Military reference books and manuals (2009-2023, Volume 2)

UNCLASSIFIED

Chapter 11

Telecommunications Systems

UNCLASSIFIED

Configuration of the system shall ensure that all on-hook and off-hook

vulnerabilities are mitigated.

Equipment used for administration of telephone systems shall be installed inside

the SCIF or a controlled area where access is limited to authorized personnel.

When local or remote CTS administration terminals are not contained within a

controlled area and safeguarded against unauthorized manipulation, the use of CNSSI
5006 approved telephone instruments shall be required, regardless of the CTS
configuration.

Speakerphones and audio conferencing systems shall not be used on unclassified

telephone systems in SCIFs. Exceptions to this requirement may be approved by the
AO when these systems have sufficient audio isolation from other classified
discussion areas in the SCIF and procedures are established to prevent inadvertent
transmission outside the SCIF.

Features used for voice mail or unified messaging services shall be configured to

prevent access to remote diagnostic ports, internal dial tone, and dial plans.

Telephone answering devices and facsimile machines shall not contain features

that introduce security vulnerabilities, e.g., remote room monitoring, remote
programming, or other similar features that may permit off-premise access to room
audio.

All unclassified telephone systems and associated infrastructure shall be

physically isolated from classified information and telecommunications systems in
accordance with DNI and CNSS TEMPEST guidance.

The security requirements and installation guidelines contained in the National

Telecommunications Security Working Group (NTSWG) publication CNSSI 5000
shall be followed for Voice over Internet Protocol (VoIP) systems installed in a SCIF.

Unclassified Information Systems

Unclassified information systems shall be safeguarded to prevent hardware or

software manipulation that could result in the compromise of data.

Information systems equipment with telephonic or audio features shall be protected

against remote activation and/or removal of audio (analog or digitized) information.

Video cameras used for unclassified video teleconferencing and video recording

equipment shall be deactivated and disconnected when not in use.

Video devices shall feature a clearly visible indicator to alert SCIF personnel when

recording or transmitting.

UNCLASSIFIED

Chapter 11

Telecommunications Systems

UNCLASSIFIED

Using Closed Circuit Television (CCTV) to Monitor the SCIF Entry

Point(s)

CCTV may be used to supplement the monitoring of a SCIF entrance and to record

events for investigation.

The system shall present no technical security hazard to the SCIF.

The system and all components, including communications and control lines, shall be

exterior to the SCIF perimeter.

The system may provide a clear view of the SCIF entrance but not enable the viewer

to observe classified information when the door is open nor external control pads or
access control components that would enable them to identify PINs.

Unclassified Wireless Network Technology

The use of devices or systems utilizing wireless technologies pose a high risk and

require approval from the AO, CTTA, and IT systems approving authority prior to
introduction into the SCIF.

Wireless systems shall meet all TEMPEST and TSCM requirements and shall be

weighed against the facilities overall security posture (i.e., facility location, threat, as well
as any compensatory countermeasures that create SID) when evaluating these systems.

All separation and isolation standards provided in TEMPEST standards are applicable

to unclassified wireless systems installed or used in SCIFs.

Environmental Infrastructure Systems

The FFC shall include information on whether or not environmental infrastructure

systems (also referred to as building maintenance systems) are located in the SCIF.
Examples include the following:



Premise management systems



Environmental control systems



Lighting and power control units



Uninterrupted power sources

The FFC shall identify all external connections for infrastructure systems that service

the SCIF. Examples of the purpose of external connections include the following:



Remote monitoring



Access and external control of features and services



Protection measures taken to prevent malicious activity, intrusion, and
exploitation

UNCLASSIFIED

Chapter 11

Telecommunications Systems

UNCLASSIFIED

Emergency Notification Systems

The introduction of electronic systems that have components outside the SCIF

perimeter is prohibited, with the following exceptions:

The system is approved by the AO.

The system is required for security purposes.

The system is required under life safety regulations.

If required, and speakers or other transducers are part of a system that is not wholly

contained in the SCIF but are installed in the SCIF for life safety or fire regulations, the
system must be protected as follows:

All incoming wiring shall breach the SCIF perimeter at one point. TEMPEST or

TSCM concerns may require electronic isolation and shall require review and
approval by the CTTA.

One-way (audio into the SCIF) communication systems shall have a high gain

amplifier.

Two-way communication systems shall only be approved when absolutely

necessary to meet safety/security requirements. They shall be protected so that audio
cannot leave the SCIF without the SCIF occupants being alerted when the system is
activated.

All electronic isolation components shall be installed within the SCIF and as close

to the point of SCIF penetration as possible.

Systems Access

Installation and maintenance of unclassified systems and devices supporting SCIF

operations may require physical or remote access. The requirements outlined in this
section shall apply to telecommunications devices located within the SCIF or in a
controlled area outside the SCIF.

Installation and maintenance personnel requiring physical access shall possess the

appropriate clearance and access, or will be escorted and monitored at all times within the
SCIF by technically knowledgeable, U.S. SCI-indoctrinated personnel.

Remote maintenance shall be protected against manipulation or activation.

All capabilities for remote maintenance and diagnostic services shall be specified in

the FFC.

