2017_460_SW_SCIF_SOP_(READ).pdf

UNCLASSFIED - FOR OFFICIAL USE ONLY

460 SPACE WING

SENSITIVE COMPARTMENTED

INFORMATION FACILITY (SCIF)

STANDARD OPERATING

PROCEDURES

(SOP)

Version 1.0

460 OGI SPECIAL SECURITY OFFICE (SSO)

TABLE OF CONTENTS

1. INTRODUCTION

1.1. Purpose of This SOP

1.2. Points of Contact

1.3. References

1.4. Glossary of Terms

1.5. SCIF Personnel Requirements

2. PERSONNEL SECURITY

2.1. General Information

2.2. Nomination of SCI Positions

2.3. Visit Certifications

2.4. Periodic Reinvestigations

2.5. Foreign Travel of SCI Cleared Personnel

2.6. Change in Personnel Status

2.7. Marriage, Cohabitation or Contact With a Foreign National

2.8. Security Incidents

2.9. Security Violations

2.10. Security Infractions

2.11. Security Information Files

2.12. Suspension of SCI Access

2.13. Interim Suspension

2.14. For Cause Actions

2.15. Deserter/Absentee Clause

2.16. Reciprocity of Accesses (Transfer-in Status)

3. PHYSICAL SECURITY

3.1. Physical Security Standards

3.2. Operation Security (OPSEC)

3.3. SCIF Access Control

3.4. Restricted Area Badge Procedures

3.5. Verifying RA Badges

3.6. Escort Procedures/Visitor Control

3.7. Prohibited Items

3.8. Random Inspections

3.9. SCIF Opening and Closing Procedures

3.10. End of Day Security Procedures

3.11. SCIF Access and Intelligence Disclosure……………………………………………...28

4 INFORMATION SECURITY

4.1. Levels of Classification

4.2. Marking Classified Documents

4.3. Reproduction of Classified Material Marking Classified Documents

4.4. Safeguarding Classified Information Reproduction of Classified Material

1. INTRODUCTION

1.1. Purpose

1.1.1. SCI Overview: Sensitive Compartmented Information (SCI) is a handling system, managed by the Director of National Intelligence, establishing formal access controls over information which may reveal sources and means, methods or analytical processes.

SCI is, by nature, information that is especially sensitive, requiring special care to preserve its usefulness for Intelligence Community and military operations. SCI is not a clearance or classification, but indicates a field of access; it is a system to limit any one individual’s critical knowledge. Non-SCI information is referred to as “collateral” information. SCI information is only accessible to those who are specifically indoctrinated or “read-in”, and is handled differently from collateral information of similar classification level. All DoD units must handle SCI information in accordance with DoDM 5105.21-V-1-3.

1.1.2 SOP Requirement: According to DoDM 5105.21-V1, SCI security officials shall establish written SOPs as required for their individual operational environments. The

SSO/SSR shall ensure that SOPs do not conflict with DNI, DOD, or Military Department regulatory guidance. The SSO/SSR for the facility to which the SOP applies and the contractor management official responsible for SCI shall review SOPs and forward to the

SIO for approval. The SIO shall thereafter review them annually and document the review in writing. SOPs shall be part of the security orientation for personnel assigned to the areas to which the SOPs apply.

1.1.3. SOP Overview: This SOP is not designed to answer all questions that may arise;

however it is intended to serve as a reference guide to answer some frequently asked questions and to be used as a tool for training. It provides guidance on procedures for

Personnel Security, Physical Security, Information Security and Information Assurance to all 460 SW facilities accredited as a SCIF (buildings 121, 122, 123, 430, 442, 1030 rooms 20 and 9). It is essential that all personnel working within a SCIF are familiar with

SCIF procedures and understand the contents of this document. All procedures outlined in this document are in accordance with the references listed on the following pages. It applies to contractors in SCIFs accredited by the Defense Intelligence Agency (DIA) and to DoD SCI contract efforts conducted within facilities accredited by other agencies and approved for joint usage by a co-utilization agreement.

Direct questions/comments pertaining to information contained in this guide to:

460 OGI/SSO/SSR

DSN: 847-7383 (Bldg 1030) / 847-5942 (MCS Bldg 442) COMM: 720-847-7383 (Bldg 1030) / 720-847-5942 (MCS Bldg 442)

Email: willard.viar.1@us.af.mil mailto:willard.viar.1@us.af.mil

1.2. Points of Contact

POSITION NAME DSN #

Senior Intelligence Officer Maj Teresa A. Frank 847-7358

Contractor Special Security

- Team Lead CSSR/CISSO Mrs. Nancy Mitchell 847-7383

- CSSR Mr. James Vorpahl 847-7353

MCS Special Security Office

- CSSR Ms. Nancy Mitchell 847-5942

- CISSO Mr. Thomas Smelster 847-5978

Information Assurance (SCI)

- Information Assurance For MCS Mr. Thomas Smelster 847-5978

Physical Security

- Team Lead CSSR Ms. Nancy Mitchell 847-5942

- Physical Security for MCS Mr. Paul Richardson 847-5940

Information Assurance (Collateral)

- Collateral IA Officer SSgt Christian Smith 554-2425

Information Protection (Collateral)

- Senior IP Security Officer/Lead Security

Manager

Mr. Frank Pablo 847-5086

Note: If you have security questions after hours, please contact the Intelligence

Mission Supervisor (IMS) for 24 hour support at Comm 720-847-5112 or DSN 847-

5112.

