releasing under the FOIA any proposal "submitted by a contractor in response to the requirements of a solicitation for competitive proposals" unless that proposal -"is set forth or incorporated by reference in a contract entered into between the agency and the contractor that submitted the proposal."

(4) Number 4, Exemption 4: Information such as trade secrets, proprietary information, and commercial or financial information obtained from a company on a privileged or confidential basis that, if released, would result in competitive harm to the company, impair the Government's ability to obtain like information in the future, or protect the Government's interest in compliance with program effectiveness.

(5) Number 5, Exemption 5: Inter-Agency memoranda that are deliberative in nature; this exemption is appropriate for internal documents that are part of the decision making process arid contain subjective evaluations, opinions, and recommendations.

c. (FOUO) Note: The listed exemptions are examples and not all-inclusive .. The user should review AR 25-55 and DoDM 5200.01 Volume 4 for all exemption guidance.

10. (U) Marking Requirements and Distribution Statements:

a. (U) Distribution Statements are required on all technical documents whether they are classified or unclassified. Authors of documents should place these notices on the front cover or first page of the document IAW DoDI 5230.24, Distribution Statements on Technical Documents.

b. (U) Technical documents (or data) containing information (experimental, developmental, engineering works) that can be used to define an engineering or manufacturing process or to design, procure, produce, support, maintain, operate, repair or overhaul material will require a distribution statement. The information may be in digital, text, graphic or pictorial form.

(1) All technical data must have one of the following statements below IAW Do DI 5230.24: (If the use of another distribution statement is necessary, submission to the PEO CSS&CSS Security Manager in writing and with justification is required.)

(a) Distribution Statement "A": Apply Distribution Statement "A" to information that has undergone an OPSEC review and has approval for public release. The following statement is required on the front page or cover of the information approved for release:

(1) DISTRIBUTION STATEMENT A. Approved for public release:

distribution unlimited.

(b) Distribution Statement "B": Apply Distribution Statement "B" to classified or unclassified technical documents approved for release to United States (U.S.)

Government Agencies only for the following reasons: Administrative or operational use, contractor or performance evaluation, critical technology, export controlled, foreign government information, operations security, premature dissemination, proprietary information, test and evaluation, software documentation, specific authority and vulnerability information that is approved for release to United States (U.S.) Government

Agencies only. The following statement is required on the front page or cover of the information approved for release to U.S. Government agencies only:

(1) DISTRIBUTION STATEMENT B. Distribution authorized to U.S.

Government agencies only (Administrative or Operational Use; Critical Technology;

Operations Security; and Specific Authority (per the PEO CS&CSS Armoring Systems SCG)). (Date of determination is date of document creation). Refer other requests for this document to the attention of:

PEO CS&CSS

SFAE.,CSS/Security 6501 E. 11 Mile Road, MS 332, Warren, Ml 48397-5000, COM (586) 282-8448, DSN 786-8448

(c) Distribution Statement "C": Apply Distribution Statement "C" to classified or unclassified technical documents for the following reasons: Administrative operational use, critical technology, export controlled, foreign government information, software documentation, specific authority, and vulnerability information that is approved for release to U.S. Government agencies and their contractors. The following statement is required on the front page or cover of the information approved for release to U.S.

Government agencies and their supporting contractors:

(1) DISTRIBUTION STATEMENT C. Distribution authorized to U.S.

Government agencies and their contractors (Administrative or Operational Use; Critical Technology; Export Control; and Specific Authority (per the PEO CS&CSS Armoring Systems SCG)). (Date of determination is date of document creation). Refer other requests for this document to:

PEO CS&CSS

SFAE-CSS/Security 6501 E. 11 Mile Road, MS 332, Warren, Ml 48397-5000, COM (586) 282-8448, DSN 786-8448

(d) Distribution Statement "D": Apply Distribution Statement "D" to classified or unclassified technical documents for the following reasons: Administrative operational use, critical technology, export controlled, foreign government information, software documentation, specific authority, and vulnerability information that is approved for release to U.S. Government agencies and their contractors. The following statement is required on the front page or cover of the information approved for release to U.S. Government agencies and their supporting contractors:

