Office of Science and Technology Policy Information Security Program Management

32 C.F.R. Part ..., Subpart H
in effectEffective: 2024-07-01

32 C.F.R. § 2400.40 Responsibility.

The Director, OSTP is the senior OSTP official having authority and responsibility to ensure effective and uniform compliance with and implementation of Executive Order 12356 and its implementing Directive No. 1. As such, the Director, OSTP, shall have primary responsibility for providing guidance, oversight and approval of policy and procedures governing the OSTP Information Security Program. The Director, OSTP, may approve waivers or exceptions to the provisions of this regulation to the extent such action is consistent with Executive Order 12356 and Directive No. 1.

32 C.F.R. § 2400.41 Office Review Committee.

The Office of Science and Technology Policy Review Committee (hereinafter referred to as the Office Review Committee) is hereby established and will be responsible for the continuing review of the administration of this Regulation with respect to the classification and declassification of information or material originated or held by the Office of Science and Technology Policy. The Office Review Committee shall be composed of the Executive Director who shall serve as chairperson, the Assistant Director for National Security & Space, and the Security Officer.

32 C.F.R. § 2400.42 Security Officer.

Under the general direction of the Director, the Special Assistant to the Executive Director will serve as the Security Officer and will supervise the administration of this Regulation. He/she will develop programs, in particular a Security Education Program, to insure effective compliance with and implementation of the Information Security Program. Specifically he/she also shall: (a) Maintain a current listing by title and name of all persons who have been designated in writing to have original Top Secret, Secret, and Confidential Classification authority. Listings will be reviewed by the Director on an annual basis. (b) Maintain the record copy of all approved OSTP classification guides. (c) Maintain a current listing of OSTP officials designated in writing to have declassification and downgrading authority. (d) Develop and maintain systematic review guidelines.

32 C.F.R. § 2400.43 Heads of offices.

The Head of each unit is responsible for the administration of this regulation within his area. These responsibilities include: (a) Insuring that national security information is properly classified and protected; (b) Exercising a continuing records review to reduce classified holdings through retirement, destruction, downgrading or declassification; (c) Insuring that reproduction of classified information is kept to the absolute minimum; (d) Issuing appropriate internal security instructions and maintaining the prescribed control and accountability records on classified information under their jurisdiction.

32 C.F.R. § 2400.44 Custodians.

Custodians of classified material shall be responsible for providing protection and accountability for such material at all times and particularly for locking classified material in approved security equipment whenever it is not in use or under direct supervision of authorized persons. Custodians shall follow procedures which insure that unauthorized persons do not gain access to classified information or material by sight or sound, and classified information shall not be discussed with or in the presence of unauthorized persons.

32 C.F.R. § 2400.45 Information Security Program Review.

(a) The Director, OSTP, shall require an annual formal review of the OSTP Information Security Program to ensure compliance with the provisions of Executive Order 12356 and Directive No. 1, and this regulation. (b) The review shall be conducted by a group of three to five persons appointed by the Director and chaired by the Executive Director. The Security Officer will provide any records and assistance required to facilitate the review. (c) The findings and recommendations of the review will be provided to the Director for his determination.

32 C.F.R. § 2400.46 Suggestions or complaints.

Persons desiring to submit suggestions or complaints regarding the Office of Science and Technology Policy Information Security Program should do so in writing. This correspondence should be addressed to: Executive Director, Office of Science and Technology Policy, Executive Office of the President, Washington, DC 20506.

Starting a business? Corpus forms LLCs in all 50 states and DC.