1.3. References

1.3.1. Executive Order 13526 CLASSIFIED NATIONAL SECURITY INFORMATION

1.3.2. DoD 5105.21 Sensitive Compartmented Information (SCI) Administrative

Security Manual (FOUO) 19 October 2012

1.3.3. DoD 5200.01 Information Security Program (U) 24 February 2012

1.3.4. DoD 5200.02 Personnel Security Program (U) 21 March 2014

1.3.5. DoD 5220.22-M National Industrial Security Program Operating Manual (U)

Feb 06

1.3.6. AFM 14-304 The Security, Use and Dissemination of Sensitive Compartmented

Information (U) 1 May 99

1.3.7. AFI 31-401 Information Security Program Management (U) 1 Jan 99

1.3.8. AFI 31-501 Personnel Security Program Management (U) 29 Apr 13

1.3.9. AFI 31-502 Personnel Security Program (U) 1 May 96

1.3.10. AFI 14-303 Release of Intelligence to US Contractors (U) 1 Apr 99

1.3.11. AFI 33-332 Privacy Act Program 29 Jan 04

1.3.12. AFSPC Personnel Security Duties 2015

1.3.13. Intelligence Community Directive (ICD) – 704 (U) Personnel Security

Standards and Procedures Governing Eligibility for Access to Sensitive

Compartmented Information and Other Controlled Access Program Information, October 1, 2008

1.3.14. Intelligence Community Directive (ICD) – 709 (U) Reciprocity for

Intelligence Community Employee Mobility, June 10, 2009

1.3.15. Intelligence Community Directive (ICD) – 701 Unauthorized Disclosures

1.4. Glossary of Terms

1.4.1. Contracting Officer’s Representative (COR) (Contract Monitor): Appropriately indoctrinated personnel (military or civilian) appointed by the Contracting Officer to monitor the day-to-day activities of DoD SCI contracts or serve as a technical representative. They serve as a point of contact for CSSOs.

1.4.2. Cognizant Security Authority (CSA): The CSA is responsible for implementing

SCI security policies and procedures. The Defense Intelligence Agency (DIA) Special

Security Office (SSO) is the CSA for all DOD Agencies and Field Activities.

1.4.3. Contractor Special Security Officer (CSSO): A contractor employee who has been appointed in writing by the CSA as being responsible for SCI security of the SCIF at the contract location.

1.4.4. Certified Information Systems Security Office (CISSO): A Chief Information

Security Officer (CISO) controls information security issues in an organization and is responsible for securing anything related to digital information.

1.4.5. Defense Intelligence Agency (DIA): A DoD combat support agency that satisfies the full range of foreign military and military-related intelligence requirements of the

Secretary of Defense, the Chairman of the Joint Chiefs of Staff, the CINCs and

Combatant Commands and other DoD Components.

1.4.6. Sensitive Compartmented Information (SCI): SCI is classified information concerning or derived from intelligence sources, methods or analytical processes, which is required to be handled exclusively within formal access control systems established by the Director of National Intelligence.

1.4.7. SCI Facility (SCIF): A formally accredited area, room, group of rooms, or facility where SCI may be stored, used, discussed, or electrically processed. A SCIF may be permanent or temporary, mobile or fixed, and have varied construction. Procedural and physical measures must prevent the free access of persons unless they have been formally indoctrinated for that particular SCI material authorized for use or storage within the SCIF. SCIFs are located at contractor plants, other civilian locations, or US government controlled facilities.

1.4.8. Senior Intelligence Officer (SIO): The highest ranking military or civilian individual charged with direct foreign intelligence missions, functions, or responsibilities within a department, agency, component, command, or element of an

Intelligence Community organization. The SIO is responsible for the Wing’s SCI

Security Program and appoints Special Security Officers/Representatives (SSO/R) to directly support the program. The 460 OG/OGI Chief Wing Intelligence Officer is the

SIO for all SCIFs maintained under the 460 SW.

1.4.9 Special Security Officer (SSO): The SSO is responsible for the security management, operation, implementation, use and dissemination of all types of SCI material within his/her respective organization.

1.4.10. Special Security Officer (SSO) System: The system through which the DOA and Military Department SOICs accomplish their responsibilities for security, use and dissemination of SCI. Dissemination includes both physical and electrical means. Both the office and the officers assigned to the system are referred to as the “SSO”.

1.4.11. Special Intelligence (SI): Unclassified term used to describe a type of SCI.

1.4.12. Talent Keyhole (TK): Unclassified term used to describe a type of SCI.

1.4.13. GAMMA or “G”: Unclassified term used to describe a type of SCI access.

1.4.14. HCS or “H”: Unclassified term used to describe a type of SCI access.

1.4.15. Special Security Representatives (SSR): The SSRs are functionally subordinate to the SIO and are part of the OGI staff. They direct all SCI security administration and operations for 2 SWS, 8 SWS, 11SWS and the MCS. The SSR has day-to-day SCI security cognizance of all unit SCIF(s). They are also responsible for implementation of security administration, Controls Information Security, Personnel Security, Physical

Security, and Resource Protection programs. Additionally, SSRs enforce policies and safeguard SCI and all other classified information within a SCIF. Lastly, SSRs are responsible for conducting SCI security education and awareness training regularly.

1.5. SCIF Personnel Requirements

1.5.1.Review this SOP annually, acknowledge receipt and comply with all procedures.

The SCIF manager (SSO/SSR) is responsible for ensuring all new personnel or currently assigned personnel meet this requirement.

1.5.2.Refrain from disclosing classified information to unauthorized persons.

1.5.3.Discuss, store, or work with SCI only in the approved facility (SCIF).

1.5.4.Properly classify, mark and protect material based on CAPCO classification guide.

(See SSO/SSR if you have questions)

1.5.5.Submit all classified documentation to the Information Security Office (ISO) for review if there are any questions as to the classification of the document.

