Authorized sources for derivative classification are primarily three types:
- Security Classification Guide (SCG): This is the primary and most comprehensive document providing precise classification guidance, including classification levels, reasons, and declassification instructions for specific programs or information.
- Properly marked source documents: Existing classified documents that have been properly marked with classification status. Derivative classifiers use these as source material to carry forward classification markings when creating new documents.
- DD Form 254 (Department of Defense Contract Security Classification Specification): This applies mainly to contractors, providing classification guidance related to contracts and identifying the classification level and security requirements for contract-related information.
Other sources, like memory, internet, unconfirmed sources, or personal opinions, are not authorized for derivative classification. Also, derivative classifiers should consult security managers or original classifiers if the authorized sources do not provide sufficient guidance or there is doubt about classification. In summary, the authorized sources for derivative classification are:
- Security Classification Guide (SCG)
- Properly marked classified source documents
- DD Form 254 for contractors
These sources ensure that classification is consistent and based on original classification decisions.