Module 04 · 15 sections

Facility Types, Modes & Overseas Categories

Closed, open and continuous-operation SCIFs, SWAs, TSWAs, T-SCIFs, compartmented areas, vaults, co-use, Security-in-Depth, and overseas Categories I–III.

On this page
  1. 04.01Facility types at a glance
  2. 04.02Closed storage SCIFs
  3. 04.03Open storage SCIFs
  4. 04.04Continuous operation SCIFs
  5. 04.05Secure Working Areas (SWA)
  6. 04.06Temporary Secure Working Areas (TSWA)
  7. 04.07Temporary, airborne, shipboard and prefabricated SCIFs
  8. 04.08Compartmented Areas and Second Party spaces
  9. 04.09Vaults
  10. 04.10Co-use, joint use and reciprocity
  11. 04.11IDS and alarm response by mode
  12. 04.12Security-in-Depth: definition and primary means
  13. 04.13What Security-in-Depth changes
  14. 04.14Inside vs outside the U.S.: three construction regimes
  15. 04.15Overseas threat Categories I–III
04.01

Facility types at a glance

Type Definition (short) Storage? Duration SAP equivalent Key source
Closed storage SCIF All SCI stored in GSA-approved security containers within the accredited facility In containers only Until de-accredited SAPF ICS 705-1
Open storage SCIF SCI may be openly stored and processed without GSA containers Yes, in the open Until de-accredited SAPF ICS 705-1
Continuous operation SCIF "Staffed and operated 24 hours a day, seven days a week" Per accreditation Until de-accredited SAPF ICS 705-1
Secure Working Area (SWA) Discussing, handling or processing SCI, "but where SCI will not be stored" No No time limit in DoD SAPWA Tech Spec 3.I; DoDM 5105.21 Vol. 2
Temporary Secure Working Area (TSWA) Use "limited to less than 40-hours per month and the accreditation is limited to 12 months or less" No 12 months or less SAPTSWA Tech Spec 3.J
Temporary SCIF (T-SCIF) "Necessary for a limited time to meet tactical, emergency, or immediate operational requirements" Per approval DoD: up to 1 year T-SAPF ICS 705-1; DoDM 5105.21 Vol. 2
Compartmented Area (CA) Area within a SCIF providing controlled separation between compartments or programs (Types I–III) Type III only With parent SCIF SAPCA Tech Spec 2.C
Vault Storage room built to Tech Spec 3.C.5 or FED-STD 832 Yes With parent accreditation Tech Spec 3.C.5
Airborne and shipboard SCIFs Permanent and tactical SCIFs aboard aircraft or surface and subsurface vessels Per checklist Per approval Tech Spec Ch. 6

SAPF alignment. Under the cancelled DoDM 5205.07 Vol. 3, SAPFs, T-SAPFs, SAPCAs, SAPWAs and SAPTSWAs "will conform to the equivalent" SCIF, T-SCIF, CA, SWA and TSWA criteria in the Tech Spec. DCSA's January 2026 SAP checklist continues to cite the Tech Spec for SAPF requirements.

Sources ICS 705-1 · IC Tech Spec v1.5.1 · DoDM 5105.21 Vol. 2 · DoDM 5205.07 Vol. 3 (cancelled; mirror) · DCSA SAP Compliance Checklist (Jan 2026)

04.02

Closed storage SCIFs

Definition (ICS 705-1). Closed storage requires "all SCI material to be stored in a GSA approved security container in an accredited facility." UFC 4-010-05 1-11.4 adds: "This includes all classified materials, equipment and information."

