DEPARTMENT  OF  THE  AIR  FORCE 
Headquarters  US  Air  Force 
Washington  DC  20330-5000 
AF  REGULATION  200-7 
14  April  1987 
Intelligence 
SENSITIVE  COMPARTMENTED  INFORMATION  (SCI)  SECURITY  SYSTEM 
This  regulation  explains  Air  Force  policy,  rules,  and  responsibilities  for  the  security,  use,  and  dissemination 
of  SCI.  Together  with  United  States  Air  Force  Intelligence  (USAFINTEL)  201-1  (binding  as  a  standard  Air 
Force  Regulation,  per  AFR  8-3),  it  implements  DOD  C-5105.2I-M-1,  DOD  TS-5I05.2I-M-2,  and  Defense 
Intelligence  Agency  (DIA)  Manuals  50-3,  50-4,  50-5.  It  applies  to  Air  Force  senior  intelligence  officers 
(SIO),  SCI  security  officials,  communications  security  (COMSEC)  managers  and  custodians  who  are  SCI 
indoctrinated,  and  commanders  and  supervisors  of  SCI -indoctrinated  individuals.  It  also  applies  to  US  Air 
Force  Reserve  and  Air  National  Guard.  See  USAFINTEL  201-1,  AFM  Il-I,  and  JCS  Publication  I  for  a 
more  detailed  explanation  of  these  and  other  terms  used  by  the  intelligence  community  (IC). 
Paragraph 
Terms  Explained    1 
Functions  of  the  Air  Force  SCI  Security  Program  and  the  SSO  System    2 
SCI  Responsibilities    3 
Personnel  Security    4 
SCI  Billets    5 
Indoctrinations  and  Debriefings 
Access  to  SCI    7 
Physical  Security 
SSO  Staffing    9 
COMSEC  and  Computer  Security  (COMPUSEC)    10 
SCI  Security  Incidents  and  Violations    II 
Security  Education,  Awareness,  and  Training    12 
Attachment  Page 
1 .  Glossary  of  Abbreviations       10 
1.  Terms  Explained:  and  other  sensitive  or  privacy  information. 
a.  Defense  Special  Security  Communications  b.  Emergency  Reaction  Air  Force  Special 
System  (DSSCS).  A  specialized  segment  of  the  Security  Office  (ERAFSS0).  A  temporary  facil- 
defense  AUTODIN  communications  system  ity  maintained,  staffed,  and  operated  to  support 
which  is  operationally  controlled  by  the  Defense  operational  or  emergency  requirements  approved 
Communications  Agency  and  consists  of  auto-  by  HQ  USAF  to  sustain  major  commands  or 
matic  switching  centers  and  inter-switch  Air  Force  supported  unified  and  specified 
trunks.DSSCS  has  two  elements,  the  Critical  commands.  May  be  fixed,  mobile,  or  transport- 
Intelligence    Communications    (CRITICOMM)  able. 
System  and  the  Special  Intelligence  Communica-  c.  Senior  Intelligence  Officer  (SIO).  At  activi- 
tions  (SPINTCOMM)  Network.   CRITICOMM  ties    below    HQ    USAF,    the    highest    ranking 
is  a  special  purpose  communications  network  individual   charged   with  direct   foreign   inteili- 
established  for  transmitting  critical  intelligence.  gence  missions,    functions,   and  responsibilities 
SPINTCOMM  is  the  communications  network  within  a  component,  command,  or  element  of 
established  for  transmitting  and  handling  of  SCI  an  intelligence  community  organization.  For  air 
   component  commands  of  the  unified  commands 
Supersedes   AFR   200-7,    28   June    1982.    (See  and  Air  Force  major  commands,  this  individual 
signature  page  for  summary  of  changes.)  must  be  serving  in  a  colonel  or  above  intelli- 
No.  of  Printed  Pages:  10  gence  position.  If  an  Air  Force  organization  has 
OPR:  INS  (Lt  Col  John  R.  Reale)  a  limited  or  no  intelligence  mission  or  function, 
Approved  by:  Col  William  C.  Cody  but  requires  SCI,  the  commander  designates  a 
Writer-Editor:  R.  M.  Downey  senior  officer  as  the  SIO  for  SCI  purposes. 
Distribution:  F  d.  Senior  Officials  of  the  Intelligence  Com-
munity  (SOIC).  Heads  of  departments  and 
agencies  within  the  intelligence  community  or 
their  designated  representatives  who  are  senior 
principals  and  observers  to  the  National  Foreign 
Intelligence  Board  (NFIB).  The  Assistant  Chief 
of  Staff/Intelligence,  HQ  USAF,  is  the  Air 
Force  SOIC.  For  purposes  of  expediency  and 
practicality,  SOICs  may  delegate  their  authori- 
ties to  other  persons  within  their  organizations. 
e.  Sensitive  Compartmcnted  Information 
(SCI).  Classified  information  concerning  or 
derived  from  intelligence  sources,  methods,  or 
analytical  processes,  which  is  required  to  be 
handled  exclusively  within  formal  access  control 
systems  established  by  the  Director  of  Central 
Intelligence  (DCI). 
f.  Sensitive  Compartmcnted  Information  Fa- 
cility (SCIF).  A  formally  accredited  area,  room, 
group  of  rooms,  or  installation  where  SCI  may 
be  stored,  used,  discussed,  or  electrically  pro- 
cessed. A  SCIF  may  be  permanent  or  tempo- 
rary, mobile  or  fixed,  and  of  varied  construc- 
tion. Procedural  and  physical  measures  must 
prevent  the  free  access  of  persons  unless  they 
have  been  formally  indoctrinated  for  that 
particular  SCI  material  authorized  for  use  or 
storage  within  the  SCIF.  SCIFs  are  located  at 
US  government-controlled  facilities,  contractor 
plants,  or  other  civilian  locations. 
g.  Sensitive  Compartmented  Information  Se- 
curity Officer  (SCISO).  The  designated  individ- 
ual with  SCI  security  responsibility  for  a  SCIF. 
