Sensitive Security Information (SSI): Designation, Markings, and Control: Resource Document for Transit Agencies [open pdf - 1MB]
"This guidance document addresses sensitive security information (SSI) for transit agencies. SSI is information about security, operations, facilities, or other assets or capital projects whose disclosure would be detrimental to the security of transit employees or customers. By law, transit agencies are required to categorize and protect SSI. Protecting SSI means restricting its distribution and controlling access to it. By law, SSI is not subject to disclosure under the Freedom of Information Act (FOIA) or state 'Sunshine Laws.' It is also not available under discovery in civil litigation, and it is not required to be part of the record in a federal rulemaking. The Federal Transit Administration (FTA) has based the guidance in this document on the regulations in 49 Code of Federal Regulations (CFR) Parts 15 and 1520. Its purpose is to help transit agencies prevent the unauthorized disclosure or dissemination of SSI while preserving the public's 'right to know' about transit systems and operations. Transit agencies can use this guidance as a resource in developing policies and procedures for identifying, marking, and handling SSI in order to control access to it. To the extent practical, agencies should integrate the designation, marking, and handling of SSI into their existing security procedures."