1.5.6.Immediately report an actual or potential security violation or compromise to the

SSR.

2. PERSONNEL SECURITY

2.1. General Information:

2.1.1. According to DoDM 5105.21-V3, the protection of SCI is directly related to the effectiveness of the personnel security program. Intelligence Community Directive (ICD)

704 (Reference (f)) establishes the personnel security standards for the IC. An interlocking and mutually supporting series of program elements (e.g., need to know, investigation, binding contractual obligations on those granted access, security education and awareness, individual responsibility, and continuing evaluation) provide reasonable assurances against compromise of SCI by those authorized access to it.

2.1.2 Access eligibility to SCI is granted by a determination authority as delegated by the appropriate Head of an Intelligence Community Element (HICE) having cognizance of the individuals involved. Within the DOD, access eligibility is reciprocal except for interim personnel security clearances. The Air Force central adjudication facilities

(CAFs) are authorized to grant, deny, or revoke SCI access eligibility in accordance with the following requirements:

2.1.1.1 Requirements for SCI Access:

2.1.1.1.1. Pre-nomination interview prior to indoctrination to SCI.

2.1.1.1.2. Validation of the individual’s need to know.

2.1.1.1.3. Favorable determination of the individual’s eligibility by

SSO/SSR.

2.1.1.1.4. Completion of pre-nomination interview prior to SCI indoctrination.

2.1.1.1.5. Signing of a Non-Disclosure Statement (NDS) by the individual.

Completion of an SCI security indoctrination of the individual. The HICE or designees (SIO) may grant SCI access to U.S. contractor employees under the following conditions.

2.1.1.1.5.1. A DD Form 254, “Contract Security Classification

Specification,” certifies that the contract for which the work shall be performed requires SCI access.

2.1.1.1.5.2. The need to know for SCI access is

determined and approved by the SIO where the work shall be performed.

2.1.1.1.5.3. The appropriate U.S. Government Contracting

Officer’s Representative (COR) endorses the requirement.

2.1.3. HICEs may delegate authority to the senior intelligence officer (SIO) to approve the need to know for Special Intelligence (SI), TALENT KEYHOLE (TK), GAMMA, and

Human Intelligence (HUMINT) Control System (hereafter referred to collectively as SCI) accesses for personnel under their security cognizance, including contractors, consultants, members of the Reserve Component, Government departments or agencies involved in

DoD activities, and members of boards and other applicable activities. SIO approval authority shall not be further delegated.

2.1.4. HICEs and SIOs are responsible for stringent application of SCI security policy and procedures and the need to know principle. They are responsible for ensuring that only those personnel with a validated operational requirement for SCI access are nominated for SCI to preclude unnecessary investigations and adjudications with their attendant cost.

2.1.5. Requesting SCI Access for Personnel. Before requesting new or additional SCI access, the commander or contract monitor must first determine a clear “need-to-know” exists and the requirement for SCI access will be a continuing one. Submit access requests to Mr. Willard Viar (SSO) via email: willard.viar.1@us.af.mil

2.1.5.1. The Need to Know Principle. The primary security principle in safeguarding SCI is access only by those persons with an appropriate clearance, access approval, clearly identified need to know, and appropriate indoctrination. Even when approved for a specific access, the holder is expected to practice need to know in acquiring or disseminating information about the program(s) or project(s) involved.

2.1.5.1.1. Intrinsic to this discipline is acquiring or disseminating only that information essential to effectively carrying out the assignment.

2.1.5.1.2. No person shall be deemed to have a need to know solely by virtue of rank, title, or position.

2.1.5.1.3. When a previously established need to know no longer exists due to reorganization, reassignment, change in duties, or any other reason, the SCI access approval affected by this change shall be cancelled and the individual shall be debriefed.

2.2. Nomination to SCI Positions

2.2.1. The unit SCI Access Manager (for military) or CSSO (for contractors) nominates personnel to vacant SCI positions.

2.2.2. All military nominees must occupy an “S” coded position on the Unit Manning

Document (UMD). If the nominee is not in an “S” coded position, the unit must request the position be upgraded by sending a manpower change request to their respective manpower office. The SSO/SSR will periodically check “S” codes during staff assistance visits with the SCI monitor and subordinate units to ensure all SCI indoctrinated personnel occupy an “S” coded position.

2.2.3. After the SSO/SSR verifies a member’s SCI eligibility via JPAS, the unit will be notified to have the member schedule an indoctrination appointment to be briefed into

SCI accesses as authorized by the position being occupied.

2.3 Visit Certifications

2.3.1. Buckley AFB currently uses the white Restricted Area Badge (RAB) for access to its SCIFs. However, it is the responsibility of the visiting member to call prior to their visit and ensure there is nothing else required for their visit. The SCI badges do NOT validate “Need-to-Know”, which is the responsibility of the holder of the information or host.

2.3.2. During SCI indoctrination all personnel are briefed on the process for JPAS verification of their SCI accesses when performing TDYs that require SCI access.

2.3.3. The POC at the location to be visited is responsible for verifying SCI accesses for personnel they are authorizing to enter their SCIF either directly through JPAS or in coordination with their supporting SSO. Accomplishing this will require travelers to provide their names and Social Security Numbers (SSNs) to the POC as JPAS is a SSN dependent system. If the TDY is to a location that does not utilize JPAS for access verification, the distant end POC is responsible for providing the travelers all information necessary for the 460 OGI/SSO to send an SCI Visit Certification message.

2.3.4. Contractor SSOs (CSSOs) are authorized to pass SI/TK for SCI cleared individuals to any government location or other CSSO.