The FFC shall identify all procedures and countermeasures to prevent unauthorized

system access, unauthorized system modification, or introduction of unauthorized
software.

Remote maintenance and diagnosis may be performed from a SCIF or an adjacent

controlled area over a protected link in accordance with FIPS AES standards.

UNCLASSIFIED

Chapter 11

Telecommunications Systems

UNCLASSIFIED

Telephone systems only may be accessed over an unclassified telephone line as

specified in TSG 2 Standard, Section 4.c.

Unclassified Cable Control

To the extent possible, all telecommunications cabling shall enter the SCIF through a

single opening and allow for visual inspection.

Cable, either fiber or metallic, shall be accounted for from the point of entry into the

SCIF.

The accountability shall identify the precise use of every cable through labeling.

Log entries may also be used.

Designated spare conductors shall be identified, labeled, and bundled together.

Unused conductors shall be removed. If removal is not feasible, the metallic

conductors shall be stripped, bound together, and grounded at the point of ingress/egress.

Unused fiber shall be uncoupled from the interface within the SCIF, capped, and

labeled as unused fiber.

References

Overview

The NTSWG publishes guidance for the protection of sensitive information and

unclassified telecommunications information processing systems and equipment.

NTSWG documents are currently in transition from TSG/NTSWG documents to

Committee on National Security Systems (CNSS) publications.

The List of References is provided for use by personnel concerned with

telecommunications security.

List of References

TSG Standard 1 (Introduction to Telephone Security). Provides telephone

security background and approved options for telephone installations in USG
sensitive discussion areas.

TSG Standard 2 (TSG Guidelines for Computerized Telephone Systems) and

Annexes. Establishes requirements for planning, installing, maintaining, and
managing CTS, and provides guidance for personnel involved in writing contracts,
inspecting, and providing system administration of CTS.

TSG Standards 3, 4, 5, and CNSSI 5001. Contains design specifications for

telecommunication manufacturers and are not necessarily applicable to facility
security personnel.

CNSSI 5000. Establishes requirements for planning, installing, maintaining, and

managing VoIP systems.

UNCLASSIFIED

Chapter 11

Telecommunications Systems

UNCLASSIFIED

CNSSI 5006. Lists approved equipment which inherently provide on-hook

security.

NTSWG Information Series (Computerized Telephone Systems). A Review of

Deficiencies, Threats, and Risks, December 1994). Describes deficiencies, threats,
and risks associated with using computerized telephone systems.

NTSWG Information Series (Executive Overview, October 1996). Provides the

salient points of the TSG standards and presents them in a non-technical format.

NTSWG Information Series (Central Office (CO) Interfaces, November 1997).

Provides an understanding of the types of services delivered by the local central
office and describes how they are connected to administrative telecommunications
systems and devices.

NTSWG/NRO Information Series (Everything You Always Wanted to Know

about Telephone Security…but were afraid to ask, 2nd Edition, December 1998).
Distills the essence of the TSG standards (which contain sound telecommunications
practices) and presents them in a readable, non-technical manner.

NTSWG/NRO Information Series (Infrastructure Surety Program…securing the

last mile, April 1999). Provides an understanding of office automation and
infrastructure system protection that contributes to SCIF operation.

NTSWG Information Series (Computerized Telephone Systems Security Plan

Manual, May 1999). Assists to implement and maintain the “secure” operation of
CTSs as used to support SCIF operations. (The term “secure” relates to the safe and
risk-free operation, not the use of encryption or a transmission security device.)

Director of National Intelligence, Intelligence Community Directive 702,

Technical Surveillance Countermeasures.

Director of National Intelligence, Intelligence Community Directive 503,

Intelligence Community Information Technology Systems Security Risk
Management, Certification and Accreditation.

SPB Issuance 00-2 (18 January 2000). Infrastructure Surety Program and the

Management Assessment Tool.

UNCLASSIFIED

Chapter 12

Management and Operations

UNCLASSIFIED

Chapter 12.

Management and Operations

Purpose

To establish safeguards and procedures necessary to prevent the unauthorized disclosure
of SCI and other classified national security information in SCIFs. To define
administrative processes that shall provide a secure operating environment and enable
adequate security oversight, management, and operations of SCIFs

SCIF Repository

As required by ICD 705, the DNI shall manage an inventory of information on all

SCIFs which shall be reported to the DNI via the SCIF repository not later than 180 days
after the effective date of ICD 705 and updated no later than 30 days after changes occur
thereafter.

Reportable SCIF Administrative Information:



SCIF ID



AO ID



Location of SCIF

In U.S.

Outside U.S.

Under COM



SCIF Type

Closed Storage

Open Storage

SWA

TSWA

T-SCIF



SID



Initial Accredited Date



Re-Accreditation Date



Review date



Waivers



Date waiver approved



Waiver approval authority/ID



Exceeded standards



Does not meet standards



Date waiver expires

UNCLASSIFIED

Chapter 12

Management and Operations

UNCLASSIFIED

SCIF Management

SO Responsibilities:

The SCIF SO shall be responsible for all aspects of SCIF management and

operations to include security policy implementation and oversight.

The SO shall prepare a comprehensive Standard Operating Procedure (SOP) that

documents management and operations of the SCIF.

