TOP SECRETIISIIIORCONINOFORN NATIONAL SECURITY AGENCY CENTRAL SECURITY SERVICE (UIIFOUO) STELLARWIND Classification Guide (2-400) 21 January 2009 Ke' B. Alexander, L'eutenant General, USA Director, NSA Reason(s) for Classification: E.O. 12598, 1.4(c) Declassifyon: 25 Years* Endorsed by: TOP SECRET//SIIIORCONINOFORN COn!\ lANL cl J6seJh Brand Associate Director, CIPR TOP STELLARWIND Classification Guide (U) mxionnl Agency/(iculrnl Suzurily Service 5) Guide (u//rum) Pmjecl/Aclivky Name STELLAKWND (STLW) (ul Signals Intelligence Dimlmals (u//row; CT spscinl Pmj:c1s (uy Phone -- Classified By Keilh Alexander. Guleral, Unilcd Army, lmmim, Nallonll (ll) finv 25 Years' Nolc. This guide classlficalian guidance for roqui marking and handling me STELLARWIND special comparlmenx. ln 2003,1119 aulhmized cemin nsmcinled wim STELLARWIND. as well as relzlai under Foreign Inlelligcnoc Surveillance Conn (FISC) orders (such as lh: Lilrgc Foreign Surveillance Act (PISA) anleis, words (an) FISA ulld IJK: Pen Rcgisl=rTmp and True: IPRFIT) ord=r5)' be removed (min STELLARWIND This guide lnfurmallun ascciucd with STELLARWIND and assoclaled classification while cllasifimlinll guidance assuclarcd with FISA iniormalion can be round, in me in nn America Acl Am (FAA) guide auxhol-ed by NSA SID omsigln Compliance Conscquenlly. mix dbcumcnl will an classification guidance when lvlfonuaiwn aswclatzd win. STELLAILWIND is no>> uulhorizcd by ills FISC Also. mis guidelines {or information and wllnin (ECI) compamnems NSA where Users should both guide: In demmline proper classificalion Additional Annexes are pvovlded as addl|lona[ I0 nssisl lhe users oflhis guide The and was at limes mud in briefing Ind documemaliom Issocinlod wixll ills STELLARWIND program. "TSP"and"Compal1m:med" wen used primar 'by me Nulionsl Security Agency (NSA) Legislative Aliairs Omce (LAO). NSA Offiue ofG=ner4] Counsel (oac). an: Executive Branch in inI=nd:d audimms, such as and me oourls. H1: tcmi imzinlly used in Iclanon lo arlly poflion Plugraln wus publicly by ms TOY TOP SECRETIISIJ/ORCONINOFORN President in December 2005. These markings should be considered the same as the STELLARWIND marking, but should not be directly associated with the program. The identifier "STARBURST" was also used in the earliest days of the program and should also be considered the same as "STELLARWIND." Description of Information 1. (U) The fact that NSA had Presidential authority to intercept the international communications of people with known links to al Qaida and related terrorist organizations. 2. (U) The fact that activities conducted Classification IMarkings UNCLASSIFIED UNCLASSIFIED Reason Declassification Date Remarks N/A N/A (U) "I authorized the National Security Agency, consistent with U.S. law and the Constitution, to intercept the international communications of people with known links to Al Qaida and related terrorist organizations." N/A under Presidential authorization have helped detect and prevent possible terrorist attacks in the United States and abroad. N/A (U) Presidential public statement on 17 December 2005 from the Roosevelt Room in the White House. (U) "And the activities conducted under this authorization have helped detect and prevent possible terrorist attacks in the United States and abroad." (U) Presidential public statement on 17 December 2005 from the Roosevelt Room in the White House. TOP SECRETIISIJ/ORCONINOFORN 2 TOP SECRETIISIIIORCONINOFORN Description of Information 3. (U) The fact that activities authorized Classification IMarkings UNCLASSIFIED Reason Declassification Date Remarks N/A N/A (U) "The activities I authorized are reviewed approximately every 45 days." under Presidential authority were reviewed approximately every 45 days. 4. (U) The fact that the Program authorized by the President was reauthorized more than 30 times. UNCLASSIFIED N/A N/A (U) Presidential public statement on 17 December 2005 from the Roosevelt Room in the White House. (U) "I have reauthorized this program more than 30 times since the September the II th attacks ... " (U) Presidential public statement on 17 December 2005 from the Roosevelt Room in the White House. 5. (U) The fact that Leaders in Congress were briefed more than a dozen times on the Presidential authorizations and the activities conducted under them. UNCLASSIFIED N/A N/A (U) "Leaders in Congress have been briefed more than a dozen times on this authorization and the activities conducted under it." (U) Presidential public statement on 17 December 2005 from the Roosevelt Room in the White House. TOP SECRETIISIIIORCONINOFORN 3 TOP SECRETIISII/ORCONINOFORN Description of Information 6. (U) The names of members of Congress Classification IMarkings UNCLASSIFIED Reason Declassification Date Remarks N/A N/A (U) Only Congressional members' names (with dates of respective briefings) were released. who received Terrorist Surveillance Program (TSP) briefings and dates of those briefings. (U) Unclassified list of Congressional names and briefing dates released by ODNI in May 06. Contact NSA OGC or LAO for the list. 7. (U) The fact that the Presidential authorization permitted NSA to intercept contents of communications where one party to the communication was outside the United States. UNCLASSIFIED N/A N/A (U) "The President has authorized a program to engage in electronic surveillance of a particular kind, and this would be the intercepts of contents of communications where one of the - one party to the communication is outside the United States." (U) Attorney General Alberto Gonzales public statement at the News Conference on 19 December 2005 regarding NSA surveillance with White House Press Secretary McClellan. 