SOW_Att_2_-_ICS_705-1_Tech_Specs_Part_2.pdf

Chapter 5

SCIFs Outside the U.S. and Under COM

Chapter 5. SCIFs Outside the U.S. and Under Chief of Mission Authority

A. Applicability

1. This portion applies to the construction of SCIFs located overseas and that are on any compound that falls under the DoS COM authority or created to support any Tenant

Agency that falls under COM authority.

2. The creation of new SCIF space at facilities that fall under COM authority is governed by both ICDs and Overseas Security Policy Board (OSPB) standards published as 12 Foreign Affairs Handbook-6 (12 FAH-6). If there is a conflict between the standards, the more stringent shall apply.

3. For SCIFs constructed in new facilities (new compound or new office building under

COM authority), the proponent activity shall coordinate specific requirements for the proposed SCIF with the DoS/Overseas Buildings Operations (OBO).

4. For existing facilities under COM authority, the project proponent activity must coordinate SCIF requirements with DoS/Bureau of Diplomatic Security (DS), the affected Embassy or Consulate (through the Regional Security Officer (RSO) and

General Services Officer (GSO)), and DoS/OBO.

5. Temporary or tactical SCIFs may only be authorized by exception for facilities under

COM authority. The AO of the tenant agency shall notify both the RSO and the DoS AO of the requirement and the expected duration of these facilities. Prior to accreditation, the tenant agency AO must coordinate with the DoS AO.

B. General Guidelines

1. SCIFs located under COM authority outside the U.S. are located within the CAA.

2. Prior to initiating any SCIF implementation process for upgrade or new construction in an existing office building, the tenant agency CSA shall do the following:

a) Obtain concurrence from the Post‘s Counterintelligence Working Group (CIWG).

b) Obtain written approval from the COM.

c) Notify the DoS AO of CWIG and COM approvals.

d) Coordinate OSPB preliminary survey with the post RSO/Engineering Services

Office (ESO) if space is not core CAA.

3. A Preliminary Survey shall be developed by the RSO/ESO and submitted to DoS/DS for review and approval prior to awarding a construction contract. A CSP shall then be developed by the tenant and forwarded to DoS/OBO for processing.

4. All SCIF design, construction, or renovation shall be in compliance with OSPB standards for facilities under COM authority.

5. Any waivers that are granted for a SCIF by a waiver authority that would result in non-compliance with OSPB standards shall require an exception to OSPB standards from

DoS/DS.

6. Written approval of the request for an exception to OSPB standards must be received prior to the commencement of any construction projects.

7. Upon completion of construction, the tenant agency AO will accredit the SCIF for

SCI operations.

C. Threat Categories

1. The DoS SETL shall be used in the selection of appropriate construction criteria.

Based on technical threat ratings, building construction has been divided into three categories for construction purposes:

Category I - Critical or High Technical Threat, High Vulnerability Buildings

Category II - High Technical Threat, Low Vulnerability Buildings

Category III - Low and Medium Technical Threat

2. High and Low Vulnerability Buildings will be determined in accordance with the definitions in the OSPB standards.

3. SCIF design and construction shall comply with the building codes utilized by

DoS/OBO.

4. SCIF construction projects are subject to the DoS Construction Security Certification requirements stipulated in Section 160 (a), Public Law 100-204, as amended.

Construction activities may not commence until the required certification has been obtained from DoS.

5. SCIF construction projects are subject to permit requirements established by

DoS/OBO.

6. Open storage in Category I and II areas is to be avoided. The CSA shall certify mission-essential need and approve on a case-by-case basis.

7. Open storage shall only be allowed for Category III posts when the host facility is manned 24-hours per day by a cleared U.S. presence (i.e., Marine Security Guard).

8. Open storage of SCI material is not authorized in lock-and-leave facilities (i.e., no

Marine Security Guard).

D. Construction Requirements

1. Perimeter Wall Construction (all facilities regardless of type or location).

a) Perimeter walls shall comply with enhanced wall construction (See drawings for

Walls B and C.)

b) Perimeter shall meet acoustic protection standards unless designated as a non-discussion area.

2. All SCIFs must be alarmed in accordance with Chapter 7.

3. Initial alarm response times shall be within 15 minutes for closed storage and five minutes for open storage.

4. Access control systems shall be in accordance with Chapter 8.

5. SCI shall be stored in GSA-approved containers.

6. An alert system and/or duress alarm is recommended.

7. Continuous Operation Facilities

a) An alert system and/or duress alarm is recommended.

b) The capability shall exist for storage of all SCI in GSA-approved security containers.

c) The emergency plan shall be tested semi-annually.

d) The SCIF shall be alarmed in accordance with Chapter 7.

e) Access control shall be in accordance with Chapter 8.

f) Initial response time shall be five minutes.

8. TSWAs

a) When a TSWA is in use at the SCI level, the following apply:

(1) Unescorted access shall be limited to SCI-indoctrinated persons.

(2) The AO may require an alarm system.

(3) No special construction is required.

(4) When the TSWA is approved for SCI discussions the following apply:

(a) Sound attenuation specifications of Chapter 9 shall be met.

(b) The AO may require a TSCM evaluation if the facility has not been continuously controlled at the SECRET level.

b) When the TSWA is not in use at the SCI level, the following shall apply:

(1) The TSWA shall be secured with a DoS/DS-approved key or combination lock.

(2) Unescorted access shall be limited to personnel possessing a U.S. SECRET clearance.