The  SCISO  must  ensure  day-to-day  compliance 
with  SCI  personnel,  information,  physical  and 
communications  security  criteria  within  the 
SCIF. 
h.  Sensitive  Compartmented  Information  Se- 
curity Officials.  A  generic  term  for  those 
individuals  appointed  to  positions  specifically 
responsible  for  security  management  and  control 
of  SCI.  SCI  security  officials  include  special 
security  officers  (SSO),  SCI  security  officers 
(SCISO),  secure  vault  area  (SVA)  custodians, 
contractor  special  security  officers  (CSSO), 
among  others.  See  USAFINTEL  201-1  for 
appointment  criteria  and  complete  listing  of 
duties  and   responsibilities   of  these   positions. 
i.  Special  Security  Officer  (SSO)  System.  The 
system  through  which  the  Director,  DIA,  the 
military  departments'  SOICs,  Air  Force- 
supported  unified  and  specified  commands,  and 
major  command  SIOs  perform  their  responsibili- 
ties for  the  security,  use,  and  dissemination  of 
SCI  to  include  both  physical  and  electrical 
means.  The  acronym  SSO  is  used  to  refer  to 
AFR  200-7         14  April  1987 
both  the  office  and  the  officer. 
2.  Functions  of  the  Air  Force  SCI  Security 
Program  and  the  SSO  System.  This  program, 
based  on  the  Air  Force  SSO  System,  gives  (he 
Air  Force  an  exclusive,  responsive,  and  secure 
means  to  receive,  store,  send,  use,  and  protect 
SCI.  It  was  developed  to  avoid  compromise  of 
SCI  and  guard  against  information  denial  or 
deception.  This  system  protects  sources  and 
methods,  while  permitting  the  dissemination  of 
intelligence  to  those  with  a  valid  need-to-know. 
a.  The  SCI  control  system  protects  activities 
and  information  of  extraordinary  sensitivity.  It 
depends  on  distinctive  markings,  restricted  han- 
dling of  material,  stricter  personnel  security 
criteria,  and  protection  of  SCI  material  in 
"control  centers"  with  physical  and  procedural 
barriers  to  preclude  access  by  those  who  have 
not  been  formally  approved  for  access.  This 
system  provides  an  organized  method  for 
determining  need-to-know  regarding  specific  cat- 
egories of  intelligence  and  the  sources  and 
methods  employed  in  their  collection. 
b.  Because  of '  the  vulnerabilities  and 
susceptibilities  of  SCI  systems  and  programs,  few 
risks  are  tolerable  and  special  judgment  must  be 
made.  Individuals  who  have  been  granted  TOP 
SECRET  clearances  may  be  denied  approval  for 
access  to  SCI,  a  direct  reflection  of  the  higher 
order  of  security  afforded  SCI. 
c.  In  accepting  SCI,  the  recipient  also  accepts 
the  accompanying  responsibilities  and  restric- 
tions. Each  individual  approved  for  access  is 
indoctrinated  on  the  extreme  vulnerabilities  of 
the  collection  systems,  the  risk  to  the  system  of 
the  unauthorized  disclosure  of  the  information 
they  collect,  and  the  rules  for  safeguarding  SCI. 
As  a  condition  of  access,  the  newly  approved 
individual  signs  an  agreement  before  receiving 
this  indoctrination  briefing  accepting  the  legal 
obligation  to  follow  specific  SCI  security  regula- 
tions and  procedures. 
d.  The  Air  Force  SCI  security  program  is 
based  on  SCI  policy  issued  by  the  DCI  in  DCI 
Directive  (DCID)  1/19,  through  the  Deputy 
Under  Secretary  of  Defense  (Policy)  (DUSD(P)) 
and  the  Director,  DIA. 
e.  Within  the  Air  Force,  the  Directorate  of 
Security  and  Communications  Management  (HQ 
USAF/INS)  issues  all  SCI  policy  and  manage- 
ment guidance. 
f.  The  SSO  at  each  Air  Force  command  level 
is  the  single  point,  for  the  receipt,  control,  and 
accountability   of   SCI    and    for   SCI    security
AFR  200-7         14  April  1987 
management  functions  for  local  SCIFs. 
3.  SCf  Responsibilities.  The  more  important 
SCI  responsibilities  follow.  USAFINTEL  201-1 
provides  complete  and  detailed  responsibilities 
and  instructions  for  SCI  security  program 
functions. 
a.  Assistant  Chief  of  Staff,  Intelligence,  HQ 
USAF  (ACS/I).  As  the  Air  Force  SOIC,  the 
ACS/Intelligence,  HQ  USAF,  implements  and 
carries  out  within  the  Air  Force  the  DO  and 
DOD  policies  and  procedures  of  the  SCI 
security  program  for  the  protection,  use,  and 
dissemination  of  SCI. 
b.  Directorate  of  Security  and  Communica- 
tions Management  (HQ  USAF/INS).  The 
ACS/I  has  designated  the  Director,  Directorate 
of  Security  and  Communications  Management, 
to  exercise  his  SCI  security  authority.  In  this 
capacity,  HQ  USAF/INS: 
(1)  Establishes  SCI  policy  and  procedures 
for  the  Air  Force  in  USAFINTEL  201-1. 
(2)  Provides  management  and  oversight  for 
the  Air  Force  SCI  security  program  (informa- 
tion, personnel,  physical,  communications,  and 
TEMPEST  security). 
(3)  Prescribes  policy,  procedures,  and  re- 
sponsibilities for  inspection  of  SCI  security 
management  programs  and  SCIFs  accredited  by 
the  Air  Force.  Conducts  HQ  USAF  inspections 
of  these  programs  and  facilities. 
(4)  Determines  and  monitors  SCI  need-to- 
know  and  approves  access  eligibility  for  Air 
Force  personnel  and  for  contractors  and  consult- 
ants working  on  all  Air  Force  contracts. 
(5)  Validates  the  requirement  for  and  ac- 
credits SCIFs  and  communications  systems  in 
SCIFs  under  ACS/I,  HQ  USAF,  security 
cognizance. 
(6)  Staffs  "For  Cause"  discharge  cases  (see 
paragraph  4e). 
(7)  Develops  an  SCI  Security  Education, 
Awareness,  and  Training  Program. 
(8)  Reviews  and  closes  out  SCI  security 
investigations. 
c.  Senior  Intelligence  Officer  (SIO).  Each  SIO 
(major  command  (MAJCOM)  and  unit)  exer- 
cises overall  management  of  SCI  programs  and 
that  portion  of  the  SSO  system  under  his  or  her 
cognizance,  except  as  shown  in  j  and  k  below. 