What closed storage changes:

Element Closed storage requirement Source
Alarm response (inside the U.S.) 15 minutes Tech Spec 3.H.a
Perimeter wall Wall A (standard) is permitted Tech Spec 3.C.2
Containers GSA-approved security containers; Class 5 and Class 6 are the current classes for classified information DoD Lock Program
Container checks SF 702 Security Container Check Sheet for containers (and the SCIF door) DoDM 5105.21 Vol. 2
Container locks FF-L-2740 combination locks DoD Lock Program

Why owners choose it. Closed storage allows the standard wall and a 15-minute response without relying on Security-in-Depth. The trade-off is operational: every classified item, including equipment and media, must go into a container at the end of the day, and container count and floor loading must be planned.

Container facts that affect design:

  • GSA container labels matter at recertification. Red-label containers can be recertified by GSA-certified inspectors after neutralization per FED-STD-809; black-label containers cannot.
  • Blue labels mark Information Processing System (IPS) containers.
  • Black-label Class 1–4 cabinets became obsolete starting 1 Oct 2024, and black-label Class 5 and 6 follow by 1 Oct 2028 (GSA/IACSE briefing to NISPPAC, 2021).

See: Doors, Locks & Security Containers.

Sources ICS 705-1 · UFC 4-010-05 (2023) · IC Tech Spec v1.5.1 · DoD Lock Program, GSA-approved security containers · NISPPAC black-label phase-out briefing · 32 CFR 117.15 · DoDM 5105.21 Vol. 2

04.03

Open storage SCIFs

Definition (ICS 705-1). SCI may "be openly stored and processed within the SCIF without using … GSA approved storage containers."

What open storage changes:

Element With Security-in-Depth (SID) Without SID Source
Alarm response (inside the U.S.) "Within 15 minutes of the alarm annunciation" "A five minute alarm response time" Tech Spec 3.H.b
Perimeter wall Wall A (standard) Wall B (expanded metal) or Wall C (plywood) enhanced construction Tech Spec 3.C.2–3.C.3
Collateral TS comparison IDS with 15-minute response Responders "shall arrive within five minutes" 32 CFR 2001.43(b)(1)

Overseas. SID is mandatory outside the U.S. (Tech Spec 2.B.2). The Tech Spec also states "Open storage is to be avoided in Category I areas" (Ch. 4), and under Chief of Mission authority, "Open storage in Category I and II areas is to be avoided" (Ch. 5).

Why owners choose it. Open storage lets classified equipment, media and documents remain in place, which suits operations centers, labs and heavy IT use. The cost is either a qualifying SID layer that the AO accepts, or hardened walls plus a response force that can arrive within five minutes.

Common drivers of the decision:

  • Volume and size of classified holdings, including equipment that cannot be containerized.
  • Whether the building or campus provides an AO-acceptable SID layer.
  • Whether a response force can meet five minutes, which in practice often means an on-site guard force.
  • Future flexibility: DoD requires re-accreditation to change storage mode (DoDM 5105.21 Vol. 2).

See: Perimeter Construction & Vaults and Intrusion Detection & UL 2050 / Extent 3.

Sources ICS 705-1 · IC Tech Spec v1.5.1 · 32 CFR 2001.43 · DoDM 5105.21 Vol. 2 · SCIF Fixed Facility Checklist v1.5 · UL CS-ASD-NISS instructions

04.04

Continuous operation SCIFs

Definition (ICS 705-1). "A SCIF that is staffed and operated 24 hours a day, seven days a week."

What the public documents say:

Topic Requirement Source
Perimeter wall Wall A (standard) is permitted for continuous operation Tech Spec 3.C.2
Changing mode Changing from continuous (24-hour) operations to open or closed storage requires re-accreditation DoDM 5105.21 Vol. 2
IDS in general "SCIFs shall be protected by IDS when not occupied" Tech Spec 7.A.1.a
IDS component failure If any IDS component fails, the SCIF must be occupied by SCI-indoctrinated personnel or covered by other AO-approved measures Tech Spec 7.A.1.d
Emergency exit doors "Emergency exit doors shall be alarmed and monitored 24 hours per day" Tech Spec 7.A.3.a
Disarmed mode Tamper circuits and emergency-exit-door circuits stay armed Tech Spec 7.B.2

Design implications. Even a 24/7 facility benefits from a complete IDS design: staffing plans change, emergencies force evacuation, and the space may later convert to open or closed storage. Designing the IDS for the "unoccupied" case from the start avoids re-work if the mission changes. Egress-only doors remain alarmed around the clock in every mode.

