The Concept of Revealed By
In the context of information security, the concept of "revealed by" refers to the classification of information that is not explicitly stated in a source document, but can be deduced from the information that is stated. This concept is important for derivative classification, which is the process of classifying new information that is based on or incorporates classified information from an authorized source.
The concept of "revealed by" is based on the principle that information that is not explicitly stated in a source document, but can be deduced from the information that is stated, is still considered to be classified. This is because the information is still potentially harmful if it is disclosed to unauthorized individuals.
For example, consider a source document that states that "the meeting will be held at 10:00 AM." This information is not classified in itself, but it could be deduced that the location of the meeting is classified if the source document also states that the meeting will be held at a secure facility. In this case, the derivative classifier would need to classify the information about the location of the meeting as classified.
Questions
The concept of "revealed by" can be a complex one, and there are a number of questions that can be asked about it. Some of these questions include:
- What is the difference between "revealed by" and "contained in"?
- What factors should be considered when determining whether information is "revealed by" another piece of information?
- How can derivative classifiers ensure that they are correctly applying the concept of "revealed by"?
Answers
What is the difference between "revealed by" and "contained in"?
The concepts of "revealed by" and "contained in" are both related to the classification of information that is not explicitly stated in a source document. However, there is a key difference between the two concepts.
"Revealed by" refers to information that can be deduced from the information that is stated in a source document. "Contained in" refers to information that is explicitly stated in a source document, but is not classified in itself.
For example, consider a source document that states that "the meeting will be held at a secure facility." The information about the location of the meeting is "revealed by" the information about the security of the facility. However, the information about the security of the facility is "contained in" the source document.
What factors should be considered when determining whether information is "revealed by" another piece of information?
There are a number of factors that should be considered when determining whether information is "revealed by" another piece of information. These factors include:
- The level of interpretation or analysis required to deduce the information.
- The amount of information that is stated in the source document.
- The context in which the information is stated.
For example, if a source document states that "the meeting will be held at a secure facility," a derivative classifier would need to determine whether the location of the meeting can be deduced from this information. If the source document also states that the meeting will be held at a specific location, then the location of the meeting can be deduced from the information that is stated. In this case, the derivative classifier would need to classify the information about the location of the meeting as classified.
How can derivative classifiers ensure that they are correctly applying the concept of "revealed by"?
Derivative classifiers can take a number of steps to ensure that they are correctly applying the concept of "revealed by." These steps include:
- Carefully reading and understanding the source document.
- Considering all of the factors that may be relevant to the determination of whether information is "revealed by" another piece of information.
- Seeking guidance from a classification authority if there is any doubt about whether information is classified.
By following these steps, derivative classifiers can help to ensure that classified information is properly protected.