(1) DISTRIBUTION STATEMENT D. Distribution authorized to the Department of Defense and U.S. DoD contractors only (Administrative or Operational Use; Critical Technology; Export Control; and Specific Authority (per the PEO CS&CSS

Armoring Systems SCG)). (Date of determination is date of document creation). Refer other requests for this document to:

PEO CS&CSS

SFAE-CSS/Security 6501 E. 11 Mile Road, MS 332, Warren, Ml 48397-5000, COM (586) 282-8448, DSN 786-8448

(e) Distribution Statement "F": In accordance with DoDI 5230.24, Distribution Statement F should not be used on classified or unclassified scientific and technical documents governed by the DoD Scientific and Technical Information Program described in DoDI 3200.12 unless rare and exceptional circumstances exist.

Individuals must return armoring systems documents, files, media, etc. marked with a Distribution Statement F back to the following office to make the appropriate determination of future distribution:

PEO CS&CSS

SFAE-CSS/Security 6501 E. 11 Mile Road, MS 332, Warren, Ml 48397-5000, COM (586) 282-8448, DSN 786-8448

11. (U) Export Controlled Information and Marking:

a. (U) Certain program information may be restricted from export to foreign nationals. For documents containing export controlled information, use "Export Controlled" as a reason and place the following warning on the document:

b. (U) WARNING - This document contains technical data whose export is restricted by the Arms Export Control Act (Title 22, U.S.951 C., Sec 2751, et seq) or the Export Administration Act of 1979, (Title 50, U.S.C., App. 2401 et seq) as amended. Violations of these export laws are subject to severe criminal penalties. Disseminate IAW provisions of DoDD 5230.25.

12. (U) Reproduction, Extraction, and Dissemination:

(FOUO) Authority for reproduction, extraction, and dissemination of this guide is granted to U.S. Government agencies and their contractors involved with armoring systems efforts. The OPR must approve all other requests for dissemination of this guide.

13. (U) Release of Information:

a. (FOUO) Public Release: The fact that this guide shows certain details of unclassified information does not authorize automatic public release. The public release of official Army information regarding armoring system platforms will be IAW AR 360�1 and the PEO CS&CSS OPSEC Plan. Defense contractors shall follow Defense Federal Acquisition Regulation Supplement (DFARS) 252.204-7000 (disclosure of information) and fully comply with: the National Industrial Security Program Operating Manual (NISPOM), DoD 5220.22M; the Federal Acquisition Regulations (FAR) and its supplements; and the PEO CS&CSS OPSEC Plan. Contractors are further responsible to ensure their subcontractors comply with these requirements. All requests for public release of official information pertaining to armoring systems must undergo.an OPSEC and Public Affairs Office (PAO) review (Section Ill, paragraph 6) utilizing the current STA Form 7114-2 (Section Ill, paragraph 7) prior to any release in any form (media, e mail, websites, video, photographs, etc.). Make replies to queries from unofficial sources only aft�r gaining written approval from the PEO PAO. Information or visit requests received through PAO or public media representatives shall be coordinated with the OPR prior to release of information or the visit.

b. (FOUO) Defense contractors and other organizations must ensure all information is unclassified and technically accurate prior to an OPS EC review submission. A letter of request and transmittal must accompany the information being considered for public release. Do not release copies of the material outside official channels until the OPS EC review process is complete, the final determination is made and the information is approved for public dissemination.

(1) (FOUO) Armoring Systems program information may not be relea$ed outside of official channels until the OPSEC review process is complete. Submit requests from the requesting contractor to the Program Contracting Officer (PCO). Government organizations will submit armoring systems information for OPSEC review directly to the PEO CS&CSS OPSEC Officer (OPSECO): PEO CS&CSS, SFAE-CSS/Security, 6501 E. 11. Mile Road, MS 332, Warren, Ml 48397-5000, COM (586) 282-8448, DSN 786- 8448. Ensure requests for OPSEC/PAO review arrive in a timely manner (minimum of two working weeks) prior to your needed release date. Send requests for public release electronically via encrypted email (see paragraph (2) below for encrypted transmission) or mail the Compact Disc/Digital Video Disc (CD/DVD) using U.S. Postal Service Registered Mail.

(2) (FOUO) Take care to ensure that all official Army information that is entered on publicly accessible or unprotected Worldwide Web (WWW) Sites has been processed, reviewed and approved for public release via the OPSEC review process.