The SO shall review the SOP at least annually and revise it when any aspect of

SCIF security changes.

The SO shall issue and control all SCIF keys. Locks shall be changed when a key

is lost or is believed to be compromised.

The SO shall conduct annual self-inspections to ensure the continued security of

SCIF operations, identify deficiencies, and document corrective actions taken.
Inspection results shall be forwarded to the AO and copies retained by the SO until
the next inspection.

The SO shall create an emergency plan to be approved by the AO. Plans shall be

reviewed and updated annually and all SCIF occupants shall be familiar with the
plans. Drills shall be conducted as circumstances warrant, but at least annually. The
emergency plan may be an extension of an overall department, agency, or installation
plan.

(1)

For SCIFs within the U.S., emergency plans shall address the following:



Fire



Natural disaster



Civil unrest



Intrusion detection system failures



Admittance of emergency personnel



The protection of SCIF occupants and classified information



Evacuation requirements and emergency destruction

(2)

For SCIFs outside the U.S., emergency plans shall address all of the above

and shall include instructions for the emergency destruction or removal of SCI
where political instability, terrorism, host country attitudes, or criminal activity
suggest the possibility that a SCIF may be overrun.

The SO shall control passwords to access the maintenance mode of copiers and

other office equipment.

The SO shall develop an SOP that addresses actions to be taken when IDS

maintenance access is required.

UNCLASSIFIED

Chapter 12

Management and Operations

UNCLASSIFIED

Required SCIF Documentation

Copies of all documents relating to SCIF accreditation shall be maintained by the

SCIF SO and include, but not limited to, the following:



SCIF accreditation



Fixed facility checklist



Construction security plan



CTTA evaluation



IS accreditation



SOPs



The results of the final acceptance test of the original system installation and
any tests to system modifications made thereafter



Emergency plan

As applicable, the following documents shall be maintained by the SCIF SO:



TSCM reports



Co-utilization agreements



Memoranda of agreement



Self-inspection reports



Compartmented area checklist



Shipboard SCIF checklist



Aircraft/UAV checklist



A copy of the CRZH certificate (UL 2050)

SOPs

A comprehensive SOP that documents management and operations of the SCIF shall

be prepared by the SO.

The SOP shall be included in the accreditation package and approved by the AO.

All individuals assigned to, or having unescorted access to, the SCIF shall be familiar

with and adhere to the SOP.

All SOP revisions shall be provided to the AO for approval.

SOPs shall be tailored to a specific SCIF.

SOPs shall include specific areas of security concern as defined by program or

mission requirements.

The following are examples of subjects that should be addressed in an SOP:



Self-inspections



Security incidents and violations



Alarm systems and response requirements



Opening and closing procedures

UNCLASSIFIED

Chapter 12

Management and Operations

UNCLASSIFIED



Access controls



Visitor access



Escort procedures



Equipment maintenance procedures



Handling, processing, and destruction of classified material



Badge procedures



End-of-day security procedures



Personnel and package inspection procedures



Secure communications device instructions

Changes in Security and Accreditation

Changes affecting the security posture of the SCIF shall be immediately reported by

the SO to the AO to include any corrective or mitigating actions taken.

If an AO determines that SCIF security conditions are unsatisfactory, SCIF

accreditation may be suspended or revoked.

All appropriate authorities and SCIF occupants shall be immediately notified and

the SCIF closed until deficient conditions are corrected.

All SCI material shall be relocated to another SCIF.

General

Except for law enforcement officials or other personnel required to be armed in the

performance of their duties, firearms and other weapons are prohibited in SCIFs.

Photography, video, and audio recording equipment are restricted but may be

authorized for official purposes as documented in the SOP.

Procedures shall be established to control IT storage media upon entering or exiting a

SCIF in accordance with ICD 503 (Intelligence Community Information Technology
Systems Security Risk Management, Certification and Accreditation).

SCIF perimeter doors shall remain closed and controlled at all times. When a door

needs to be open, it shall be continually monitored by an SCI-indoctrinated individual.

All SCIF occupants shall be familiar with emergency plans and drills shall be

conducted as circumstances warrant, but at least annually.

Where the risk of hostile action is significant, SCI materials shall be maintained at an

absolute minimum.

UNCLASSIFIED

Chapter 12

Management and Operations

UNCLASSIFIED

Inspections

SCIF inspections shall be performed by the AO, or designee, prior to accreditation.

Heads of IC elements shall conduct periodic security reviews to ensure the efficiency

of SCIF operations, identify deficiencies, and document corrective actions taken. All
relevant documentation associated with SCIF accreditation, inspections, and security
administration may be subject to review.

Periodic inspections shall be conducted based on threat, facility modifications,

sensitivity of programs, past security performance, or at least every five years.

SOs shall conduct annual self-inspections to ensure the continued security of SCIF

operations, identification of deficiencies, and to document corrective actions taken.
Inspection results shall be forwarded to the AO and copies retained by the SO until the
next inspection.

Authorized inspectors shall be admitted to a SCIF without delay or hindrance when

inspection personnel are properly certified to have the appropriate level of security
clearance and SCI indoctrination for the security level of the SCIF.

Short-notice or emergency conditions may warrant entry without regard to the normal

SCIF duty hours.

