FAS

Better Oversight Due on Unclassified Control Markings

11.16.10 | 2 min read | Text by Steven Aftergood

The use of access control markings such as the Transportation Security Agency’s “Sensitive Security Information” (SSI) to limit disclosure of unclassified records has been criticized from time to time as arbitrary and self-serving.  But now, due to a subtle change in the recent executive order on “Controlled Unclassified Information,” SSI and other such markings should receive new oversight and scrutiny.

In a preliminary draft (pdf) of the new executive order 13556 on Controlled Unclassified Information (at section 1.3b), four existing control markings were “grandfathered” into the new CUI system — Sensitive Security Information, Critical Infrastructure Information, Chemical Vulnerability Information, and Safeguards Information.  This means that they were presumptively approved for future use without any further review.

But in the final draft of the executive order approved by the President on November 4, that provision and those presumptive approvals were withdrawn.  Consequently, SSI and the other control markings will have to go through the same external review and approval process as other controls on unclassified information in order to qualify as CUI.

SSI and several other unclassified control categories are authorized in statute, so they cannot be categorically eliminated or disapproved by the CUI Executive Agent.  But what the CUI review process can do is to help ensure that what agencies claim is SSI really does fall into that category.

This became a live issue recently when the Transportation Security Administration moved to seal a lawsuit brought by a former TSA air marshal by claiming that the names of officials who disciplined and removed the air marshal are themselves SSI.  To outside observers, this appeared to be an abuse of the SSI control marking to gain tactical advantage in the lawsuit.  See “Why Is the TSA Keeping Air Marshal Employment Disputes Under a Veil of Secrecy?” by Nick Schwellenbach, Project on Government Oversight (POGO), November 2, 2010.

Eliminating the a priori approval of SSI markings from the CUI system should mean more scrupulous use of such markings, according to a government official involved in drafting the new executive order. “Treating them as any other allows oversight…to at least try to avoid the sort of alleged absurd decisions highlighted by POGO,” the official said.

publications
See all publications
Emerging Technology
day one project
Policy Memo
Ready for the Next Threat: Creating a Commercial Public Health Emergency Payment System

In anticipation of future known and unknown health security threats, including new pandemics, biothreats, and climate-related health emergencies, our answers need to be much faster, cheaper, and less disruptive to other operations.

12.23.24 | 5 min read
read more
Emerging Technology
day one project
Policy Memo
From Strategy to Impact: Establishing an AI Corps to Accelerate HHS Transformation

To unlock the full potential of artificial intelligence within the Department of Health and Human Services, an AI Corps should be established, embedding specialized AI experts within each of the department’s 10 agencies.

12.23.24 | 10 min read
read more
Government Capacity
day one project
Policy Memo
Transforming the Carceral Experience: Leveraging Technology for Rehabilitation

Investing in interventions behind the walls is not just a matter of improving conditions for incarcerated individuals—it is a public safety and economic imperative. By reducing recidivism through education and family contact, we can improve reentry outcomes and save billions in taxpayer dollars.

12.20.24 | 7 min read
read more
Emerging Technology
day one project
Policy Memo
Creating a National Exposome Project

The U.S. government should establish a public-private National Exposome Project (NEP) to generate benchmark human exposure levels for the ~80,000 chemicals to which Americans are regularly exposed.

12.20.24 | 7 min read
read more