Each  SIO  must: 
(I)  Appoint  in  writing  all  SCI  security 
officials  and  alternates  for  organizations,  SCIFs, 
and  automatic  data  processing  (ADP)  systems 
under  his  or  her  cognizance.  Only  MAJCOM 
SIOs  may  appoint  CSSOs  to  ensure  executive- 
level  support  within  each  contracting  firm. 
(2)  Ensure  proper  protection,  dissemina- 
tion, and  use  of  SCI  documents  and  material  by 
enforcing  all  SCI  information,  personnel,  physi- 
cal, communications,  TEMPEST,  and  ADP 
security  rules  and  by  developing  good  security 
policies  and  practices. 
(3)  Maintain  the  integrity  of  the  SCI 
control  system  and  ensure  that  personnel  as- 
signed to  the  SSO  do  not  perform  duties  or 
details  that  conflict  or  interfere  with  their  SCI 
security  responsibilities  or  with  the  security  of 
SCI.  Collateral  security  management  and  foreign 
disclosure  functions  may  not  be  assigned  to 
full-time  SCI  security  officials. 
(4)  Review  and  validate  the  need-to-know 
for  SCI  billets,  the  need  for  SCIFs,  and  the 
requirement  for  SCI  communications  and  ADP 
systems.  Approves  selected  SCI  billets, 
redesignations,  and  realignments. 
(5)  Establish  a  Memorandum  of  Agreement 
(MOA)  with  the  supporting  Air  Force  Commu- 
nications Command  (AFCC)  element  to  ensure 
SCI  security,  timely  communications  support  to 
the  intelligence  mission,  and  privacy  communi- 
cations support. 
(6)  Identify  communications-electronics 
(C-E)  and  communications  security  (COMSEC) 
needs  to  the  supporting  AFCC  element  com- 
mander. 
(7)  Ensure  the  SSO  is  functionally  subordi- 
nate to  and  works  directly  for  the  SIO  (the  SIO 
should  write  the  officer  effectiveness  reports 
(OER)). 
(8)  Establish  training  programs  for  SCI 
security  officials.  The  scope  of  training  provided 
must  ensure  the  SCI  security  official  can 
adequately  perform  the  duties  and  requirements 
in  USAFINTEL  201-1. 
(9)  Ensure  sufficient  qualified  personnel, 
funds,  and  logistical  support  are  provided  to 
effectively  operate  the  SSO  system  and  the  SCI 
security  program,  and  to  inspect  field  activities. 
(10)  Ensure  appropriately  SCI -cleared  and 
-designated  individuals  within  the  organization 
understand  existing  regulations  and  guidelines 
governing  the  decompartmentation  and  sanitiza- 
tion  of  SCI  (peacetime  and  emergency  use)  and 
establish  continuing  education  and  training 
programs  for  these  personnel. 
(11)  Ensure  that  all  commanders  comply 
with  responsibilities  in  e  below  and  that  all 
behavior  data  that  pertains  to  SCI-indoctrinated 
individuals    is    reported    expeditiously    to    HQ
AFR  200-7         14  April  19S7 
USAF/INS  as  required  by  USAFINTEL  201-1. 
(12)  Keep  the  SSO  informed  of  any  issue 
that  surfaces  at  the  base  Facilities  Utilization 
Board  (FUB),  Communications-Computer  Sys- 
tems Requirements  Board  (CSRB),  Base  Security 
Council,  and  similar  forums  which  might  have 
SCI  implications. 
d.  Special  Security  Officer  (SSO).  Each  SSO 
has  day-to-day  responsibility  and  SCI  security 
cognizance  for  the  parent  unit,  supported  and 
subordinate  organizations,  and  subordinate 
SCIFs.  Each  SSO  is  directly  responsible  to  the 
SIO,  and  must: 
(1)  Supervise  the  operation  of  the  SSO  and 
administer  the  SCI  security  program.  Conduct 
or  manage  required  SCI  information,  personnel, 
communications,  TEMPEST,  and  physical  secu- 
rity actions  and  procedures  according  to 
USAFINTEL  201-1  guidance. 
(2)  Ensure  SCI  is  properly  used,  stored, 
accounted  for,  controlled,  safeguarded,  pack- 
aged, transmitted,  and  destroyed. 
(3)  Provide  advice  and  assistance  on  SCI 
classification,  control  systems,  sanitization, 
downgrading,  decompartmentation,  operational 
use,  and  emergency  use. 
(4)  Ensure  SCI  is  sent  only  to  persons 
authorized  access  to  the  material  and  who  have 
a  verified  need-to-know. 
(5)  Ensure  all  individual  positions  which 
require  SCI  access  are  "S"  coded  by  manpower 
in  the  unit  manning  document  (UMD)  in  the 
Automated  Personnel  Data  System  (APDS) 
according  to  AFR  300-4,  volume  I. 
(6)  Retain  SCI  security  cognizance  of  the 
DSSCS  Telecommunications  Center  (TCC)  or 
Consolidated  Telecommunications  Center 
(CTCQ,  and  interface  with  the  TCC  and  ADP 
facilities  to  ensure  proper  SCI  security  and 
service  to  the  SIO. 
(7)  Conduct  SCI  security  briefings,  indoc- 
trinations, debriefings;  obtain  signed  nondisclo- 
sure agreements  and  perform  other  related 
personnel  security  actions. 
(8)  Inspect  all  subordinate  SCIFs  annually, 
documenting  the  inspection  results,  and  recom- 
mend corrective  action  and  follow-up  on  correc- 
tive measures. 
(9)  Investigate  SCI  security  infractions  oc- 
curring in  areas  under  the  SSO's  SCI  security 
cognizance,  make  recommendations,  and  pre- 
pare required  reports.  Coordinate  with  host  base 
and  MAJCOM  information  security  program 
managers  (ISPM),  as  appropriate. 
(10)  Provide  privacy  communications  sup- 
port to  flag  rank  officers  residing  on  or 
transiting  the  base,  and  to  other  senior  officers 
or  offices  as  requested. 
(11)  Develop  and  conduct  a  continuing  SCI 
Security  Education,  Awareness,  and  Training 
Program.  Coordinate  with  host  base  and 
MAJCOM  ISPM,  as  appropriate. 
