Via FAS – Office of the Inspector General U.S. Department of Justice, September 2016 – Follow-up Audit of the Department of Justice’s Implementation of and Compliance with Certain Classification Requirements
“The OIG found that DOJ, through the Justice Management Division’s (JMD) Security and Emergency Planning Staff (SEPS), had established classification policies and procedures, but had not effectively administered them to ensure that information was classified and disseminated appropriately. Although we did not find indications of widespread misclassification, we identified deficiencies relating to the implementation of DOJ’s classification program, including a persistent misunderstanding and lack of knowledge of certain classification processes by DOJ officials. We also identified weaknesses in DOJ’s implementation of classification standards, the limited distribution of automated tools designed to improve DOJ’s classification and marking processes, and weaknesses in the application of information security education and training programs.”