{"id":80582,"date":"2023-06-20T14:30:24","date_gmt":"2023-06-20T04:30:24","guid":{"rendered":"https:\/\/www.aspistrategist.ru\/?p=80582"},"modified":"2023-07-18T12:38:48","modified_gmt":"2023-07-18T02:38:48","slug":"classifications-and-clearances-are-the-bricks-and-mortar-of-national-security","status":"publish","type":"post","link":"https:\/\/www.aspistrategist.ru\/classifications-and-clearances-are-the-bricks-and-mortar-of-national-security\/","title":{"rendered":"Classifications and clearances are the bricks and mortar of national security"},"content":{"rendered":"
<\/figure>\n

Everyone has secrets. You don\u2019t like Nana\u2019s fruitcake but don\u2019t want to tell her. That\u2019s a secret, but it\u2019s not classified SECRET (well, unless the fruitcake has illicit ingredients, not just dried fruit).<\/p>\n

Yet from social media to pop culture, terms like \u2018classified\u2019, \u2018secret\u2019 and \u2018top secret\u2019 are thrown around with abandon. Often uninformed commentators, lobbyists and ideologues with little experience working in these environments purport to speak on these terms with authority. That\u2019s unhelpful because information security, and clearances for information access, underpin the effective conduct of statecraft\u2014especially when it involves intelligence matters.<\/p>\n

In Australia, security classifications are applied to information based on the amount of damage it could cause if it was unlawfully disclosed.<\/p>\n

What classifications mean and what security clearances are in an Australian government context is detailed in the foundational and constantly updated Protective Security Policy Framework<\/a> (PSPF).<\/p>\n

Compromise of information classified TOP SECRET would be expected to cause \u2018exceptionally grave damage to the national interest, organisations or individuals\u2019. (The leaking of Harry and Meghan\u2019s plans for a TV project<\/a> or new IOC rules<\/a> for Olympic athletes? Not so much.)<\/p>\n

National security agencies and the government haven\u2019t always done enough to explain this to Australians. Proper use of these systems ensures national security. It\u2019s important that the public understand the relative seriousness.<\/p>\n

There are three levels of security classification used in Australia: PROTECTED, SECRET and TOP SECRET.<\/p>\n

Protected information can be accessed with a minimum \u2018baseline\u2019 clearance. But such information does require some restrictions on how it\u2019s stored, communicated and used. Formally, it is information the compromise of which would be expected to cause \u2018damage to the national interest, organisations or individuals\u2019. Compromising secret information could cause \u2018serious damage\u2019, and top secret \u2018exceptionally grave damage\u2019. Similar language<\/a> is used by other governments in their definitions of classification levels.<\/p>\n

The \u2018exceptionally grave damage\u2019 threshold is a high bar and should give pause. Examples in the PSPF include \u2018significantly affecting the operational effectiveness, security or intelligence operations of Australian or allied forces\u2019, \u2018directly provoking international conflict or causing exceptionally grave damage to relations with friendly countries\u2019 and \u2018widespread loss of life\u2019.<\/p>\n

Some classifications, such as RESTRICTED, HIGHLY PROTECTED and CONFIDENTIAL, are no longer used and are now found only in historical documents. In addition, there\u2019s OFFICIAL, a protective marking used for government documents but not strictly a security classification since it doesn\u2019t require a clearance for access.<\/p>\n

Agencies determining classifications are obliged to set them at the \u2018lowest reasonable level\u2019, and the PSPF outlines potential downsides of overclassification.<\/p>\n

To access material classified as PROTECTED and above requires a security clearance, of which there are four types: baseline; NV1 (negative vetting 1), aka a secret clearance; NV2 (negative vetting 2), top secret; and PV (positive vetting), the highest clearance.<\/p>\n

The Australian Government Security Vetting Authority (AGSVA) in the Department of Defence undertakes the bulk of security clearance work.\u00a0 However, important changes are happening with the creation of a new vetting authority<\/a> within the Australian Security Intelligence Organisation responsible for all PV clearances\u2014rebadged<\/a> as TOP SECRET\u2014Privileged Access.<\/p>\n

That change reflects Australia\u2019s heightened security and counterintelligence concerns and is being implemented through legislation<\/a> recently reviewed<\/a>\u00a0by the Parliamentary Joint Committee on Intelligence and Security. The new arrangements also reflect the difference between NV2 and PV clearances, which both provide access to top secret information. A crude but useful analogy: an NV2 lets you eat sausages, but a PV also lets you see how sausages are made (be involved in discussions about sausage-making techniques, have access to a sausage warehouse, and so on).<\/p>\n

Before this, PV clearances were issued by a small number of \u2018authorised agencies\u2019 and AGSVA. AGSVA, and those authorised agencies, will continue to be responsible for non-PV clearances.<\/p>\n

