DESTROYING CLASSIFIED MATERIALS Classified material is destroyed in accordance with procedures contained in SECNAVINST 5510.36. Burn bags are used to store classified information awaiting destruction at a central destruction facility. AUTOMATED DATA PROCESSING (ADP) SECURITY Automated data processing (ADP) is a Navywide responsibility.  It  encompasses  security  aspects  that contribute  to  the  protection  of  the  total  ADP  activity, office  information  system,  or  network.  ADP  security involves the following elements: Physical Administrative/operating procedures Hardware Software Data Your  command  will  have  an  automated  data processing security officer (ADPSO) who reports to the CO  on  matters  that  concern  the  protection  of electronically   generated   data.   The   ADPSO   is responsible for the physical security of each computer workstation.  The  protection  of  each  workstation involves physical security, physical access control, data file protection, and natural disaster protection. Seek out your ADPSO and make sure your workstation complies with Navy and command regulations for the protection of classified material. Levels of ADP Security Data processed electronically have three levels of security:  Level  I,  Level  II,  and  Level  III.  If  your command processes Level I and/or Level II data, it must provide a specific degree of protection. The following chart defines the three levels of data: LEVEL MEANING Level I Classified data Level II Classified; requires special protection, such as For Official Use Only and data covered by the Privacy Act of 1974 Level III   All other unclassified data Marking Removable Classified Automated Information System (AIS) Pages or portions removed from AIS printouts (fig. 22-7)  for  separate  use  or  maintenance  are  marked  as individual documents. They are marked with the highest overall classification level and include all the required associated markings for all pages or portions that are removed. Software  used  to  produce  classified  material  is programmed  so  that  each  classified  file  stored  by  the system is marked with the highest overall classification level and all associated markings. Also, the outside of AIS media storing classified files is programmed in a readily  usable  format  with  the  highest  overall classification  level  including  all  applicable  warning notices  and  intelligence  markings.  AIS  media  that contains  classified  files  not  programmed  in  a  readily accessible  format  are  marked  on  the  outside  with  the highest  overall  classification  level  and  all  applicable associated markings (normally a sticker or tag) or have marked documentation kept with the media. The computer system and its associated peripherals require controlling and safeguarding at all times. This includes  the  disks,  diskettes,  disk  drives,  monitors, printer  ribbons,  and  generated  hard  copy.  Security procedures  for  electronic  data  is  found  in  the Department of the Navy ADP Security Manual, OPNAVINST 5239.1. Marking Disks As a general rule, the two types of electronic media are  the  working  copy  media  and  finished  media. Working copy media is temporary information. It stays in your work area and under the control of your activity. After  creating  a  working  copy,  retain  it  for  180  days before  destruction.  Finished  media  is  permanent information. It can be released to other commands and activities.  Finished  media  contains  information  that doesn’t change or is pertinent for more than 180 days. 22-12 Student Notes: