Classified data or information may not be processed or produced on an ADP system unless the system and procedures to protect the classified data or information have been approved by the CSA. Approval of the ADP system and procedures is based on a satisfactory ADP security proposal submitted as part of the licensee's, certificate holder's, or other person's request for facility clearance outlined in Sec. 95.15 or submitted as an amendment to its existing Standard Practice Procedures Plan for the protection of classified information. [72 FR 49564, Aug. 28, 2007]