32 CFR §2400.27

Whenever classified information is not under the personal control and observation of an authorized person, it will be guarded or stored in a locked security container approved for the storage and protection of the appropriate level of classified information as prescribed in § 2001.43 of Directive No. 1.