! SECURITY GUIDELINES
This handbook is designed to introduce you to some of the basic security principles
and procedures with which all NSA employees must comply. It highlights some of your
security responsibilities, and provides guidelines for answering questions you may be
asked concerning your association with this Agency. Although you will be busy during
the forthcoming weeks learning your job, meeting co-workers, and becoming accustomed
to a new work environment, you are urged to become familiar with the security
information contained in this handbook. Please note that a listing of telephone numbers is
provided at the end of this handbook should you have any questions or concerns.
! INTRODUCTION
In joining NSA you have been given an opportunity to participate in the activities of
one of the most important intelligence organizations of the United States Government. At
the same time, you have also assumed a trust which carries with it a most important
individual responsibility—the safeguarding of sensitive information vital to the security
of our nation. While it is impossible to estimate in actual dollars and cents the value of
the work being conducted by this Agency, the information to which you will have access
at NSA is without question critically important to the defense of the United States. Since
this information may be useful only if it is kept secret, it requires a very special measure
of protection. The specific nature of this protection is set forth in various Agency security
regulations and directives. The total NSA Security Program, however, extends beyond
these regulations. It is based upon the concept that security begins as a state of mind. The
program is designed to develop an appreciation of the need to protect information vital to
the national defense, and to foster the development of a level of awareness which will
make security more than routine compliance with regulations. At times, security practices
and procedures cause personal inconvenience. They take time and effort and on occasion
may make it necessary for you to voluntarily forego some of your usual personal
prerogatives. But your compensation for the inconvenience is the knowledge that the
work you are accomplishing at NSA, within a framework of sound security practices,
contributes significantly to the defense and continued security of the United States of
America. I extend to you my very best wishes as you enter upon your chosen career or
assignment with NSA.

INITIAL SECURITY RESPONSIBILITIES
! ANONYMITY
Perhaps one of the first security practices with which new NSA personnel should
become acquainted is the practice of anonymity. In an open society such as ours, this
practice is necessary because information which is generally available to the public is
available also to hostile intelligence. Therefore, the Agency mission is best accomplished
apart from public attention. Basically, anonymity means that NSA personnel are
encouraged not to draw attention to themselves nor to their association with this Agency.
NSA personnel are also cautioned neither to confirm nor deny any specific questions
about NSA activities directed to them by individuals not affiliated with the Agency.
The ramifications of the practice of anonymity are rather far reaching, and its success
depends on the cooperation of all Agency personnel. Described below you will find some
examples of situations that you may encounter concerning your employment and how
you should cope with them. Beyond the situations cited, your judgement and discretion
will become the deciding factors in how you respond to questions about your
employment.
! ANSWERING QUESTIONS ABOUT YOUR EMPLOYMENT
Certainly, you may tell your family and friends that you are employed at or assigned
to the National Security Agency. There is no valid reason to deny them this information.
However, you may not disclose to them any information concerning specific aspects of
the Agency’s mission, activities, and organization. You should also ask them not to
publicize your association with NSA.
Should strangers or casual acquaintances question you about your place of
employment, an appropriate reply would be that you work for the Department of
Defense. If questioned further as to where you are employed within the Department of
Defense, you may reply, “NSA.” When you inform someone that you work for NSA (or
the Department of Defense) you may expect that the next question will be, “What do you
do?” It is a good idea to anticipate this question and to formulate an appropriate answer.
Do not act mysteriously about your employment, as that would only succeed in drawing
more attention to yourself.
If you are employed as a secretary, engineer, computer scientist, or in a clerical,
administrative, technical, or other capacity identifiable by a general title which in no way
indicates how your talents are being applied to the mission of the Agency, it is suggested
that you state this general title. If you are employed as a linguist, you may say that you
are a linguist, if necessary. However, you should not indicate the specific language(s)
with which you are involved.

GENERAL RESPONSIBILITIES
! ESPIONAGE AND TERRORISM
During your security indoctrination and throughout your NSA career you will become
increasingly aware of the espionage and terrorist threat to the United States. Your
vigilance is the best single defense in protecting NSA information, operations, facilities
and people. Any information that comes to your attention that suggests to you the
existence of, or potential for, espionage or terrorism against the U.S. or its allies must be
promptly reported by you to the Office of Security.
There should be no doubt in your mind about the reality of the threats. You are now
affiliated with the most sensitive agency in government and are expected to exercise
vigilance and common sense to protect NSA against these threats.
! CLASSIFICATION
Originators of correspondence, communications, equipment, or documents within the
Agency are responsible for ensuring that the proper classification, downgrading
information and, when appropriate, proper caveat notations are assigned to such material.
(This includes any handwritten notes which contain classified information). The three
levels of classification are Confidential, Secret and Top Secret. The NSA Classification
Manual should be used as guidance in determining proper classification. If after review of
this document you need assistance, contact the Classification Advisory Officer (CAO)
assigned to your organization, or the Information Policy Division (Q43).
! NEED-TO-KNOW
Classified information is disseminated only on a strict “need-to-know” basis. The
“need-to know” policy means that classified information will be disseminated only to
those individuals who, in addition to possessing a proper clearance, have a requirement to
know this information in order to perform their official duties (need-to-know). No person
is entitled to classified information solely by virtue of office, position, rank, or security
clearance.
All NSA personnel have the responsibility to assert the “need-to-know” policy as
part of their responsibility to protect sensitive information. Determination of “need-to-
know” is a supervisory responsibility. This means that if there is any doubt in your mind
as to an individual’s “need-to-know,” you should always check with your supervisor
before releasing any classified material under your control.