8. (U) The term "STELLARWIND" with no further context. UNCLASSIFIED N/A TOP SECRETIISII/ORCONINOFORN N/A (U//FOUO) The term "STELLARWIND" or the abbreviation "STL WOO when standing alone is UNCLASSIFIED. 4 TOP SECRETIISIIIORCONINOFORN Description of Information 9. (U) Official Executive Branch statements Classification IMarkings UNCLASSIFIED Reason Declassification Date Remarks N/A N/A (U) "As this description demonstrates, the terrorist surveillance program described by the President is very narrow. Because it is focused on international calls of individuals linked to al Qaeda specifically associating TSP, the collection of phone communications, and NSA involvement with no amplifying details. ... " (U) Public statement by Attorney General Gonzales at Ask the White House forum 25 January 2006. (U) "The particular aspect of these activities that the President publicly described was limited to the targeting for interception without a court order of international communications of al Qaeda and affiliated terrorist organizations coming into or going out of the United States." (U) Unclassified letter from the Director of National Intelligence J.M. McConnell to Senator Arlen Specter on 31 July 2007. 10. (SIINF) The fact that STELLARWIND, with no further context, is an anti-terrorism program. SECRETIINOFORN Executive Order 12958, as amended, Paragraph 1.4(c) (hereafter 1. 4(c )) TOP SECRETIISIIIORCONINOFORN 25 Years* 5 TOP SECRETIISII/ORCONINOFORN Description of Information Classification IMarkings Reason Declassification Date 1.4(c) 25 Years* Freedom oflnformation Act Exemption 3 (hereafter Exemption 3) Remarks N/A 11. (SIINF) The fact that the Presidentiallyauthorized TSP at NSA was a component of STELLAR WIND. SECRETIINOFORN 12. (UIIFOUO) The association of the terms STELLAR WIND and NSA - no further details. UNCLASIFIEDII FOUO 13. (SIINF) The terms and markings "TSP" or "COMPARTMENTED" or STARBURST when associated with the STELLARWIND cover term and NSA. SECRETIINOFORN 1.4(c) 25 Years* (SIINF) This classification determination classifies the fact that "TSP", STARBURST and "COMPARTMENTED" markings were used to identify the STELLARWIND program. 14. (TSIISIIINF) Association of the STELLARWIND Program (with no additional details) with: TOP SECRETIISIII NOFORN 1.4(c) 25 Years* (TSIISIIINF) Clarifies that the UNCLASSIFIEDII FOUO Exemption 3 sequence of transition events leading up to PAA enactment and its associated operational considerations do not require STL W compartmented protection for LCF and PAA data. a. Activity under the Large Content FISA (LCF) and/or; b. activity under the Protect America Act (PAA). 15. (U//FOUO) The fact that a specific single individual of the Executive Branch is cleared for access to STELLAR WIND with no amplifying details where such information has not been publicly released by the Executive Branch. TOP SECRETIISII/ORCONINOFORN N/A (U//FOUO) Information that a specific individual in the Executive Branch is cleared for STL W with no amplifying details may be protected from disclosure under FOIA. 6 TOP SECRETIISI//ORCONINOFORN Remarks Description of Information Classification IMarkings Reason Declassification Date 16. (U//FOUO) The full list of all individuals cleared for STELLARWIND or who had access to STELLARWIND data. TOP SECRETIISTLWI SII/ORCONINOFORN 1.4(c) 25 Years* (SIINF) The full list of all individuals cleared for STELLARWIND or who had access to STELLARWIND data is classified TOP SECRETIISTLW/SIII ORCONINOFORN due to identifiable relationships between individuals and with other agencies, to include name, organization, and position. Classified due to revealing the totality of the STLW program. 1.4(c) 25 Years* --- 17. (U//FOUO) The entire listing ofNSA personnel cleared for STELLARWIND a. (U//FOUO) with no amplifYing details (such as detailed organization, mission, role, etc.). b. (UIIFOUO) with amplifYing details. a. TOP SECRETII NOFORN b. TOP SECRETIISIII NOFORN TOP SECRETIISI//ORCONINOFORN 7 TOP SECRETIISII/ORCONINOFORN Description of Information 18. (U) Identity of Department of Justice (DOJ) attorneys who publicly represent or have represented NSA or have been publicly identified as cleared for "TSP." Classification IMarki UNCLASSIFIED Reason Declassification Date Remarks Exemption 3 N/A (U//FOUO) Comments: Consult NSA OGC for a list of those specific DOJ attorneys whose association with the TSP program is UNCLASSIFIED. (U) See Remarks (SIINF) This determination addresses the fact that in many cases the phrase "cleared for TSP", with no amplifying details, was used to identify DOJ attorneys working STL W program matters. 19. (U//FOUO) Names of Executive (not including NSA), Legislative, or Judicial Branch personnel cleared for STL W who have not been publicly identified by the Executive Branch. TOP SECRETIISTLWII SIIIORCONINOFORN 1.4(c) TOP SECRETIISII/ORCONINOFORN 25 Years* (U//FOUO) The names of specific individuals in the Government who have not been publicly identified by the Executive Branch as cleared for STL W remains classified as STL W because of identifiable relationships between individuals and with other agencies, to include name, organization, and position. 