Government-owned equipment needed to conduct SCIF inspections will be admitted

into the SCIF without delay. Specifically, equipment for TEMPEST or Technical
Surveillance Countermeasures (TSCM) testing shall be admitted to a SCIF as long as the
personnel operating the equipment are certified to have the appropriate level of security
clearance and SCI indoctrination.

Control of Combinations

Combinations to locks installed on security containers/safes, perimeter doors,

windows, and any other opening should be changed in the following circumstances:

When a combination lock is first installed or used.

When a combination has been subjected, or believed to have been subjected, to

compromise.

Whenever a person knowing the combination no longer requires access to it

unless other sufficient controls exist to prevent access to the lock.

At other times when considered necessary by the SO.

When the lock is taken out of service, it will be reset to 50-25-50.

All combinations to the SCIF entrance doors should be stored in a different SCIF.

When this is not feasible, alternative arrangements shall be made in coordination with the
AO.

UNCLASSIFIED

Chapter 12

Management and Operations

UNCLASSIFIED

De-Accreditation Guidelines

SCIF closeouts and de-accreditations shall comply with the following procedures:

Inspect all areas, storage containers, and furniture for the presence of classified,

sensitive, or proprietary information.

Reset safe combinations to 50-25-50 and lock the containers.

Affix written certification to all storage containers that the container does not contain

classified, sensitive, or proprietary information. The certification shall include the date of
inspection and the name and signature of the inspector.

Ensure that reproduction and printing equipment is decertified or disposed of in

accordance with AO guidance.

Dispose of, or relocate, SCI computer equipment, media, hard drives, and portable

storage media as approved by the AO.

Request revocation of Automated Information Systems (AIS) accreditation.

Request revocation of SCIF accreditation.

If the SCIF will be used for another mission or project that requires alarms, transfer

alarm service to the new activity.

If the SCIF will not be used for another mission or project and all classified

information has been removed, the following shall occur:

Alarm service shall be discontinued.

Combinations on the entrance door and any GSA containers shall be changed to

50-25-50.

All keys shall be accounted for.

Visitor Access

General Requirements

Visitor logs shall be used to record all SCIF visitors and include the following

information:



Visitor‟s full name



Organization



Citizenship



Purpose of the visit



Point of contact



Date/time of the visit

Government-issued identification shall be required as a means of positive

identification.

UNCLASSIFIED

Chapter 12

Management and Operations

UNCLASSIFIED

Visitor logs shall be retained for two years after the date of the last entry.

Visitor clearance verification shall be accomplished using the DNI Scattered

Castles database to the greatest extent possible.

Visitors whose clearances have not been verified may be permitted, under escort,

entry into the SCIF; however, access to and/or discussion of classified information
shall be denied pending clearance verification.

Visitors, SCIF occupants, and their possessions may be subject to screening and

inspections to deter the unauthorized removal of classified material or the
introduction of prohibited items or contraband.

Screening and inspection procedures shall be documented and approved by the

AO.

SCIF Access by Uncleared and Emergency Personnel

Uncleared personnel shall be escorted at all times by cleared personnel.

The ratio of cleared escorts to uncleared personnel shall be determined on a case-

by-case basis by the SO.

Prior to assuming escort duties, all escorts shall receive a briefing by the SO or

designee outlining their responsibilities.

Uncleared personnel shall be kept under observation at all times while in the

SCIF. Escorts shall ensure precautions are taken to preclude inadvertent access to
classified information.

Lights, signs, or other alerting mechanisms or procedures shall be used to alert

SCIF occupants of the presence of uncleared personnel.

Emergency personnel and equipment shall be allowed access to SCIFs and be

escorted to the degree practical. If exposed to classified information, they shall sign
an inadvertent disclosure statement when feasible.

UNCLASSIFIED

Chapter 12

Management and Operations

UNCLASSIFIED

Maintenance

SCI-indoctrinated maintenance personnel shall be used to the extent possible.

Procedures for performing maintenance on office equipment, including the use of

diagnostic equipment, shall be documented in the SCIF SOP.

Computerized diagnostic equipment, to include associated hardware and software,

shall be kept under control within a SCIF and shall be managed to prohibit the migration
of classified data when connected to classified systems. Procedures shall be documented
in the SOP.

Passwords to access the maintenance mode of copiers and other office equipment

shall be controlled by the SO.

Office equipment that is no longer serviceable, such as copiers and classified fax

machines, shall be sanitized by having volatile memory erased and non-volatile memory
and disk storage removed for terminal destruction.

IDS and ACS Documentation Requirements

The following documents and records shall be maintained within the SCIF:

System Plans such as system design, equipment, and installation documentation.

MOAs established for external monitoring, response, or both, and which shall include

the following information:



Response time for response forces and SCIF personnel.



Responsibilities of the response force upon arrival.



Maintenance of SCIF points of contact.



Length of time response personnel are required to remain on-site.

Monitoring Station SOP and/or a copy of the monitoring station UL certificate.

Maintenance access SOP.

Records, logs, and archives.

Records of system testing (for two years) shall include the following information:



Testing dates



Names of individuals performing the test



Specific equipment tested



Malfunctions detected



Corrective actions taken

UNCLASSIFIED

Chapter 12

Management and Operations

UNCLASSIFIED

Records of guard or response force personnel testing.