9. SWA

a) Initial alarm response times shall be within 15 minutes.

b) The SWA shall be controlled at all times by SCI-indoctrinated individuals or secured with a GSA-approved combination lock.

c) The SWA shall be alarmed in accordance with Chapter 7.

d) Access control shall be in accordance with Chapter 8.

e) Perimeter walls shall comply with standard Wall A.

f) An alert system and/or duress alarm is recommended.

g) All SCI used in a SWA shall be removed and stored in GSA-approved security containers within a SCIF or be destroyed.

h) There shall be an emergency plan that is tested semi-annually.

E. Personnel

1. SSM Requirements and Responsibilities

a) Possesses a U.S. TOP SECRET clearance.

b) Ensures the security integrity of the construction site.

c) Develops and implements a CSP.

d) Shall have 24-hour unrestricted access to the site (or alternatives shall be stated in

CSP).

e) Conducts periodic security inspections for the duration of the project to ensure compliance with the CSP.

f) Documents security violations or deviations from the CSP and notifies the RSO and the tenant AO.

g) Maintains a list of all workers utilized on the project; this list shall become part of the facility accreditation files.

h) Implements procedures to deny unauthorized site access.

i) Works with the construction firm(s) to ensure security of the construction site and compliance with the requirements set forth in this document.

j) Notifies the RSO and tenant AO if any construction requirement cannot be met.

2. CST Requirements and Responsibilities

a) Possesses a TOP SECRET clearance.

b) Is specially trained in surveillance and the construction trade to deter technical penetrations and to detect implanted technical collection devices.

c) Supplements site access controls, implements screening and inspection procedures, and when required by the CSP, monitors construction and personnel.

d) Is not required when contractors who are U.S. citizens with U.S. TOP SECRET clearances are used.

e) In Category III countries the following shall apply:

(1) The CST shall begin surveillance of non-cleared workers at the start of SCIF construction.

(2) Upon completion of all work, the CST shall clear and secure the areas for which they are responsible prior to turning control over to the CAGs.

f) In Category I and II countries the following shall apply:

(1) The CST shall begin surveillance of non-cleared workers at the start of construction of public access or administrative areas adjacent to the SCIF, or

SCIF construction, whichever comes first.

(2) Upon completion of all work, the CST shall clear and secure the areas for which the CST is responsible prior to turning over control to the CAGs.

3. CAG Requirements and Responsibilities

a) Possesses a U.S. TOP SECRET clearance.

b) Performs access control functions at all vehicle and pedestrian entrances to the site except as otherwise noted in the CSP.

(1) Screens all non-cleared workers, vehicles, and equipment entering or exiting the site.

(2) Uses walk-through and/or hand-held metal detectors or other means approved by the RSO or designee to deny introduction of prohibited materials such as explosives, weapons, electronic devices, or other items as specified by the

RSO or designee.

(3) Conducts random inspections of site areas to ensure no prohibited materials have been brought on to the site. All suspicious materials or incidents shall be brought to the attention of the SSM.

c) In Category III countries, CAGs shall be assigned to protect the site and surrounding area at the start of construction of the SCIF or commencement of operations of the SSA.

d) In Category I and II countries, CAGs shall be assigned to protect the site and surrounding area at the start of construction of the SCIF, areas adjacent to the SCIF, or commencement of operations of the SSA.

e) For existing SCIFs, TOP SECRET/SCI-indoctrinated U.S. citizen guards are not required to control access to the site or SSA provided the following apply:

(1) TOP SECRET/SCI-indoctrinated U.S. citizens are present on a 24-hour basis in the SCIF or the SCIF can be properly secured and alarmed.

(2) Prescribed post security resources are in place to monitor the SSA.

F. Construction Security Requirements

1. Prior to awarding a construction contract, a CSP for each project shall be developed by the SSM and approved by DoS/DS and DoS/OBO and the tenant AO.

2. Construction plans and all related documents shall be handled and protected in accordance with the CSP.

3. For SCIF renovation projects, barriers shall be installed to segregate construction workers from operational activities. These barriers will provide protection against unauthorized access and visual observation. Specific guidance shall be contained in the

CSP.

4. When expanding existing SCIF space into areas not controlled at the SECRET level, maximum demolition of the new SCIF area is required.

5. For areas controlled at the SECRET level that meet OSPB pre-conditions, or when performing renovations inside existing SCIF space, maximum demolition is not required.

6. All requirements for demolition shall be documented in the CSP.

7. Periodic security inspections shall be conducted by the SSM or designee for the duration of the project to ensure compliance with construction design and security standards.

8. Citizenship and Clearance Requirements for SCIF Construction Personnel

a) Use of workers from countries identified as critical for Technical or Human

Intelligence threat, or listed on the DoS Prohibited Countries Matrix, is prohibited.

b) General construction and finish work is defined by OSPB standards.

c) General construction of SCIFs shall be performed using U.S. citizens and U.S.

firms. Use of foreign national citizens or firms to perform general construction of

SCIFs may be authorized in accordance with OSPB standards. In this situation, the

CSP shall prescribe mitigating strategies to counter security and counterintelligence threats.

d) SCIF finish work shall be accomplished by appropriately cleared personnel as directed by OSPB standards for CAA construction.

e) All non-cleared construction personnel shall provide the SSM with biographical data (full name, current address, SSN, DPOB, proof of citizenship, etc.), and fingerprint cards as allowed by local laws prior to the start of construction/renovation.

f) Two forms of I-9 identification are required to verify U.S. persons.

g) Whenever host nation agreements make this information not available, it shall be addressed in the CSP.

h) When non-U.S. citizens are authorized, the following shall apply:

(1) The SSM shall conduct, through liaison channels, checks of criminal and subversive files, local and national; and host country agencies, consistent with host country laws.