8 TOP SECRETIISIIIORCONINOFORN Description of Information Classification IMarkings 20. (TS//SIIINF) STLW counterterrorism TOP SECRET//SI!! information used to evaluate the quantity or value of STELLARWIND collection based on products/tippers/leads provided without reference to targets, methods or techniques. Reason Declassification Date 1.4(c) 25 Years* ORCONINOFORN 21. (TS//SIIINF) Information that reveals the TOP SECRET//SI!! scope of STELLARWIND collection against various methods of communication, including voice, data networks, facsimile, etc. without details of the special authorization Remarks (TS//SVIOCINF) Specifically addresses the number of reports, tippers, or leads generated under STL W. Any information revealing or naming Special Source Operations (SSO) programs supporting STELLARWIND must also include additional markingslExceptional Controlled Information (ECI)s for the program(s) as specified by SSO. ORCONINOFORN 1.4(c) TOP SECRETIISII/ORCONINOFORN 25 Years* (TS/lSI!INF) This classification determination allows information concerning the fact of various methods of collection under STL W, and subsequently authorized under FISA (17 Jan 2007) or PAA (5 Aug 2007), to be handled outside of STL W compartmented channels Example: Data Flow X is Digital Network Intelligence (DNI) collection under the STL W program - no further details. 9 TOP SECRETIISI//ORCONINOFORN Description of Information Classification IMarkings Reason Declassification Date Remarks 22. (TSIISIIINF) Information that reveals the breadth and success of STELLARWIND collection against specific terrorism-related entities such as the number of tippers published, number of published product reports, and numbers of Requests for Information answered without detailing target selectors, without details of the special authorization TOP SECRETIISIII ORCONINOFORN 1.4(c) 25 Years* Example: (TSIISIIIOCINF) The number of Requests For Information (RFls) generated under the STELLAR WIND program was 15,000. 23. (TSIISIIINF) Information that reveals details of the operational relationship between the STELLAR WIND program, the FISA Large Content, FISA BR, and FISA PRITT Orders, the PAA collections, and the FAA collections. TOP SECRETIISTLWI SIIIORCONINOFORN 1.4(c) 25 Years* (CIISIIIREL TO USA, FVEY) Note: SSO may require that this information be marked with additional caveats (ECI WPG for WHIPGENIE). Please see the ECI WPG classification guide. (TSIISIIINF) Information comparing ongoing FISNP ANFAA operations to the specifics of the Presidentially-Authorized Program will remain compartmented as STL W. 24. (TSIISIIINF) STLW counterterrorism listings or reports detailing the totality of specific techniques and selectors targeted under the STELLARWIND program TOP SECRETIISTLW/ SIIIORCONINOFORN 1.4(c) 25 Years* (TSIISI/INF) Dictates that all program reports & briefings containing detailed STELLARWIND target lists or specific techniques, with association to the special authorization continue to be marked TOP SECRETIISTLW/ SIIIORCONINOFORN (U) See also Portal section. TOP SECRETIISII/ORCONINOFORN 10 TOP SECRETIISIIIORCONINOFORN Description of Information 25. (SIINF) Information that reveals the scope of operations under the Presidential authorization. (Such as collection techniques, targets, or other operational details) Classification IMarkin Reason Declassification Date TOP SECRETIISTLWI SIIIORCONINOFORN 1.4(c) 25 Years* 26. (U//FOUO) The fact of FBI collaboration on the STELLARWIND program a. (U//FOUO) The association of the terms STELLARWIND and FBI a. UNCLASSIFIEDII FOUO Exemption 3 N/A b. (U//FOUO) The fact that NSA provided the FBI information collected under the Presidentially Authorized program. b. UNCLASSIFIEDII FOUO Exemption 3 N/A c. (SIINF) The fact that FBI played an operational role in the program and details describing that role. c. SECRETIINOFORN 1.4(c) Remarks (SIINF) Information that summarizes or otherwise specifies the scope of operations authorized by the President, but not publicly disclosed, remains compartmented. Example: Program Briefings, Program Memos, NSA LAO & NSA OGC summaries, etc. (SIINF) Operational details about collaboration between NSA and FBI and FBI's involvement in the STL W program (such as specific targets, specific sources, methods, etc.) will raise the classification to TOP SECRETIISTLW/SIII ORCONINOFORN 25 Years* TOP SECRETIISI//ORCONINOFORN 11 TOP SECRETIISI//ORCONINOFORN Description of Information Classification IMarkings Reason Declassification Date 27. (U//FOUO) The fact of CIA collaboration on the STELLARWIND program (U//FOUO) The association of the terms STELLARWIND and CIA b. (U//FOUO) The fact that NSA provided the CIA information collected under the Presidentially Authorized program. c. a. UNCLASSIFIEDII FOUO Exemption 3 N/A b. UNCLASSIFIEDII FOUO Exemption 3 N/A c. SECRETIINOFORN a. 1.4(c) Remarks (SIINF) Operational details about collaboration between NSA and CIA and CIA's involvement in the STL W program (such as specific targets, specific sources, methods, etc.) will raise the classification to TOP SECRETIISTLW/SIII ORCONINOFORN 25 Years* (SIINF) The fact that CIA played an operational role in the program and details describing that role. TOP SECRETIISI//ORCONINOFORN 12 TOP SECRETIISI//ORCONINOFORN Description of Information Classification IMarkings Reason Declassification Date 28. (U) Information about communications providers. a. (U) The fact that communications service providers provide assistance in national security activities b. (TSIISIIINF) Information revealing the cooperative relationships with, and identities of, U.S. tel ecommunications providers under the STELLARWIND authorities. UNCLASSIFIED N/A N/A TOP SECRETIISTLWI SII/ORCONINOFORN 1.4(c) 25 Years* Remarks (U) " ... electronic communication service providers play an important role in assisting intelligence officials in national security activities. Indeed, the intelligence community cannot obtain the intelligence it needs without assistance from these companies." (U) From the 26 October 2007 Senate Select Committee on Intelligence report: "Foreign Intelligence Surveillance Act of 1978 Amendments Act of 2007." (U) See also: Unclassified testimony of Kenneth L. Wainstein, Assistant Attorney General, National Security Division, before Senate Committee on the Judiciary on 31 October 2007. (U) Details may require additional protection within an ECI. 29. (UIIFOUO) Aggregate program funding information associated only with the STELLAR WIND cover term. TOP SECRETIISI!I NOFORN 1.4(c) TOP SECRETIISI//ORCONINOFORN 25 Years* 13 TOP SECRETIISIIIORCONINOFORN Description of Information Classification IMarkings Reason Declassification Date 30. (U//FOUO) Detailed programmatic information that reveals the overall cost of the STELLARWIND program in context with operational details. TOP SECRETIISTLWI SI!!ORCONINOFORN 1.4(c) 25 Years* (U//FOUO) Information that would provide an understanding of the total overall budget for the STL W program remains compartmented and is not releasable to contractors. 