Which document provides the basic guidance and regulatory requirements for derivative classification?

The answer

The correct document is DoD Manual 5200.01, the DoD Information Security Program, issued in four volumes. It provides the basic guidance and regulatory requirements for the DoD Information Security Program, including derivative classification, marking, safeguarding, and declassification. When a training question asks which document a derivative classifier relies on for the program's rules, DoDM 5200.01 is the answer.

The four volumes each cover a piece of the program:

• Volume 1 – Overview, Classification, and Declassification
• Volume 2 – Marking of Classified Information
• Volume 3 – Protection of Classified Information
• Volume 4 – Controlled Unclassified Information (CUI)

How it fits with the other authorities

Derivative classification does not rest on one document alone, and distractor options usually name a related-but-different authority:

• Executive Order 13526 is the presidential order that establishes the entire national-security classification system. It is the top-level authority, but it is not the DoD's implementing manual—DoDM 5200.01 implements it inside the Department.
• A Security Classification Guide (SCG) is a source document a derivative classifier uses to classify a specific program or system. It tells you what is classified and at what level, but it is not the document that lays out the program's overall regulatory requirements.
• 32 CFR Part 2001 / ISOO directives implement EO 13526 government-wide; DoDM 5200.01 is the DoD-specific translation of those rules.

So the hierarchy runs: EO 13526 (establishes the system) → ISOO 32 CFR 2001 (government-wide implementation) → DoDM 5200.01 (DoD basic guidance and regulatory requirements) → SCG (program-specific source guidance you apply to individual documents).

The bigger picture

Derivative classification is the act of incorporating, paraphrasing, restating, or generating in new form information that is already classified, and marking the new material to match its source. Unlike an original classification authority (a senior official who makes the first decision that information needs protection), a derivative classifier does not decide what should be secret—they carry forward decisions already made in a source document or SCG.

A derivative classifier's core responsibilities are to: observe and respect the original classification decision; use only authorized sources (a source document, an SCG, or the DD Form 254); carry the classification level, reason, and duration forward accurately; and apply correct markings per Volume 2. The workflow below traces that path from source authority to a finished, marked document. Grounding all of it—the definitions, the responsibilities, and the marking rules—is DoDM 5200.01, which is why it is the document that provides the basic guidance and regulatory requirements.