(12)  Perform  SCISO  functions  for  the  SSO 
office  and  oversee  the  performance  of  SCISOs 
for  each  subordinate  SCIF. 
e.  All  Commanders  and  Supervisors.  All 
commanders  and  supervisors  (who  have  SCI- 
indoctrinated  individuals  within  their  units  or 
organizations)  must  forward  all  derogatory 
information  received  regarding  any  SCI- 
indoctrinated  individual  expeditiously  to  the 
SSO  who  will  prepare  a  Behavior  Data  Report 
according  to  USAFINTEL  201-1.  This  includes 
any  arrests,  disciplinary  actions,  letters  of 
counseling  or  reprimand,  Article  15  actions,  ( 
incidents  involving  alcohol  or  drug  abuse,  etc. 
See  paragraph  4c. 
f.  Director,  Base  Medical  Service.  The  medi- 
cal community  provides  the  commander  impor- 
tant information  about  a  person's  continued 
eligibility  for  SCI  access  and  information  about 
treatment  which  may  temporarily  affect  an 
SCI-cleared  individual's  ability  to  perform  sensi- 
tive duties.  The  specific  responsibilities  of  the 
director,  base  medical  service,  are  detailed  in 
AFR  35-36. 
g.  Chief,  Security  Police.  The  chief,  security 
police  provides  security  support  for  approved 
SCI  facilities,  and  according  to  AFRs  125-37, 
DOD  5200.1-R/205-1,  205-32,  and  207-1  and 
USAFINTEL  201-1: 
(1)  Ensures  procedures  are  established  to 
enable  security  teams  to  respond  to  SCIF  alarms 
in  a  timely  manner. 
(2)  Allows  the  unit  commander,  SSO,  or 
designated  representative  to  have  access  to  daily 
blotter  inputs  bearing  on  the  conduct  of 
SCI-cleared  personnel  which  may  affect  their 
continued  SCI  access. 
(3)  Establishes  the  SCI  facility  as  a  con- 
trolled area  as  specified  in  AFR  125-37  or,  if 
justified  by  mission,  establishes  a  restricted  area 
according  to  AFR  207-1  and  protects  the  area 
according  to  AFR  207-5. 
h.  Base  TEMPEST  Officer  and  Noncommis- 
sioned Officer  (NCO).  While  the  ACS/I  through 
HQ  USAF/INS  is  the  TEMPEST  authority  for 
SCIFs,  base  TEMPEST  officers  and  NCOs  have 
certain  responsibilities.  These  include  ensuring 
that  equipment  and  systems  are  installed  accord-
AFR  200-7         14  April  1987 
ing  to  TEMPEST  criteria  and  for  conducting 
annual  Red/Black  inspections.  Base  TEMPEST 
officer  and  NCO  responsibilities  are  contained 
in  AFR  56-16,  Control  of  Compromising 
Emanations  (TEMPEST),  and  USAFINTEL 
201-1. 
i.  Base  Civil  Engineer  (BCE).  The  BCE  must: 
(1)  Ensure  all  facilities  to  be  designated  as 
SCIFs  are  constructed  or  modified  according  to 
the  standards  outlined  in  DIAM  50-3,  Physical 
Security  Standards  for  Sensitive  Compartmented 
Information  Facilities,  unless  waived  by  HQ 
USAF/INSC. 
(2)  Ensure  any  requests  for  SCI-Ievel 
shielded  enclosures  are  accompanied  by  a 
National  COMSEC  Instruction  (NACSI)  5004  or 
NACSI  5005  analysis,  accomplished  with  the 
coordination  of  the  host  base  or  MAJCOM 
TEMPEST  official,  and  a  letter  or  message 
from  HQ  USAF/INSC  stating  the  shielded 
enclosure  is  necessary  for  the  proposed  SCIF. 
(3)  Ensure  requests  for  assistance  on 
security-related  problems  in  SCIFs  are  handled 
on  a  priority  basis. 
j.  Air  Force  Communications  Command 
(AFCC).  Besides  SIO  and  SSO  responsibilities 
previously  listed,  AFCC  must: 
(1)  Operate  and  maintain  dedicated  intelli- 
gence communications  systems  and  CTCCs  to 
provide  timely  intelligence  communications  sup- 
port. 
(2)  Provide  C-E  and  COMSEC  program- 
ming for  communications  according  to  the 
supported  unit's  validated  requirements,  and 
maintain  the  Communications  Electronic  Autho- 
rization Program  (CAP)  for  TCCs. 
(3)  Ensure  TCC  personnel  are  continuously 
trained  and  qualified  in  all  aspects  of  DSSCS 
operating  procedures. 
(4)  Implement  approved  communications 
plans  and  programs. 
(5)  Appoint  the  COMSEC  officer  and 
COMSEC  custodian  from  appropriately  cleared 
personnel. 
(6)  Provide  resources  on  a  rapid  response 
basis  to  meet  the  needs  for  communications 
service  during  peak  activities,  catastrophes,  or 
fluctuations  in  the  intelligence  mission,  accord- 
ing to  priorities  established  in  the  circuit 
restoration  priority  list  or  other  authoritative 
source,  such  as  MAJCOM  operations  plan  or 
local  directive. 
(7)  Inspect  and  evaluate  the  communica- 
tions services  provided  SIOs. 
(8)  Retain  basic  personnel  security  responsi- 
bility for  SCI-indoctrinated  AFCC  personnel, 
with  the  exception  of  SCI  indoctrinations  and 
debriefings,  clearance  access  certifications,  and 
transfer-in-status  actions  which  are  normally 
performed  by  a  supporting  SSO. 
k.  Electronic  Security  Command  (ESC).  Be- 
sides SIO  and  SSO  responsibilities  previously 
listed,  ESC  must: 
(1)  Maintain  an  ERAFSSO  capability  to 
fulfill  the  emergency  and  contingency  opera- 
tional requirements  of  MAJCOMs  and  Air 
Force-supported  unified  and  specified  com- 
mands. 
(2)  Manage  selected  CRITICOMM  termi- 
nals. (AFCC  maintains  and  operates  these 
terminals.) 