(2) Checks shall also be conducted of CIA indices through the country’s DNI representative and appropriate in-theater U.S. military authorities.

(3) Access to sites shall be denied or withdrawn if adverse security, CI, or criminal activity is revealed. The SSM shall notify the AO and RSO when access to the site is denied or withdrawn.

(4) For existing facilities, the following apply:

(a) Non-cleared workers monitored by CSTs may perform maximum demolition for conversion of non-CAA to SCIF. Debris removal by non-cleared workers must be monitored at a minimum by cleared U. S. citizen escorts.

(b) TOP SECRET-cleared U.S. citizens must perform maximum demolition within, or penetrating the perimeter of, an existing SCIF.

(c)TOP SECRET-cleared U.S. citizens shall be used to renovate SCIF space.

(d) SECRET-cleared individuals may perform the work when escorted by

TOP SECRET-cleared U.S. citizens.

(e) SCI-indoctrinated escorts are not required when the existing SCIF has been sanitized or a barrier has been constructed to separate the operational areas from the areas identified for construction.

i) Prior to initial access to the site, all construction personnel shall receive a security briefing by the SSM or designee on the security procedures to be followed.

j) If a construction worker leaves the project under unusual circumstances, the SSM shall document the occurrence and notify the RSO and tenant AO. The RSO shall review for CI concerns.

k) The SSM may require cleared escorts or CSTs for non-cleared workers performing work exterior to the SCIF that may affect SCIF security.

l) The ratio of escort personnel to construction personnel shall be determined by the

SSM on a case-by-case basis and documented in the CSP. Prior to assuming escort duties, all escorts shall receive a briefing regarding their responsibilities.

9. Access Control of Construction Sites

a) Access control to the construction site and the use of badges are required.

b) Guards are required for SCIF construction outside the U.S.

c) All site control measures used shall be documented in the CSP.

d) The following site control measures should be considered:

(1) Identity verification.

(2) Random searches at site entry and exit points.

(3) Signs, in English and other appropriate languages, at all entry points listing prohibited and restricted items (e.g., cameras, firearms, explosives, drugs, etc.).

(4) Physical security barriers to deny unauthorized access.

(5) Vehicle inspections.

10. Local Guards

a) Local guards, supervised by CAGs and using procedures established by the RSO and documented in the CSP, may search all non-cleared personnel, bags, toolboxes, packages, etc., each time they enter or exit the site.

b) Use of non-cleared U.S. guards or non-U.S. guards to control access to the site or secure storage area (SSA) requires the prior approval of the RSO. A SECRET-cleared U.S. citizen must supervise non-cleared or non-U.S. guards. Non-cleared or non-U.S. guards shall not have unescorted access to the site.

G. Procurement of Construction Materials

1. General Standards

a) These standards apply to construction materials used in SCIF construction under

COM authority. These standards do not apply to installations on a roof contiguous to the SCIF provided there is no SCIF penetration.

b) Procurements shall be in accordance with Federal Acquisition Regulations.

c) In exceptional circumstances, SSMs may deviate from procurement standards with a waiver; such deviation shall be noted in the CSP.

d) For building construction projects in Category III countries, cleared U.S. citizens may randomly select up to 35% of building materials from non-specific general construction materials for SCIF construction. Random selection may exceed 35% only if materials can be individually inspected.

e) For building construction projects in Category I and II countries, cleared U.S.

citizens may randomly select up to 25% of building materials from non-specific general construction materials for SCIF construction. Random selection may exceed

25% only if materials can be individually inspected.

f) All such materials must be selected immediately upon receipt of the shipment and transported to secure storage.

g) Procurement of materials from host or third party countries identified in the SETL as critical for technical intelligence, or listed on the DoS Prohibited Countries Matrix, is prohibited.

2. Inspectable Materials Specifically Destined for SCIF Construction

a) Inspectable materials specifically destined for SCIF construction may be procured from U.S. third-country or local suppliers without security restrictions.

b) All inspectable materials specifically destined for SCIF construction procured in host and third party countries or shipped to site in an unsecured manner from the U.S.

shall be inspected using a DoS/DS-approved method and then moved to an SSA.

c) All inspectable material selected from stock stored outside of the SSA shall be inspected using DoS/DS-approved methods prior to use in SCIF construction.

3. Non-Inspectable Materials Specifically Destined for SCIF Construction

a) Non-inspectable materials specifically destined for SCIF construction shall be procured from U.S. suppliers with subsequent secure transportation to the SSA at the construction site.

b) On an exceptional basis, non-inspectable materials may be procured in a host or third party country if randomly selected by cleared U.S. citizens.

(1) Materials shall be randomly chosen from available suppliers (typically three or more) without advance notice to, or referral from, the selected supplier and with no reference of the intended use of material in a SCIF.

(2) Such selections shall be made from available shelf stock, brought immediately under personal control of a cleared U.S. citizen, and transported securely to an SSA.

(3) Procurement officials should be circumspect about continually purchasing non-inspectable materials from the same local suppliers and establishing a pattern that could be reasonably discernible by hostile intelligence services, foreign national staff, and suppliers.

