Hacker News Reader

Hacker News

Comment by ucha | Hacker News Reader

Parent Full thread

ucha

It's usually the second lowest security level, just above "Public" and below "Secret".

View on HN

We used to just call that "confidential".

We still do, but it's rarely used in my experience.

Third lowest; NOFORN is above public

Do you all say NOFORN the way I think you say NOFORN? (No forn)

"No foreign nationals"

And yes, "no-forn"

NOFORN is not a level but an orthogonal restriction.

Information could be Secret and NOFORN or Secret and Five-Eyes, for instance.

Never heard it called that. What I have heard is something along the lines of "confidential but unclassified" which seems more descriptive to me.

Metaphorically speaking. I.e. not quite DnD, but likely would want to be contained

Those were the terms we used at an investment bank but I imagine different institutions use different classifications.

This would never be used by USG. Confidential -> Classified

The classification scheme is broadly cut up into Confidential, Secret, Top Secret, and Codeword. There are many modifiers to that such as Five-Eyes, Cosmic (NATO), and Restricted-Data (Nuclear Weapon Design).

There are a menagerie of controls that don't rise to classification, like NOFORN, Law Enforcement Sensitive, For official use only, etc.

Code word compartments cut horizontally across the Confidential/Secret/Top Secret hierarchy. I’ve seen stuff that was classified Confidential, but also in a code word protected compartment. I had a TS/SCI/SI/CT/NATO/ATOMAL clearance when I worked for the Defense Information Systems Agency in the Pentagon. Many times over the past 25+ years I have had to correct people who think the compartmented stuff is classified at a level “above Top Secret”, when in fact the compartments just cut horizontally across the hierarchy.

Below Confidential exist other “unclassified” states, like “For Official Use Only” and “No Foreign” (a.k.a., NOFORN). Then, regardless of the classification, you should also have to prove “Need to Know”.

I don't dispute that, I was trying to present a somewhat simplified view of this in a succinct comment.

To me, the most interesting aspects of classification were that the title, content, and classification level itself don't necessarily share levels.

CUI -- Controlled, Unclassified Information (formerly FOUO - For Official Use Only)

As others have pointed out, Confidential is classified, the lowest classification level.

Reply on news.ycombinator.com