2.3.5. Badge Requests for Non-AFSPC Assigned Personnel. The SSO requires any agency that is not a part of AFSPC, yet requires AFSPC SSO to issue an SCI badge for their personnel working in the local area to complete a SCI Badge Request Form (contact

SSO/SSR). This form must be completed and hand carried by the member to the SSO office on the day of their appointment. No badge will be issued until this form is received by the SSO office. Please note that the badge will only be issued for three years for

Military and DOD Civilians and the length of the contract or a maximum of three years for contractors. The SSO office will only accept badge request forms from identified sponsoring activities, SCI Monitors, Facility Security Officers (FSO), or Special Security

Representatives (SSR).

2.4. Periodic Reinvestigation Procedures

2.4.1. All personnel who have been granted SCI access are required to update their

Personnel Security Questionnaire and initiate SSBI Periodic Reinvestigation action every

6-years. Please contact your unit Security Manager to initiate. The individuals concerned shall be contacted to complete a new Standard Form (SF) 86, “Questionnaire for National

Security Positions,” to cover the period since the last SSBI or SSBI-PR was completed.

The local SCI security official shall review completed statements of personal history to determine if any relevant personnel security information has been excluded prior to submission to the investigative provider. If the individual fails to submit the requested PR package, SCI security officials should determine the cause (e.g., notification of expiration not received, access no longer required) prior to any automatic termination of SCI access.

2.5. Foreign Travel of SCI Cleared Personnel

2.5.1. SCI briefed personnel are responsible for ensuring they receive a comprehensive foreign travel briefing prior to any official or unofficial travel outside the 50 United

States and its territories NLT 14 days prior to departure, and the 460 OGI/SSO must obtain the traveler’s itinerary. Encourage the traveler to also access country specific threat warnings via the US State Department website. Before departure, the traveler must complete the Foreign Travel Reporting Form and turn it into the 460 OGI/SSO. If contact is made with foreign nationals on their travels, the individual in question must complete a Foreign Contact Form upon arrival back to home station. This form must be completed NLT 30 days after returning from travel. The 460 OGI/SSO may ask the individual to provide additional information if needed. SCI briefed personnel are responsible for ensuring they receive a comprehensive foreign travel briefing prior to any official or unofficial travel outside the 50 United States and its territories.

2.6. Change in Personal Status

2.6.1. IAW DoDM 5105.21-V3, individuals with SCI access will notify 460 OGI/SSO of any significant change in personal status. Failure to comply with reporting requirements may adversely affect one’s continuing eligibility for SCI access. Report all administrative change of status information (name changes, etc.) to the SSO office.

Significant changes include but are NOT limited to the following:

2.6.1.1. A change of assignment.

2.6.1.2. Change in marital status (i.e. marriage, intent to marry or marriage to foreign nationals, divorce, cohabitation)

2.6.1.3. Legal name change.

2.6.1.4. Adverse involvement with law enforcement agencies.

2.6.1.5. Arrests for DUI/DWI.

2.6.1.6. Traffic violations of $300 or more.

2.6.1.7. Credit judgments.

2.6.1.8. Bankruptcy filing or repossessions.

2.7. Marriage, Cohabitation or Contact with a Foreign National

2.7.1. When an SCI indoctrinated individual intends to marry or co-habitate with a foreign national, they must first notify the 460 OGI/SSO, in writing, of that intent. The

SCI indoctrinated individual must initiate a Single Agency Check (SAC) for the intended spouse or co-habitant. NOTE: If the SCI indoctrinated individual marries a foreign national prior to being granted permission by the SIO, 460 OGI/SSO/SSR may establish a

Security Information File (SIF).

2.7.2. The Statement of Intent letter (contact SSO/SSR for template) will be forwarded to the AFSPC SIO through AFSPC/SSO. The SIO can grant “authority to proceed” based on a determination that the value afforded to US Government security interests by the individual having access exceeds the associated risks. All questionable cases will be forwarded to the CAF for a determination.

2.7.3 Contact with Foreign Nationals. This does not apply to contact with foreign mission partners assigned to the 460 SW. According to DoDM 5105.21 –V-3, SCI-indoctrinated personnel must protect themselves against cultivation and possible exploitation by foreign nationals who are or may be working for foreign intelligence services and to whom they might unwittingly provide sensitive or classified national security information. SIOs shall provide implementing guidance for the administration of the following policy for individuals under their security cognizance.

2.7.3.1. Persons with SCI access have a continuing responsibility to report, within 72 hours, to their local SCI security official (or immediate supervisor if an SCI security official cannot be contacted within 72 hours) all contacts:

2.7.3.1.1. In which illegal or unauthorized access is sought to classified, sensitive, or proprietary information or technology, either within or outside the scope of the employee's official activities. Personnel should be skeptical of requests for information that go beyond the bounds of innocent curiosity or normal business inquiries.

2.7.3.1.2. With known or suspected intelligence officers from any country.

2.7.3.1.3. With, or invitations from, foreign government officials.

2.7.3.2. Unless specifically approved by the appropriate HICE, designee, or

SIO, DoD SCI-indoctrinated personnel shall not initiate contact with foreign government representatives, accept invitations to attend any official or social foreign function, or extend reciprocal invitations. DoD personnel whose official duties require them to deal officially and socially with foreign nationals must limit their contact and association to the requirements of their duties. If you have any questions please contact the 460 SSO/SSR.

2.8. Security Incidents

2.8.1. It is the responsibility of all SCI-indoctrinated personnel to report any security incidents affecting or involving SCI to the appropriate SSO/SSR or local SCI security official. Security managers shall ensure all security violations and incidents involving

SCI information are reported immediately to the appropriate SSO/SSR. An appropriate report shall be prepared and provide sufficient information to explain the incident.

