ntk:AccessProfile

An access policy name followed by 1 or more values representing a profile that a user wanting access to the document must meet. Logic for the profile list being boolean AND vs OR is Access Policy defined.

Element information

Namespace: urn:us:gov:ic:ntk

Schema document: NTK/IC-NTK.xsd

Type: ntk:AccessProfileType

Properties: Global, Qualified

Content

Sequence [1..1]
1. ntk:AccessPolicy [1..1]
2. ntk:AccessProfileValue [1..*]

Attributes

Name	Occ	Type	Description	Notes
ism:classification	[1..1]	ismclassall:CVEnumISMClassificationAll	This attribute is used at both the resource and the portion levels. A single indicator of the highest level of classification applicable to an information resource or portion within the domain of classified national security information. The Classification element is always used in conjunction with the Owner Producer element. Taken together, the two elements specify the classification category and the type of classification (US, non-US, or Joint). It is manifested in portion marks and security banners. PERMISSIBLE VALUES The permissible values for this simple type are defined in the Controlled Value Enumeration: CVEnumISMClassificationAll.xml	from group ism:SecurityAttributesGroup
ism:ownerProducer	[1..1]	ismownpro:CVEnumISMOwnerProducer	This attribute is used at both the resource and the portion levels. One or more indicators identifying the national government or international organization that have purview over the classification marking of an information resource or portion therein. This element is always used in conjunction with the Classification element. Taken together, the two elements specify the classification category and the type of classification (US, non-US, or Joint). Within protected internal organizational spaces this element may include one or more indicators identifying information which qualifies as foreign government information for which the source(s) of the information must be concealed. Measures must be taken prior to dissemination of the information to conceal the source(s) of the foreign government information. Specifically, under these specific circumstances, when data are moved to the shared spaces, the non-disclosable owner(s) and/or producer(s) listed in this data element's value should be removed and replaced with "FGI". The attribute value may be manifested in portion marks or security banners. PERMISSIBLE VALUES 1) The value "FGI" is permitted under the circumstances described above. 2) The full set of values are defined in the Controlled Value Enumeration: CVEnumISMOwnerProducer.xml	from group ism:SecurityAttributesGroup
ism:joint	[0..1]	xsd:boolean	This attribute, when true, is used to signify that multiple values in the ownerProducer attribute are JOINT owners of the data.	from group ism:SecurityAttributesGroup
ism:SCIcontrols	[0..1]	ismscicon:CVEnumISMSCIControls	This attribute is used at both the resource and the portion levels. One or more indicators identifying sensitive compartmented information control system(s). It is manifested in portion marks and security banners. PERMISSIBLE VALUES The permissible values for this attribute are defined in the Controlled Value Enumeration: CVEnumISMSCIControls.xml	from group ism:SecurityAttributesGroup
ism:SARIdentifier	[0..1]	ismsar:CVEnumISMSAR	This attribute is used at both the resource and the portion levels. One or more indicators identifying the defense or intelligence programs for which special access is required. It is manifested in portion marks and security banners. PERMISSIBLE VALUES The permissible values for this attribute are defined in the Controlled Value Enumeration: CVEnumISMSAR.xml	from group ism:SecurityAttributesGroup
ism:atomicEnergyMarkings	[0..1]	ismatomic:CVEnumISMatomicEnergyMarkings	This attribute is used at both the resource and the portion levels. One or more indicators identifying DoE markings. It is manifested in portion marks and security banners. The permissible values for this simple type are defined in the Controlled Value Enumeration: CVEnumISMAtomicEnergyMarkings.xml	from group ism:SecurityAttributesGroup
ism:disseminationControls	[0..1]	ismdissem:CVEnumISMDissem	This attribute is used at both the resource and the portion levels. One or more indicators identifying the expansion or limitation on the distribution of information. It is manifested in portion marks and security banners. PERMISSIBLE VALUES The permissible values for this attribute are defined in the Controlled Value Enumeration: CVEnumISMDissem.xml	from group ism:SecurityAttributesGroup
ism:displayOnlyTo	[0..1]	ismrelto:CVEnumISMRelTo	This attribute is used at both the resource and the portion levels. One or more indicators identifying the country or countries and/or international organization(s) to which classified information may be displayed but NOT released based on the determination of an originator in accordance with established foreign disclosure procedures. This element is used in conjunction with the DisplayOnly Dissemination Controls value. It is manifested in portion marks and security banners. PERMISSIBLE VALUES The permissible values for this attribute are defined in the Controlled Value Enumeration: CVEnumISMRelTo.xml	from group ism:SecurityAttributesGroup
