January 3, 2011 – M-11-08, UNCLASSIFIED – Initial Agency Self-Assessment Program for User Access to Classified Information in Automated Systems: “Each department or agency that handles classified information should assess the agency’s and its employees’ adherence to the policy issuances noted below, the requirements to safeguard classified information with an emphasis on their application in automated systems, and any process the agency has designed to detect purposeful misuse of information technology systems. If your agency does not have any of the required programs/processes listed, you should establish them.”