The PCU shall contain a secured, non-volatile event (alarm) log capable of storing at

least six months of events, or a printer shall be installed that provides real-time recording
of openings, closings, alarms, trouble alarms, and loss of communications.

If the system has no provision for automatic entry into archive, the AO may

authorize a manual logging system.

Monitoring personnel shall record the time, source, type of alarm, and action

taken.

The SCIF SO shall routinely review the historical records.

Results of investigations and observations by the response force shall also be

maintained at the monitoring station.

Records of alarm annunciations shall be retained for two years.

Shunting or masking of any zone or sensor shall be logged in the system archives.

All maintenance periods shall be archived into the system.

An archive shall be maintained for all remote service mode activities.

Access Control Systems Records which include:

The active assignment of ID badge/card, PIN, level of access, entries, and similar

system-related information

Records of personnel removed from the system which shall be retained for two

years from the date of removal.

10.

Records of security incidents (violations/infractions) regarding automated systems

shall be retained by the SO for five years from the date of an incident or until
investigations of system violations and incidents have been resolved.

Emergency Plan

The SO shall create an emergency plan.

The emergency plan shall be approved by the AO and maintained on-site for each

accredited SCIF.

The emergency plan may be an extension of an overall department, agency, or

installation plan.

The emergency plan shall address the following:



Fire



Natural disaster



Civil unrest



Admittance of emergency personnel into a SCIF



The protection of SCIF occupants and classified information

UNCLASSIFIED

Chapter 12

Management and Operations

UNCLASSIFIED



Evacuation requirements



Emergency destruction

Plans shall be reviewed at least annually and updated as necessary.

All SCIF occupants shall be familiar with the plans and drills shall be conducted as

circumstances warrant, but at least annually.

Where political instability, terrorism, host country attitudes, or criminal activity

suggests the possibility that a SCIF may be overrun, emergency plans shall include
instructions for the secure destruction or removal of SCI under adverse circumstances and
include contingencies for loss of electrical power and non-availability of open spaces for
burning or chemical decomposition of material.

Where the risk of hostile actions are significant, SCI holdings and reference materials

shall be maintained at an absolute minimum required for current working purposes. If
reference or other material is needed, it shall be obtained from other activities and
returned or destroyed when no longer needed.

UNCLASSIFIED

SCIF Fixed Facility Checklist

CLASSIFY ACCORDING TO FACILITY SPONSOR CLASSIFICATION

GUIDANCE

CHECK Applicable blocks

□

Domestic

□

Overseas Not

COM

[ ]

Overseas COM

□

Pre-construction,

Complete Sections
as Required by A/O

□

Final FFC

Accreditation

□

Update/Page

Change

Checklist Contents

Section A: General information

Section B:

Security-in-Depth

Section C: SCIF Security

Section D: Doors

Section E: Intrusion Detection Systems (IDS)

Section F:

Telecommunication Systems and Equipment Baseline

Section G: Acoustical Protection

Section H: Classified Destruction Methods

Section I:

Information Systems/TEMPEST/Technical Security

UNCLASSIFIED

List of Attachments

-- TEMPEST Checklist
-- Other Attachments as Required

(Diagrams must be submitted )

Section A: General Information

SCIF Data

Organization/Company Name

SCIF Identification Number (

if applicable)

Organization subordinate to

(if applicable)

Contract Number & Expiration Date

(if

applicable)

Concept approval Date/by

(if applicable)

Cognizant Security Authority (CSA)

Defense Special Security Communication System Information

(if applicable)

DSSCS Message Address

DSSCS INFO Address

If no DSSCS Message Address, please provide
passing instructions

SCIF Location

Street Address

Building Name/#

Floor(s)

Suite(s)

Room(s) #

City

Base/Post

State/Country

Zip Code

Mailing Address (if different from SCIF location)

Street or Post Office Box

City

State

Zip Code

UNCLASSIFIED

Responsible Security Personnel

PRIMARY

ALTERNATE

Name

Commercial Phone

DSN Phone

Secure Phone

STE Other Phone

Home

Secure Fax

Command or Regional Special Security Office/Name (SSO)

(if applicable)

Commercial Phone

Other Phone

E-Mail Address of Responsible Security Personnel

Classified

(Network/System Name & Level)

Unclassified

(Network/System Name)

Other

(Network/System Name)

Accreditation Data (Ref Chapter: 12E)

a. Category/Compartments of SCI Requested:
1) Indicate storage requirement:

□

Open

□

Closed

□

Continuous Operation

□

None

2) Indicate the facility type

□

Permanent

□

Temporary

□

Secure Working Area

□

TSWA

3) Co-Use Agreements

□

Yes

□

If yes, provide sponsor:

b. SAP(s) co-located
within SCIF

□

Yes

□

If yes, identify SAP Classification level
(check all that apply)

□

SCI

□

Top Secret

□

Secret

□

Confidential

UNCLASSIFIED

c. SCIF Duty Hours

Hours to Hours:

Days Per Week:

d. Total square footage that the SCIF occupies:

e. Has or will CSA
requested any
waivers?