ism:FGIsourceOpen	[0..1]	ismfgio:CVEnumISMFGIOpen	This attribute is used at both the resource and the portion levels. One or more indicators identifying information which qualifies as foreign government information for which the source(s) of the information is not concealed. The attribute can indicate that the source of information of foreign origin is unknown. It is manifested in portion marks and security banners. PERMISSIBLE VALUES 1) The value "UNKNOWN" is permitted under the circumstances described above. 2) The full set of values are defined in the Controlled Value Enumeration: CVEnumISMFGIOpen.xml	from group ism:SecurityAttributesGroup
ism:FGIsourceProtected	[0..1]	ismfgip:CVEnumISMFGIProtected	This attribute is used at both the resource and the portion levels. This attribute has unique specific rules concerning its usage. A single indicator that information qualifies as foreign government information for which the source(s) of the information must be concealed. Within protected internal organizational spaces this element may be used to maintain a record of the one or more indicators identifying information which qualifies as foreign government information for which the source(s) of the information must be concealed. Measures must be taken prior to dissemination of the information to conceal the source(s) of the foreign government information. An indication that information qualifies as foreign government information according to CAPCO guidelines for which the source(s) of the information must be concealed when the information is disseminated in shared spaces This data element has a dual purpose. Within shared spaces, the data element serves only to indicate the presence of information which is categorized as foreign government information according to CAPCO guidelines for which the source(s) of the information is concealed, in which case, this data element's value will always be "FGI". The data element may also be employed in this manner within protected internal organizational spaces. However, within protected internal organizational spaces this data element may alternatively be used to maintain a formal record of the foreign country or countries and/or registered international organization(s) that are the non-disclosable owner(s) and/or producer(s) of information which is categorized as foreign government information according to CAPCO guidelines for which the source(s) of the information must be concealed when the resource is disseminated to shared spaces. If the data element is employed in this manner, then additional measures must be taken prior to dissemination of the resource to shared spaces so that any indications of the non-disclosable owner(s) and/or producer(s) of information within the resource are eliminated. In all cases, the corresponding portion marking or banner marking should be compliant with CAPCO guidelines for FGI when the source must be concealed. In other words, even if the data element is being employed within protected internal organizational spaces to maintain a formal record of the non-disclosable owner(s) and/or producer(s) within an XML resource, if the resource is rendered for display within the protected internal organizational spaces in any format by a stylesheet or as a result of any other transformation process, then the non-disclosable owner(s) and/or producer(s) should not be included in the corresponding portion marking or banner marking. PERMISSIBLE VALUES 1) The value "FGI" is permitted under the circumstances described above. 2) The full set of values are defined in the Controlled Value Enumeration: CVEnumISMFGIProtected.xml	from group ism:SecurityAttributesGroup
ism:releasableTo	[0..1]	ismrelto:CVEnumISMRelTo	This attribute is used at both the resource and the portion levels. One or more indicators identifying the country or countries and/or international organization(s) to which classified information may be released based on the determination of an originator in accordance with established foreign disclosure procedures. This element is used in conjunction with the Dissemination Controls element. It is manifested in portion marks and security banners. PERMISSIBLE VALUES The permissible values for this attribute are defined in the Controlled Value Enumeration: CVEnumISMRelTo.xml	from group ism:SecurityAttributesGroup
ism:nonICmarkings	[0..1]	ismnonic:CVEnumISMNonIC	This attribute is used at both the resource and the portion levels. One or more indicators of the expansion or limitation on the distribution of an information resource or portion within the domain of information originating from non-intelligence components. It is manifested in portion marks and security banners. PERMISSIBLE VALUES The permissible values for this attribute are defined in the Controlled Value Enumeration: CVEnumISMNonIC.xml	from group ism:SecurityAttributesGroup
ism:classifiedBy	[0..1]	Anonymous	This attribute is used primarily at the resource level. The identity, by name or personal identifier, and position title of the original classification authority for a resource. It is manifested only in the 'Classified By' line of a resource's classification authority block.	from group ism:SecurityAttributesGroup