Security incidents are categorized as either violations or infractions.

2.9. Security Violations

2.9.1. A security violation is a compromise of classified information to persons not authorized to receive it or a serious failure to comply with the provisions of security regulations or this Manual and which is likely to result in compromise. A security violation requires investigation.

2.9.1.1. Violations can result from, but are not limited to, deliberate or accidental exposure of SCI resulting from loss, theft, or capture; recovery by salvage; defection; press leaks or public declarations; release of unauthorized publications; or other unauthorized means.

2.9.1.2. Loss or exposure of SCI from any cause requires immediate reporting, investigation, and submission of a damage assessment describing the impact on national security.

2.10 Security Infractions

2.10.1 An infraction (formerly known as a “practice dangerous to security”) is a failure to comply with the provisions of security regulations or this Manual or any other action that causes a potential compromise of classified information.

2.10.1.1. An infraction requires immediate corrective action but does not require investigation. An infraction does not constitute a security violation but can lead to security violations or compromises if left uncorrected. Examples of infractions include, but are not limited to, a courier carrying classified documents stopping at a public establishment to conduct personal business, or placing burn bags adjacent to unclassified trash containers.

2.10.1.2. Management officials shall take prompt corrective action on any reported infraction and document the actions taken.

2.11. Security Information File (SIF)

2.11.1. A SIF is a collection of documents that are collected and compiled when derogatory information becomes known that may have an impact on the individual’s continued SCI eligibility. The unit commander, supervisor or CAF normally establish

SIFs. Chapter 8 of AFI 31-501 has complete details and procedures for establishing SIFs.

The 460 OGI/SSO is responsible for processing SIFs on all SCI cleared personnel, and the local IP office for SIFs on non-SCI cleared individuals. The following information is provided as a general guideline for SIF actions:

2.11.2. Administrative change of status information (name change, divorce, etc) does not constitute a SIF and is not reported to the CAF.

2.11.3. When the commander or supervisor receives derogatory information, the commander has 20 working days from receipt of the information to determine if a SIF is warranted. This may be extended to 45 working days when necessary to validate allegations. Once a SIF is formally opened only the CAF can close the file.

2.11.4. A SIF is warranted if a person’s behavior or conduct doesn’t comply with the adjudicative guidelines specified in DCID 6/4 and DoD 5200.2R. The commander must notify an individual in writing when a SIF has been established. 460 OGI/SSO through

AFSPC will in turn notify the CAF by electronic message. Some of the reasons to establish a SIF include:

2.11.4.1. Refusal to sign the Non-Disclosure Agreement

2.11.4.2. Incidents of theft, etc.

2.11.4.3. Child or Spousal abuse

2.11.4.4. Domestic violence

2.11.4.5. Criminal or dishonest conduct

2.11.4.6. Excessive indebtedness

2.11.4.7. Unexplained affluence

2.11.4.8. Drug use/abuse—includes marijuana use

2.11.5. Once a SIF is established, the unit must keep the 460 OGI/SSO updated on any changes. The completed SIF is to be forwarded within 120 days through the MAJCOM

SSO to the CAF. All completed SIFs forwarded to our office must include a request for closure letter signed by the commander. This letter must also include commander’s recommendation on the person’s clearance eligibility (i.e. reinstatement or revocation).

The CAF will return incomplete SIFs to the Commander with a request for the required information.

2.12. Suspension of SCI Access.

2.12.1. SIOs shall maintain active programs to monitor the continued security eligibility of SCI-cleared personnel. SSOs should maintain effective liaison with supervisory personnel, to identify as early as possible potential security problems involving SCI-indoctrinated personnel. When information of obvious security concern develops:

2.12.1.1. The appropriate commander or official shall immediately determine if it is in the interest of national security to retain a person in-status, or to take interim action to locally suspend access to SCI pending final resolution of the issue.

2.12.1.2. The SCI security officer shall expeditiously remove SCI access from

JPAS and work with the commander or official to determine how the issue may affect the individual’s continued eligibility for SCI under the OMB

Adjudicative Guidelines and whether the issue requires action by the cognizant CAF.

2.12.1.3. Local SCI access suspension is a temporary measure designed to safeguard sensitive classified information or facilities while the issue of concern is investigated. If the commander or official decides the issue warrants reporting to the cognizant CAF, the SCI security officer will use

JPAS.

2.12.1.4. The JPAS incident report will include the date of the decision as the formal suspension date. The commander, HICE, or adjudicative authority must notify the individual, in writing, of the formal suspension of SCI access and of the reason for such action.

2.12.1.5. Follow-up reporting will continue until the individual’s commander or official has made a final recommendation to the CAF.

2.12.1.6. Once submitted, only the cognizant CAF can make a final determination regarding the individual’s continued SCI eligibility. Figure

1 provides a template for suspension report to be provided to CAFs.

2.12.1.7. Individuals who have had their SCI access suspended, or have received a final denial or revocation of security clearance, may not enter a

SCIF except with HICE or designee approval.

2.13. Interim Suspension

2.13.1. The Commander determines if a local interim suspension to classified information is necessary while he/she examines unfavorable information to determine if a SIF is warranted. If interim suspension is determined, access to all classified information is suspended. Access to classified information and SCI is considered one under the DoD personnel security common adjudicative guidelines. All suspensions must be reported to

SSO AFSPC within 24 hours. * NOTE: Accesses cannot be “split”. For example, a commander cannot suspend SCI and allow a person to work Secret collateral project while the SIF is ongoing.