□

Yes

□

N/A

If yes, attach a copy of
approved waiver

Construction/Modification (Ref: Chapter 3B)

Is construction or
modification
complete?

□

Yes

□

N/A

If no, enter the expected date of
completion

Was all
construction
completed in
accordance with
the CSP?

□

Yes

□

N/A

If not, explain changes.

Inspections (Ref: Chapter 12G)

Has a TSCM Inspection been performed

□

Yes

□

If yes, provide the following

a. TSCM Service completed by

On ________________

(Attach a copy of report)

Were deficiencies
corrected?

□

Yes

□

N/A

If no, explain

b. Last physical security
inspection by

On ________________

(Attach a copy of report)

Were deficiencies
corrected?

□

Yes

□

N/A

If no, explain

c. Last Staff Assistance Visit by:

On ________________

(Attach a copy of report)

REMARKS:

UNCLASSIFIED

Section B: Security-in-Depth

Describe building exterior Security (Ref: Chapter 2B)

a. Is the SCIF located on a military installation, embassy
compound, USG compound or contractor compound with
a dedicated U.S. person response force?

□

Yes

□

b. Is the SCIF located in an entire Building

□

Yes

□

c. Is the SCIF located on a single floor of Building

□

Yes

□

d. Is the SCIF located in a secluded area of Building

□

Yes

□

e. Is the SCIF located on a fenced compound with access
controlled vehicle gate and/or pedestrian gate?

□

Yes

□

Fence Type

Height

Does it surround
the compound?
How is it
controlled?

How many gates?

Hours of usage?

How are they
controlled when
not in use?

Is the Fence
Alarmed?

If so, describe alarm systems (i.e. – Microwave)

2) Fence Lighting

3) Building Lighting

f. Is there external CCTV

coverage? If so, describe

the CCTV system.

(include monitor locations on map)

g. Guards

□ Yes

□ No

□ Static

□ Roving



Clearance level of guards

(if applicable)



During what hours/days?

Any SCIF duties?

□ Yes

□ No

If yes, describe duties

UNCLASSIFIED

Describe Building Security

(Please provide legible general floor plan of the SCIF perimeter)

Is the SCIF located in a
controlled building
with separate access
controls, alarms,
elevator controls,
stairwell control, etc.
required to gain access
to building or elevator?

□ Yes

□ No

If yes, is SCIF
controlled by bldg
owners?

If controlled by
SCIF owners, is
alarm activation
reported to SCIF
owners by
agreement?

□ Yes

□ No

□ Yes

□ No

b. Construction Type

c. Windows

d. Doors

e. Describe Bldg

Access Controls

□ Continuous

□ Yes

□

If no, during what hours?



Clearance level of guards

(if

applicable)

Any SCIF duties? If
yes, describe duties?

During what
hours/days?

□ Yes

□

Describe Building Interior Security

Are office areas
adjacent to the SCIF
controlled and
alarmed? If yes,
describe adjacent areas
and types of alarm
systems.

□ Yes

□ No

Controlled by
SCIF Owner?

If controlled by
Bldg owner, alarm
activation reported
to SCIF owner by
agreement?

□ Yes

□ No

□ Yes

□ No

UNCLASSIFIED

Security In-Depth

What external security attributes and/or features should the AO consider before
determining whether or not this facility has Security In-Depth? Please
identify/explain all factors:

Section C: SCIF Security

How is access to the SCIF controlled (Ref: Chapter 8)

a. By Guard Force

□ Yes

□

If yes, what is their minimum security
clearance level?

b. Is Guard Force Armed?

□ Yes

□

N/A

c. By assigned personnel?

□ Yes

□

If yes, do personnel have visual control
of SCIF entrance door?

d. By access control
device?

□ Yes

□

If yes, what kind?

□ Automated access control system

□

Non-Automated

If Non-Automated

1. Is there a by-pass key?

□ Yes

□

N/A



If yes, how is the by-pass key protected?

2. Manufacturer:

Model:

(Attach sheet if additional space is required for this information)

If Automated

1. Is there a by-pass key?

□ Yes

□

N/A



If yes, how is the by-pass key protected?

2. Manufacturer:

Model:

(Attach sheet if additional space is required for this information)

3. Are access control

□ Yes

□

If no, explain the physical protection

UNCLASSIFIED

  transmission lines
  protected by 128-bit
  encryption/FIBS 140?

provided.

4. Is automated access control system located within a SCIF or an
alarmed area controlled at the

SECRET

level?

□ Yes

□

5. Is the access control system encoded and is ID data and PINs
restricted to SCI-indoctrinated personnel?

□ Yes

□

6. Does external access control outside SCIF have tamper
protection?

□ Yes

□

7. Is the access control device integrated with IDS

□ Yes

□

N/A

8. Is the access control device integrated with a
LAN/WAN System?

□ Yes

□

N/A

Does the SCIF have windows? (Ref: Chapter 3F)

a. Are they acoustically
protected?

□

Yes

□

N/A

If yes, how? Please explain

b. Are they secured
against forced entry?

□

Yes

□

N/A

If yes, how? Please explain

c. Are they protected
against visual
surveillance?