1.  Unified  and  Specified  Commands.  When 
supported  or  staffed  by  Air  Force  elements  (less 
air  component  commands  of  the  unified  com- 
mands), these  commands  establish  and  operate 
SSOs  and  other  SCIFs  according  to  DIA  policies 
and  rules.  They  advise  the  ACS/I  and  HQ 
USAF/INS  of  matters  that  impact  on  Air  Force 
resources  or  SCI  security.  Air  component 
commands  of  the  unified  commands  will  follow 
USAFINTEL  201-1.  SCI  access  eligibility  policy 
and  rules  for  Air  Force  personnel  assigned  to 
the  unified  and  specified  commands  will  be 
according   to   USAFINTEL   201-1,   chapter   3. 
4.  Personnel  Security: 
a.  Investigation.  A  Special  Background  Inves- 
tigation (SBI)  or  SBI-Periodic  Reinvestigation 
(SBI-PR)  is  a  prerequisite  and  must  be  con- 
ducted on  all  persons  being  considered  for  or 
having  access  to  SCI.  The  SBI  and  SBI-PR 
collect  information  on  a  person's  background 
and  lifestyle  to  determine  stability,  character, 
and  loyalty. 
(1)  An  SBI  completed  according  to  DOD 
5200.2-R/AFR  205-32  meets  the  investigative 
requirements  for  SCI  access.  The  SBI  consists  of 
local  agency  checks,  a  National  Agency  Check 
(NAC),  credit  checks,  neighborhood  checks, 
education  checks,  and  interviews  of  employment 
and  developed  references.  It  also  includes  a 
NAC  on  the  individual's  spouse  and  immediate 
family  of  18  years  or  over  who  are  United  States 
citizens  other  than  by  birth  or  who  are  resident 
aliens. 
(2)  An  SBI-PR  completed  according  to 
DOD  5200.2-R/AFR  205-32  meets  the  intended 
scope  of  reinvestigative  requirements  of  SCI 
access.   The  SBI-PR  consists  of  investigative
AFR  200-7         14  April  1987 
actions  for  the  previous  5  years.  SBI-PRs  are 
initiated  for  personnel  currently  SCI  indoctri- 
nated or  personnel  with  less  than  a  1-year  break 
in  SCI  access.  SBI-PRs  are  conducted  on  a 
5-year  recurring  basis  for  all  persons  authorized 
SCI  access. 
(3)  Supervisors  are  now  required  to  review 
DD  Form  398,  Personnel  Security  Questionnaire 
(BI/SBI),  to  ensure  that  no  significant  adverse 
information  of  which  they  are  aware  and  which 
may  have  a  bearing  on  an  individual's  continued 
eligibility  for  access  to  classified  information  is 
omitted.  Supervisors  will  sign  and  date  a 
statement  to  this  effect  in  the  remarks  block  of 
the  DD  Form  398. 
(4)  The  results  of  the  SBI  and  SBI-PR  are 
sent  by  the  Defense  Investigative  Service  (DIS) 
to  the  Air  Force  Security  Clearance  Office 
(AFSCO)  for  adjudication  for  access  to  Top 
Secret  information.  If  an  individual  is  deter- 
mined eligible  for  access  to  Top  Secret  informa- 
tion and  has  a  requirement  for  SCI  access,  the 
investigative  results  are  sent  to  HQ  USAF/INSB 
for  SCI  adjudication. 
b.  Adjudication.  SCI  adjudication  is  the 
examination  of  data  collected  on  an  individual's 
lifestyle  and  behavior  to  ascertain  whether  the 
individual  is  eligible  for  SCI  access.  The  key 
factors  considered  are  the  individual's  maturity 
and  sense  of  responsibility,  to  include  trustwor- 
thiness, loyalty,  and  discretion.  Adjudicators 
evaluate  all  pertinent  information  available 
against  the  established  personnel  security  stan- 
dards contained  in  DCID  1/14  and  USAFINTEL 
201-1,  chapter  3,  and  adjudication  guidelines. 
Any  doubt  concerning  the  individual's  eligibility 
is  always  resolved  in  favor  of  national  security. 
Commanders  must  screen,  select,  and  nominate 
only  those  individuals  who  are  stable,  trustwor- 
thy, reliable,  of  excellent  character,  judgment, 
and  discretion;  and  of  unquestionable  loyalty  to 
the  United  States  and  who  will  remain  in  the 
position  requiring  access  to  SCI  for  at  least  1 
year. 
c.  Behavior  Data  Reporting.  The  Behavioral 
Data  Reporting  (BDR)  system  provides  the 
MAJCOM  SSO  and  SIO  and  HQ  USAF/INS 
with  timely  information  on  personal  status 
changes  and  incidents  of  personal  behavior 
which  might  affect  continued  SCI  eligibility. 
This  system  requires  commanders  and  supervi- 
sors to  report  to  their  SSOs  any  changes  and 
incidents  tvolving  SCI-indoctrinated  persons 
(military.  Air  Force  civilians,  contractors,  and 
consultants)  as  well  as  the  person's  immediate 
family  (when  SCI  access  eligibility  is,  or  might 
be  affected).  The  SSO  ensures  formal  BDR 
according  to  USAFINTEL  201-1,  chapter  3. 
(This  is  not  a  reporting  requirement  of  the 
medical  service.) 
d.  Due  Process  Procedures  for  SCI  Access 
Denials.  HQ  USAF/INS  notifies  each  individual 
through  his  or  her  commander  when  SCI  access 
has  been  denied  or  revoked.  The  notice  includes 
the  reasons  for  denial  or  revocation,  explains 
how  the  person  may  request  releasable  portions 
of  applicable  investigative  reports,  and  advises 
that  the  decision  may  be  appealed.  The  individ- 
ual must  acknowledge  receipt  of  this  notification 
within  5  workdays  of  receipt  and  has  45 
calendar  days  from  the  date  of  the  acknowledge- 
ment to  file  an  appeal.  If  the  appeal  is  denied, 
the  individual  has  30  calendar  days  from  the 
date  of  the  appeal  letter  to  request  his  or  her 
SCI  access  disapproval  be  reviewed  by  ACS/I. 