ASIO\u2019s new responsibility is not unusual\u2014security agencies in Canada<\/a> and New Zealand<\/a>, for example, perform comprehensive vetting roles for their countries\u2019 public services.<\/p>\n

Centralised vetting has significant potential benefits, particularly for increasing efficiency and effectiveness, but a principal challenge is effectively integrating clearance management by a central agency with ongoing personnel security management by individual employers.<\/p>\n

Clearances are important because they govern access. To read (or just to have access to) a classified report requires a commensurate minimum level of clearance. But information is not always in the form of a report. Access might involve a whole system or a particular store of information. It might involve being part of sensitive discussions and planning. Or it might mean physical access to a particular kind of classified space. Therefore, the type of access and the type of information might have practical implications for employment in a specific role or even by a particular agency.<\/p>\n

Obtaining a clearance<\/a> involves escalating levels of intrusiveness and obligations on the candidate, which can last a lifetime. The vetting process necessarily involves significant personal imposts, especially on an individual\u2019s privacy. It involves multiple steps, noting that in this context a police check is a step, not a clearance. This is also why specific accountability and whistleblowing mechanisms are instituted for clearance holders, such as the role played by the Office of the Inspector-General of Intelligence and Security<\/a> in relation to intelligence officials. Furthermore, access to privileged information, per a PV clearance flips the burden of proof from \u2018why shouldn\u2019t this person have a clearance\u2019 to (as it says, positively) \u2018why should<\/em> this person have a clearance\u2019.<\/p>\n

Clearances have time limits and need to be periodically reviewed and re-adjudicated\u2014in the lingo, \u2018revalidated<\/a>\u2019. PV clearances, for example, are reviewed at least every seven years.<\/p>\n

For all their necessity, security clearances are also a significant challenge for organisations. They can complicate engagement of staff, particularly when organisations<\/a> are trying to develop capabilities quickly.<\/p>\n

Access to information isn\u2019t limited only by classification and clearance level. Code words are added to classifications as caveats to further limit access to those who have also been briefed into (and retain) a particular compartment of knowledge\u2014\u2018sensitive compartmented information\u2019 in US parlance\u2014because they need to know (NTK) that information to perform their duties. As such, a clearance is just the first step in the process of accessing information. Simply having a requisite clearance doesn\u2019t give someone a right to access, or ownership over, classified information. In addition, there are \u2018special handling instructions\u2019 (most notably for cabinet materials) and \u2018information management markers\u2019 (such as for legally privileged information).<\/p>\n

Finally, there is \u2018releasability\u2019. Nationality in the 21st century might be a contested concept in op-ed pages or on Twitter, but in the national security arena nationality via citizenship remains inviolable. Releasability controls which nationals can access what information.<\/p>\n

This kind of limitation is universal to all governments. It just happens that certain intelligence communities have mature intelligence-sharing regimens, such as the Five Eyes<\/a> intelligence alliance or NATO, but also bilaterally, that make releasability relevant. Perhaps ironically, releasability markings are an indicator of the regularisation of sharing.<\/p>\n

AUSTEO (Australian eyes only) material is limited only to Australian citizens. The lesser used AGAO (Australian government agencies only) extends access to seconded allied personnel. The US government has its own equivalent to AUSTEO\u2014NOFORN (not releasable to foreign nationals).<\/p>\n

In addition, there\u2019s the concept of the need-to-know principle itself, which has been challenged in the post-9\/11 era and even more recently<\/a> by rival concepts like \u2018responsibility to share\u2019.<\/p>\n

There is an important carveout. Security clearances aren\u2019t required for certain officeholders, including members of parliament, ministers, judges, royal commissioners and the governor-general. This reflects their authority, derived from election or appointment. Nonetheless, similar forms of briefings are typically used, not for the purpose of formal access but to inform about sensitivities, appropriate handling or other matters.<\/p>\n

So, when a news story identifies something<\/a> as<\/a> \u2018top<\/a> secret<\/a>\u2019, ask whether it\u2019s actually referring to material classified TOP SECRET, which can be accessed only by people with an NV2 or PV security clearance. Or is it just some hitherto unknown piece of juicy gossip or a peccadillo someone is trying to hide?<\/p>\n

Accuracy matters, and secrets still matter. Even in a global village, everyone wants to know everyone else\u2019s business.<\/p>\n","protected":false},"excerpt":{"rendered":"

