32 CFR 2001.1: Purpose and scope.

(a) This part is issued under Executive Order. (E.O.) 13526, Classified National Security Information (the Order). Section 5 of the Order provides that the Director of the Information Security Oversight Office (ISOO) shall develop and issue such directives as are necessary to implement the Order.

(b) The Order provides that these directives are binding on agencies. Section 6.1(a) of the Order defines “agency” to mean any “Executive agency” as defined in 5 U.S.C. 105; any “Military department” as defined in 5 U.S.C. 102; and any other entity within the executive branch that comes into the possession of classified information.

(c) For the convenience of the user, the following table provides references between the sections contained in this part and the relevant sections of the Order.

CFR section Related section of E.O. 13526

2001.10 Classification standards 1.1, 1.4

2001.11 Original classification authority 1.3

2001.12 Duration of classification 1.5

2001.13 Classification prohibitions and limitations 1.7

2001.14 Classification challenges 1.8

2001.15 Classification guides 2.2

2001.16 Fundamental classification guidance review 1.9

2001.20 General 1.6

2001.21 Original classification 1.6(a)

2001.22 Derivative classification 2.1

2001.23 Classification marking in the electronic environment 1.6

2001.24 Additional requirements 1.6

2001.25 Declassification markings 1.5, 1.6, 3.3

2001.26 Automatic declassification exemption markings 3.3

2001.30 Automatic declassification 3.3, 3.7

2001.31 Systematic declassification review 3.4

2001.32 Declassification guides 3.3, 3.7

2001.33 Mandatory review for declassification 3.5, 3.6

2001.34 Referrals 3.3, 3.6, 3.7

2001.35 Discretionary declassification 3.1

2001.36 Classified information in the custody of private organizations or individuals none

2001.37 Assistance to the Department of State none

2001.40 General 4.1

2001.41 Responsibilities of holders 4.1

2001.42 Standards for security equipment 4.1

2001.43 Storage 4.1

2001.44 Reciprocity of use and inspection of facilities 4.1

2001.45 Information controls 4.1, 4.2

2001.46 Transmission 4.1, 4.2

2001.47 Destruction 4.1, 4.2

2001.48 Loss, possible compromise, or unauthorized disclosure 4.1, 4.2

2001.49 Special access programs 4.3

2001.50 Telecommunications, automated information systems, and network security 4.1, 4.2

2001.51 Technical security 4.1

2001.52 Emergency authority 4.2

2001.53 Open storage areas 4.1

2001.54 Foreign government information 4.1

2001.55 Foreign disclosure of classified information 4.1(i)(2)

2001.60 Self-Inspections, General 5.4

2001.70 Security Education and Training, General 5.4

2001.71 Coverage 1.3(d), 2.1(d), 3.7(b), 4.1(b), 5.4(d)(3)

2001.80 Prescribed standard forms 5.2(b)(7)

2001.90 Agency annual reporting requirements 1.3(c), 5.2(b)(4), 5.4(d)(4), 5.4(d)(8)

2001.91 Other agency reporting requirements 1.3(d), 1.7(c)(3), 1.9(d), 2.1(d), 5.5

2001.92 Definitions 6.1