[ucha]

It's usually the second lowest security level, just above "Public" and below "Secret".

[rootusrootus]

We used to just call that "confidential".

[euler_angles]

We still do, but it's rarely used in my experience.

[VistaBrokeMyPC]

Third lowest; NOFORN is above public

[hchz]

NOFORN is not a level but an orthogonal restriction.

Information could be Secret and NOFORN or Secret and Five-Eyes, for instance.

[mywittyname]

Do you all say NOFORN the way I think you say NOFORN? (No forn)

[lambda_obrien]

"No foreign nationals"

And yes, "no-forn"

[throwaway201103]

Never heard it called that. What I have heard is something along the lines of "confidential but unclassified" which seems more descriptive to me.

[hchz]

This would never be used by USG. Confidential -> Classified

The classification scheme is broadly cut up into Confidential, Secret, Top Secret, and Codeword. There are many modifiers to that such as Five-Eyes, Cosmic (NATO), and Restricted-Data (Nuclear Weapon Design).

There are a menagerie of controls that don't rise to classification, like NOFORN, Law Enforcement Sensitive, For official use only, etc.

[bradknowles]

Code word compartments cut horizontally across the Confidential/Secret/Top Secret hierarchy. I’ve seen stuff that was classified Confidential, but also in a code word protected compartment. I had a TS/SCI/SI/CT/NATO/ATOMAL clearance when I worked for the Defense Information Systems Agency in the Pentagon. Many times over the past 25+ years I have had to correct people who think the compartmented stuff is classified at a level “above Top Secret”, when in fact the compartments just cut horizontally across the hierarchy.

Below Confidential exist other “unclassified” states, like “For Official Use Only” and “No Foreign” (a.k.a., NOFORN). Then, regardless of the classification, you should also have to prove “Need to Know”.

[hchz]

I don't dispute that, I was trying to present a somewhat simplified view of this in a succinct comment.

To me, the most interesting aspects of classification were that the title, content, and classification level itself don't necessarily share levels.

[5555624]

CUI -- Controlled, Unclassified Information (formerly FOUO - For Official Use Only)

As others have pointed out, Confidential is classified, the lowest classification level.

[ucha]

Those were the terms we used at an investment bank but I imagine different institutions use different classifications.

[notretarded]

Metaphorically speaking. I.e. not quite DnD, but likely would want to be contained