## Dod Instruction 5205.08 Access To U.S. Classified Cryptographic Information



Originating Component:
Office of the Under Secretary of Defense for Intelligence and Security

Effective:
February 16, 2018
Change 1 Effective:
September 24, 2020

Releasability:
This Instruction is available on the Directives Division Website at https://www.esd.whs.mil/DD/

Reissues and Cancels:
DoD Instruction 5205.08, "Access To Classified Cryptographic Information," November 8, 2007

Approved by:
Joseph D. Kernan, Under Secretary of Defense for Intelligence
Change 1 (Administrative) Approved by:
Christopher R. Choate, Chief, Directives Division

Purpose:  In accordance with the authority in DoD Directive 5143.01, and pursuant to Committee on National Security Systems Policy No. 3, this issuance establishes policy and assigns responsibilities to govern granting access to U.S. classified cryptographic information that is owned, controlled, and produced by or for the DoD.

## Table Of Contents

 SECTION 1:  GENERAL ISSUANCE INFORMATION ........ 3
1.1.  Applicability. ........ 3 1.2.  Policy. ........ 4 1.3.  Summary of Change 1. ........ 4
SECTION 2:  RESPONSIBILITIES ........ 5
2.1.  Under Secretary of Defense for Intelligence and Security. ........ 5 2.2.  DoD Component Heads. ........ 5
SECTION 3:  PROCEDURES FOR GRANTING ACCESS ........ 6 GLOSSARY ........ 9 REFERENCES ........ 10

FIGURES Figure 1.  Sample Cryptographic Access Briefing ........ 7

## Section 1:  General Issuance Information

1.1.  APPLICABILITY.  This issuance:
a.  Applies to:
(1)  OSD, the Military Departments, the Office of the Chairman of the Joint Chiefs of Staff and the Joint Staff, the Combatant Commands, the Office of the Inspector General of the Department of Defense, the Defense Agencies, the DoD Field Activities, and all other organizational entities within the DoD (referred to collectively in this issuance as the "DoD
Components").

(2)  All Service members and civilian employees of the DoD, and, consistent with DoD
5220.22-M, all DoD-cleared contractors, who pursuant to the terms and conditions of the applicable contract or agreement have access to U.S. classified cryptographic information, and whose duties require continuing access to that information, including, but not limited to, those who are assigned:
(a)  As cryptographic material Communications Security Account Managers and Key Management Infrastructure Operational Account Managers, or their alternates or equivalents;
(b)  As cryptographic key or logic producers or developers; (c)  As cryptographic maintenance, engineering, or installation technicians; (d)  To supply points where cryptographic keying materials are generated or stored, and to those having access to such materials;
(e)  To secure telecommunications facilities located on the ground, on board ship, or on communications support aircraft and whose duties require keying of cryptographic equipment;
(f)  To prepare, authenticate, or decode nuclear control orders (valid or exercise); or (g)  To any other responsibility requiring or enabling access to classified cryptographic media.

b.  Does not apply to:
(1)  Individuals whose duties are to operate, but not to key or maintain, systems using cryptographic equipment; and
(2)  Controlled cryptographic items as defined in Committee on National Security Systems Instruction (CNSSI) No. 4001.

c.  Does not alter any existing authorities of the Director of National Intelligence, including under Executive Order 12333.

1.2.  POLICY.  It is DoD policy that a person may be granted access to U.S. classified cryptographic information in accordance with this issuance only if that person:

a.  Is a U.S. citizen.
b.  Is a Service member, DoD civilian employee, or a DoD-cleared contractor. c.  Requires access to perform official duties for or on behalf of the DoD.
d.  Possesses a security clearance appropriate to the level of classification of the cryptographic information to be accessed, in accordance with DoD Instruction 5200.02 and DoD
Manual 5200.02.

e.  Satisfies all requirements in Section 3.

## 1.3.  Summary Of Change 1.  This Administrative Change Updates:

a.  The title of the Under Secretary of Defense for Intelligence to the Under Secretary of Defense for Intelligence and Security in accordance with Public Law 116-92.

b.  Administrative changes in accordance with current standards of the Office of the Chief Management Officer of the Department of Defense.

## Section 2:  Responsibilities

2.1.  UNDER SECRETARY OF DEFENSE FOR INTELLIGENCE AND SECURITY.  The Under Secretary of Defense for Intelligence and Security oversees the implementation of this issuance.