The provisions of AR 25-2, Information Assurance (IA}, apply and AR 530-1 Operations Security are applicable. Encrypt FOUO level information when transmitted over the internet using cryptographic products that are NIST/NIAP approved.

(3) (FOUO) Web Sites: Information posted on any unclassified public web site must comply with the requirements of DoD Instruction 8550.01 DoD Internet Services and Internet-Based Capabilities, 11 September 2012. Carefully consider the potential for increased sensitivity due to compilation with other information prior to posting. In addition, this guide is exempt from disclosure under the FOIA. Do not post this guide to any public web site or pages or to web sites with access restricted only by domain or

Internet Protocol (IP) address (e.g., .mil domain). In addition to AR 360-1, the provisions of AR 25-2, Information Assurance, apply.

c. (FOUO) Release of Classified Information at Symposia, Seminars, Conferences, and other fora: All presentations containing information classified under this SCG that are intended to be released at classified symposiums, seminars, conferences, or similar forums will be submitted for approval. Submit requests for release through the OPR NL T 10 business days prior to the proposed date of release. The request will include the name of the individual making the presentations, date of the presentation, title of the forum, and justification for the proposed release. The request will also identify whether the forum will include any foreign attendance or participation.

d. (FOUO) Release of Controlled Unclassified Information (CUI). CUI includes FOUO, technical data, Personally Identifiable Information (PII), and OPSEC sensitive information. Releasing CUI information to individuals or organizations that are not supporting the program requires PCO approval as expressed in Distribution Statements.

Submit a request for dissemination outside of predetermined controls (identified previously in this SCG) and a justification to the OPR. Conduct a review to adjudicate each request. Send requests electronically via encrypted email using a CAC, NIST/NIAP approved cryptographic products/algorithms or mail the Compact Disc/Digital Video Disc (CD/DVD) using first class mail.

14. (U) Foreign Disclosure:

(FOUO) Disclosure of armodng systems information (classified or unclassified) under the cognizance of this guide to foreign governments or companies shall conform to the policy and procedures in: The National Disclosure Policy-1, DoDD 5230.11, Disclosure of Classified Military Information to Foreign Governments and International · Organizations, and AR 380-10, Foreign Disclosure and Contacts with Foreign Representatives, SECNAVINST 5510.34A (if applicable), International Traffic in Arms Regulations (ITAR) and Export Administration Regulations (EAR). If a country with which the DoD has entered into a reciprocal procurement Memorandum of Understanding (MOU) -or offset arrangement- expresses an interest in PEO CS&CSS Armoring Systems platforms, a foreign disclosure review will be conducted prior to issuance of a solicitation. Process any request for information through appropriate foreign disclosure organizations. The supporting TACOM LCMC Foreign Disclosure Officer (FOO) is the primary point of contact for all foreign disclosure issues. Mailing Address: G-2 TACOM LCMC, AMSTA-CSS-C, Mail Stop 105, 6501 E. 11 Mile Road, Warren, Ml 48397-5000. All program contractors must comply with U.S. export laws and be contractually prohibited from executing any third party information releases, without PEO CS&CSS approval.

15. (U) Loss, Compromise, or Suspected Compromise:

(U) Report the loss, compromise, or suspected compromise of classified information or material.

a. (FOUO) Contractors: Upon discovery of the incident, contractors will immediately notify internal security manager/Facility Security Officer (FSO). Within 24 hours, the FSO will contact both the government security manager and OPR. Once the government security manager makes the official determination regarding the material disclosed, the Contractor will follow procedures outlined in the applicable Defense Department (DD) Form 254, Contract Security Classification Specification and reporting requirements listed in Section 3 of DoD 5220.22-M, National Industrial Security Program Operating Manual.

b. (FOUO) Government Employees: Upon discovery of the incident, government employees will immediately notify their G-2 Security Manager. As noted above, G-2 will make the official determination regarding the material disclosed, will contact the OPR, and will initiate cleanup procedures IAW Chapter 10 of AR 380-5, Department of the Army Information Security Program.

16. (U) Patents:

(U) Contact the OPR for information on processing patents.

