If the application contains classified data, a Security Classification Guide must exist containing data elements and their classification.

Without a classification guide the marking, storage, and output media of classified material can be inadvertently mixed with unclassified material, leading to its possible loss or compromise.