2.13.2. The commander has the option of determining whether or not to suspend an individual’s access upon establishment of SIF. This should be based on a thorough review of all the facts and an assessment of the risk to national security. However, the

CAF retains authority to establish a SIF and suspend access.

2.14. For Cause Actions

2.14.1. Incident Reports. When an individual is debriefed from all SCI access for cause, the SSO/SSR shall submit an Incident Report via JPAS to the supporting CAF. The report shall specify reason for report, accesses held, indoctrination and debriefing dates, a justification for the debriefing, and any other pertinent information. Individuals debriefed for cause shall only be re-indoctrinated following favorable adjudication by the cognizant

CAF.

2.14.2. The SIO or SSO/SSR in conjunction with the commander will prepare and forward “Request for authority to proceed” to the MAJCOM SIO through the SSO/SSR.

All questions must be answered as completely as possible to facilitate the process. The unit commander must sign all requests.

2.15. Deserter/Absentee Clause

2.15.1. Government Civilians/Military Personnel: According to DoDM 5105.21-V3, civilian employees and military assignees must notify their supervisor within ONE hour of their scheduled reporting time when unable to report for work, no matter what the reason. If the immediate supervisor is not available, the employee will contact the supervisor’s designee or next higher level supervisor. Under no circumstances will an employee leave a voice mail message to satisfy this reporting requirement. While on temporary duty, employees must contact both their supervisor and their point of contact at the organization hosting the visitor when they are unable to report to their duty station.

2.15.2. Contractors: Contractor employees must contact their immediate supervisor at their company and their Contracting Office Representative (COR) or their immediate government point of contact in the office in which they work.

2.15.3. Reporting Procedures:

2.15.3.1. No contact within 1 hour of reporting time – The supervisor must attempt to contact the employee.

2.15.3.2. No contact within 3 hours of reporting time – The absence MUST be reported to the 460 OG/SSO.

2.16. Reciprocity of Accesses (Transfer-in Status).

2.16.1. Individuals who temporarily or permanently transfer to another DoD agency that requires the individual to maintain access to SCI may have their SCI indoctrination paperwork passed from the losing organization to the gaining organization. This transfer eliminates the necessity for the transferring individual to duplicate the indoctrination paperwork at the gaining organization. A transfer-in-status may be initiated by either the losing or the gaining organization’s SSO.

3. PHYSICAL SECURITY

3.1. Physical Security Standards

3.1.1. Physical Security Standards for the construction and protection of SCIFs are prescribed in Intelligence Community Directive (ICD) 705 (Reference (f)), Intelligence

Community Standard (ICS) 705-1 (Reference (g)), and ICS 705-2 (Reference (h)). DoD

SCIFs will be established in accordance with those references and the DoDM 5105.21-

V2.

3.1.2. Personnel who work in or have routine or unescorted access to a SCIF must be indoctrinated for the compartments of SCI that is discussed, processed, or stored within the facility. For the Building 442 the minimum badge requirement is “1” however a “3” is required specific areas such as the Intelligence Analyst (IA) area and the OBAC (Room

570).

3.1.3. If a SCIF has multiple SCI control systems that are physically separated by an internal access control device or other similar control system, only SCI-indoctrinated personnel with the appropriate level of access for the facility will escort uncleared personnel. SCIF door combinations and bypass keys, if applicable, must be protected at the same level for which the facility is accredited.

3.1.4. Main entry point combinations and bypass keys, if applicable, will be stored in a different SCIF of the same or higher accreditation.

3.1.5. Access codes to an intrusion detection system and access control device will be limited to personnel who are SCI-indoctrinated and have a need to know. Administrator privileges to intrusion detection systems should be limited to the SSO.

3.2. Operations Security (OPSEC)

3.2.1. OPSEC principles are critical for protecting the operational activities and security of

SCIFs. OPSEC principles should be considered and implemented based on the local security environment.

3.2.2. The facility’s location (complete address) and identity as a SCIF shall be protected at a minimum of FOR OFFICIAL USE ONLY (FOUO). Drawings or diagrams identified as a

SCIF may not be posted on an UNCLASSIFIED website or transmitted over the Internet without some type of encryption.

3.2.3. SCIFs should be referred to as a controlled space or another terminology so as not to designate it as a SCIF on releasable documents (e.g., bid requests, permit requests, sub-contractor plans).

3.3. SCIF Access Control

3.3.1. Special Security Office located in Bldg. 1030 Rm-20 who will annotate SCIF access on the SF 2586 based on the determination need to know and update the SCIF Access

Control System database. Personnel must require access 10 days or more per calendar month in order to be granted regular unescorted access to a SCIF per AFSPC/SSO regulation.

3.4. Restricted Area (RA) Badge Procedures

3.4.1. Area Badges will be utilized to enter the SCIF via proximity reader and pin.

3.4.2. Once inside the SCIF, all occupants must have their SCI Badge displayed at all times.

3.4.3. Badges must have 1 or 3 displayed in the upper right corner. If not, contact Special

Security Office immediately.

3.4.4. All 460SW personnel read-in to SCI are issued RA Badges

3.5. Verifying RA Badges

3.5.1. Check Buckley AFB Restricted Area Badge (top right of badge)

3.5.1.1. Read-in access indicated by open areas

3.5.1.2. 1 – SI/TK

3.5.1.3. 2 –Now not used

3.5.1.4. 3 – SI/TK/G/HCS

3.5.1.5. A red “I” indicates “Interim SCI” access

3.5.2. A badge lacking a 1 or 3 is not authorized access to any SCI. When engaging in SCI conversation, ensure person has a valid NEED TO KNOW regardless of their read-in level

3.5.2.1. SCI can ONLY be discussed in SCI Facility (SCIF); be aware of your information and environment to avoid Security Violations.