ism:compilationReason	[0..1]	Anonymous	A description of the reasons that the classification of this element is more restrictive than a simple roll-up of the sub elements would result in. This acts as an indicator to rule engines that there is not accidental over classification going on and to users that special care beyond what the portion marks reveal must be taken when using this data. Use of this mark does not replace the need for the compilation reason being defined in the prose in accordance with ISOO Directive 1. For example this would document why 3 Unclassified bullet items form a Secret List. Without this reason being noted the above described document would be considered to be miss-marked and overclassified.	from group ism:SecurityAttributesGroup
ism:derivativelyClassifiedBy	[0..1]	Anonymous	This attribute is used primarily at the resource level. The identity, by name or personal identifier, of the derivative classification authority. It is manifested only in the 'Classified By' line of a resource's classification authority block.	from group ism:SecurityAttributesGroup
ism:classificationReason	[0..1]	Anonymous	This attribute is used primarily at the resource level. One or more reason indicators or explanatory text describing the basis for an original classification decision. It is manifested only in the 'Reason' line of a resource's classification authority block.	from group ism:SecurityAttributesGroup
ism:nonUSControls	[0..1]	ismnonus:CVEnumISMNonUSControls	This attribute is used at both the resource and the portion levels. One or more indicators of the expansion or limitation on the distribution of an information resource or portion within the domain of information originating from non-US components. It is manifested in portion marks and security banners. PERMISSIBLE VALUES The permissible values for this attribute are defined in the Controlled Value Enumeration: CVEnumISMNonUSControls.xml	from group ism:SecurityAttributesGroup
ism:derivedFrom	[0..1]	Anonymous	This attribute is used primarily at the resource level. A citation of the authoritative source or reference to multiple sources of the classification markings used in a classified resource. It is manifested only in the 'Derived From' line of a document's classification authority block. ISOO's guidance is: Source of derivative classification. (1) The derivative classifier shall concisely identify the source document or the classification guide on the ‘‘Derived From’’ line, including the agency and, where available, the office of origin, and the date of the source or guide. An example might appear as: Derived From: Memo, ‘‘Funding Problems,’’ October 20, 2008, Office of Administration, Department of Good Works or Derived From: CG No. 1, Department of Good Works, dated October 20, 2008 (i) When a document is classified derivatively on the basis of more than one source document or classification guide, the ‘‘Derived From’’ line shall appear as: Derived From: Multiple Sources (ii) The derivative classifier shall include a listing of the source materials on, or attached to, each derivatively classified document.	from group ism:SecurityAttributesGroup
ism:declassDate	[0..1]	Anonymous	This attribute is used primarily at the resource level. A specific year, month, and day upon which the information shall be automatically declassified if not properly exempted from automatic declassification. It is manifested in the 'Declassify On' line of a resource's classification authority block.	from group ism:SecurityAttributesGroup
ism:declassEvent	[0..1]	Anonymous	This attribute is used primarily at the resource level. A description of an event upon which the information shall be automatically declassified if not properly exempted from automatic declassification. It is manifested only in the 'Declassify On' line of a resource's classification authority block.	from group ism:SecurityAttributesGroup
ism:declassException	[0..1]	ism25x:CVEnumISM25X	This attribute is used primarily at the resource level. A single indicator describing an exemption to the nominal 25-year point for automatic declassification. This element is used in conjunction with the Declassification Date or Declassification Event. It is manifested in the 'Declassify On' line of a resource's classification authority block. ISOO has stated it should be a SINGLE value giving the longest protection. PERMISSIBLE VALUE: The permissible value for this attribute is defined in the Controlled Value Enumeration: CVEnumISMN25X.xml	from group ism:SecurityAttributesGroup

Used in

Type ntk:AccessProfileListType (Element ntk:AccessProfileList)

Sample instance

<ntk:AccessProfile ism:classification="U"
                   ism:ownerProducer="USA">
   <ntk:AccessPolicy ism:classification="U" ism:ownerProducer="USA">UnclassSourceForge</ntk:AccessPolicy>
   <ntk:AccessProfileValue ntk:vocabulary="projectName" ism:classification="U" ism:ownerProducer="USA">Data Standards Coordination Activity</ntk:AccessProfileValue>
   <ntk:AccessProfileValue ntk:vocabulary="role" ism:classification="U" ism:ownerProducer="USA">SourceView</ntk:AccessProfileValue>
</ntk:AccessProfile>