Skip to content 
Geheimschutz
In brief
Protection of classified information comprises all measures by which state classified information is protected from unauthorized disclosure. It is divided into personnel protection, i.e. the security clearance of individuals, and material protection, i.e. the protection of the information itself. When decommissioning IT hardware from authorities and companies under classified-information supervision, it determines how data carriers are transported, erased or destroyed.
Components of classified-information protection
| Area | Contents | Basis |
|---|---|---|
| Personnel protection of classified information | Security clearance of persons who are given access to classified information | Security Clearance Act (SÜG) |
| Material protection of classified information | Classification, marking, storage, disclosure and destruction of classified information | Classified Information Instruction (VSA) |
| Protection of classified information in industry | Supervision of companies that carry out contracts involving classified information | Manual for the Protection of Classified Information of the Federal Ministry for Economic Affairs |
Classified information is graded into four levels: VS-NUR FÜR DEN DIENSTGEBRAUCH, VS-VERTRAULICH, GEHEIM and STRENG GEHEIM. Each level has its own rules. A basic principle is the Need-to-know principle: only those who need it for their task are given knowledge of it.
Classified-information protection when decommissioning IT
Data carriers on which classified information was stored remain classified until they have been erased or destroyed according to the requirements. Which methods are permissible depends on the classification level and the requirements of the competent body. For the most common level, VS-NfD, the guide VS-NfD: decommissioning IT hardware explains the procedure.
Second IT processes data in accordance with VS-NfD requirements, commits all employees to confidentiality and works in areas with access control and video surveillance. More on Data secrecy and confidentiality.
Frequently asked questions about protection of classified information
What is classified-information supervision?
The supervision of companies that carry out contracts involving classified information from VS-VERTRAULICH upward. The Federal Ministry for Economic Affairs reviews and accompanies the security precautions of such companies.
Does protection of classified information also apply to private companies?
Only if they work with state classified information. Other rules apply to a company's own trade secrets, such as the Trade Secrets Act.
What is the difference between protection of classified information and data protection?
Data protection safeguards people's personal data. Protection of classified information safeguards state information whose disclosure can harm the state.
What is the difference between personnel and material protection of classified information?
Personnel protection concerns the security clearance of persons who are given access to classified information. Material protection concerns the information itself, i.e. classification, marking, storage, disclosure and destruction.
What does the need-to-know principle mean in the protection of classified information?
Only those who need it for their task are given knowledge of classified information. This applies regardless of rank and to every level of secrecy. The principle limits the group of people who have access to classified information.
Decommission IT from authorities – confidential, documented, VS-NfD-compliant.
Send us your device list. You will receive your offer in 48 hours on average.