H. Secure Transportation for Construction Material

1. Inspectable Materials Specifically Destined for SCIF Construction

a) Inspectable materials do not require secure transportation but shall be inspected using procedures approved by the DoS/DS prior to use in the SCIF.

b) Once inspected, all inspectable items shall be stored in an SSA.

c) Materials may be utilized within the SCIF without inspection if securely procured, securely shipped, and stored in a secure environment.

2. Non-inspectable Materials Specifically Destined for SCIF Construction

a) Non-inspectable material includes inspectable materials when the site does not possess the capability to inspect by Do/DS-approved means.

b) Non-inspectable materials shall be securely procured and shipped to site by secure transportation from the U.S., a secure logistics facility, or low threat third party country using one of the following secure methods:

(1) Securely packaged or containerized and under the 24-hour control of an approved courier or escort officer. (Escorted shipments shall be considered compromised if physical custody or direct visual observation is lost by the escort officer during transit. Non-inspectable materials that are confirmed compromised or suspected of compromise shall not be used in a SCIF.)

(2) Securely shipped using approved transit security technical safeguards capable of detecting evidence of tampering or compromise. (An unescorted container protected by technical means (“trapped”) is considered compromised if evidence of tampering of the protective technology is discovered, or if an unacceptable deviation from the approved transit security plan occurs. Non-inspectable materials that are confirmed compromised or suspected of compromise shall not be used in a SCIF.)

(3) Non-inspectable materials shall be shipped using the following surface and air carriers in order of preference:

(a) U.S. Military

(b) U.S. Flag Carriers

(c) Foreign Flag Carriers

I. Secure Storage of Construction Material

1. Upon arrival, all inspected and securely shipped materials shall be placed in the SSA until required for installation.

2. An SSA shall be established and maintained for the secure storage of all SCIF construction material and equipment. It is characterized by true floor to true ceiling, slab-to-slab construction of some substantial material and a solid wood-core or steel-clad door equipped with a DoS/DS-approved security lock.

3. Alternative SSA’s may include a shipping container located within a secure perimeter that is locked, alarmed, and monitored, or a room or outside location enclosed by a secure perimeter that is under direct observation by a SECRET-cleared U.S. citizen.

4. The SSA shall be under the control of CAGs or other U.S. citizens holding at least

U.S. SECRET clearances.

5. Supplemental security requirements for SSAs shall be set forth in the CSP and may vary depending on the location and/or threat to the construction site.

J. Technical Security

1. TEMPEST countermeasures shall be pre-engineered into the building.

2. A TSCM inspection shall be required in Category I countries for new SCIF construction or significant renovations (50% or more of SCIF replacement cost).

3. A TSCM inspection may be required by the AO in Category II or III countries for new SCIF construction or significant renovations (50% or more of SCIF replacement cost).

4. A TSCM inspection, conducted at the completion of construction, shall be required if uncontrolled space is converted (maximum demolition) to new SCIF space.

5. When a TSCM inspection is not conducted, a mitigation strategy based on a physical security inspection that identifies preventative and corrective countermeasures shall be developed to address any technical security concerns.

K. Interim Accreditations

1. Upon completion of a successful inspection, the respective agency’s AO may issue an

Interim Accreditation pending receipt of required documentation.

2. If documentation is complete, AOs may issue an Interim Accreditation pending the final inspection.

Chapter 6

Temporary, Airborne, and Shipboard SCIFs

Chapter 6. Temporary, Airborne, and Shipboard SCIFs

A. Applicability

1. General Information

a) This chapter covers all SCIFs designed to be temporary or such as those at sites for contingency operations, emergency operations, and tactical military operations.

b) These standards apply to the following:

(1) All ground-based temporary SCIFs (T-SCIFs), including those on mobile platforms (e.g., trucks and trailers).

(2) SCIFs aboard aircraft.

(3) SCIFs aboard surface and sub-surface vessels.

c) When employing T-SCIFs, a risk management approach shall be used that balances the operational mission and the protection of SCI.

2. Accreditation

a) Accreditation for the use of T-SCIFs shall not exceed one year without mission justification and approval by the AO.

b) When the T-SCIF owner determines that a T-SCIF is no longer required, the withdrawal of accreditation shall be initiated by the SSO/Contractor Special Security

Officer (CSSO).

(1) Upon notification, the AO will issue appropriate SCI withdrawal correspondence.

(2) The AO or appointed representative will conduct a close-out inspection of the facility to ensure that all SCI material has been removed.

B. Ground-Based T-SCIFs

1. T-SCIF Structures and Activation

a) Ground-based T-SCIFs may be established in hardened structures (e.g., buildings, bunkers) or semi-permanent structures (e.g., truck-mounted or towed military shelters, prefabricated buildings, tents).

b) Permanent-type hardened structures shall be used to the greatest extent possible for T-SCIFs.

c) Prior to T-SCIF activation, the AO may require submission of a standard fixed facility checklist or a T-SCIF checklist produced before or after a deployment.

2. SCI Storage and Destruction

a) Under field or combat conditions, open storage of SCI media and materials requires a continuous presence by SCI-indoctrinated personnel.

b) Under field or combat conditions every effort shall be made to obtain from any available host command necessary support for the storage and protection of SCI (e.g., security containers, generators, guards, weapons, etc.).

c) The quantity of SCI material within a T-SCIF shall be limited, to the extent possible, to an amount consistent with operational needs.

d) All SCI shall be stored in GSA-approved security containers.

e) The AO may approve exceptions to the storage of SCI material in GSA-approved storage containers for a specified period of time.

f) When no longer needed, SCI material shall be destroyed by means approved by the AO.

