Those measures and administrative procedures for identifying, controlling, and protecting against unauthorized disclosure of classified information or unclassified controlled information, which includes export-controlled technical data and sensitive information. Such measures and procedures are concerned with security education and training, assignment of proper classifications, downgrading and declassification, safeguarding, and monitoring.