The  ACS/I's  determination  is  final  and 
unreviewable. 
e.  "For  Cause"  Actions— Persons  Being  Con- 
sidered for  Court-Martial.  Involuntary  Separa- 
tion, Discharge,  or  Dismissal.  When  an  SCI- 
indoctrinated  individual  is  being  considered  for 
involuntary  separation  from  the  Air  Force, 
dismissal  from  civilian  employment  with  the  Air 
Force,  or  court-martial  (general  or  special),  no 
action  will  be  taken  until  the  proposed  action 
has  been  reviewed  and  approved  by  HQ 
USAF/INS.  Processing  procedures  for  "For 
Cause"  cases  are  contained  in  DOD 
5200.2-R/AFR  205-32  and  USAFINTEL  201-1, 
chapter  3. 
5.  SCI  Billets.  An  SCI  billet  is  a  position  in 
which  the  incumbent  requires  knowledge  and 
access  to  SCI  to  perform  his  or  her  official 
duties.  SCI  billets  are  used  throughout  the 
Department  of  Defense  to  record  these  positions 
and  are  authorized  only  after  verification  of 
nced-to-know.  HQ  USAF/INS  approves  or 
obtains  approval  from  other  authorities  for 
billets  for  all  organizations  under  the  ACS/I 
SCI  security  cognizance.  The  MAJCOM  SIOs 
have  the  authority  to  approve  selected  billets, 
realignments,  and  redesignations  for  organiza- 
tions under  their  cognizance  as  specified  in 
USAFINTEL  201-1,  chapter  2. 
a.  Criteria  for  Justifying  SCI  Billets.  On 
determining  that  a  need-to-know  exists,  submit  a 
billet  request  using  sufficient  justification  which 
spells  out  the  need-to-know. 
b.  Requesting  an  SCI  Billet.  When  preparing
AFR  200-7         14  April  1987 
billet  request  packages,  use  the  actual  duty  title, 
not  the  Air  Force  Specialty  Code  (AFSC)  nor 
the  UMD  title,  unless  the  AFSC  or  UMD  fully 
describes  the  position.  USAFINTEL  201-1, 
chapter  2,  provides  specific  guidelines  for 
submitting  a  billet  request  for  military  and 
civilian  billets,  contractor  performance  and 
service  billets,  consultant  billets.  Air  Force 
Reserve  billets,  base  support  billets,  student 
billets,  and  special  purpose  access  (SPA). 
6.  Indoctrinations  and  Debriefings.  USAFINTEL 
201-1,  chapter  4,  requires  that  all  personnel 
approved  for  access  to  SCI  receive  a  basic,  yet 
comprehensive,  indoctrination  on  the  sensitivity 
of  SCI,  and  its  security,  use,  and  dissemination. 
The  directive  also  requires  reindoctrination  every 
2  years,  as  well  as  a  formal  debriefing  when  SCI 
access  is  terminated.  HQ  USAF/INSC  provides 
standard  Air  Force  SCI  indoctrination  and 
debriefing  materials  (including  video  tapes  and 
hard  copy  briefing  packages)  to  field  SSOs. 
SSOs: 
a.  Conduct  indoctrinations  using  this  mate- 
rial. 
b.  Supplement  the  indoctrinations  with  all 
local  security  procedures. 
c.  Conduct  formal  reindoctrinations  of  SCI- 
indoctrinated  individuals  at  2-year  intervals. 
d.  Conduct  SCI  debriefings  whenever  an 
individual  no  longer  has  a  need-to-know  or 
when  directed  by  HQ  USAF/INS. 
e.  Supplement  these  formal  indoctrinations 
and  debriefings  with  continuing  SCI  awareness 
training  to  all  SCI-indoctrinated  individuals 
under  their  cognizance  (see  paragraph  12). 
on    contractual    business    and    that    their    SCI 
accesses  have  been  certified. 
b.  Two-Person  Rule.  The  DCI  has  established 
a  stringent  policy  on  the  staffing  of  SCIFs.  As  a 
matter  of  policy,  SCIFs  must  be  staffed  with 
sufficient  people  to  deter  unauthorized  copying 
or  illegal  removal  of  SCI.  SCIFs  must  be  staffed 
at  all  times  by  at  least  two  appropriately 
indoctrinated  persons  in  proximity  to  one 
another  to  provide  mutual  support  in  maintain- 
ing the  integrity  of  the  facility  and  the  material 
stored  there.  Access  to  or  work  by  a  lone 
individual  in  an  SCI  facility  is  not  allowed. 
c.  Special  Purpose  Access  (SPA).  SPA  is  used 
for  personnel  who  require  SCI  access  for  short 
durations  (not  to  exceed  90  days)  or  who  are  in 
positions  which  would  not  warrant  an  SCI 
billet.  The  request,  which  includes  detailed 
justification,  is  sent  to  HQ  USAF/INSB.  The 
unit  SIO  must  concur  with  the  request.  The 
MAJCOM  SIO  and  the  unit  SIO  must  ensure 
SPAs  are  managed  within  authorized  guidelines. 
No  further  action  is  required  by  the  MAJCOM 
unless  they  nonconcur  with  the  request. 
d.  Emergency  SCI  Access.  Emergency  SCI 
access  is  used  for  personnel  who  require  SCI 
access  before  meeting  the  eligibility  standards  set 
forth  in  DCID  1/14  and  USAFINTEL  201-1. 
The  person  must  be  on  station  and  there  must 
be  an  urgent  requirement  to  have  the  individual 
indoctrinated  into  an  approved  billet.  The 
request,  which  includes  detailed  justification,  is 
sent  to  HQ  USAF/INSB.  The  local  SIO  and 
MAJCOM  SIO  must  certify  that  the  emergency 
exists  and  that  the  person  must  have  immediate 
SCI  access. 
7.  Access  to  SCI: 
a.  Control  of  Access.  Access  to  SCI  must  be 
kept  to  the  absolute  minimum  consistent  with 
HQ  USAF  approved  SCI  eligibility,  valid 
need-to-know,  and  the  operational  mission. 
Besides  the  required  SBI  and  adjudication  by 
HQ  USAF/INS,  all  persons  who  need  access  to 
SCI  must  be  nominated  to  and  approved  by  HQ 
USAF/INS  who  will  then  authorize  their  indoc- 
trination. Simply  having  an  up-to-date  SBI 
adjudicated  by  HQ  USAF/INS  is  never  author- 
ity to  have  access  to  SCI.  Once  indoctrinated 
for  SCI,  access  to  SCIFs  is  not  automatic. 