3. Security Requirements

a) T-SCIF security features shall provide acoustical, visual, and surreptitious entry protection.

b) A TSCM inspection shall be requested for any structure proposed for T-SCIF use if the space was previously occupied by a non-U.S. element. It is the AO’s responsibility to evaluate operating the SCIF prior to TSCM inspection and formally assume all risk associated with early operation.

c) When possible, T-SCIFs shall be established within the perimeters of U.S.-controlled areas or compounds.

d) If a U.S.-controlled area or compound is not available, the T-SCIF shall be located within an area that affords the greatest degree of protection against surreptitious or forced entry.

e) When a T-SCIF is in operation, the perimeter of its immediate area shall be observed and protected by U.S. guards with U.S. SECRET clearances. Guards shall be equipped with emergency communication devices and, if necessary, with weapons.

f) During non-operational hours, the T-SCIF shall be provided security protection in accordance with AO guidelines.

g) The T-SCIF shall have only one entrance which shall be controlled during hours of operation by an SCI-indoctrinated person using an access roster.

h) Unclassified telecommunications equipment shall meet the requirements outlined in Chapter 10 to the greatest extent practical.

i) Telephones obtained in a foreign country shall not be used within a T-SCIF.

j) Cables and wires penetrating the T-SCIF perimeter shall be protected. The AO may require inspections and routing of cables and wiring through protective distribution systems or may require other countermeasures.

k) AO-approved emergency destruction and evacuation plans shall be developed and rehearsed periodically by all personnel assigned to the T-SCIF; the results of the rehearsal drills shall be documented.

l) When in transit, ground-based and mobile (e.g., truck-mounted, towed military shelters) T-SCIFs containing unsecured and non-encrypted SCI shall be accompanied by a U.S. TOP SECRET-cleared individual with SCI access approval(s).

m) During movement, T-SCIF structures shall be secured with GSA-approved locking devices and equipped with tamper-evident seals.

n) When in transit, hardened T-SCIFs having no open storage of SCI may be monitored by a U.S SECRET-cleared individual.

o) Hardened T-SCIFs shall be designed with TEMPEST countermeasures as identified by the CTTA. The AO, in collaboration with the CTTA, shall provide red/black separation and “protected distribution” guidance for field installation in accordance with NSTISSAM TEMPEST 2/95 and 2/95A and CNSSI 7003.

p) When a T-SCIF is no longer required, the responsible SCI security official shall conduct a thorough facility inspection to ensure all SCI material has been removed.

C. Permanent and Tactical SCIFs Aboard Aircraft

1. The Aircraft Facility Checklist (see Forms & Plans) will be used for permanent SCIFs aboard aircraft.

2. The AO may determine that an Aircraft Facility Checklist may not be required for tactical SCIFs aboard aircraft if the following information is provided:

a) Name of aircraft (tail number)/airborne T-SCIF.

b) Major command/organization.

c) ID number of parent SCIF, if applicable.

d) Location T-SCIF deployed from and date of deployment.

e) Location T-SCIF deployed to and date of deployment.

f) SCI compartment(s) involved in T-SCIF operations.

g) Time period for T-SCIF operations.

h) Name of exercise or operation.

i) Points of contact (responsible officers).

j) Type of aircraft and area to be accredited as a T-SCIF.

k) Description of security measures for entire period of T-SCIF use (standard operating procedures).

l) Additional comments to add clarification.

3. Security Requirements for Aircraft when Operating in Support of Missions Involving

SCI Material

a) SCIF location shall be identified by aircraft tail number.

b) Access to the aircraft interior shall be controlled at all times by SCI-indoctrinated personnel.

c) There are no unique physical security construction standards for SCIFs aboard aircraft.

d) Accreditation, such as that from the Defense Courier Service, is not required for aircraft used solely to transport SCI material between airfields.

e) When all personnel on an aircraft are not briefed on every SCI compartment aboard, procedural methods or physical barriers shall be employed to isolate compartments of the SCI.

f) When an aircraft T-SCIF is no longer required, the responsible SCI security official shall conduct an inspection of the aircraft to ensure all SCI material has been removed.

4. SCI Storage and Destruction

a) SCI materials shall be encrypted or secured in an AO-approved security container.

b) When no longer needed, SCI materials shall be destroyed by means approved by the AO.

c) Following an unscheduled landing in U.S.-controlled or non-hostile territory, the senior SCI-indoctrinated person shall retain control of the SCI material until approved storage arrangements can be effected through a local Special Security Officer or SCI-indoctrinated official.

d) Prior to an unscheduled landing in unfriendly or hostile territory, every reasonable effort shall be made to destroy unencrypted SCI material and communications security equipment in accordance with the emergency destruction plan.

e) If the aircraft is stationary, in the absence of SCI-indoctrinated personnel, all SCI information shall be encrypted or removed and stored in an alternative accredited

SCIF or location approved by the AO.

f) Emergency destruction plans for SCI material shall be developed, approved by the

AO, and rehearsed periodically by all personnel assigned to the aircraft; rehearsal results shall be documented.