Operational considerations.

  • Shift turnover procedures, visitor and maintenance escort coverage, and emergency evacuation belong in the SOP and emergency plan.
  • Emergency evacuation temporarily leaves the space unoccupied, so the emergency plan should address how SCI is protected and how the space is inspected before re-entry.

Sources ICS 705-1 · IC Tech Spec v1.5.1 · DoDM 5105.21 Vol. 2 · DCSA SAP Compliance Checklist (Jan 2026)

04.05

Secure Working Areas (SWA)

Definition (Tech Spec 3.I). SWAs are "accredited facilities used for discussing, handling, and/or processing SCI, but where SCI will not be stored."

Requirement Tech Spec 3.I and related text
Control "Controlled at all times by SCI-indoctrinated individuals or secured with a GSA-approved combination lock"
IDS Alarmed per Chapter 7, with "an initial alarm response time of 15 minutes"
When unoccupied All SCI "removed and stored in GSA-approved security containers within a SCIF, a vault, or be destroyed"
Perimeter wall Wall A (standard) is permitted (3.C.2)
Acoustics Discussion requires acoustic protection per Chapter 9
Duration DoD: no time limit on SWA accreditation (DoDM 5105.21 Vol. 2)
SAP equivalent SAPWA: accredited for discussing, handling or processing SAP; "storage is not authorized" (legacy DoDM 5205.07 Vol. 3)

Good fits. Briefing rooms, secure conference rooms, and workspaces next to (but outside) an existing SCIF, where a nearby SCIF or vault can hold material overnight.

Poor fits. Any operation that needs classified equipment or media to stay in place. If you find the team wanting "just one container" in the SWA, the requirement is really a SCIF.

Sources IC Tech Spec v1.5.1 · DoDM 5105.21 Vol. 2 · DoDM 5205.07 Vol. 3 (cancelled; mirror) · ICS 705-1

04.06

Temporary Secure Working Areas (TSWA)

Definition (Tech Spec 3.J). TSWAs are "accredited facilities where handling, discussing, and/or processing of SCI is limited to less than 40-hours per month and the accreditation is limited to 12 months or less."

Requirement Tech Spec 3.J and related text
Storage None
Time limits Less than 40 hours per month; accreditation 12 months or less. DoD: "A TSWA must not be used more than 40 hours per month and no longer than 12 months in the same location" (DoDM 5105.21 Vol. 2)
Extension "Extension requests require a plan to accredit as a SCIF or SWA"
Access when in use Limited to SCI-indoctrinated people; "the AO may require an alarm system"
When not in use "Secured with a high-security, AO-approved key or combination lock"
Acoustics Must meet Chapter 9 if used for discussion
TSCM May be required if the space was not under continuous SECRET-level control
Approval (DoD) Service CSAs approve TSWAs (DoDM 5105.21 Vol. 2; UFC 4-010-05)
SAP equivalent SAPTSWA: under 40 hours per month and accreditation of 12 months or less (legacy DoDM 5205.07 Vol. 3)

Typical uses. Periodic briefings in an existing secure conference room, short program kick-offs, or bridging a gap while a permanent SCIF or SWA is designed and built.

Design and operations points.

  • Because the AO decides whether an alarm is required, confirm the IDS scope before committing to hardware.
  • Log hours of use. The 40-hour monthly limit is an accreditation condition, not a guideline.
  • Record the space's SECRET-level control history, since it affects whether TSCM is needed.

