![](media/image1.png){width="1.75in" height="1.75in"}

Unclassified Controlled Nuclear Information (UCNI) is sensitive
unclassified Government information concerning nuclear material,
weapons, and components whose dissemination is controlled under section
148 of the Atomic Energy Act. For additional information, refer to
Department of Energy (DOE) O 471.1A, *Identification and Protection of
Unclassified Controlled Nuclear Information,* or DOE M 471.1-1,
*Identification and Protection of Unclassified Controlled Nuclear
Information Manual*.

***What types of information can be UCNI?***

Examples of types of information that can be UCNI are as follows:

Safeguards and security information, such as:

-   Unclassified guard force deployment plans

-   Details of communication procedures

-   The meaning of security communication codes

-   The fact that specified UCNI has been inadvertently released to
    unauthorized personnel.

Security-related design information that would assist a terrorist in
attacking a sensitive nuclear-related facility, such as:

-   Floor plans

-   Location of special nuclear material storage vaults within a
    building.

Technology-related design information, such as:

-   Detailed design information on isotope separation processes unique
    to nuclear weapons-related applications

-   Details of tritium extraction processes.

Nuclear weapons-related information, such as:

-   Unique manufacturing techniques that would assist in the production
    of a nuclear weapon.

***Is UCNI classified information?***

No, UCNI is not classified information. However, while it is not
classified, there are controls in place that limit its dissemination. It
is unclassified but sensitive Government information that contains
certain design and security information about nuclear material, weapons,
and components.

***Can I determine if a document or material contains UCNI?***

Not just anyone can determine that a document or material does or does
not contain UCNI. If you think that an unclassified document or material
you have created contains UCNI or if you have extracted information from
a document marked as containing UCNI, then you need to have the document
or material reviewed by an individual designated as a Reviewing
Official.

***What does a Reviewing Official do?***

A Reviewing Official with cognizance over the information in question
evaluates the document or material to determine whether it contains,
does not contain, or no longer contains UCNI based on formally issued
DOE guidelines that specify what information is or is not UCNI.

***How do I find out who is a Reviewing Official in my organization?***

Your local classification officer can tell you who the Reviewing
Officials are at your location.

***Do I need a DOE access authorization ("Q" or "L" clearance) to be
granted access to UCNI?***

No, since UCNI is unclassified, no access authorization is needed.

You should contact your local security office or Information Systems
Security organization to determine what network it is attached to and
the proper controls for your computer so that there is no unauthorized
access to UCNI. Specific measures that provide this protection include
authentication, file access controls, file encryption, or passwords that
ensure that UCNI is protected against unauthorized access. Should your
system or its network not contain the necessary access control measures,
you will need to ensure the UCNI is properly encrypted prior to storing
or transmitting the material.

If you have any questions, contact DOE Technical and Operations Security
at (301) 903-7325 or Policy and Quality Management at (301) 903-5454.
For additional copies of this brochure, go to the Information Security
Resource Center web page at
[[http://www.pnl.gov/isrc/]{.underline}](http://w3.pnl.gov:2080/isrc) .

***What encryption standard or system must I use to send UCNI
electronically?***

You should contact your local security office to find out what
encryption method has been approved for use at your site. Encryption may
be accomplished through DOE Public Key Infrastructure systems or use of
encryption algorithms that comply with all applicable Federal laws,
regulations, and standards. DOE requirements for the protection of
sensitive unclassified information are contained in Chapter 9 of DOE M
200.1-1, "*Public Key Cryptography and Key Management*."

***Do I need a special computer to process UCNI?***

No special computer is required to process UCNI. However, the computer
system or computer network configuration must ensure that only personnel
authorized for access to UCNI can access that information. For example,
networks interconnected with a public-switched broadcast network, such
as the Internet, must provide methods, such as authentication, file
access controls, passwords, etc., to ensure that UCNI is protected
against unauthorized access. To ensure your computer meets the
requirements for processing or storing UCNI, contact your local security
office or Information Security Systems organization.

***Must I encrypt UCNI on my stand-alone computer?***

You may store unencrypted UCNI on your stand-alone computer as long as
everyone who has access to your computer has a need to know the UCNI
stored there. The UCNI located on your computer must be protected to
prevent unauthorized access; i.e., protected by password or by other
methods approved by your local security office.

***Can I store UCNI on a networked computer?***

Yes, you can store and process UCNI on a networked computer provided
that either everyone who has access to the network has a need to know
the UCNI or controls have been implemented to prevent the unauthorized
disclosure of UCNI.

***Since no access authorization is needed, who can have access to
UCNI?***

You may have what is referred to as routine access to UCNI if you are an
employee or contractor employee of the Federal Government, a state or
local government, or an Indian tribal government [and]{.underline} you
have a need to know specific UCNI to perform your official duties or
other DOE-authorized activities.