31. (U//FOUO) Budget submissions or information that reveals the detailed technical characteristics of any individual items funded by the STELLARWIND program including size, capabilities, and functions. TOP SECRETIISTLWI SIIIORCONINOFORN 1.4(c) 25 Years* (U//FOUO) Information that would provide an understanding of the total overall budget for the STL W program remains compartmented and is not releasable to contractors. 32. (TSIISIIINF) Specific details identifying collection capabilities or capacities without revealing the methods of STELLARWIND counterterrorism target communications. SECRETIISI!! REL TO USA, FVEY 1.4(c) 25 Years* (CIISIIIREL TO USA, FVEY) May be TOP SECRET or NOFORN if source details are provided. Special compartment marking based on SSO guidance (ECI WPG) required if source details are included. Ata minimum TOP SECRETIISI//ORCONINOFORN Remarks 14 TOP SECRETIISI//ORCONINOFORN Description of Information Classification IMarkin Reason Declassification Date Remarks 33. (TS//SIIINF) Information that reveals in any way the location of facilities that provided access and/or collection whether in summary or detailed terms and is associated with STELLAR WIND. TOP SECRETIISTLW/ SIIIORCONINOFORN 1.4(c) 25 Years* (C//SIIIREL TO USA, FVEY) Information that would provide an understanding of the partnership/location for the program is covered by the ECI WPG SSO compartment. (C//SIIIREL TO USA, FVEY) This information is also protected by the S SO compartment (ECI WPG). 34. (TS//SIIINF) Dataflows or associated data created to support collection derived from STELLARWIND program without revealing the details of the Presidential authorization. TOP SECRETIISI// NOFORN 1.4(c) 25 Years* (TS//SIIINF) Clarifies that the sequence of transition events leading up to PAA enactment and its associated operational considerations do not require STL W compartmented protection for LCF and PAA data. 35. (U//FOUO) Specific performance parameters for search analysis detection or selection. TOP SECRET//SIII NOFORN 1.4(c) 25 Years* (TS//SIINF) For example, response times, capacities, and loading would reveal operational details of program. 36. (S/INF) Descriptions, diagrams, schematics, or other technical documentation that identifies specific SIGINT methods, techniques and devices used to select, filter and process STELLARWIND target communications without specific reference to the authorization and details concerning the creation of the STELLARWIND program. TOP SECRET//SIII ORCONINOFORN 1.4(c) 25 Years* (U//FOUO) Information may be otherwise controlled! compartmented by SSO. Amplifying details may be protected within an ECI. TOP SECRETIISI//ORCONINOFORN 15 TOP SECRETIISI//ORCONINOFORN Description of Information 37. (TS//SI/INF) Metadata analysis and target development, techniques, and results conducted under the STELLARWIND program, with no details about the special authorization or the access points from which we have gathered the data. Classification IMarkings TOP SECRET//SII/ ORCONINOFORN Reason Declassification Date Remarks 1.4(c) 25 Years* (U//FOUO) Information currently marked as STL W (such as reports, database records, etc.) remains compartmented until appropriate action is taken under Executive Order 12958, as amended. Program specifics concerning output and analytic results may be downgraded to TOP SECRET//SI//ORCON/ NOFORN, but information may not be removed from the STL W compartment without approval from an appropriate Original Classification Authority and in coordination with the appropriate SIGINT authority (STL W Program Manager (PM) or DIPM, S 12 Information Sharing Services, and NSA OGC). The NSA OGC can be used as an initial POC/contact point. TOP SECRETIISI//ORCONINOFORN 16 TOP SECRETIISII/ORCONINOFORN Description of Information Classification IMarkings Reason Declassification Date Remarks 38. (TSIISI/INF) Information revealing the fact that a specific terrorism-related group had been targeted using the STELLAR WIND authorities - no details about the special authorization. TOP SECRETIISI/! ORCONINOFORN 1.4(c) 25 Years* (SIINF) Specific individual STELLARWIND Terrorism targets will be classified TOP SECRETIISTL W/SII/OCINF. However, large entities such as a terrorist group do not require compartmentation. The STL W Program Manager Office (PMO) documents, such as PMO memos, revealing groups targeted and effective dates remain STL W-compartmented. 