3.5.3. SI, TK, G, and HCS are the SCI programs managed by the 460 SW’s SSO/SSR office in OGI.

3.6. Escort Procedures/Visitor Control

3.6.1. All SCIF occupants are required to know the escort procedures and visitor control policy.

3.6.2. Contractors and Consultants. DoD contractors and consultants who have TOP

SECRET/SCI access may be given unescorted access to or be allowed to work alone in

DoD SCIFs if all proprietary information or other special program materials to which the contractor may not have access under the terms of the contract are secured, as appropriate.

3.6.2.1. The contractor must possess a final TOP SECRET security clearance and be indoctrinated into SCI in order to be left alone within a SCIF.

3.6.2.2. The statement of work or DD Form 254 must authorize the contractor to work past routine working hours as they are described in the contract. The CORs concurrence is required prior to allowing contractors to work past routine working hours.

3.6.3. Escort Requirements:

3.6.3.1. Only authorized military, civilian, or contractor personnel with permanent un-escorted access to a SCIF are authorized to escort un-cleared visitors or sign as the visitor’s POC within the SCIF. The individual escorting needs an "E" on their badge and escort training.

3.6.4. Admission of Cleared Visitors

3.6.4.1. Any visitor without an AFSPC / NORTHCOM / ARSTRAT /

SCHRIEVER SSO issued SCI badge must be verified via JPAS or Scattered

Castles (SC). Visit certs must be submitted to the 460 OGI Special Security

Office at least 72 hrs prior the scheduled visit is to take place. Contact the

Special Security Office for last minute visit request that with less than 72 hrs.

prior. In such a case it is up to the CSSR to approve the visit request.

3.6.4.2. Prior to granting access to the SCIF, each visitor without an 460

OGI/SSO issued SCI badge will be positively identified by photograph, social security number (such as military ID or driver’s license), and JPAS.The sponsor/POC is required to meet the visitor prior to entry into a SCIF. If the

POC cannot be reached the visitor will not be granted access into the SCIF. The

CSSRs will not escort the visitor under any circumstance. It is the responsibility of the signing POC to meet the visitor in the lobby or at the ECP.

3.6.4.3. The sponsor/POC must utilize the visitor control log to log-in the visitor before entering the SCIF. The visitor will be issued a badge with a “V”

(indicating cleared visitor) that must be worn at all times while in the SCIF. The sponsor/POC must monitor the visitors to ensure they are only allowed access to classified information consistent with the purpose of the visit. For any questions regarding admission of cleared visitors, please contact the SSO or SSR.

3.6.5. Admission of Uncleared Visitors

3.6.5.1. According to DoDM 5105.21 V-2, SCIF access by non-SCI-indoctrinated persons is discouraged. SCIF personnel should conduct official business with non-indoctrinated visitors outside the SCIF. The host facility will limit the access of visitors to areas and information to that required for official business ONLY. When necessary to grant SCIF access to non-indoctrinated persons (e.g., for building or equipment maintenance), secure all SCI material, including any SCI displayed on IS; do not discuss SCI; and assign an escort to the visitor. Inform SCIF personnel, either verbally or through visual notification methods that the facility will be non- secure. Notify SCIF personnel when the non-indoctrinated persons have departed. A flashing or rotating light is to indicate the continued presence of non-SCI-indoctrinated personnel in the SCIF. Non-SCI indoctrinated personnel should not be granted unescorted access or permitted to use the SCIF as a primary or alternate work site.

3.6.5.2. Open houses, promotion ceremonies, family orientations, etc., in DoD

SCI areas will be held to a minimum to reduce security risks.

3.6.5.3. The organization SIO may authorize, in writing, such events based on a justification explaining why the proposed function or visit must be in a DoD SCI area.

3.6.5.4. Security procedures will be implemented to prevent the unauthorized disclosure of classified information.

3.6.5.5. All SCIF personnel must receive a security awareness briefing prior to the visit on what can be revealed to visitors either as part of a briefing or in response to questions and to inform them of the special security procedures for the event.

3.6.5.6. Access to any SCIF by un-cleared visitors will be strictly controlled.

Only authorized escorts will be allowed to escort un-cleared visitors within the

SCIF. Note, foreign nationals shall not be permitted to escort personnel.

3.6.5.6.1. All occupants will be notified of the impending arrival of the un-cleared visitor, and the area will be immediately sanitized.

3.6.5.6.2. Upon entry of the un-cleared visitor(s), the escort will ensure the red beacon light is turned on upon entry, and verbally inform all affected areas of the SCIF prior to admitting the un-cleared visitor (use the automated announcement system if available).

3.6.5.6.3. The escort must sign-in the un-cleared visitor(s) using the SCIF visitor control log at the SCIF entrance.

3.6.5.6.4. The escort must issue all un-cleared visitor(s) a red visitor’s badge containing the words “Escort required”.

3.6.5.6.5. The escort will stay and visually observe the individual(s) under escort until the visitor(s) leaves the SCIF or another escort assumes the duty.

3.6.5.6.6. Prior to the departure of the un-cleared visitor, the escort must sign-out the un-cleared visitor(s) using the SCIF visitor control log and turn in the visitor badge.

3.6.5.6.7. If there are no other un-cleared visitors in the SCIF, the escort will verbally announce “ALL CLEAR” and turn off the red beacon light (use the automated announcement system if available).

