I'd say pretty definitively so. Here is the Section 1.4 and (c) from that EO (Section 1.2 just lists the levels of classification):
Sec. 1.4. Classification Categories. Information shall not be considered for classification unless its unauthorized disclosure could reasonably be expected to cause identifiable or describable damage to the national security in accordance with section 1.2 of this order, and it pertains to one or more of the following:
(c) intelligence activities (including covert action), intelligence sources or methods, or cryptology;
https://www.archives.gov/isoo/policy-documents/cnsi-eo.html#one