39. (TSIISI/INF) Digital Network Intelligence (DNI) metadata acquired under Presidential authorization (pre-I 7 July 2004 metadata) TOP SECRETIISTLWI SIIIORCONINOFORN 1.4(c) 25 Years* (TSIISI/INF) The pre-I7 July 2004 metadata repository is embargoed and remains in the STL W compartment. Access to it requires coordination with NSA OGC as it may implicate certain FISA court orders. (U//FOUO) This data is not online and is sequestered. (U) See Annex A for additional details. TOP SECRETIISI//ORCONINOFORN 17 TOP SECRETIISI//ORCONINOFORN Description of Information 40. (TSIISI/INF) Dialed Number Recognition metadata acquired under Presidential authorization (pre 24 May 2006 metadata archive) Classification IMarki TOP SECRET//SII/ NOFORN Reason Declassification Date Remarks 1.4(c) 25 Years* (U//FOUO) Information currently marked as STL W (such as reports, database records, etc.) remains compartmented until appropriate action is taken under Executive Order 12958, as amended. Program specifics concerning output and analytic results may be downgraded to TOP SECRET//SII/ORCONI NOFORN, but information may not be removed from the STL W compartment without approval from an appropriate Original Classification Authority and in coordination with the appropriate SIGINT authority (STL W Program Manager (PM) or DlPM, S 12 Information Sharing Services, and NSA OGe). The NSA OGC can be used as an initial POC/contact point. (TS//SI/INF) Access to the preMay 2006 metadata archive is at the TSI/SII/OCINF level. However, the data must be traceable by authorization (e.g., Presidential Directive). (U) See Annex A for additional details. TOP SECRETIISI//ORCONINOFORN 18 TOP SECRETIISIIIORCONINOFORN Description of Information 41. (TSIISI/INF) Content Analysis using STELLARWIND derived information to develop lead information or to report on the activities of specific terrorism-related entities. Classification IMarkings Reason Declassification Date TOP SECRET//STLW/ SI//ORCONINOFORN 1.4(c) 25 Years* Remarks (U//FOUO) Target Office will add ORCON and NOFORN caveats to all intelligence products derived from STELLARWIND-authorized accesses. (U//FOUO) Information currently marked as STL W (such as reports, database records, etc.) remains compartmented until appropriate action is taken under Executive Order 12958, as amended. Program specifics concerning output and analytic results may be downgraded to TOP SECRET/ISIIIORCON/ NOFORN, but information may not be removed from the STL W compartment without approval from an appropriate Original Classification Authority and in coordination with the appropriate SIGINT authority (STL W Program Manager (PM) or DIPM, S 12 Information Sharing Services, and NSA OGe). The NSA OGC can be used as an initial POC/contact point. (TS//SI/INF) Access to data identified by STELLARWIND SIGINT Address (hereafter SIGAD US3170) will be TOP SECRETIISII/ORCONINOFORN 19 TOP SECRETIISI//ORCONINOFORN Description of Information Classification IMarkin Reason Declassification Date Remarks allowed on a case-by-case basis by the STL W Program Manager. Reporting derived from this collection must be clearly identified as to source. 42. (TSIISI/INF) The SIGINT address (SIGAD) US3170 when associated with the STELLAR WIND program and content collection. TOP SECRETIISIII NOFORN 1.4(c) TOP SECRETIISI//ORCONINOFORN 25 Years* 20 TOP SECRETIISI//ORCONINOFORN Description of Information Classification IMarkings Reason Declassification Date Remarks 43. (TS//SIIINF) Unevaluated, unminimized content intercept alone, identified with SIGAD US3170, without knowledge of access techniques. TOP SECRET//STLW/ SII/ORCONINOFORN 1.4(c) 25 Years* (U//FOUO) Information currently marked as STL W (such as reports, database records, etc.) remains compartmented until appropriate action is taken under Executive Order 12958, as amended. Program specifics concerning output and analytic results may be downgraded to TOP SECRET//SI//ORCON/ NOFORN, but information may not be removed from the STL W compartment without approval from an appropriate Original Classification Authority and in coordination with the appropriate SIGINT authority (STL W Program Manager (PM) or DIPM, S 12 Information Sharing Services, and NSA OGe). The NSA OGC can be used as an initial POC/contact point. (TS//SIIINF) Access to data identified by SIGAD US3170 will be allowed on a case-bycase basis by the STL W Program Manager. Reporting derived from this collection must be clearly identified as to source. TOP SECRETIISI//ORCONINOFORN 21 TOP SECRETIISI//ORCONINOFORN Description of Information Classification IMarkings Reason Declassification Date 44. (TS/ISIIINF) Processed traffic labeled with SIGAD US3170 (such as verbatim transcripts, transcription notes or other related information) that does not disclose specific methods or techniques as associated with STELLARWIND authorizations. TOP SECRETIISTLW/ SII/ORCONINOFORN 1.4(c) 25 Years* (U) See Remark for 43. 45. (TSIISIIINF) Program traffic, acquired from accesses but never disseminated and not associated with SIGAD 3170, such as unevaluated, unminimized, verbatim transcript or gisted traffic that does not disclose specific methods or techniques as associated with authorizations TOP SECRETIISII/ NOFORN 1.4(c) 25 Years* (UIIFOUO) Access to program material such as this should be coordinated with NSA OGC and the appropriate SIGINT authority. The NSA OGe can be used as an initial POC/contact point. 46. (UIIFOUO) Association of specific tasking to a specific STELLARWIND data source. TOP SECRET/ISTLWI SII/ORCONINOFORN 1.4(c) 25 Years* (UIIFOUO) Information currently marked as STL W remains compartmented until appropriate action is taken under Executive Order 12958, as amended. Information may not be removed from the STL W compartment without approval from an appropriate Original Classification Authority and in coordination with the appropriate SIGINT authority (STL W Program Manager (PM) or DIPM, S 12 Information Sharing Services, and NSA OGe). The NSA OGC can be used as an initial POC/contact point. TOP SECRETIISII/ORCONINOFORN Remarks 22 TOP SECRETIISI//ORCONINOFORN Remarks Description of Information Classification Reason Declassification Date 47. (TS//SIIINF) Infonnation that reveals the specific telephone number or email address of a targeted terrorism-related entity or individual tasked with STELLARWIND authorities. TOP SECRET//STLW/ SI//ORCONINOFORN 1.4(c) 25 Years* (U//FOUO) Infonnation currently marked as STL W remains compartmented until appropriate action is taken under Executive Order 12958, as amended. Infonnation may not be removed from the STL W compartment without approval from an appropriate Original Classification Authority and in coordination with the appropriate SIGINT authority (STL W Program Manager (PM) or DIPM, S 12 Infonnation Sharing Services, and NSA OGe). The NSA OGC can be used as an initial POC/contact point. 