🔗 ← Class 10: Palantir Ecosystem- DoW AI Infrastructure | Module 3: Military Decision-Making →

image.png

<aside> 📥

Resources

📄 Lesson PDF

📊 Slides PDF

</aside>

Video Lesson

https://youtu.be/9QhVVn5iB0c

Learning Objectives:

  1. Distinguish between Impact Levels (IL2-IL6) and determine which AI platforms are authorized at each classification level
  2. Identify Controlled Unclassified Information (CUI) in daily work scenarios and select appropriate AI tools accordingly
  3. Explain why commercial AI platforms (ChatGPT, Claude, Gemini) cannot be used for CUI or classified work
  4. Navigate the FedRAMP authorization framework to verify which AI tools are approved for DoW use
  5. Determine what AI platforms are available at your unit and how to request access through proper channels

Understanding Impact Levels (IL2-IL6)

image.png

The Decision Every Soldier Faces: "Can I use ChatGPT for this task?"

Information systems must be categorized based on potential impact to organizational operations, assets, individuals, other organizations, and the Nation should the information or system be compromised through unauthorized access, use, disclosure, disruption, modification, or destruction (NIST SP 800-53 Rev 5, p. 50). This NIST framework establishes why the DoW uses Impact Levels to categorize both systems and data. Every AI platform you access has an Impact Level authorization, and every document you work with has an Impact Level classification. The two must match.

Think of Impact Levels as security clearance levels for data rather than people. IL2 covers public information that carries no operational risk if disclosed. IL4 covers Controlled Unclassified Information where unauthorized disclosure could damage operations but would not compromise national security. IL5 covers mission-critical CUI where disclosure could significantly harm military operations. IL6 covers classified information at the Secret level where disclosure would cause serious damage to national security. Each level up requires progressively stronger security controls, more rigorous authorization processes, and more restricted AI platform access.