5. Additional Security Requirements for Stationary Aircraft

a) The aircraft shall be parked within a controlled area that affords the greatest protection against surreptitious or forced entry.

b) In the absence of SCI-indoctrinated personnel, all SCI information shall be encrypted or removed and stored in an alternative accredited SCIF or location approved by the AO.

c) If the aircraft cannot be positioned within a U.S.-controlled area, the SCI is not encrypted, and removal of the SCI is not possible, then the following measures must be taken:

(1) SCI-indoctrinated personnel shall remain with the aircraft.

(2) A guard force that can control the perimeter of the aircraft shall be deployed, unless infeasible. The guards shall possess U.S. SECRET clearances and be armed and equipped with emergency communication devices.

d) If the aircraft is located within a U.S.-controlled area, the SCI is not encrypted, and removal of SCI is not possible then, the following measures shall be taken:

(1) The AO may mitigate the requirement for SCI-indoctrinated personnel provided the aircraft is equipped with, or stored within a structure equipped with, an intrusion detection system approved by the AO.

(2) All aircraft hatches and doors shall be secured with AO-approved locks and tamper-evident seals.

(3) A guard force must be available to respond to an alarm within five minutes.

(4) Guards shall possess U.S. SECRET clearances and be armed and equipped with emergency communication devices.

(5) If a cleared U.S. guard force is not available, the AO may approve other mitigation measures.

D. Permanent and Tactical SCIFs on Surface or Subsurface Vessels

1. Permanent shipboard SCIFs shall consist of any area aboard a vessel where SCI is processed, stored, or discussed.

2. The Shipboard Checklist (see Forms & Plans) will be used for permanent SCIFs. The

AO may determine that this checklist may not be required providing the below information is available:

a) Name of vessel/hull number.

b) Major command/organization.

c) ID number of parent SCIF, if applicable.

d) Location SCIF deployed from and date of deployment.

e) Location SCIF deployed to and date of deployment.

f) SCI compartment(s) and sub-compartments involved in SCIF operations.

g) Name of exercise or operation.

h) Points of contact (responsible officers).

i) Description of security measures for entire period of SCIF use (standard operating procedures).

j) Additional comments to add clarification.

3. Security Requirements for Permanent SCIFs

a) The perimeter (walls, floors, and ceiling) shall be fabricated of structural bulkheads comprised of standard shipboard/submarine construction materials.

b) Elements of the perimeter shall be fully braced and welded or bonded in place.

c) Doors shall conform to the following requirements:

(1) Perimeter doors and emergency exit(s) shall be constructed of standard shipboard materials and shall be mounted in a frame, braced and welded or bonded in place in a manner commensurate with the structural characteristics of the bulkhead, deck, or overhead.

(2) The primary entry door shall be equipped with a GSA-approved combination lock and an access control device.

(3) If the door is in a bulkhead that is part of an airtight perimeter, the airtight integrity may be maintained by co-locating the door with the metal joiner door, or by adding a vestibule.

(4) Metal joiner doors shall be equipped with a combination lock that meets specification FF-L-2740A and with an access control device approved by the AO.

(5) Doors shall be constructed in a manner that will preclude unauthorized removal of hinge pins and anchor bolts, and obstruct access to lock-in bolts between the door and frame.

(6) Doorways or similar openings that allow visual access to the SCIF shall be screened or curtained.

d) No damage control fittings or cables shall be located within, or pass through, the

SCIF. This does not apply to smoke dampers or other life-safety devices that are operated by personnel within the space during working hours.

e) Removable hatches and deck plates less than 10 square feet that are secured by exposed nuts and bolts (external to the SCIF) shall be secured with a high security padlock (unless their weight makes this unreasonable). Padlock keys shall be stored in a security container located within the SCIF.

f) Vents, ducts, and similar openings with a cross-sectional measurement greater than 96 inches shall be protected by a fixed barrier or security grill. (This requirement is not applicable to through-ducts that do not open into the SCIF.)

(1) Grills shall be fabricated of steel or aluminum grating or bars with a thickness equal to the perimeter barrier.

(2) If a grating is used, bridge center-to-center measurements will not exceed 1.5 inches by 4 inches.

(3) Bars shall be mounted in a grid pattern, six-inches on center.

(4) The grating or bars shall be welded into place.

g) Construction of the SCIF perimeter shall afford adequate sound attenuation. Air handling units and ducts may require baffles if SCIF discussions can be overhead in adjacent areas.

h) The SCIF shall be equipped with an AO-approved intrusion detection system

(IDS) or other countermeasures if SCI-indoctrinated personnel cannot continuously occupy the area.

i) Passing scuttles and windows should not be installed between the SCIF and any other space on the ship. If installed, they shall be secured on the inside of the SCIF.

j) All SCI cryptographic and processing equipment shall be located within the SCIF.

k) Unclassified telecommunications shall meet the requirements outlined in Chapter

11, to the greatest extent practical.

l) Sound-powered telephones will not be permitted in the SCIF without additional mitigations determined by the AO. If a deviation is granted, sound-powered telephones located within the SCIF and connecting to locations outside the SCIF shall comply with the following:

(1) Telephone cables shall not break out to jack-boxes, switchboards, or telephone sets other than at designated stations. Cables shall not be shared with any circuit other than call or signal systems associated with the SCIF circuit.

(2) Telephone cables shall be equipped with a selector switch located at the controlling station and shall be capable of disconnecting all stations, selecting any one station, and disconnecting the remaining stations.

(3) Sound-powered telephones not equipped with a selector switch shall have a positive disconnect device attached to the telephone circuit.

(4) Within any SCIF, sound-powered telephones not used for passing SCI information shall have a warning sign prominently affixed indicating the restriction.