48. (U//FOUO) Analyst Holdings (hardcopy and softcopy)- Documentation marked as STELLAR WIND. TOP SECRET//STLW/ SII/ORCONINOFORN 1.4(c) 25 Years* (U//FOUO) The records review and administrative debriefing process will be used to help infonn analysts on what steps to take concerning their personal records. (U//FOUO) Continue to protect as STLW. See Annex B. TOP SECRETIISI//ORCONINOFORN 23 TOP SECRETIISII/ORCONINOFORN Description of Information Classification IMarkings Reason Declassification Date Remarks 49. (U//FOUO) Any document related to STL W Program Management decisions (Program Memos, Due Diligence Notes, etc.) TOP SECRETIISTL WI SI//ORCONINOFORN 1.4(c) 25 Years* (UIIFOUO) These documents will be available from the portal only to STL W PMO personnel or to other STL W authorized and cleared individuals. 50. (TSIISIIINF) Documentation concerning FISA PRITT and FISA BR court orders such as: • Declarations • Applications • Court Orders (Primary and Secondary) • Reports or updates • Associated motions TOP SECRETIISII/ NOFORN 1.4(c) 25 Years* (TSIISI/INF) Remove from the STL W compartment - see the appropriate NSA/CSS FISAIP AAIF AA and ECI WPG classification guide. (TSIISIIINF) Court Orders, required reporting, Applications, Declarations, and associated motions contain NSA ECI information, but are not marked as such because of guidelines on how court documents are marked and handled. Therefore, they require additional controls and protection and must be handled internally as ECI. TOP SECRETIISIIIORCONINOFORN 24 TOP SECRETIISI//ORCONINOFORN Description of Information 53. (TSIISI/INF) STLW counterterrorism information contained in the Requests For Information (RFI) segment of the Numbers database, currently marked STL W. Classification IMarkin TOP SECRETII STL WlSI/IORCONI NOFORN Reason Declassification Date Remarks 1.4(c) 25 Years* (U//FOUO) Restrict access to the legacy RFI information on the portal to all but a cadre of cleared SIGINT Intelligence Directorate Counterterrorism personnel. RFIs will be used to identifY information needed to be reviewed and subsequently removed from the STL W compartment. (U//FOUO) Information currently marked as STL W remains compartmented until appropriate action is taken under Executive Order 12958, as amended. Information may not be removed from the STL W compartment without approval from an appropriate Original Classification Authority and in coordination with the appropriate SIGINT authority (STL W Program Manager (PM) or DIPM, S 12 Information Sharing Services, and NSA OGC). The NSA OGC can be used as an initial POC/contact point. 54. (TSIISI/INF) Digital Network Intelligence (DNI) Metadata Reports Includes all metadata reporting derived from special authorization or FISA court authorization and currently marked TOP SECRETIISTLWI SII/ORCONINOFORN 1.4(c) TOP SECRETIISI/IORCONINOFORN 25 Years* (TSIISIIINF) Although the Director of National Intelligence decision (see introduction section of this guide) allowed NSA to remove 27 TOP SECRET//SII/ORCONINOFORN Description of Information Classification IMarkings Reason STELLARWIND. Declassification Date Remarks certain data from the STL W compartment, not all legacy data (to include reporting) was automatically removed from the STL W compartment. Consequently there is reporting in the STL W databases that is eligible to be removed from the compartment, but was not. The data still carries a STL W marking and must be protected as such until it is formally removed from the compartment. Consequently, it is necessary to restrict access to existing reports to all but a cadre of cleared SIGINT Intelligence Directorate Counterterrorism personnel. Additional RFI can be used to identify information needed to be reviewed and subsequently removed from the STL W compartment. Distribution may be expanded. If reporting is removed from the STL W compartment and reissued, procedures must be in place so that the source of the information can be readily determined. (U//FOUO) Information currently marked as STL W remains compartmented until appropriate action is taken TOP SECRETIISI//ORCONINOFORN 28 TOP SECRETIISI//ORCONINOFORN Description of Information Classification IMarkings Reason Declassification Date Remarks under Executive Order 12958, as amended. Infonnation may not be removed from the STL W compartment without approval from an appropriate Original Classification Authority and in coordination with the appropriate SIGINT authority (STL W Program Manager (PM) or DIPM, S 12 Infonnation Sharing Services, and NSA OGe). The NSA OGC can be used as an initial POC/contact point. (U//FOUO) Maintain STELLARWIND controls on existing reports. Remove from the STLW compartment and release in new fonnat if required. Individual reports may be reclassified to TOP SECRET//SI// ORCONINOFORN, but must be cancelled and reissued, in the new fonnat, at the new classification, after decompartmentation. Tearlines cannot be re-distributed without reissuing the original report. 