□

Yes

□

N/A

If yes, how? Please explain

Do ventilation ducts penetrate the SCIF perimeter? (Ref:
Chapter 3G)

□ Yes

□

(Indicate all duct penetrations and their size on a separate floor plan as an attachment)

a. Any ducts over 96 square inches that penetrate perimeter walls?

□ Yes

□



If yes, how are they protected?

□

IDS (Describe in

Section E)

□

Bars/Grills/Metal

Baffles

□

Other, please explain



Describe Protection:

b. Inspection ports?

□ Yes

□



If yes, are they within the
SCIF?

□ Yes

□



If no, are they secured?

□ Yes

□

Please explain

UNCLASSIFIED

c. Do all ventilation ducts
penetrating the perimeter
meet acoustical requirements?

□ Yes

□

(

NOTE:

All ducts and vents, regardless of size may require acoustical protection)



If yes, how are they protected?

□ Metal Baffles

□

Noise Generator

□ Z-Duct

□

Other (Describe)

Describe the method of ventilation and duct work protection

(if applicable)

Construction (Ref: Chapter 3B)

a. Describe Perimeter Wall Construction:

b. True ceiling (material and thickness)?

□ Yes

□

c. False ceiling?

□ Yes

□



If yes, what is the type of ceiling material?



What is the distance between false and true
ceiling?

d. True floor (material and thickness)?

□ Yes

□

e. False floor?

□ Yes

□



If yes, what is the type of false flooring?



What is the distance between false and true
floor?

REMARKS:

Section D: Doors

Describe SCIF primary entrance door construction (indicate on floor plan) (Ref:
Chapter 3E)

a. Does the door and doorframe meet sound attenuation
requirements?

□ Yes

□



If no, have acoustical countermeasures been employed?

□ Yes

□

UNCLASSIFIED

100

b. Describe SCIF perimeter doors to include thickness and type of door.

c. Is an automatic door closer
installed?

□ Yes

□

If no, please explain

d. Is a door sweep/thresholds
installed?

□ Yes

□

If no, please explain

e. Is an acoustical/astragal strip
installed?

□ Yes

□

If no, please explain

Describe number and type of doors used for SCIF emergency exits and other
perimeter doors including day access (show on floor plan)

a. Do the doors and doorframes meet sound attenuation
requirements?

□ Yes

□



If no, have acoustical countermeasures been employed?

□ Yes

□

b. Has exterior hardware been removed?

□ Yes

□

c. Has local enunciator been installed?

□ Yes

□



Describe how the door hinges exterior to the SCIF are secured against
removal (if in an uncontrolled area).

Locking Devices

a. Is the primary entrance door equipped with a GSA-approved
  pedestrian door deadbolt meeting Federal Specification
  FF-L-2890 including lock meeting FF-L-2740A

□ Yes

□

b. List combination lock manufacturer, model number and group rating

Manufacturer:

Model Number:

c. Does the entrance door stand open into an uncontrolled area?

□ Yes

□

If yes, please describe tamper protection.

UNCLASSIFIED

101

d. Emergency exits and other perimeter doors: Describe (locks, metal strip/bar,
deadbolts, local annunciation, and panic hardware).

e. Where is the lock combination(s) filed? (Please identify the SCIF AO and SCIF
ID#)

REMARKS:

Section E: Intrusion Detection Systems

General IDS Description (Ref: Chapter 7A)

a. Has the IDS configuration been approved by the AO?

□ Yes

□

b. Identity of IDS installer:

Identity of IDS monitoring firm:

c. Premise Control Unit (PCU)

Manufacturer

Model Number

Tamper Protection

□ Yes

□

d. Is the PCU located inside the
  SCIF perimeter (indicated on
  floor plan)?

□ Yes

□

If no, please explain

e. Location of interior motion detection
protection



Accessible points of entry/perimeter?

□ Yes

□



Any others? Specify

□ Yes

□

f. Has the IDS alarm monitor station been installed to Underwriters
Laboratories certified standards?

□ Yes

□

Contractor facility submit copy of Certificate

g. Has the IDS passed AO or UL 2050 installation and acceptance
tests?

□ Yes

□



If yes, attach a copy of certificate (Non-commercial proprietary system must

UNCLASSIFIED

102

answer all questions)

h. High Security Switches Type I

□ Yes

□

i. High Security Switches Type II

□ Yes

□

j. Motion sensor (indicate sensor placement on a legible floor plan; 8 ½ x 11” or
11” x 17” paper)

k. Are any other intrusion detection equipment sensors/detectors in
use?

□ Yes

□



Please identify make, model and manufacturer and function (indicate on floor
plan)

Make

Model

Manufacturer

Function

l. Does the IDS extend beyond the SCIF perimeter?

□ Yes

□

m. Can the status of PCU be changed from outside IDS protection?

□ Yes

□



If yes, is an audit conducted daily?

□ Yes

□

n. Do any intrusion detection equipment components have audio or
video capabilities?

□ Yes

□



If yes, please explain.

o. PCU Administrator SCI indoctrinated?

□ Yes

□

p. External Transmission Line Security:

q. What is the method of line security? National Institute of
Standards and Technology (NIST) FIBS AES encryption?

□ Yes

□

1) If yes, has the encryption been certified by NIST or another
independent testing laboratory?

