For those not deeply versed in US federal regulations: Part 4a of Title 15 of the Code of Federal Regulations (CFR), which covers the "Classification, Declassification, and Public Availability of National Security Information" for the National Security Agency (NSA).
<https://www.ecfr.gov/current/title-15/subtitle-A/part-4a?toc...>