Sources IC Tech Spec v1.5.1 · DoDM 5105.21 Vol. 2 · UFC 4-010-05 (2023) · DoDM 5205.07 Vol. 3 (cancelled; mirror)

04.07

Temporary, airborne, shipboard and prefabricated SCIFs

Temporary SCIF (T-SCIF). "A facility determined to be necessary for a limited time to meet tactical, emergency, or immediate operational requirements" (ICS 705-1).

T-SCIF rule Source
"T-SCIF approvals will be valid for up to 1 year" DoDM 5105.21 Vol. 2
"Not to exceed one year without mission justification and approved by the [AO]" CDSE SCI101
One controlled entrance CDSE SCI101
At least one SCI-cleared person present at all times CDSE SCI101
Perimeter guarded by U.S. SECRET-cleared guards CDSE SCI101
Hardened structures preferred CDSE SCI101
TEMPEST countermeasures as identified by the CTTA CDSE SCI101
Service CSAs approve T-SCIFs in DoD DoDM 5105.21 Vol. 2; UFC 4-010-05
SAP equivalent: T-SAPF; "When not occupied, SAPFs and T-SAPFs will be alarmed in secure mode" Legacy DoDM 5205.07 Vol. 3

Tech Spec Chapter 6: Temporary, Airborne, and Shipboard SCIFs.

Section Scope Chapter 14 form
6.B Ground-based T-SCIFs
6.C Permanent and tactical SCIFs aboard aircraft Aircraft/UAV Checklist
6.D Permanent and tactical SCIFs on surface or subsurface vessels Shipboard Checklist; Submarine Checklist

GSA Class 6-S security containers are the class designated for use aboard DoD ships (DoD Lock Program).

Prefabricated, modular and mobile structures. A note added in Tech Spec v1.3 warns: "Advertised claims by manufactures that their product(s), to include mobile platforms, prefabricated structures, containers and modular structures are built to SCIF standards and can be accredited without modification may not be accurate." The AO must confirm ICD 705 and ICS 705 controls before accrediting.

Sources ICS 705-1 · DoDM 5105.21 Vol. 2 · CDSE SCI101 Student Guide · IC Tech Spec v1.5.1 · DoD Lock Program, GSA-approved security containers · DoDM 5205.07 Vol. 3 (cancelled; mirror)

04.08

Compartmented Areas and Second Party spaces

Compartmented Area (CA), Tech Spec 2.C. "An area, room, or a set of rooms within a SCIF that provides controlled separation between control systems, compartments, sub-compartments, or Controlled Access Programs." CA Types were defined in Tech Spec v1.5.

CA Type Permitted activity Storage Discussion
Type I Workstation environment for viewing and processing No No
Type II Discussion room meeting STC requirements (for example secure VTC or phones); Type II CAs "must meet existing sound transmission class (STC) requirements per ICS 705-1" No Yes
Type III Viewing, processing, printing, copying, storage and control of accountable compartmented information; personnel briefed into all resident compartments Yes Acoustic protection required (UFC 4-010-05 3-4.2)

Approval. The AO approves a CA with the concurrence of the CA Program Manager (Tech Spec 2.C). The Tech Spec provides a Compartmented Area Checklist, and NCSC posts a stand-alone CA Fixed Facility Checklist.

SAP inside a SCIF. "If only part of the SCIF will be used for the SAP, it will be treated as a compartmented area … a CUA must be established prior to the introduction of a SAP" (DoDM 5105.21 Vol. 2). The SAP counterpart is the SAPCA. Under the legacy SAP manual, IDS sensors were required "when the SAPCA includes an exterior boundary wall of the parent SAPF or SCIF."

Second Party integree and liaison spaces (Tech Spec Chapter 13). Added in v1.5.1, Chapter 13 addresses Second Party (Five Eyes) integree and liaison spaces within SCIFs. Its subsections are not summarized in this knowledge base.