SCI-indoctrinated  persons  desiring  to  visit  other 
SCIFs  on  SCI  business  must  have  their  SCI 
accesses  certified  through  SSO  channels.  Visits 
by  contractors  and  consultants  with  SCI  access 
must  be  carefully  reviewed  to  ensure  the  visit  is 
8.  Physical  Security.  Any  Air  Force  commander 
may  request  a  SCIF  if  there  is  a  validated  need 
to  process,  use,  discuss,  or  store  SCI  and  the 
desired  facility  meets  the  minimum  physical 
security  standards  outlined  in  DIAM  50-3. 
There  are  three  basic  steps  for  getting  a  facility 
accredited  as  a  SCIF.  The  requestor  must 
submit  the  following  packages  to  the  local  SSO 
for  further  processing.  (Specific  information  and 
detailed  guidance  are  contained  in  USAFINTEL 
201-1,  chapter  5.) 
a.  Concept  Validation  Request.  This  is  the 
first  step  to  establishing  a  SCIF  and  is  a  key 
element  in  future  accreditation  actions.  In  this 
letter,  the  requester  describes  why  the  SCIF  is 
needed  (program  being  supported),  the  location 
and  accreditation  level  desired,  agencies  and 
organizations  to  be  serviced  by  the  SCIF,  type
AFR  200-7         14  April  1987 
of  work  to  be  done  in  the  facility,  and  proposed 
operational  hours.  The  requester  also  includes  a 
statement  of  certification  that  there  is  currently 
no  other  SCIF  in  the  area  which  could  satisfy 
the  requirement. 
b.  Preconstruction  Review  Package.  In  this 
next  step,  the  requester  prepares  a  preconstruc- 
tion  checklist  (DIAM  50-3,  enclosure  5),  which 
describes  planned  construction,  access  control 
devices,  alarm  systems,  guard  personnel,  etc. 
Careful  planning  is  essential  when  preparing  this 
package,  as  it  describes  how  the  construction 
and  physical  security  standards  will  be  met. 
c.  Accreditation  Package.  This  is  the  last  step 
in  the  accreditation  process.  The  requester 
prepares  another  checklist  (DIAM  50-3,  enclo- 
sure 5),  which  describes  how  the  facility  was 
actually  constructed  and  what  physical  security 
measures  were  implemented.  SCI  may  not  be 
discussed  or  introduced  into  a  proposed  SCIF 
until  HQ  USAF/INSC  approves  this  package 
and  accredits  the  facility  as  a  SCIF. 
d.  Physical  Security  Support.  The  SCIF  must 
be  protected  as  a  controlled  area  or  as  an  Air 
Force  priority  resource  depending  on  mission. 
Before  accreditation  is  complete,  the  base 
security  council  should  review  mission  and 
address  physical  protection.  A  copy  of  the 
security  council  recommendations  should  be  a 
matter  of  record  in  the  accreditation  package. 
e.  Exceptions.  The  above  procedures  apply  to 
fixed,  permanent,  non-ESC  SCIFs  only.  For 
mobile  SCIFs,  temporary  secure  working  areas, 
or  ESC  SCIFs,  contact  the  local  SSO  or  review 
USAFINTEL  201-1,  chapter  5. 
9.  SSO  Staffing.  Due  to  the  complexity  of  SCI 
security  management  responsibilities  and  the 
requirements  of  the  two-person  rule  for  SCIFs, 
minimum  staffing  for  each  SSO  is  three 
personnel.  Local  SlOs  should  justify  requests 
for  exceptions  or  waivers  to  this  policy  in 
writing  to  HQ  USAF/INSC,  through  the 
MAJCOM  SIOs  who  will  add  their  recommen- 
dations. 
10.  COMSEC  and  Computer  Security 
(COMPUSEC): 
a.  Each  piece  of  telecommunications,  ADP, 
electrical,  and  electromechanical  equipment 
which  will  be  used  to  process  SCI,  or  which  will 
be  used  to  process  unclassified  or  collateral 
classified  information  in  a  SCIF,  must  be 
accredited  to  HQ  USAF/INSC  for  use  at  the 
required  specific  level  before  commencing  opera- 
tions. TEMPEST  accreditation  is  obtained  by 
submitting  required  checklists  according  to 
USAFINTEL  201-1,  chapter  6. 
b.  ADP  systems  using  software  require  two 
separate  accreditations  or  approvals:  a  TEM- 
PEST accreditation  (as  described  above)  and  a 
software  system  accreditation.  ADP  system 
accreditation  for  SCI  operations  must  be  sub- 
mitted according  to  USAFINTEL  201-1,  chapter 
8.  (ADP  system  accreditations  for  collateral  use 
must  be  submitted  according  to  AFR  205-16.) 
No  processing  is  authorized  until  the  system  has 
received  both  the  ADP  systems  accreditation 
and  the  TEMPEST  accreditation. 
11.  SCI  Security  Incidents  and  Violations.  Inci- 
dents involving  possible  compromise  or  im- 
proper handling  of  SCI  material  must  be 
reported  immediately  as  directed  in  USAFINTEL 
201-1,  chapter  18.  An  SCI  security  incident  is 
any  event  that  actually  or  potentially  jeopardizes 
the  security  of  SCI  or  could  lead  to  a 
compromise,  deviation,  or  practice  dangerous  to 
security.  Any  incident  of  this  nature  must  be 
reported  immediately  to  the  closest  SSO.  Secu- 
rity police  personnel,  unless  they  are  an  SSO, 
are  not  authorized  to  investigate  SCI  security 
violations. 
a.  The  SSO  will  report,  initiate,  and  ensure 
inquiries  or  investigations  are  conducted  on  all 
SCI  security  incidents,  except  those  referred  to 
the  Air  Force  Office  of  Special  Investigation 
(AFOSI)  or  the  Federal  Bureau  of  Investigation 
(FBI).  The  SSO  will  remain  the  office  of 
primary  responsibility  until  the  case  is  formally 
closed.  SSOs  will  ensure  all  reports  are  prepared 
and  act  as  the  focal  point  for  other  investigative 
agencies  involved  in  the  SCI  security  incident. 