(5) A call or signal system shall be provided. Call signal station, type ID/D, shall provide an in-line disconnect to prevent a loudspeaker from functioning as a microphone.

m) The approval of the AO is required for unencrypted, internal, communication-announcing systems that pass through the SCIF perimeter.

n) Intercommunications-type announcing systems installed within an SCIF shall meet the following standards:

(1) The system shall operate only in the push-to-talk mode.

(2) Receive elements shall be equipped with a local buffer amplifier to prevent loudspeakers or earphones from functioning as microphones.

(3) Except as specified, radio transmission capability for plain radio-telephone

(excluding secure voice) will not be connected.

(4) Cable conductors assigned to the transmission of plain language radio-telephone will be connected to ground at each end of the cable.

(5) A warning sign will be posted that indicates the system may not be used to pass SCI.

(6) Unencrypted internal communication systems that pass through the SCIF perimeter shall be in grounded ferrous conduit.

o) Commercial intercommunication equipment shall not be installed within a SCIF without prior AO approval.

p) Loudspeakers used on general announcing systems shall be equipped with a one-way buffer amplifier to protect against microphonic responses.

q) Pneumatic tube systems shall not be installed within the SCIF. The following safeguards apply to existing systems on older ships:

(1) Covers shall be locked at both ends with an AO-approved lock. Keys shall be stored within an approved security container within the SCIF.

(2) The system shall have the capability to maintain the pressure or vacuum and the capability to lock in the secure position at the initiating end.

(3) There shall be a direct voice communications link between both ends to confirm the transportation and receipt of passing cartridges.

(4) Cartridges passing SCI material shall have a distinctive color.

(5) Pneumatic tubes shall be visually inspectable along their entire length.

(6) The CTTA shall conduct a TEMPEST countermeasures inspection and shall recommend safeguards to limit compromising emanations. TEMPEST safeguards should be pre-engineered into platforms to the greatest extent possible.

4. General Requirements for T-SCIFs

a) SCIFs on sub-surface vessels shall be accredited as T-SCIFs.

b) T-SCIFs aboard a vessel include portable platforms or containers temporarily placed within ship space such as embarked Portable Shipboard Collection Vans.

c) T-SCIFs shall be occupied by an SCI-indoctrinated person at all times unless the facility is protected by a GSA-approved lock, an approved intrusion detection system, and a response capability or other countermeasures approved by the AO.

5. Security Requirements for T-SCIFs

a) Overall T-SCIF construction standards shall be the same as those used for permanent shipboard SCIFs.

b) Vents, ducts, and similar openings shall be constructed to the same standards as those used for a shipboard SCIF.

c) SCI materials shall be destroyed by means approved by the AO when no longer needed.

d) AO-approved emergency destruction plans shall be rehearsed periodically by all personnel assigned to the T-SCIF and the rehearsals documented.

e) Unclassified telecommunications shall meet the requirements for a shipboard

SCIF, to the greatest extent practical.

f) When the T-SCIF is no longer required, the responsible SCI security official shall conduct a closing inspection of the T-SCIF to ensure all SCI material has been removed.

g) The CTTA shall conduct a TEMPEST countermeasures inspection and shall recommend safeguards to limit compromising emanations. TEMPEST safeguards should be pre-engineered into platforms to the greatest extent possible.

6. Additional Security Standards for Mobile Platforms or Containers

a) Construction of the perimeter must be of sufficient strength to reveal evidence of physical penetration (except for required antenna cables and power lines).

b) Doors must fit securely and be equipped with a locking device that can be locked from the inside and outside.

7. SCI Storage and Destruction

a) SCI material shall be stored in a GSA-approved security container that is welded or otherwise permanently secured to the structural deck.

b) When no longer needed, SCI materials shall be destroyed by means approved by the AO.

c) AO-approved emergency destruction and evacuation plans shall be developed and rehearsed periodically by all personnel assigned to the SCIF and the rehearsals shall be documented.

This page intentionally left blank.

Chapter 7

Intrusion Detection Systems

Chapter 7. Intrusion Detection Systems (IDS)

A. Specifications and Implementation Requirements

1. General SCIF IDS Requirements

a) SCIFs shall be protected by IDS when not occupied.

b) Interior areas of a SCIF through which reasonable access could be gained, including walls common to areas not protected at the SCI level, shall be protected by

IDS. However, these adjacent areas do not need IDS protection if the AO determines that a facility’s security programs consist of layered and complementary controls sufficient to deter and detect unauthorized entry and movement.

c) Doors without access control systems and that are not under constant visual observation shall be continuously monitored by the IDS.

d) If any component of the IDS is disrupted to the extent the system no longer provides essential monitoring service (e.g., loss of line security, inoperable Intrusion

Detection Equipment (IDE), or loss of power), SCI-indoctrinated personnel shall physically occupy the SCIF until the system is returned to normal operation. As an alternative, the outside SCIF perimeter may be continuously monitored by a response or guard force.

e) IDS failure shall be addressed in the SCIF emergency plan.