17. (U) Marking Requirements:

(U) Documents and other products, including information technology material and briefing slides containing classified material, will be marked in accordance with: DoDM 5200.01, Volume 1-4, Incorporating Change 2, 19 March 2013, AR 380-5, SECNAV M-

5510.36 (ifapplicable), and the booklet labeled, "Marking Classified National Security Information," as required by EO 13526, Classified National Security Information, 29

- December 2009, and 32 C.F.R. Part 2001, Information Security Oversight Office (ISOO) Implementing Directive, effective 25 June 2010 (Revision 2, January 2014). Documents requiring derivative classification will use this SCG as a source.

18. (U) Foreign Government Information (FGI):

(FOUO) Immediately notify the OPR if a foreign country expresses an interest in sharing its information with the applicable PEO CS&CSS office, either with a DoD agency or to a defense contractor. Use of -or reference to- foreign government data or information furnished under this program is classified not less than the classification assigned by the original foreign government. Safeguarding of FGI must be IAW DoD Manual 5220.22-M (NISPOM) and DoDM 5200.01, Volume 1- 4. Third party disclosure and dissemination is prohibited.

19. (U) Foreign Military Sales (FMS):

(FOUO) If a foreign country expresses an interest to enter into a FMS, notify the OPR immediately. The provisions of AR 12-8, Security Assistance, Operations and Procedures apply and the provisions of AR 12-1, Security Assistance, International Logistics, Training, and Technical Assistance Support Policy and Responsibilities. The disclosure or transfer of U.S. or Allied country information to a third party (See definitions) is prohibited without the written consent of the country that is the originator of the document. The highest level of information disclosed will be no greater than SECRET.

20. (U) Operations Security (OPSEC):

(FOUO) OPSEC encompasses guarding against communicating sensitive or classified information by non-secure telephone, cell phone, pager, fax machine, tablet, or other electronic devices, as well as carefully evaluating the potential impact of information · released on publicly accessible websites and in press releases. All U.S. Government information for release to foreign nationals, non-Program contractors, or non-U.S. citizens must have an OPSEC review and approval from the PAO for unclassified information and approval from the FOO. For FOUO or classified information: all briefings or presentations intended for release to other than U.S. Government or supporting contractor personnel containing information on this program must receive prior approval.

All program contractors must comply with U.S. export laws and are prohibited from executing any third party information releases without PEO approval.

21. (U) Security Classification Guides for Program Components:

(FOUO) The following SCGs also provide security classification guidance for program components for reference purposes only; this may not be all-inclusive.

Security Classification Guides Proponent

1. Rapid Acquisition Initiatives (RAI) and Army ATEC .Test and Evaluation Command (ATEC) Forward Operational Assessment (FOA)

2. L (EO/IR) Laser Range Finder/Designator PEO IEW&S (LRF/D) Payload

3. Advanced Field Artillery Tactical Data System PM FSC2 (AFATDS), Joint Automated Deep Operations Coordination System (JADOCS), and Forward Entry Device System (FEDS)

4. Armor Materials and Technology ARL

5. Chemical, Biological, Rad_iological and Nuclear DoD Survivability

6. Global Positioning System (GPS) AFPEO/Space

7. Joint Chemical Agent Detector (JCAD) Joint Program Executive Office for

UNCLASSIFIED//FOR OFFICIAL USE ONLY

Date

28 Mar 2013

12 Jul 2010

May 2012

31 May 16

08 Jun 201°1

21 Dec 2011

13 Jul 2009

Chemical

Biological

Defense

8. Joint Improvised Explosive Device Defeat JIDA 02 May 2012

Organization

9. Joint Counter Radio Controlled Improvised OPNAVINST 02 Apr 2007

Explosive Device Electronic Warfare (CREW)·

Program, Incorporating Appendix A Change

10. Joint Tactical Radio System (JTRS) Handheld, PM JTRS HMS 1 Oct 2012

Manpack, and Small Form Fit (HMS)

11. Joint Tactical Radio System (JTRS) Network PM JTRS NED 27 Sep 2012

Enterprise Domain (NED) Soldier Radio Waveform

(SRW)

12. Second Generation Forward Looking Infrared PEO IEW&S 6 Apr 2012

(FLIR) Horizontal Technology Integration

13. Single Channel Ground and Airborne Systems PM TRCS 27 Mar 2015

(SINCGARS)