3.6.5.6.8. For any questions regarding admission of un-cleared visitors, please contact the Special Security Office.

3.6.5.6.9. For any questions regarding admission of un-cleared visitors, please contact the Special Security Office.

3.7. Prohibited Items

3.7.1. Unauthorized use of PEDs jeopardizes the AFs mission, IT resources, and information. Violations of this policy will be aggressively pursued. Unauthorized possession or use of any PED will result in its confiscation by AF officials for the purpose of conducting a forensic or physical examination.

3.7.2. (U//FOUO) The capabilities annotated in the matrix below are prohibited within all

Defense Intelligence Agency (DIA) accredited sensitive compartmented information facilities (SCIF) areas, unless explicitly approved in accordance with this issuance.

Personally owned portable electronic devices (PEDs) with these capabilities are prohibited. Government-issued and contractor-supplied PEDs may be allowed in accordance with this issuance and with written authorization from the AF Component SIO and, as required, ISSM. All devices are subject to inspection.

CAPABILITY EXAMPLES NOTES

Photographic Cameras, cellular telephones/Smartphones with built in camera, iPods/iPads/tablets with built in camera, etcetera

Government only devices are allowed but cannot be used in

AF restricted or SCIF areas without approval. Must be turned off and placed in an

RF bag. Exceptions may be granted in accordance with this issuance.

Video Recording Video cameras, cellular telephone/Smartphones with built in camera, iPods/iPads/tablets with built in camera, webcams, etcetera

Government only devices are allowed but cannot be used in a restricted or SCIF areas without approval. Must be turned off and placed in an

RF bag. Exceptions may be granted in accordance with this issuance.

Audio Recording Cellular telephones/Smartphones, laptops, cassette recorders, iPods/iPads/tablets with the ability to record external audio, etcetera

Government only devices are allowed but cannot be used in

A restricted or SCIF areas.

Must be turned off and placed in an RF bag.

Radio Frequency (RF)

Wireless transmit capability

All cellular telephones and

Smartphones, sports watches with wireless capability, iPods/iPads/tablets with wireless capability, any device with Bluetooth or other 802.11 and

802.15 capabilities.

Government only devices arc allowed in but cannot be used in AF restricted or SCIF areas and must be turned off and placed in an RF bag.

Must be controlled by the

Information Systems

Manager and/or Special

Security Officer. Removable wireless access cards contained within government-issued or contractor-supplied laptop computers must be removed prior to introduction into restricted of SCIF spaces.

Car key fobs are excluded from this restriction.

Infrared (IR) Wireless transmit capability

IR remote controls Government only devices are allowed in but cannot be used in restricted or SCIF areas, copper tape must be applied over IR ports. Infrared presenter devices which can convey no intelligence information are excluded from this restriction.

A list of prohibited items is posted at the SCIF entrance door.

3.7.3. Inspection may result in examination of all content and metadata residing on the PED.

There is no reasonable expectation of privacy or confidentiality in the content and metadata resident on any and all PEDs brought into AF spaces.

3.7.4. Authorized examination of PEDs may result in data loss, compromise of functions, damage, or destruction of the PED. In some cases, PEDs may be permanently retained, destroyed, or have their data and operating systems sanitized.

3.7.5. Unauthorized use of any PEDs may result in administrative, investigative, disciplinary, or prosecutorial action. This may include, but is not limited to:

3.7.5.1. Suspension of access to information systems (Non-Secure Internet

Protocol Router Network, Secure Internet Protocol Router Network, Joint

Worldwide Information Communications System, or other DOD-affiliated systems, such as contractor systems operated by DOD).

3.7.5.2. Placing personnel on administrative leave pending investigation of the security violation.

3.7.5.3. A permanent entry placed in the person's personnel security file.

3.7.5.4. Termination of duty, disciplinary action under the Uniform Code of

Military Justice, criminal prosecution, or other administrative or appropriate disciplinary proceedings for military, civilian, or contractor employees.

3.7.6. Introduction of personal medical devices into the SCIF requires AFSPC approval. Please contact the Special Security Office for more information. For all additional questions concerning prohibited items, please contact the SSO office or SSR. Personal medical devises include, but are not limited to:

3.7.6.1. Items needed by the disabled or for medical or health reasons, such as motorized wheelchairs, hearing aids, heart monitors, pacemakers, and insulin pumps.

3.7.6.2. Health or medical equipment, which requires connection to a IT resource, must first be approved by the Network DAA prior to their introduction into any AF SCIF.

3.7.6.3. Initial requests will be sent to the organization's EEO office, which will validate the request as an authorized reasonable accommodation. Approved requests will be sent to SSO to review the technical capabilities of the device to determine threats and mitigations. SSO's recommendation will be then be sent to the requestor.

3.7.6.4. Personnel with questions regarding what type of medical equipment can be introduced into AF SCIFs without advanced approval will seek guidance from their element SSO or SSR.

3.7.7. Emergency and police personnel and their equipment, including devices carried by emergency medical personnel responding to a medical crisis within an AF SCI facility will be allowed to enter without delay. Emergency personnel will be admitted without regard to their security clearance status but must be escorted to the degree practical. If appropriate, emergency personnel will be debriefed as soon as possible if there are any indications these individuals have been exposed to classified information or information systems.

3.8. Random Inspections

3.8.1. All SCIF occupants are subject to a random entry/exit inspection at any time. The purpose of the inspection is to prevent the unauthorized removal of classified material and the introduction of prohibited items or contraband into the SCIF. If you are selected for an entry/exit inspection, your hand carried items, articles, briefcases, shoulder or handbags, purses, luggage, packages, backpacks, or similar containers will be inspected.

*Note: The Special Security Office representatives will not physically search or pat you down;

however, you may be directed to empty your pockets.

3.8.2. Any violations discovered will be reported immediately as a possible security incident and/or violation to…