Local Area Networks (LANs) in Aircraft - FTP Directory Listing - FAA

software has been confirmed as level E by the certification authority, no
further guidelines of this document apply.” (Quoted from Section 2.2.2 of
reference 5.)
6.3.2 Federal Government Security Classifications.
The Federal Government security classification system is codified in Executive Order 12958,
“Classified Nation Security Information” [86], and Executive Order 13292 [87], “Further
Amendment to Executive Order 12958.” Software and data are protected based upon their
degree of sensitivity as measured by how much damage the release of information could cause to
national security. The Executive Order defines the following levels of security and their impact
on national security.
“Information may be classified at one of the following three levels:
a. Top Secret shall be applied to information, the unauthorized disclosure of
which reasonably could be expected to cause exceptionally grave damage to
the national security that the original classification authority is able to identify
or describe. It merits the highest level of protection.
b. Secret shall be applied to information, the unauthorized disclosure of which
reasonable could be expected to cause serious damage to the national security
that the original classification authority is able to identify or describe.
c. Confidential shall be applied to information, the unauthorized disclosure of
which reasonably could be expected to cause damage to the national security
that the original classification authority is able to identify or describe.”
(Quoted from Section 1.3 of reference 87.
The Executive Order also specifies that the information systems containing this information have
controls that prevent access by unauthorized persons and ensure the integrity of the information.
In addition to the Executive Order, the Computer Security Act of 1987 (PL-100-235) [88]
established requirements for protection of certain information on Federal Government computer
systems. It also defined an addition information classification, SBU.
“Any information the loss, misuse, or unauthorized access to or modification of
which could adversely affect the national interest or the conduct of Federal
programs or the privacy to which individuals are entitled under [the Privacy Act
of 1974] but which has not been specifically authorized under criteria established
by an Executive Order or an Act of Congress to be kept secret in the interest of
national defense or foreign policy.” [88]
As a result, any information that violates privacy of an individual or that is controlled from
export to foreign nations can fall into the SBU category.
85