Everyone has secrets. You don\u2019t like Nana\u2019s fruitcake but don\u2019t want to tell her. That\u2019s a secret, but it\u2019s not classified SECRET (well, unless the fruitcake has illicit ingredients, not just dried fruit). Yet from …<\/p>\n","protected":false},"author":1690,"featured_media":80585,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_mi_skip_tracking":false,"footnotes":""},"categories":[1],"tags":[416,170,301,1999],"class_list":["post-80582","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-general","tag-australian-government","tag-intelligence","tag-national-security-2","tag-vetting"],"acf":[],"yoast_head":"\nClassifications and clearances are the bricks and mortar of national security | The Strategist<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.aspistrategist.ru\/classifications-and-clearances-are-the-bricks-and-mortar-of-national-security\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Classifications and clearances are the bricks and mortar of national security | The Strategist\" \/>\n<meta property=\"og:description\" content=\"Everyone has secrets. You don\u2019t like Nana\u2019s fruitcake but don\u2019t want to tell her. That\u2019s a secret, but it\u2019s not classified SECRET (well, unless the fruitcake has illicit ingredients, not just dried fruit). Yet from ...\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.aspistrategist.ru\/classifications-and-clearances-are-the-bricks-and-mortar-of-national-security\/\" \/>\n<meta property=\"og:site_name\" content=\"The Strategist\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/ASPI.org\" \/>\n<meta property=\"article:published_time\" content=\"2023-06-20T04:30:24+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2023-07-18T02:38:48+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.aspistrategist.ru\/wp-content\/uploads\/2023\/06\/GettyImages-468891802.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"725\" \/>\n\t<meta property=\"og:image:height\" content=\"482\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Chris Taylor\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@ASPI_org\" \/>\n<meta name=\"twitter:site\" content=\"@ASPI_org\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Chris Taylor\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"7 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.aspistrategist.ru\/#website\",\"url\":\"https:\/\/www.aspistrategist.ru\/\",\"name\":\"The Strategist\",\"description\":\"ASPI's analysis and commentary site\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.aspistrategist.ru\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-AU\"},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-AU\",\"@id\":\"https:\/\/www.aspistrategist.ru\/classifications-and-clearances-are-the-bricks-and-mortar-of-national-security\/#primaryimage\",\"url\":\"https:\/\/www.aspistrategist.ru\/wp-content\/uploads\/2023\/06\/GettyImages-468891802.jpg\",\"contentUrl\":\"https:\/\/www.aspistrategist.ru\/wp-content\/uploads\/2023\/06\/GettyImages-468891802.jpg\",\"width\":725,\"height\":482,\"caption\":\"File folder with red TOP SECRET on it\"},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.aspistrategist.ru\/classifications-and-clearances-are-the-bricks-and-mortar-of-national-security\/\",\"url\":\"https:\/\/www.aspistrategist.ru\/classifications-and-clearances-are-the-bricks-and-mortar-of-national-security\/\",\"name\":\"Classifications and clearances are the bricks and mortar of national security | The Strategist\",\"isPartOf\":{\"@id\":\"https:\/\/www.aspistrategist.ru\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/www.aspistrategist.ru\/classifications-and-clearances-are-the-bricks-and-mortar-of-national-security\/#primaryimage\"},\"datePublished\":\"2023-06-20T04:30:24+00:00\",\"dateModified\":\"2023-07-18T02:38:48+00:00\",\"author\":{\"@id\":\"https:\/\/www.aspistrategist.ru\/#\/schema\/person\/fe95409fd7ddc7fa5409b032620ae462\"},\"breadcrumb\":{\"@id\":\"https:\/\/www.aspistrategist.ru\/classifications-and-clearances-are-the-bricks-and-mortar-of-national-security\/#breadcrumb\"},\"inLanguage\":\"en-AU\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.aspistrategist.ru\/classifications-and-clearances-are-the-bricks-and-mortar-of-national-security\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.aspistrategist.ru\/classifications-and-clearances-are-the-bricks-and-mortar-of-national-security\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/www.aspistrategist.ru\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Classifications and clearances are the bricks and mortar of national security\"}]},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.aspistrategist.ru\/#\/schema\/person\/fe95409fd7ddc7fa5409b032620ae462\",\"name\":\"Chris Taylor\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-AU\",\"@id\":\"https:\/\/www.aspistrategist.ru\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/23d6141a28d9ae1bd0bcaa8f30089fd6?