This is a really good read on the classification process. The process structure is mostly common sense and follows a typical chain of command.

I read 95% of the article up to Reality 6.

https://www.justsecurity.org/86777/dispelling-myths-how-classification-and-declassification-actually-work/