[Back] |
[Index] |
[Next] |
APPENDIX O
PROCEDURES FOR THE PROTECTION OF RESTRICTED INFORMATION
MULTINATIONAL INDUSTRIAL SECURITY WORKING GROUP
15 June 1989 MISWG DOCUMENT Number 6
PROCEDURES FOR THE PROTECTION OF RESTRICTED INFORMATION
Some governmental information that is shared or exchanged in support of cooperative defence programmes and is not qualified under national rules for classification at the CONFIDENTIAL or higher level may not be disclosed publicly for reasons of national interest. It is, therefore, subject to specified protective procedures and is identified.
Documents and material containing such information shall be marked "RESTRICTED" by the Programme/Project Participating Countries that have such a security classification level. The Programme/Project Participating Countries that do not have this classification level shall apply an identification marking (it may be a national classification level).
The chosen marking by all the Programme/Project Participants will appear in the "Security Classification Guide" and in the "Comparison of National Security Classification Markings" appended to the Programme/Project Security Instruction.
Whatever the markings may be, they must provide for the information a degree of protection no less stringent than that provided by the control procedures described below.
These procedures will be appended to the Programme/Project Security Instruction when a Programme/Project includes a Participating Country that does not have a national security classification level of RESTRICTED or the equivalent.
A. RELEASE
RESTRICTED information will be released only to the establishments or facilities in the NATO countries whose access is necessary for participation in a government programme, project, or contract, or for participation in a multinational cooperative defence programme. Release to any other government, persons, or institutions of another country requires prior approval by the originating country.
B. ACCESS
1. Access to RESTRICTED information will only be given to those persons whose access is considered to be necessary in connection with a government programme/project or contract or for participation in a multinational cooperative defence Programme/Project.
2. All intended recipients of RESTRICTED information will be informed of their responsibilities for the safeguarding of such information and they may acknowledge these with a "binding declaration," where applicable.
C. MARKING
Documents and material containing RESTRICTED information, and derivatives and reproductions containing the information, shall be marked to identify the RESTRICTED information and country of origin. The Programme/Project participating countries that have the security classification level "RESTRICTED" will mark such documents and material in accordance with their national rules for marking the documents. The Programme/Project participating countries that do not have this security classification level will mark such documents with the chosen marking that appears in the "Security Classification Guide" and in the "Comparison of National Security Classification Markings" appended to the Programme/Project Instruction.
D. PROTECTION
RESTRICTED information will not be left unattended or otherwise handled in a manner that would result in unauthorized access. Documents or other material containing RESTRICTED information must be stored in a locked room, or in a locked cabinet, desk, safe or other such container that can be reasonably expected to preclude unauthorized access.
E. TRANSMISSION
RESTRICTED information may be transmitted, including when necessary across national borders, by secured means through officially approved channels, in accordance with the national rules of the dispatching country.
F. DESTRUCTION
Unnecessary documents or material containing RESTRICTED information shall be destroyed by any means that ensure that reconstruction of the residue is not possible.
G. VIOLATION OF PROCEDURES
Violations of the safeguarding procedures that result in unauthorized access to RESTRICTED information shall be investigated by the appropriate authority. Action will be taken, as appropriate, to limit the damage and to preclude a recurrence. When compromise is certain the owner of the information will be informed of the outcome of the investigation and corrective action.
H. INSPECTIONS
The appropriate authority may inspect the receiving establishment or facility to verify the appropriate implementation of the above prescriptions in the framework of the enforced national laws and regulations.