14. Third Generation Forward Looking Infrared CECOM 27 Oct 2009

System and Subsystem Acquisition and Testing

15. Warfighter Information network - Tactical PM WIN-T Jan 2012

Increment 2&3 (WIN-T)

16. Cyberspace Operations and Security U.S. Army 19 May 2016

Cyber (Revised

. Command and Version)

2nd Army

Note 1: The Single Channel Ground and Airborne

Systems (SINCGARS) SCG, the Reactive Armor

Technologies, Armor Materials and Technology, and the Laser Protection Material SCGs are current, but the SCGs are undergoing a review and revision.

22. (U) Special Instructions:

a. (U) Classification of data generated during PEO CS&CSS Armoring Systems Qualification Testing:

(1) (FOUO) Aggregation/Compilation - Handle and mark as Secret any compilation of information located on any media, e.g. (video, photo, document, and website) where test data or information could reveal threat information, explosive weight, velocity of the round at impact, angle the round struck the target, type of projectile, or other vulnerabilities, (See Appendix C of this SCG for specific guidance).

(2) (FOUO) Casualty Test Data - Working copies of this type of data will be marked as "FOUO" unless classified at a higher level by this or another SCG.

(3) (FOUO) Ballistic Shock Test Data - Working copies of this type of data will be marked as "FOUO" unless classified at a higher level by this or another SCG.

(4) (FOUO) Pre-shot and Post-Shot Vehicle Checklists - Ballistic testing checklists are to be used to document the operational and functional status of each vehicle subsystem-under test before and after Live Fire Test (LFT) events. All checklists are to be marked "FOUO" unless classified at a higher level by this or another

SCG.

(5) (FOUO) Vehicle Performance Test Data - Results of performance tests conducted before and after LFT events, to include results of mobility exercises or similar test data, are to be marked "FOUO" provided no threat or vulnerabilities information is included.

(6) (FOUO) Test Incident Reports - Test Incident Reports, which are submitted to document problems and anomalies uncovered during testing of the Armor Protection System, which do not disclose, discuss, or provide any level of results from ballistic testing, will be marked "FOUO".

(7) (FOUO) Preliminary and Detailed Test Shot Event, explosive testing results or assessment measures: with the identification and inclusion of both general and specific threats used in the Shot Event and resulting impact conditions, classify in accordance with this SCG and other applicable test SCGs.

(8) (FOUO) Release of Test Data to DoD Contractors - Controlled Unclassified test data or FOUO is releasable to DoD Contractors and support contractors with the written approval of the PM or higher DoD Authority. Disclose CUI or FOUO test data to foreign governments with the written approval of the PM, following coordination with G-2 TACOM LCMC FOO. The FOO, G-2, TACOM LCMC will approve requests for initial or foreign classified disclosures.

(9) (FOUO) Threat Information - Review any records containing the combination of threat information, conditions of the shot line and resulting damage (direct or implied) or explosive weights, for proper classification based on the compilation of all information. These records will be marked at a minimum of "FOUO," "CONFIDENTIAL," or "SECRET," as appropriate IAW this SCG or through derivative classification from the classified threat source documentation.

(1 O) (FOUO) Marking - As a matter of practice: the PM Office will notify the test facility when the nature of the test or the test result is likely to contain classified information. Apply the following classification and declassification instruction to the front of all classified briefings or products and will be affixed to transportable electronic media:

Classified By: Name of the person making derivative classification decision and duty title.

Derived from: PEO CS&CSS Armoring Syst�m SCG, dated 14 August 2012.

Declassify on: _25 years from date the document is prepared .

23. (U) Definitions (All definitions are Unclassified):

Access - The ability and opportunity to obtain knowledge of classified information.

Agency-Any "Executive agency," as defined in 5 U.S.C. 105; any Military department as defined in 5 U.S.C. 102; and any other entity within the executive branch which comes into possession of classified information.

Applicable Associated Markings .....:. Markings, other than those that designate classification level, that are required to be placed on documents. These include the "classified by" line, downgrading and declassification instructions, special warning notices, Distribution Statements, Special Access Program (SAP) caveats, etc.

