The British Classification Marker Strap

(Updated: Nov 26, 2014)

Most of the documents leaked past times Edward Snowden are from the American signals tidings way NSA, simply at that spot are besides quite a issue from their British counterpart GCHQ. Documents from both countries are classified equally TOP SECRET as well as oftentimes possess got additional markings to farther trammel their dissemination.

Where on American documents nosotros run into markings similar COMINT (Communications Intelligence) as well as NOFORN (No Foreign Nationals), the British possess got the mysterious term STRAP followed past times a number.

Information near American classification as well as dissemination markings tin rather easily survive constitute on the mesh (see besides The U.S.A. classification system on this weblog), simply at that spot are hardly whatever details near the British classification system.

But luckily, there's 1 origin available which describes STRAP as well as other British classification practices inwards detail: the extensive Defence Manual of Security from 2001. Chapter 17 (page 1131-1135) of Volume 1 gives an overview of the STRAP Security Guidelines.



Compartmentalization

In the manual, STRAP is described equally a gear upward of nationally agreed principles as well as procedures to heighten the "need-to-know" protection of sensitive tidings (and related operational information) produced past times the British tidings agencies, including armed forces sources.

It adds additional procedures to the measure safety measures employed for tidings matters. STRAP is so comparable amongst the American organisation of protecting the most sensitive data past times control systems amongst carve upward compartments, which are mostly designated past times codewords.

Although on approximately websites it's suggested that STRAP powerfulness represent "STRategic Action Plan", the Defence Manual clearly states that STRAP is a codeword, non an acronym. The STRAP codeword itself is non classified.

Some tidings information, handled inside the STRAP System, require to a greater extent than stringent protection than others. To assure this, at that spot are 3 levels of STRAP protection. These levels are designated, inwards ascending guild of sensitivity and, hence, access control: STRAP 1, STRAP 2 as well as STRAP 3.



Examples of STRAP documents

An instance of a document from the to the lowest degree sensitive category, marked STRAP 1, is a slide from a powerpoint presentation near the BULLRUN programme aimed at breaking encryption methods used on the internet:

Information that is somewhat to a greater extent than sensitive is marked STRAP 2, similar this presentation slide near functioning SOCIALIST, which infiltrated the network of the Belgian telecommunication provider Belgacom:

From the category of most sensitive documents, marked STRAP 3, at that spot are no actual examples available. STRAP 3 for instance protects the precise locations where these interceptions takes place. The existent names of the telecommunication companies that cooperate amongst GCHQ are classified 1 grade below this, at STRAP 2.

As several of these existent names possess got been published, Snowden must somehow got access fifty-fifty to STRAP 3 documents. Probably because they are as well as so sensitive, Greenwald as well as the papers may possess got decided non to release them, simply entirely piece of occupation approximately of the data they contain.



STRAP protection measures

The STRAP organisation is designed to protect data against threats that are specific for sensitive intelligence. H5N1 principal threat is when a target becomes aware of an tidings assail against him, as well as so he tin initiate countermeasures. Therefore, the STRAP organisation aims to minimise the run a jeopardy of leakage of sensitive tidings operations as well as products into earth domain - whether past times accidental exposure or deliberate intent. This is done through the next measures:

- Restricting access to sensitive tidings fabric on a strict "need-to-know" basis;
- Agreeing the appropriate facilities for its protection inwards transit ("STRAP Channels") use, storage as well as disposal;
- Providing explicit briefings as well as guidance for individuals who handgrip this type of material.

Information that requires protection nether the STRAP organisation has to survive clearly defined as well as labelled amongst the appropriate STRAP grade marking. It has to survive carried past times authorized couriers during transit, as well as signed receipts possess got to survive obtained at all stages of handover.

Within the British Ministry of Defence, the implementation of the approved STRAP safety measures is overseen past times individually appointed STRAP Security Officers (STRAPSOs). The overall responsibleness for the review as well as formulation of STRAP policy as well as guidelines is amongst the STRAP Management Board.