***Can foreign nationals have routine access to UCNI?***

Yes, provided they have the need to know and are:

-   A Federal employee or a member of the U.S. Armed Forces;

-   An employee of a Federal contractor or subcontractor; or

-   A Federal consultant or DOE advisory committee member.

In addition, other foreign nationals who would otherwise not be eligible
for routine access to UCNI may be granted routine access in conjunction
with one of the following:

-   An international nuclear cooperative activity approved by the
    U.S. Government;

-   U.S. diplomatic dealings with foreign government officials;

-   An agreement for cooperation under section 123 of the Atomic Energy
    Act; or

-   Provisions of treaties, mutual defense acts, or Federal contracts or
    subcontracts.

However, such access must be coordinated with the DOE Secretarial
officer or NNSA Deputy Administrator or Chief having cognizance over the
information.

***Can I give UCNI to someone else?***

If you have routine access to UCNI, then you can give UCNI to another
person who also meets the requirements for routine access.

***If I am not eligible for routine access, is there any other way that
I can be granted access to UCNI?***

Special access may be granted to individuals who need to know specific
UCNI for a particular purpose but who are not eligible for routine
access.

For example, special access might be granted to an attorney representing
an employee in litigation with DOE. However, to be approved for special
access to UCNI, the person must submit a request for special access
through the cognizant DOE or National Nuclear Security Administration
(NNSA) security office to the appropriate DOE Secretarial Officer or the
NNSA Deputy Administrator. A person granted special access to specific
UCNI may not give the UCNI to anyone else and must be notified of
protection requirements. Such notification can be accomplished by
attaching DOE F 5639.1, Unclassified Controlled Nuclear Information
(UCNI) (Controlled) to the front of the UCNI document or material.

***Is special access to UCNI only granted on a person-by-person
basis?***

No. Related groups of individuals may be eligible for special access to
a specific category of UCNI. In such a case, the relationship of the
individuals must be described on the request for special access, but the
individuals themselves do not need to be identified. For example, a
request would mention a particular law firm that is representing a
client in a lawsuit against a DOE site, but would not have to provide a
list of the attorneys and paralegals who would be working on the
lawsuit.

**[Marking UCNI Documents or Material]{.underline}:**

***How can I tell if a document or material contains UCNI?***

When a Reviewing Official determines that an unclassified document or
material contains UCNI, he or she marks or authorizes the front of the
matter to be marked as follows:

***Are there any exceptions to the encryption requirements for
transmitting over public-switched broadcast communications paths?***

A waiver to the encryption requirements may be granted in an emergency
situation to accomplish a mission-related task or when the sender or
receiver requires the information for public safety or security purposes
but does not have encryption capability. In those cases, approval to
waive the encryption requirements must be obtained from (1) for
Headquarters, the Director, Headquarters Security Operations, Office of
Security, or (2) for the field, the Operations Office Manager or
Safeguards and Security Director. Such waivers are to be used only in
situations where urgency precludes other more secure means of
transmission. Absence of encryption capability does not justify routine
unencrypted transmission of UCNI.

***Can I discuss UCNI over unsecured telephone lines?***

If your site uses a public-switched broadcast communications path, you
will need to contact your local security office and arrange to use
a STU-III (Secure Telephone Unit) or STE (Secure Telephone Equipment)
whenever telephone conversations involving UCNI are necessary.

***Can I fax a document containing UCNI?***

Yes, but if your site uses a public-switched broadcast communications
path, you may not use a regular facsimile machine. These machines do not
provide the encryption capabilities necessary to ensure unauthorized
disclosure. To find out where the closest classified facsimile machine
is located and procedures for use, you should contact your local
security office.

***Can UCNI be e-mailed unencrypted within a site (i.e., not on
public-switched broadcast communications paths)?***

Yes, so long as your site does not use a public-switched broadcast path
for internal communications. However, you must remember that although
UCNI is not classified it is still controlled, thus you must ensure all
recipients have a need to know.

***How do I destroy UCNI computer disks?***

UCNI stored on computer media should be destroyed/removed in a manner to
prevent the ability to recreate the information. This can be
accomplished in several ways. Therefore, you should refer to policies
and procedures obtained from your local security office.

**[Transmitting UCNI]{.underline}:**

***How do I transmit an UCNI document?***

You must package an UCNI document to conceal the presence of the UCNI
from someone who is not authorized access. A single, opaque envelope or
wrapping is sufficient for this purpose when sending the document
outside of a facility. The package may be transmitted using any
commercial carrier or any of the following U.S. mail methods: U.S. First
Class, Express, Certified, or Registered Mail. If sending an UCNI
package within a facility, you can use a regular distribution envelope
(such as a "holey joe"). The package may also be hand carried by a
person with routine or special access as long as physical control of the
package is maintained.