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/23d6141a28d9ae1bd0bcaa8f30089fd6?s=96&d=mm&r=g\",\"caption\":\"Chris Taylor\"},\"url\":\"https:\/\/www.aspistrategist.ru\/author\/chris-taylor\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Classifications and clearances are the bricks and mortar of national security | The Strategist","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.aspistrategist.ru\/classifications-and-clearances-are-the-bricks-and-mortar-of-national-security\/","og_locale":"en_US","og_type":"article","og_title":"Classifications and clearances are the bricks and mortar of national security | The Strategist","og_description":"Everyone has secrets. You don\u2019t like Nana\u2019s fruitcake but don\u2019t want to tell her. That\u2019s a secret, but it\u2019s not classified SECRET (well, unless the fruitcake has illicit ingredients, not just dried fruit). Yet from ...","og_url":"https:\/\/www.aspistrategist.ru\/classifications-and-clearances-are-the-bricks-and-mortar-of-national-security\/","og_site_name":"The Strategist","article_publisher":"https:\/\/www.facebook.com\/ASPI.org","article_published_time":"2023-06-20T04:30:24+00:00","article_modified_time":"2023-07-18T02:38:48+00:00","og_image":[{"width":725,"height":482,"url":"https:\/\/www.aspistrategist.ru\/wp-content\/uploads\/2023\/06\/GettyImages-468891802.jpg","type":"image\/jpeg"}],"author":"Chris Taylor","twitter_card":"summary_large_image","twitter_creator":"@ASPI_org","twitter_site":"@ASPI_org","twitter_misc":{"Written by":"Chris Taylor","Est. reading time":"7 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebSite","@id":"https:\/\/www.aspistrategist.ru\/#website","url":"https:\/\/www.aspistrategist.ru\/","name":"The Strategist","description":"ASPI's analysis and commentary site","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.aspistrategist.ru\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-AU"},{"@type":"ImageObject","inLanguage":"en-AU","@id":"https:\/\/www.aspistrategist.ru\/classifications-and-clearances-are-the-bricks-and-mortar-of-national-security\/#primaryimage","url":"https:\/\/www.aspistrategist.ru\/wp-content\/uploads\/2023\/06\/GettyImages-468891802.jpg","contentUrl":"https:\/\/www.aspistrategist.ru\/wp-content\/uploads\/2023\/06\/GettyImages-468891802.jpg","width":725,"height":482,"caption":"File folder with red TOP SECRET on it"},{"@type":"WebPage","@id":"https:\/\/www.aspistrategist.ru\/classifications-and-clearances-are-the-bricks-and-mortar-of-national-security\/","url":"https:\/\/www.aspistrategist.ru\/classifications-and-clearances-are-the-bricks-and-mortar-of-national-security\/","name":"Classifications and clearances are the bricks and mortar of national security | The Strategist","isPartOf":{"@id":"https:\/\/www.aspistrategist.ru\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.aspistrategist.ru\/classifications-and-clearances-are-the-bricks-and-mortar-of-national-security\/#primaryimage"},"datePublished":"2023-06-20T04:30:24+00:00","dateModified":"2023-07-18T02:38:48+00:00","author":{"@id":"https:\/\/www.aspistrategist.ru\/#\/schema\/person\/fe95409fd7ddc7fa5409b032620ae462"},"breadcrumb":{"@id":"https:\/\/www.aspistrategist.ru\/classifications-and-clearances-are-the-bricks-and-mortar-of-national-security\/#breadcrumb"},"inLanguage":"en-AU","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.aspistrategist.ru\/classifications-and-clearances-are-the-bricks-and-mortar-of-national-security\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.aspistrategist.ru\/classifications-and-clearances-are-the-bricks-and-mortar-of-national-security\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.aspistrategist.ru\/"},{"@type":"ListItem","position":2,"name":"Classifications and clearances are the bricks and mortar of national security"}]},{"@type":"Person","@id":"https:\/\/www.aspistrategist.ru\/#\/schema\/person\/fe95409fd7ddc7fa5409b032620ae462","name":"Chris Taylor","image":{"@type":"ImageObject","inLanguage":"en-AU","@id":"https:\/\/www.aspistrategist.ru\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/23d6141a28d9ae1bd0bcaa8f30089fd6?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/23d6141a28d9ae1bd0bcaa8f30089fd6?s=96&d=mm&r=g","caption":"Chris Taylor"},"url":"https:\/\/www.aspistrategist.ru\/author\/chris-taylor\/"}]}},"_links":{"self":[{"href":"https:\/\/www.aspistrategist.ru\/wp-json\/wp\/v2\/posts\/80582"}],"collection":[{"href":"https:\/\/www.aspistrategist.ru\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.aspistrategist.ru\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.aspistrategist.ru\/wp-json\/wp\/v2\/users\/1690"}],"replies":[{"embeddable":true,"href":"https:\/\/www.aspistrategist.ru\/wp-json\/wp\/v2\/comments?post=80582"}],"version-history":[{"count":7,"href":"https:\/\/www.aspistrategist.ru\/wp-json\/wp\/v2\/posts\/80582\/revisions"}],"predecessor-version":[{"id":81180,"href":"https:\/\/www.aspistrategist.ru\/wp-json\/wp\/v2\/posts\/80582\/revisions\/81180"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.aspistrategist.ru\/wp-json\/wp\/v2\/media\/80585"}],"wp:attachment":[{"href":"https:\/\/www.aspistrategist.ru\/wp-json\/wp\/v2\/media?parent=80582"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.aspistrategist.ru\/wp-json\/wp\/v2\/categories?post=80582"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.aspistrategist.ru\/wp-json\/wp\/v2\/tags?post=80582"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}