Armor Sample (Coupon) - Opaque or transparent armor test sample or coupon that is not configured for a vehicle component and that is used for research testing. Research testing is governed by the Army Research Laboratory (ARL) Armor Material and Technology SCG and test results are classified per that SCG or by this SCG if tested by TACOM LCMC or PEO CS&CSS.

Armor Component - Armor that is configured for a specific vehicle component part.

Test results are classified per this SCG.

Authorized Personnel - US military, DoD civilian personnel, DoD contractor personnel, local police, and Defenses Investigative Service approved contractor guard service, and certain foreign nations (with HQDA approval) that have a ne�d for physical access.

Automated Information Systems (AIS) - An assembly of computer hardware, software, or firmware configured to collect, create, communicate, compute, disseminate, process, store, or control data or information.

Automatic Declassification - The declassification of information based solely upon:

(1) The occurrence of specific data or events as determined by the original classification authority; or (2) the expiration of the maximum time frame for duration of classification established under EO 13526 as amended.

Classification -. The determination that official information requires, in the interests of national security, a specific degree of protection against unauthorized disclosure, coupled with a designation signifying that such a determination has been made.

Classification Guide - A documentary form of classification guidance issued by an Original Classification Authority (OCA) that identifies, for a specific subject, the elements of information that must be classified and establishes the level and duration of classification for each such element.

Classified Military Information (CMI) - Information originated by or for the Department of Defense or its Agencies or that is under their jurisdiction or control and that requires protection in the interests of national security. It is designated TOP SECRET, SECRET or CONFIDENTIAL as described in EO 13526. Classified military information may be in oral, visual, or material form and has eight categories for foreign disclosure purposes.

Compilation - Classify items of information, which are individually unclassified, if the combined information reveals an additional association or relationship that matches criteria for classification.

Compromise - The known or suspected exposure of clandestine personnel, installations, or other assets or of classified information or material, to an unauthorized person.

CONFIDENTIAL - Classification that is applied to information when disclosed could reasonably be expected to cause damage to national security.

Controlled Unclassified Information (CUI) -Unclassified information that requires safeguarding or dissemination controls, pursuant to and consistent with applicable law, regulations, and Government-wide policies.

Damage to National Security - Harm to national defense or foreign relations of the United States from unauthorized disclosure of classified information.

Declassification - The authorized change in the status of information from classified information to unclassified information.

Declassification Authority -

1) The official who authorized the original classification, if that official is still serving in the same position;

2) The originator's current successor in the authorizing function (current OCA);

3) A supervisory official of either a or b; or

4) Officials delegated declassification authority in writing by the agency head or the senior agency official.

Deemed Export - .

1) Disclosing or exporting (including oral or visual disclosure) or transferring in the United States any defense article to an embassy, an agency or subdivision of a foreign government (e.g., diplomatic missions) or

2) Disclosing or exporting (including oral or visual disclosure) or transferring technical data to a foreign person, whether in the United States or abroad; or

3) Performing a defense service on behalf of, or for the benefit of, a foreign person, whether in the United States or abroad.

Derivative Classification - The incorporation, paraphrasing, restating, or generating in new form, information that is already classified .. Derivative classification includes the classification of information based on classification guidance. The duplication or reproduction of existing classified information is not derivative classification.

Distribution Statement - A statement used on a technical document to denote the extent of its availability for secondary distribution, release, and disclosure without additional approvals or authorizations. A distribution statement is distinct from and in addition to a security classification marking and any dissemination control markings included in the banner line.

DOD Components - The Office of the Secretary of Defense, the Military Departments, the Chairman of the Joint Chiefs of Staff, the combatant commands, the Office of the Inspector General of the Department of Defense, the Department of Defense agencies, field activities, and all other organizational entities in the Department of Defense.

Downgrade - To determine that classified information requires, in the interests of national security, a lower degree of protection against unauthorized disclosure than currently provided, coupled with a changing of the classification designation to reflect such a lower degree.

Export - Sending or taking a defense article out of the United States in any manner, except by mere travel outside of the United States by a person whose personal knowledge includes technical data.

For Official Use Only (FOUO) -A protective marking to be applied to unclassified information when disclosure to the public of that particular record, or portion thereof, would reasonably be expected to cause a foreseeable harm to an interest protected by one or more provisions of the FOIA. This includes information that qualifies for protection pursuant to the provisions of the Privacy Act of 197 4, as amended.