***Can I send UCNI by e-mail?***

If you must send UCNI using electronic methods that are transmitted over
public-switched broadcast communications paths (such as Internet,
e-mail), a method of encryption is required. However, if your site does
not use a public-switched broadcast system for onsite communications,
encryption for transmission *on site* is not required. It is recommended
that you contact your local security office to find out which type of
switch is used at your site and what, if any, method of encryption is
required. However, regardless of the type of switch used, you must have
the message reviewed by a Reviewing Official, ensure that it is marked
appropriately, and that the recipient has a need to know the UCNI prior
to sending.

UNCLASSIFIED CONTROLLED NUCLEAR INFORMATION NOT FOR PUBLIC DISSEMINATION

Unauthorized dissemination subject to civil and criminal sanctions under
section 148 of the Atomic Energy Act of 1954, as amended (42 U.S.C.
2168).

Reviewing Official:
\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_

(Name/Organization)

Date:
\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_

Guidance Used:
\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_

(List all UCNI guidance used)

The marking \"UNCLASSIFIED CONTROLLED NUCLEAR INFORMATION\" or \"UCNI\"
is always placed on the top and bottom of the front of a document. In
addition, this marking is also placed (1) on the top and bottom of each
interior page of the document or (2) if more convenient, on the top and
bottom of only those interior pages that contain UCNI. Electronic
messages that contain UCNI must be marked "UCNI" to ensure the recipient
protects the information appropriately

***If I am sending an UCNI document out as an attachment to a letter,
are any special markings required on the transmittal letter?***

Yes, a transmittal letter which does not itself contain UCNI must be
marked on the front as follows:

> Matter transmitted contains Unclassified Controlled Nuclear
> Information. When separated from enclosures, this transmittal document
> does not contain UCNI.

***Do I need to put a cover sheet on all documents containing UCNI?***

Generally, a cover sheet is not required. You should refer to your local
site policy as some sites may use a cover sheet to distinguish a
document containing UCNI from other unclassified documents. Another
example where a cover sheet may be used would be to provide required
legal notification, as when someone is granted special access to UCNI.

**[Protecting UCNI In Use]{.underline}:**

***How do I protect an UCNI document or material when in use?***

You must maintain physical control over any UCNI document or material to
prevent unauthorized access to the information.

***Can I post UCNI documents on bulletin boards in secured areas?***

As long as everyone who routinely has access to that secure area has a
need to know, UCNI can be posted on a bulletin board. However, you have
to consider the number of visitors (to include employees) who do not
have a need to know who may visit the area.

***Can I leave UCNI unattended on my desk?***

If you are located in a Security Area (for example, an exclusion or
limited area) and everyone who routinely has access to that area has a
need to know, you may leave the UCNI unattended. However, if you are not
located in a Security Area or everyone does not have a need to know the
UCNI, you must protect the information in such a way as to prevent
unauthorized disclosure, such as by placing it in a locked room or
receptacle (for example, a locked briefcase, desk drawer, or file
cabinet).

**[Storing UCNI]{.underline}:**

***How do I store an UCNI document or material when not in use?***

UCNI must be stored to prevent unauthorized disclosure. Therefore, if
you are located in a building where Government or Government-contractor
internal building security is provided during non-duty hours, the UCNI
may be stored with other unclassified matter in unlocked rooms or
receptacles, such as file cabinets, desks, or bookcases. If such
internal building security is not provided during non-duty hours, then
the UCNI must be stored in a locked room or building or in a locked
receptacle, such as a locked desk drawer, file cabinet, or briefcase.

***Must I keep UCNI in the same repository with my classified
documents?***

No, it is not necessary to store UCNI in a security container approved
for classified documents. UCNI is controlled, not classified. However,
while storage requirements are not as stringent, UCNI must be stored to
prevent unauthorized disclosure.

***If work dictates, can I take UCNI home with me or to my hotel room
when I'm on travel?***

Taking UCNI either to your home or hotel is not a good practice.
However, if you can ensure that an unauthorized disclosure will not
occur, either by using a locked receptacle to which access is controlled
or keeping the matter in your custody at all times, it may be
permissible. It is recommended that you obtain guidance from your local
security office prior to removing UCNI from your work place.

**[Reproducing UCNI]{.underline}:**

***Can I make copies of an UCNI document?***

Yes, an UCNI document can be reproduced without the permission of the
originator unless the program office has imposed special dissemination
limitations. Regardless, you should make only the number of copies
needed to carry out your official duties. You must mark and protect the
copies in the same manner as the original document.

***Can I drop UCNI off at the duplicating center for reproduction?***

Yes, so long as the document has the appropriate markings and an
individual approved for UCNI access and with a need to know is in
attendance while the material is being duplicated. It should not,
however, be left unattended or unsecured.

**[Destroying UCNI]{.underline}:**

### ***Can I destroy an UCNI document?***

Yes, you can destroy an UCNI document. To do so, you must use a strip
cut shredder that results in no more than ¼ inch wide strips or a
shredder approved for the destruction of classified. In addition, other
means for destroying UCNI may be identified and approved by the local
security office.