Part C: Sensitivity Designations
In information security, protective measures are based on the classification of the information; the
higher the classification of the information, the more protection you must give that information. The
amount of protection required for a computer is based on the computer. Each Army computer is
designated, or assigned a sensitivity designation, based on the highest classification or sensitivity of
information which will be processed by that computer.
Paragraph 2-2a, AR 380-19, says "AIS will be designated, based on the highest classification or
sensitivity of information processed." Each Army computer, word processor, and any other computer
will be designated or "assigned a sensitivity designation." This designation, like a classification
marking, will tell you how much security you will have to provide that computer.
This sensitivity designation is based on the sensitivity of the information processed; it has nothing to
do with the size, type, or model of the computer. We will go through the sensitivity designations,
starting at the highest level and ending at the lowest level of sensitivity.
Classified Sensitive. Classified Sensitive is the highest sensitivity designation. A computer which
processes any classified information will be designated Classified Sensitive One, Two, or Three as
follows, based on the highest classification of information processed by this computer:
Classified Sensitive One (CS1): A computer will be designated CS1 if it processes sensitive
compartmented information (SCI) or Single Integrated Operations Plan-Extremely Sensitive
Information (SIOP-ESI).
Classified Sensitive Two (CS2): A computer will be designated CS2, if it processes TOP SECRET
information.
Unclassified Sensitive. As the designation suggests, this applies to computers which process
unclassified- sensitive information. As well as protecting classified information from unauthorized
disclosure, we must also protect unclassified-sensitive information, such as FOUO information and
information subject to the Privacy Act of 1974. Computers which processes any unclassified-
sensitive information will be designated Unclassified Sensitive One or Two as follows, based on the
highest sensitivity of information processed by this computer:
Unclassified Sensitive One (US1): A computer will be designated US1, if it processes any
unclassified information which:
Involves intelligence activities.
Involves command and control of forces.
Is determined by the commander to be mission essential.
Unclassified Sensitive Two (US2): This designation also applies to computers which process
unclassified- sensitive information. A computer will be designated US2, if it processes any
unclassified information which includes:
Information subject to the Privacy Act of 1974.
IT0772
2-4
Previous Page