## 2.2.  Dod Component Heads.  The Dod Component Heads:

a.  Control access to U.S. classified cryptographic information in their control or possession, and their facilities containing U.S. classified cryptographic information, in accordance with this issuance, DoD Instruction 5200.08, DoD 5200.08-R, and Volume 3 of DoD Manual 5200.08, as applicable.

b.  Administer U.S. classified cryptographic information access programs within their respective Components, including conducting U.S. classified cryptographic information access briefings and ensuring completion of relevant documentation, including Secretary of Defense
(SD) Form 572, "Cryptographic Access Certification and Termination."
c.  Administer a counterintelligence scope polygraph examination program within their respective Components in accordance with DoD Directive 5210.48.

d.  Maintain records on all individuals who have been granted access to U.S. classified cryptographic information, or have had their access to U.S. classified cryptographic information withdrawn in accordance with applicable law, regulation, and policy, including. e.g., Section 552a of Title 5, United States Code (also known as "The Privacy Act of 1974"), DoD 5400.11-R, DoD Instruction 5400.11, and DoD Instruction 5015.02.
e.  Retain originally signed cryptographic access certificates or legally enforceable certified copies, in accordance with their respective DoD Components' records disposition schedule(s).

f.  Accept as valid the access to U.S. classified cryptographic information granted by other DoD Components.

g.  Deny or withdraw access to U.S. classified cryptographic information to those individuals who fail to comply with the procedures in Section 3.

h.  Incorporate this issuance into appropriate DoD Component training and awareness programs.

## Section 3:  Procedures For Granting Access

A DoD Component head, or his or her designee, may grant access to U.S. classified cryptographic information to a person referred to in Paragraph 1.2., only if that person:
a.  Receives a security briefing appropriate to the cryptographic information to be accessed
(see Figure 1).

b.  Signs a SD 572, "Cryptographic Access Certification and Termination," cryptographic access certificate acknowledging access granted.

c.  Agrees to report foreign travel and any form of contact with foreign nationals, in accordance with DoD Instruction 5200.02, DoD Directive 5240.06, and DoD Manual 5200.02.

d.  Agrees to be subject to counterintelligence scope polygraph examinations, as appropriate, which are administered in accordance with DoD Directive 5210.48.


## Glossary

access.  Defined in CNSSI No. 4009.

authenticate.  Defined in CNSSI No. 4009.

decode.  Defined in CNSSI No. 4009. keying material.  Defined in CNSSI No. 4009.

U.S. classified cryptographic information.  Defined in CNSS Policy No. 3.

## References

Committee on National Security Systems Instruction No. 4001, "Controlled Cryptographic
Items," May 7, 20131
Committee on National Security Systems Instruction No. 4009, "Committee on National
Security Systems (CNSS) Glossary," April 6, 2015.
Committee on National Security Systems Policy No. 3, "National Policy on Granting Access to
U.S. Classified Cryptographic Information," October 2007
DoD 5200.08-R, "Physical Security Program," April 9, 2007, as amended
DoD 5220.22-M, "National Industrial Security Program Operating Manual," February 28, 2006,
as amended
DoD 5400.11-R, "Department of Defense Privacy Program," May 14, 2007
DoD Directive 5143.01, "Under Secretary of Defense for Intelligence and Security
(USD(I&S))," October 24, 2014, as amended
DoD Directive 5210.48, "Credibility Assessment (CA) Program," April 24, 2015, as amended DoD Directive 5240.06, "Counterintelligence Awareness and Reporting (CIAR)," May 17, 2011,
as amended
DoD Instruction 5015.02, "DoD Records Management Program," February 24, 2015, as
amended
DoD Instruction 5200.02, "DoD Personnel Security Program (PSP)," March 21, 2014, as
amended
DoD Instruction 5200.08, "Security of DoD Installations and Resources and the DoD Physical
Security Review Board (PSRB)," December 10, 2005, as amended
DoD Instruction 5400.11, "DoD Privacy and Civil Liberties Programs," January 29, 2019 DoD Manual 5200.01, Volume 1, "DoD Information Security Program:  Overview,
Classification, and Declassification," February 24, 2012, as amended
DoD Manual 5200.02, "Procedures for the DoD Personnel Security Program (PSP),"
April 3, 2017
DoD Manual 5200.08, Volume 3, "Physical Security Program: Access to DoD Installations,"
January 2, 2019
Executive Order 12333, "United States Intelligence Activities," December 4, 1981, as amended Public Law 116-92, "National Defense Authorization Act for Fiscal Year 2020,"
December 20, 2019
United States Code, Title 5, Chapter 5, Section 552a (also known as "The Privacy Act of 1974")