Contractor  SSOs  will  report  and  investigate  SCI 
security  incidents  in  the  same  way  as  Air  Force 
SSOs. 
b.  Besides  the  obvious  security  violations  that 
must  be  reported,  USAFINTEL  201-1  also 
requires  that  incidents  involving  SCI- 
indoctrinated  military  members,  contractors  or 
DOD  civilians  who  either  fail  to  report  to  duty 
or  return  from  an  assigned  mission  and  whose 
whereabouts  cannot  be  positively  determined,  be 
treated  as  security  violations.  Also,  any  act 
which  could  lead  to  compromise  or  a  security 
violation  if  corrective  action  is  not  taken  must 
be  reported.  For  example,  an  SCI  courier  who 
stops  at  a  public  shopping  area  must  be  reported 
as  a  security  violation. 
c.  Unlike  security  violations  reported   under
AFR  200-7         14  April  19»7 
DOD  5200.1-R/AFR  205-1,  SCI  violations 
cannot  be  closed  by  the  local  commander.  All 
cases  must  be  reviewed  and  closed  at  least  by 
the  MAJCOM  SSO  and  in  most  cases  by  HQ 
USAF/INS  or  DIA. 
12.  Security  Education,  Awareness,  and  Train- 
ing. The  SCI  Security  Education,  Awareness, 
and  Training  Program  is  designed  to  increase 
the  security  awareness  of  US  Air  Force  military, 
civilian,  and  contractor  personnel  working  under 
the  SCI  security  cognizance  of  the  ACS/I.  The 
program  runs  from  initial  SCI  indoctrination 
through  debriefing,  with  continuing  education, 
awareness,  and  training  in  between.  The  pro- 
gram implements  DCID  1/14,  annex  C,  and 
USAFINTEL  201-1,  chapter  19.  HQ 
USAF/INSC  manages  and  evaluates  the  SCI 
Security  Education,  Awareness,  and  Training 
Program  to  include  producing  and  distributing 
indoctrination  and  debriefing  materials,  continu- 
ing and  special  education  and  training  materials, 
security  advisories,  policy  related  guidance,  and 
conducting  appropriate  training  courses.  Each 
SSO  must  manage,  conduct,  and  evaluate  local 
and  subordinate  SCI  security  education  and 
training  to  include  all  indoctrinations, 
reindoctrinations,  debriefings,  and  periodic  SCI 
awareness  training. 
BY  ORDER  OF  THE  SECRETARY  OF  THE  AIR  FORCE 
OFFICIAL 
LARRY  D.  WELCH,  General,  USAF 
Chief  of  Staff 
NORMAND  G.  LEZY,  Colonel,  USAF 
Director  of  Information  Management 
and  Administration 
SUMMARY  OF  CHANGES 
This  revision  clarifies  management  of  the  SCI  security  system  within  the  Air  Force  and  details  the 
responsibilities  of  the  ACS/I,  SlOs,  SSOs,  SCISOs,  and  commanders  and  supervisors  of  SCI-cIeared 
personnel  (para  3);  sections  are  included  for  security  police  commanders,  medical  facility  commanders,  civil 
engineering  commanders,  communications  commanders,  and  TEMPEST  officers  and  NCOs  (para  3); 
specific  sections  are  added  on  personnel  security  (para  4),  SCI  billets  (para  5),  indoctrinations  and 
debriefings  (para  6),  access  to  SCI  (para  7),  physical  security  (para  8),  SSO  staffing  (para  9),  COMSEC  and 
COMPUSEC  (para  10),  SCI  security  incidents  and  violations  (para  11),  and  SCI  education,  awareness,  and 
training  (para  12).
ACS/I 
ADP 
AF/INS 
AFOSP 
AFSCO 
ARFCOS 
Assistant  Chief  of  Staff/ 
Intelligence 
Automatic    Data    Processing 
Air  Force  Directorate  of  Se- 
curity and  Communications 
Management 
Air  Force  Office  of  Security 
Police 
Air  Force  Security  Clearance 
Office 
Armed    Forces   Courier   Ser- 
vice 
Voice 
AUTOSEVOCOM  Automatic     Secure 
Communications 
Background  Information 
Behavior    Data    Report    (or 
Reporting) 
Central    Intelligence    Agency 
Computer  Security 
Communications     Security 
Critical  Intelligence  Commu- 
nications System 
Contractor    Special    Security 
Officer 
Director    of   Central    Intelli- 
BI 
BDR 
CIA 
COMPUSEC 
COMSEC 
CRITICOMM 
CSSO 
DCI 
DCID 
DIA 
DIS 
DOD 
DSSCS 
DUSEKP) 
EO 
ERAFSSO 
gence 
Director   of   Central    Intelli- 
gence Directive 
Defense   Intelligence   Agency 
Defense  Investigative  Service 
Department  of  Defense 
Defense    Special    Security 
Communications    System 
Deputy  Under   Secretary  of 
Defense  (Policy) 
Executive  Order 
Emergency     Reaction     Air 
Force  Special  Security  Office 
AFR  200-7 
Attachment  1         14  April  1987 
DEVIATIONS 
ESC 
Electronic  Security  Command 
IC 
Intelligence  Community 
ISPM 
Information    Security     Pro- 
gram Manager 
NAC 
National  Agency  Check 
NACSI 
National    COMSEC    Instruc- 
tion 
NACSIM 
National  COMSEC  Informa- 
tion Memorandum 
NFIB 
National  Foreign  Intelligence 
Board 
NSA 
National  Security  Agency 
OPSEC 
Operations  Security 
OSD 
Office   of   the   Secretary   of 
Defense 
OS 
Office  of  Security,  DIA 
OSI 
Office   of  Special    Investiga- 
tions 
PR 
Periodic  Reinvestigation 
SBI 
Special    Background    Investi- 
gation 
SCI 
Sensitive  Compartmented  In- 
formation 
SCIF 
Sensitive  Compartmented  In- 
formation Facility 
SCISO 
Sensitive  Compartmented  In- 
formation Security  Officer 
SIO 
Senior    Intelligence    Officer 
SOIC 
Senior  Official  of  the  Intelli- 
gence Community 
SPA 
Special  Purpose  Access 
SPINTCOMM 
Special  Intelligence  Commu- 
nications 
SSO 
Special  Security  Office,  Spe- 
cial Security  Officer 
USAFINTEL 
United  States  Air  Force  Intelligence 
*V.S.  C.P.O.   1987-l80-958i70039