55. (TS//SI/INF) Dialed Number Recognition (DNR) Metadata Reports Includes all metadata reporting derived from special authorization or FISA court TOP SECRET//STLW/ SI//ORCONINOFORN 1.4(c) TOP SECRETIISI//ORCONINOFORN 25 Years* (TS//SI/INF) Although the Director of National Intelligence decision (see introduction section of this 29 TOP SECRETIISII/ORCONINOFORN Description of Information Classification IMarkings Reason Declassification Date Remarks guide) allowed NSA to remove certain data from the STL W compartment, not all legacy data (to include reporting) was automatically removed from the STL W compartment. Consequently there is reporting in the STL W databases that is eligible to be removed from the compartment, but was not. The data still carries a STL W marking and must be protected as such until it is formally removed from the compartment. Consequently, it is necessary to restrict access to existing reports to all but a cadre of cleared SIGINT Intelligence Directorate Counterterrorism personnel. Additional RFI can be used to identify information needed to be reviewed and subsequently removed from the STL W compartment. Distribution may be expanded. If reporting is removed from the STL W compartment and reissued, procedures must be in place so that the source of the information can be readily determined. authorization and currently marked STELLARWIND (U//FOUO) Information currently marked as STL W remains compartmented until TOP SECRETIISII/ORCONINOFORN 30 TOP SECRET//SI//ORCONINOFORN Description of Information Classification IMarkings Reason Declassification Date Remarks appropriate action is taken under Executive Order 12958, as amended. Information may not be removed from the STL W compartment without approval from an appropriate Original Classification Authority and in coordination with the appropriate SIGINT authority (STL W Program Manager (PM) or DIPM, S 12 Information Sharing Services, and NSA OGe). The NSA OGC can be used as an initial POC/contact point (UIIFOUO) Maintain STELLARWIND controls on existing reports. Remove from the STLW compartment and release in new format if required. Individual reports may be reclassified to TOP SECRETIISIII ORCONINOFORN, but must be cancelled and reissued, in the new format, at the new classification, after decompartmentation. Tearlines cannot be re-distributed without reissuing the original report. 56. (TSIISIIINF) NSNCSS disseminated serialized STL W product derived from STELLARWIND and currently marked TOP SECRETIISTLWI SIIIORCONINOFORN 1.4(c) TOP SECRETIISI//ORCONINOFORN 25 Years* (TSIISIIINF) Although the Director of National Intelligence decision (see 31 TOP SECRETIISI//ORCONINOFORN Description of Information Classification IMarkings Reason STELLAR WIND Declassification Date Remarks introduction section of this guide) allowed NSA to remove certain data from the STL W compartment, not all legacy data (to include reporting) was automatically removed from the STL W compartment. Consequently there is reporting in the STL W databases that is eligible to be removed from the compartment, but was not. The data still carries a STL W marking and must be protected as such until it is formally removed from the compartment. Consequently, it is necessary to restrict access to existing reports to all but a cadre of cleared SIGINT Intelligence Directorate Counterterrorism personnel. Additional RFI can be used to identify information needed to be reviewed and subsequently removed from the STL W compartment. Distribution may be expanded. If reporting is removed from the STL W compartment and reissued, procedures must be in place so that the source of the information can be readily determined. (U//FOUO) Information currently marked as STL W TOP SECRETIISI//ORCONINOFORN 32 TOP SECRETIISI//ORCONINOFORN Description of Information Classification IMarkings Reason Declassification Date Remarks remains compartmented until appropriate action is taken under Executive Order 12958, as amended. Information may not be removed from the STL W compartment without approval from an appropriate Original Classification Authority and in coordination with the appropriate SIGINT authority (STL W Program Manager (PM) or DIPM, S 12 Information Sharing Services, and NSA OGC). The NSA OGC can be used as an initial POC/contact point. (U//FOUO) Maintain STELLAR WIND controls on existing reports. Remove from the STL W compartment and release in new format if required. Individual reports may be reclassified to TOP SECRET//SII/ ORCONINOFORN, but must be cancelled and reissued, in the new format, at the new classification, after decompartmentation. Tearlines cannot be re-distributed without reissuing the original report. TOP SECRETIISI//ORCONINOFORN 33 TOP SECRETIISI//ORCONINOFORN Description of Information Classification IMarkings Reason Declassification Date Remarks 57. (TS//SIIINF) STLW PMO counterterrorism documentation such as Program Memorandum or other Program Management Office documentation currently marked STELLARWIND. TOP SECRETIISTLW/ SIIIORCONINOFORN 1.4(c) 25 Years* (U//FOUO) Remains protected under the STL W compartment. Infonnation currently marked as STL W remains compartmented until appropriate action is taken under Executive Order 12958, as amended. Infonnation may not be removed from the STL W compartment without approval from an appropriate Original Classification Authority and in coordination with the appropriate SIGINT authority (STL W Program Manager (PM) or DIPM, S 12 Infonnation Sharing Services, and NSA OGC). The NSA OGC can be used as an initial POC/contact point. TOP SECRETIISI//ORCONINOFORN 34 TOP SECRETIISI//ORCONINOFORN Description of Information 58. (U//FOUO) NSA OGe documentation currently marked STELLARWIND. Classification IMarkings Reason Declassification Date Remarks TOP SECRET//STLW/ SI//ORCONINOFORN 1.4(c) 25 Years* (U//FOUO) Remains protected under the STL W