Section J Attachment 8 -DHS Management Directive 11042.1

Department of Homeland Security
Management Directive System
MD Number: 11042.1

SAFEGUARDING SENSITIVE

BUT UNCLASSIFIED

(FOR OFFICIAL USE ONLY)

INFORMATION

1.6.2005

1. Purpose

This directive establishes Department of Homeland Security (DHS) policy regarding the identification and safeguarding of sensitive but unclassified information originated within DHS. It also applies to other sensitive but unclassified information received by DHS from other government and non-governmental activities.

2. Scope

This directive is applicable to all DHS Headquarters, components, organizational elements, detailees, contractors, consultants, and others to whom access to information covered by this directive is granted.

3. Authorities

Homeland Security Act of 2002.

4. Definitions

Access: The ability or opportunity to gain knowledge of information. For Official Use Only (FOUO): The term used within DHS to identify

unclassified information of a sensitive nature, not otherwise categorized by statute or regulation, the unauthorized disclosure of which could adversely impact a person's privacy or welfare, the conduct of Federal programs, or other programs or operations essential to the national interest. Information impacting the National Security of the United States and classified Confidential, Secret, or Top Secret under Executive Order 12958, "Classified National Security Information," as amended, or its predecessor or successor orders, is not to be considered FOUO. FOUO is not to be considered classified information. Need-to-know: The determination made by an authorized holder of information that a prospective recipient requires access to specific information in order to

MD 11042.1

------ ---

-

---

- ---- -----.-- --- -------

perform or assist in a lawful and authorized governmental function, i.e., access is required for the performance of official duties.
Organizational Element: As used in this directive, organizational element is as defined in DHS MD Number 0010.1, Management Directive System and DHS Announcements.
Protected Critical Infrastructure Information (PCII): Critical infrastructure information (CII) is defined in 6 U.S. C. 131(3) (Section 212(3) of the Homeland Security Act). Critical infrastructure information means information not customarily in the public domain and related to the security of critical infrastructure or protected systems. Protected Critical Infrastructure Information is a subset of CII that is voluntarily submitted to the Federal Government and for