Department of Defense, Information Security Program (DoD Directive 5200.1–R) (Jan. 1997) (full-text).