2. System Requirements

a) IDS installation related components and monitoring stations shall comply with

Underwriters Laboratories (UL) Standard for National Industrial Security Systems for the Protection of Classified Material, UL 2050.

b) Installation shall comply with an Extent 3 installation as referenced in UL 2050.

c) Systems developed and used exclusively by the USG do not require UL certification, but shall nonetheless comply with an Extent 3 installation as referenced in UL 2050.

d) Areas of a SCIF through which reasonable access could be gained, including walls common to areas not protected at the SCI level, shall be protected by IDS consisting of UL 639 listed motion sensors and UL 634 listed High Security Switches

(HSS) that meet UL Level II requirements and/or other AO-approved equivalent sensors. All new SCIF accreditations shall use UL Level II HSS. Existing UL Level

I HSS are authorized until major IDS modifications/upgrades are made.

e) IDE cabling that extends beyond the SCIF perimeter shall employ Encrypted Line

Security or be installed in a closed and sealed metal conveyance defined as a pipe, tube or the like constructed of ferrous Electrical Metallic Tubing (EMT), ferrous pipe conduit or ferrous rigid sheet metal ducting. All joints and connections shall be permanently sealed completely around all surfaces (e.g. welding, epoxy, fusion, etc.).

Set screw shall not be used. The seal shall provide a continuous bond between the components of the conveyance. If a service or pull box must be utilized, it must be secured with a GSA approved combination padlock or AO approved key lock.

f) SCIFs that share common or contiguous perimeter and support the same IC

Element, or have an established Co-Use-Agreement (CUA), may have the Premise

Control Unit (PCU) programmed into multiple logical units or partitions, of the same

PCU, that function as individual control units for the intrusion detection system installed in multiple areas or rooms operated independently of one another. All conditions of compliance that apply to a PCU and IDS apply equally to the partitions of the PCU. The PCU shall be independent of IDS safeguarding non-UL 2050 certified areas.

g) If a monitoring station is responsible for more than one IDS, there shall be an audible and visible annunciation for each IDS.

h) IDS’s shall be separate from, and independent of, fire, smoke, radon, water, and other systems.

i) If the IDS incorporates an access control system (ACS), notifications from the

ACS shall be subordinate in priority to IDS alarms.

j) System key variables and passwords shall be protected and restricted to U.S. SCI-indoctrinated personnel.

k) IDS technical drawings, installation instructions, specifications, etc., shall be restricted as determined by the AO and documented in the CSP.

l) Systems shall not include audio or video monitoring without the application of appropriate countermeasures and AO approval.

m) Monitoring systems containing auto-reset features shall have this feature disabled.

n) Alarm activations shall remain displayed locally until cleared by an authorized

SCI-cleared individual.

o) The AO shall approve all system plans. Final system acceptance testing shall be included as part of the SCIF accreditation package.

p) False alarms shall not exceed one alarm per 30-day period per IDS partition.

False alarms are any alarm signal transmitted in the absence of a confirmed intrusion that is caused by changes in the environment, equipment malfunction or electrical disturbances. If false alarms exceed this requirement, a technical evaluation of the system shall be conducted to determine the cause, repaired or resolved, and documented.

3. System Components

a) Sensors

(1) All system sensors shall be located within the SCIF, except as noted in

3.a.(2) below.

(2) With AO approval, sensors external to the SCIF perimeter may be installed in accordance with paragraph A.2.e.

(3) Failed sensors shall cause immediate and continuous alarm activation until the failure is investigated and corrected by procedures as documented in the SCIF

SOP or Emergency Action Plan.

(4) Dual technology sensors are authorized when each technology transmits alarm conditions independent of the other technology.

(5) A sufficient number of motion detection sensors shall be installed to meet the requirements of paragraph A.2.d or shall be approved by the AO. However, for facilities outside the U.S. and in Category I and II countries, motion detection sensors above false ceilings or below false floors may be required by the AO.

(6) When the primary entrance door employs a delay to allow for changing the system mode of access, the delay shall not exceed 30 seconds.

(7) SCIF perimeter doors shall be protected by an HSS and a motion detection sensor.

(8) Emergency exit doors shall be alarmed and monitored 24 hours per day.

b) Premise Control Units (PCUs)

(1) PCUs shall be located within a SCIF and only SCIF personnel may initiate changes in access modes.

(2) Operation of the access/secure switch shall be restricted by using a device or procedure that validates authorized use.

(3) Cabling between all sensors and the PCU shall be dedicated to the system, be contained within the SCIF, and shall comply with national and local electric codes and Committee for National Security Systems (CNSS) standards. If the wiring cannot be contained within the SCIF, such cabling shall meet the requirements for

External Transmission Line Security 3.b.(10) below.

(4) Alarm status shall be continuously displayed with an alphanumeric display at the PCU and/or monitoring station.

(5) Every effort shall be made to design and install the alarm-monitoring panel in a location that prevents observation by unauthorized persons.

(6) The monitoring station or PCU shall identify and display activated sensors.

(7) Immediate and continuous alarm annunciations shall occur for the following conditions.

(a) Intrusion Detection

(b) Failed Sensor

(c) Tamper Detection

(d) Maintenance Mode (a maintenance message displayed in place of an alarm)

(e) IDE Sensor Points shunted or masked during maintenance mode

(8) A change in power status (AC or backup) shall be indicated locally and at the monitoring station.

(9) All system events shall be reset by authorized SCI-indoctrinated personnel after an inspection of the SCIF and a determination for the cause of the alarm.

Any auto-alarm reset feature of the IDS shall be disabled.

(10) IDS transmission lines leaving the SCIF to the monitoring station, must meet

National Institute of Standards and Technology, Federal Information Processing

Standards (FIPS) for certified encrypted lines. The FIPS standard employed must be noted on the UL 2050/CRZH Certificate or other certificate employed.