Largely prescribed in a series of successive presidential executive orders (EO) issued over the past 50 years, security classification policy and procedure provide the rationale and arrangements for designating information officially secret for reasons of national security, and for its declassification as well. President Franklin D. Roosevelt issued the first EO in 1940. Contents of this report: (1) Background; (2) Clinton¿s EO 12958 as Issued: Prescribing Declassification; Controversial Areas; Classification Challenges; A Balancing Test; Program Direction; New Organizations; (3) Bush¿5s Amendments to EO 12958; (4) Obama¿s Review of EO 12958; () Obama Revokes EO 12958 and Issues a New EO.

After two years of preparation, E.O. 12958, prescribing security classification policy and procedure, was signed by President William Clinton in mid-April 1995. The order was prompted by changing security conditions in the aftermath of the end of the cold war and a desire for more economical and effective management of classified information. The directive was modified in late March 2003 by E.O. 13292, issued by President George W. Bush. Largely prescribed in a series of successive presidential executive orders issued over the past 50 years, security classification policy and procedure provide the rationale and arrangements for designating information officially secret for reasons of national security, and for its declassification as well.

Information Security Policies and Procedures: A Practitioner’s Reference, Second Edition illustrates how policies and procedures support the efficient running of an organization. This book is divided into two parts, an overview of security policies and procedures, and an information security reference guide. This volume points out how security documents and standards are key elements in the business process that should never be undertaken to satisfy a perceived audit or security requirement. Instead, policies, standards, and procedures should exist only to support business objectives or mission requirements; they are elements that aid in the execution of management policies. The book emphasizes how information security must be integrated into all aspects of the business process. It examines the 12 enterprise-wide (Tier 1) policies, and maps information security requirements to each. The text also discusses the need for top-specific (Tier 2) policies and application-specific (Tier 3) policies and details how they map with standards and procedures. It may be tempting to download some organization’s policies from the Internet, but Peltier cautions against that approach. Instead, he investigates how best to use examples of policies, standards, and procedures toward the achievement of goals. He analyzes the influx of national and international standards, and outlines how to effectively use them to meet the needs of your business.

After two years of preparation, E.O. 12958, prescribing security classification policy and procedure, was signed by President William Clinton in mid-April 1995. The order was prompted by changing security conditions in the aftermath of the end of the cold war and a desire for more economical and effective management of classified information. The directive was modified in late March 2003 by E.O. 13292, issued by President George W. Bush. Largely prescribed in a series of successive presidential executive orders issued over the past 50 years, security classification policy and procedure provide the rationale and arrangements for designating information officially secret for reasons of national security, and for its declassification as well.