Foreign Government Information (FGI) -

1) Information provided to the United States government by a foreign government or govemments, an international organization of governments, or by any element thereof, with the expectation that the information, the source of the information, or both, are to be held in confidence.

2) Information produced by the United States pursuant to or as a result of a joint arrangement with a foreign government or governments, an internatipnal organization of governments, or any element thereof requiring that the information, the arrangement, or both are to be held in confidence.

3) Information received and treated as "FGI" Pursuant to the terms of a predecessor order to EO 13526.

Foreign Person - Any person who is not a lawful permanent resident as defined by 8 U.S.C. 1101 (a)(20) or whom is not a protected individual as defined by 8 U.S.C.

1324b(a)(3). It also means any foreign corporation, business association, partnership, trust, society or any other entity or group that is not incorporated or organized to do business in the United States, as well as international organizations, foreign governments and any agency or subdivision of foreign governments (e.g. diplomatic missions).

Information Assurance (IA) - Information Operations that protect and defend information and information systems by ensuring their availability, integrity, authentication, confidentiality, and non-repudiation. Includes providing for restoration of information systems by incorporating protection, detection, and capabilities.

Model Input - Any data that feeds the model to complete the analysis. Examples are:

threat information, vulnerability information, CAD material properties of the CAD drawing, or system performance data. Model input characterizes the system environment that interacts with the algorithms of the code to conduct the analysis.

Model input may include both classified and unclassified data.

Model Output - The analysis of the performance of the system component within the specified environment. Based on the input, model output may include either classified or unclassified data.

Multiple Sources -Two or more source documents, classification guides, or a combination of both.

National Security - A collective term encompassing both national defense and foreign relations of the United States. Specifically, the conc;iition provided by:

1) A military or defense advantage over any foreign nation or group of nations;

2) A favorable foreign relations position; or,

3) A defense posture capable of successfully resisting hostile or destructive action.

Need-to-Know - A determination made by an.authorized holder of classified information that a prospective recipient requires access to specific classified information in order to perform or assist in a lawful and authorized governmental function.

Network - A system of two or more computers that can exchange data.

Operations Security (OPSEC) - A process of identifying critical information and subsequently analyzing friendly actions attendant to defense acquisition, defense activities, military operation, and other activities. OPSEC requires the following analysis:

· 1) Identify those actions observable by an adversary intelligence system.

2) Determine what indicators hostile intelligence systems may obtain that could be interpreted or pieced together to derive critical information in time to be useful to adversaries.

3) Select and execute measures that eliminate or reduce to an acceptable level the vulnerabilities of friendly actions to adversary exploitation.

OPSEC Review Process - A formal process whereby information marked and controlled as UNCLASSIFIED//FOR OFFICIAL USE ONLY (can be a document, briefing, article, video, photographs, visual display, etc.) is reviewed using the PEO OPSEC process to determine what portions of it may or may not be released to the public. The OPS EC process is at no time used to release or declassify previously classified information or information that has already received an OPSEC review.

Original Classification Authority (OCA) - The individual authorized in writing to originally classify information up to and including a certain classification level.

Safeguarding - Measures and controls that are prescribed to protect classified information. Safeguarding and protection of classified information are synonymous terms.

SECRET - Security classification applied to information whereas the unauthorized disclosure could cause serious damage to the national security that the original classification authority is able to identify or describe.

Security Classification - A category to which national security information and material is assigned to denote the degree of damage that unauthorized disclosure would cause to national defense or foreign relations of the United States and to denote the. degree of protection required. There are three such categories listed below which also provide supplementary information.

1) Top Secret - National security information or material that requires the highest degree of protection and the unauthorized disclosure of which could reasonably be expected to cause exceptionally grave damage to the national security.

Examples of "exceptionally grave damage" include armed hostilities against the United States or its allies; disruption of foreign relations vitally affecting the national security; the compromise of vital national defense plans or complex cryptologic and communications intelligence systems; the revelation of sensitive intelligence operations; and the disclosure of scientific or technological developments vital to national security.

2) Secret - National security information or material that requires a substantial degree of protection and the unauthorized disclosure of which could reasonably be expected to cause serious damage to the national security.