compartment. Information currently marked as STL W remains compartmented until appropriate action is taken under Executive Order 12958, as amended. Information may not be removed from the STL W compartment without approval from an appropriate Original Classification Authority and in coordination with the appropriate SIGINT authority (STL W Program Manager (PM) or DIPM, S 12 Information Sharing Services, and NSA OGe). The NSA OGC can be used as an initial POC/contact point. TOP SECRETIISI//ORCONINOFORN 35 TOP SECRETIISI//ORCONINOFORN Description of Information 59. (U//FOUO) NSA IG documentation currently marked STELLAR WIND. Classification IMarkings Reason Declassification Date Remarks TOP SECRET//STLW/ SII/ORCONINOFORN 1.4(c) 25 Years* (U//FOUO) Remains protected under the STL W compartment. Information currently marked as STL W remains compartmented until appropriate action is taken under Executive Order 12958, as amended. Information may not be removed from the STL W compartment without approval from an appropriate Original Classification Authority and in coordination with the appropriate SIGINT authority (STL W Program Manager (PM) or DIPM, S 12 Information Sharing Services, and NSA OGC). The NSA OGC can be used as an initial POC/contact point. *25 years: Declassification in 25 years indicates that the information is classified for 25 years from the date a document is created or 25 years from the date of this original classification decision, whichever is later. (U) ANNEX A: (TSIISIIINF) FISA PRITT and BR (TS//SI/INF) Information acquired under court authorization via FISA PRITT or FISA BR, but currently marked STLW (e.g. FISA PRITT or FISA BR information commingled in databases with other STL W information, or otherwise controlled as STL W due to overlapping authorizations), is eligible to be removed from the STL W compartment. However, information may not be removed from the STL W compartment without appropriate action by an original classification authority under Executive Order 12958, as amended, or coordination with the STL W Program Manager (PM) or D/PM, S 12 Information Sharing TOP SECRETIISII/ORCONINOFORN 36 TOP SECRETIISI//ORCONINOFORN Services, and OGC. The NSA OGC can be used as an initial POC/contact point. Although compartmented controls may be removed from the FISA PRITT and FISA BR information currently marked STL W, court ordered access controls and classification guidelines must continue to be observed. Users should note that classification guidance for FISAlPAAIFAAIFAA information can be found in an NSAlCSS FISAlPAAlFAA guide. (TS//SI/INF) For example, the FISA/PAA/FAA classification guide should be consulted when deriving classification for FISA PRITT or FISA BR information currently marked STL W such as: (TS//SI/INF) FISA PRITT (initiated 17 July 2004) 1. (TS//SI/INF) FISA PRITT information collected, stored, processed under FISA authorization. 2. (TS//SI/INF) FISA PRITT targeting information - email address forms, query requests and approvals, selectors queried, query results, alert lists. 3. (TS//SI/INF) FISA PRITT-related Mainway databases, realms & data flows and all related technical data, collection statistics, and software. 4. (TS//SI/INF) FISA PRITT-related working aids, briefing materials, query logs, etc. (TS//SI/INF) BR FISA (initiated 24 May 2006) 1. (TS//SI/INF) FISA BR information collected, stored, processed under FISA authorization. 2. (TS//SI/INF) FISA BR targeting information - address forms, query requests and approvals, selectors queried, query results, alert lists, etc. 3. (TS//SI/INF) FISA BR-related Mainway Databases, realms & data flows and all related technical data, collection statistics, and software. 4. (TS//SI/INF) FISA BR-related Working Aids, briefing materials, query logs, etc. (U) ANNEX B: (U) Preservation Requirements and Other Related Issues (U//FOUO) Documentation you have originated (memos, analytic summaries, etc.) - do not destroy/remove/delete. Please contact the SID PMO for questions. Your records may constitute valuable temporary or permanent records and may be transferred to a designated official or records officer, records include documents created regarding STL W policies, decisions, procedures and essential operational, logistical and support transactions. (U//FOUO) SIGINT Reporting -You are authorized to retain published reporting marked with the STL W caveat, however further dissemination of the information contained in those reports must be coordinated through the SIGINT Intelligence Directorate Counterterrorism RFI process and accurately sourced to the original STL W report number/title. TOP SECRETIISII/ORCONINOFORN 37 TOP SECRETIISI//ORCONINOFORN (TSIISIIIREL TO USA, FVEY) Other STL W information - Record Retention Order - In addition to your obligations under Federal Records Act and NSA Policy, you are reminded that Judge Vaughn Walker, USDJ, issued a Preservation order on November 6,2007 relating to litigation challenging the surveillance activities authorized by the President after the attacks of September 11, 2001. You should preserve and retain any (hardcopy or electronic - including email) information, documents or data that may be relevant to that litigation. If you have any questions about this obligation, you should contact your Office of General Counsel. (SIINF) NSA-generated materials submitted to a court in support of ongoing litigation which contains facts that reveal scope and scale of the Presidentially Authorized Program should be handled as STLW. Note: Many litigation documents were marked as TSP instead ofSTLW. These documents, and supporting facts, relate directly to the special authorization and remain STL W-compartmented. TOP SECRETIISI//ORCONINOFORN 38