□ Yes

□

2) If not NIST standard, is there an alternate?

□ Yes

□

3) If yes, please explain

4) Does the alternate line utilize any cellular or other Radio
Frequency (RF) capability?

□ Yes

□

Manufacturer

Model Number

r. Does any part of the IDS use local or wide area network
(LAN/WAN)?

□ Yes

□

N/A

1) Is the host computer dedicated solely for security

□ Yes

□

N/A

UNCLASSIFIED

103

purposes?

2) Is the host computer secured within an alarmed area
controlled at the

SECRET

or higher level?

□ Yes

□

N/A

3) Is the host computer protected through firewalls or
similar devices?

□ Yes

□

N/A

4) Is the password for the host computer unique for each
  user and at least 8-characters long consisting of alpha,
  numeric, and special characters?

□ Yes

□

N/A

5) Is the password changed semi-annually?

□ Yes

□

N/A

6) Are remote security terminals protected the same as the
host computer?

□ Yes

□

N/A



If no, please explain:

Is emergency power available for the IDS?

□ Yes

□

N/A

Generator?

□ Yes

□



If yes, how many hours?

Battery?

□ Yes

□



If yes, how many hours?

Where is the IDS alarm monitor station located?

Does the monitor station have any remote capabilities
(i.e., resetting alarms, issuing PINs, accessing/securing
alarms, etc.?

□ Yes

□

N/A



If yes, please explain:

Does the IDS have any automatic features (i.e., timed
auto-secure, auto-access capabilities?

□ Yes

□

N/A

Does the PCU/keypad have dial out capabilities?

□ Yes

□

N/A

IDS response personnel

□ Yes

□

N/A

a. Who provides initial alarm response?

b. Does the response force have a security clearance?

□ Yes

□



If yes, what is the clearance level?

c. Do you have a written agreement with external response force?

□ Yes

□

d. Emergency procedures documented?

□ Yes

□

e. Response to alarm condition:

______ Minutes

UNCLASSIFIED

104

f. Are response procedures tested and records maintained?

□ Yes

□



If no, please explain:

g. Has a catastrophic failure plan been approved by the CSA?

□ Yes

□

Does the IDS undergo semiannual testing?

□ Yes

□

Have IDS records been maintained?

□ Yes

□



If no, please explain:

10.

REMARKS:

Section F: Telecommunication Systems and Equipment Baseline

Is the facility declared a “No Classified Discussion Area”? (Ref:
Chapter 11A)

□ Yes

□



If yes, then the audio protection questions within this section may be
identified as N/A



If the facility is declared a “No Classified
Discussion Area”, are warning notices posted
prominently within the facility?

□ Yes

□

N/A

Does the facility have any unclassified telephones that are
connected to the commercial public switch telephone network
(PSTN)?

□ Yes

□



What is the method of on-hook protection?

1) CNSSI 5006 (TSG-6) approved telephone or instrument

□ Yes

□

N/A

(Please identify all telephone equipment/stations and/or instruments being used either below

or as an attachment)

Manufacturer

Model Number

TSG Number

(if applicable)

2) CNSSI 5006 (TSG-6) approved disconnect device?

□ Yes

□

N/A

a. Line disconnect?

□ Yes

□

N/A

b. Ringer protection?

□ Yes

□

N/A

Manufacturer

Model Number

TSG Number

(if applicable)

3) CNSSI 5002 (TSG-2) configured computerized
telephone system (CTS)?

□ Yes

□

N/A

a. If yes, please provide the following information about the CTS

UNCLASSIFIED

105

Manufacturer

Model

b. If yes, please provide specific location of the CTS

c. How is the facility protecting the CTS physically controlled?

d. If yes, what is the clearance level (if any) of facility or area where the switch is
located and how is area controlled?

e. How are all cables, signal lines and intermediate writing frames between the SCIF
telephones and the CTS physically protected within a physically controlled space?

f. Are all program media, such as tapes and/or disks, from the CTS
afforded physical protection from unauthorized alterations?

□ Yes

□

g. Is an up-to-date master copy of the CTS software program
maintained for confirmation and/or reloading of the operating
system?

□ Yes

□

h. Does the CTS have the capability to force or hold a telephone
station off-hook?

□ Yes

□

i. Does the CTS use remote maintenance and diagnostic procedures
or other remote access features?

□ Yes

□



If yes, explain maintenance procedures

j. Do the CTS installers and programmers have security clearances?

□ Yes

□



If yes, at what access level (minimum established by AO)



If no, are escorts provided?

□ Yes

□

4) Is it a Voice over Internet Protocol (VOIP) phone
system (IPS) (Ref CNSSI 5000)?

□ Yes

□

N/A

a. If yes, please provide the following information about the IPS

Manufacturer

Model Number

IPS Location

b. Do all unclassified telephones within the facility have a
  hold, mute and/or push-to-talk [handset] capability,
  (for off-hook audio protection)?

□ Yes

□

N/A



If no, please explain?

c. Is access to the facility housing the IPS physically controlled?

□ Yes

□

d. If yes, what is the clearance level (if any) of facility or area where the switch is
located and how is the area controlled?

Military reference books and manuals (2009-2023, Volume 2) - page 18