Planning the Clearances in a Worksheet

Language:

The components of these labels are also assigned to users in clearances. The worksheet's Clearance Planner in Table 6–5 defines the label components to be used in clearances at SecCompany.

The following key to Table 6–5 lists the components in descending classification bit order and ascending compartment bit order:

Abbreviation	Name	Component
`REG`	`REGISTERED`	`CLASS`
`NTK`	`NEED_TO_KNOW`	`CLASS`
`IUO`	`INTERNAL_USE_ONLY`	`CLASS`
`PUB`	`PUBLIC`	`CLASS`
`EMGT`	`EXECUTIVE_MANAGEMENT_GROUP`	`COMP`
`SALES`	`SALES`	`COMP`
`FIN`	`FINANCE`	`COMP`
`LEGAL`	`LEGAL`	`COMP`
`MKTG`	`MARKETING`	`COMP`
`HR`	`HUMAN_RESOURCES`	`COMP`
`ENG`	`ENGINEERING`	`COMP`
`MFG`	`MANUFACTURING`	`COMP`
`SYSADM`	`SYSTEM_ADMINISTRATION`	`COMP`
`P_TEAM`	`PROJECT_TEAM`	`COMP`
`ALL`	`ALL_DEPARTMENTS`	`COMP`

Table 6-5 Clearance Planner for SecCompany

CLASS	COMP	COMP	COMP	COMP	COMP	COMP	COMP	COMP	COMP	COMP	COMP	Notes
`REG`	`EMGT`	`ENG`	`FIN`	`HR`	`LEGAL`	`MFG`	`MKTG`	`SALES`	`SYSADM`	`P_TEAM`	`ALL`	Highest possible label, not used *
`REG`												Assigned to personnel as needed §
`NTK`	`EMGT`											Assigned to `EMGT` group
`NTK`		`ENG`										Assigned to `ENG` group
`NTK`			`FIN`									Assigned to `FIN` group
`NTK`				`HR`								Assigned to `HR` group
`NTK`					`LEGAL`							Assigned to `LEGAL` group
`NTK`						`MFG`						Assigned to `MFG` group
`NTK`							`MKTG`					Assigned to `MKTG` group
`NTK`								`SALES`				Assigned to `SALES` group
`NTK`									`SYSADM`			Assigned to `SYSADM` group
`NTK`										`P_TEAM`		Assigned to `P_TEAM` group
`NTK`											`ALL`	Assigned to all groups
`IUO`												Assigned to people with `NDA`s
`PUB`												Assigned to anyone

* The highest possible label in the system consists of the highest classification and all of the defined compartments. Because no one is permitted to access all information in all departments, this label is not in the user accreditation range. No one is assigned this clearance.

§ When working at the REGISTERED sensitivity label, the user must set permissions to restrict access to everyone except the owner. UNIX file permissions of 600 and directory permissions of 700 restrict access.