Purpose
This Implementation Profile for Information Security Marking Metadata (XML Encoding), also known as ISM-XML, defines detailed specifications for using Extensible Markup Language (XML) to encode information security markings metadata in compliance with the approved Intelligence Community Standard (ICS) for Information Security Marking Metadata. This Implementation Profile defines the XML elements and attributes, associated structures and relationships, mandatory and cardinality requirements, and permissible values for representing the security markings concepts using XML.
Needs and Requirements
Information sharing within the national intelligence enterprise will increasingly rely on information assurance metadata (including information security markings) to allow interagency access control, automated exchanges, and appropriate protection of shared intelligence when necessary. A structured, verifiable representation of security marking metadata bound to the intelligence data is required in order for the enterprise to become inherently “smarter” about the information flowing in and around it. Such a representation, when implemented with other data formats, improved user interfaces, and data processing utilities, can provide part of a larger, robust information assurance infrastructure capable of automating some of the management and exchange decisions today being performed by human beings.
Early in the intelligence life cycle, intelligence producers need:
- User interfaces that help reliably assign and manipulate information security markings;
- Automated formatting of Controlled Access Program Coordination Office (CAPCO)-compliant portion marks, security banners, and classification/declassification blocks; and
- Cross-domain discovery, access, and dissemination capabilities. These capabilities will allow for security marking metadata to be captured and associated with intelligence structures in order to support attribute- and clearance-based information management practices, such as:
- Secure collaboration;
- Content management;
- Content and portion-level filtering of discovery results; and Cross-security domain content transfers.
Downloads
Version 1.0
- Complete Package
 IpIsmXmlv1.0 |
Includes all the artifacts listed below, except the FOUO Constraint Rules Annex (available on secured sites) |
- Individual Artifacts
IpBaseIsmXmlv1.0