Sources IC Tech Spec v1.5.1 · NCSC Security Governance and Regulations · DoDM 5105.21 Vol. 2 · DoDM 5205.07 Vol. 3 (cancelled; mirror) · UFC 4-010-05 (2023)

04.09

Vaults

Where vaults fit. Tech Spec 3.C.5, Vault Construction Criteria, sits under perimeter wall construction and is written as an option: "GSA-approved modular vaults meeting Federal Specification AA-V-2737 or one of the following construction methods may be used." Tech Spec 3.I allows SWA material to be stored "within a SCIF, a vault."

Method (Tech Spec 3.C.5) Requirement
Modular vault GSA-approved modular vault meeting AA-V-2737
Reinforced concrete Minimum eight inches of reinforced concrete; compressive strength rating of at least 2,500 psi; steel reinforcing rods at least 5/8 inch diameter, centered in the pour, spaced six inches on center horizontally and vertically; walls anchored into ceiling and floor to at least half the thickness of the adjoining member
Steel-lined 1/4 inch high-yield, high-tensile steel alloy plates continuously welded to load-bearing steel members of equal thickness, affixed to half the depth of floor and ceiling
Door "All vaults shall be equipped with a GSA-approved Class 5 vault door"

FED-STD 832 comparison (collateral vaults). Class A: 8-inch reinforced concrete with a minimum 28-day compressive strength of 3,000 psi. Class B: modular vault to AA-V-2737. Class C: steel-lined with 3/8-inch plate. For a SCIF or SAPF, the Tech Spec and your AO govern. Do not mix the two standards on drawings without AO direction.

Doors. Vault doors cannot serve as day-access control; a vestibule with an access control device may be constructed (Tech Spec 3.E.6). Among current GSA vault doors, Class 5-V is for national security information; Class 5-A (armory) uses an FF-L-2937 mechanical lock and is not for classified material. UFC 4-010-05 3-4.6.11 calls for a Class 5 vault door "equipped to meet Architectural Barriers Act (ABA) Standards."

See: Perimeter Construction & Vaults.

Sources IC Tech Spec v1.5.1 · FED-STD 832 · DoD Lock Program, GSA-approved vault doors · UFC 4-010-05 (2023)

04.10

Co-use, joint use and reciprocity

Reciprocity (ICS 705-2). "Any SCIF accredited by [an] IC element AO shall be reciprocally accepted for use as accredited by all IC elements" when there are no waivers to ICS 705-01, ICS 705-02 or the Tech Spec. A waiver removes the SCIF from mandatory reciprocal use (ICS 705-1).

Arrangement What it is Paperwork Source
Co-use A tenant organization uses a host's accredited SCIF under the host's accreditation SCIF Co-Use or Joint-Use Request and MOA, signed by both AOs or designees ICS 705-2; Tech Spec 12.N–P
Same IC element Components under one IC element's cognizance share space No CUA required ICS 705-2
Contractor co-use Contractor effort in a host SCIF CUA for each contracting effort, with an end date ICS 705-2
SAP in a SCIF Part of a SCIF used for SAP, treated as a compartmented area CUA before SAP is introduced DoDM 5105.21 Vol. 2
SAPF accredited as a SCIF SAPF built to the Tech Spec AO review of all required SCIF construction documentation Tech Spec 1.B.2
Temporary storage SCI stored for another organization None for up to seven calendar days; longer needs a CUA ICS 705-2
Occasional conference room use Another organization holds an SCI discussion SSO approval; no CUA ICS 705-2
State Department SCIFs Other agencies co-utilize AO-approved co-utilization agreement 12 FAM 715.9(b)

Obligations. The tenant accepts the host accreditation and pays for any modifications it needs. Co-use begins when the host CSA concurs, and the host CSA keeps cognizance unless both CSAs agree to transfer it. In DoD, elements accepting co-use "must accept current accreditation and any waivers." A SAPF co-utilized as a SCIF is held to the highest applicable requirement (Tech Spec 1.B.2).

See: Accreditation Lifecycle for the CUA process.

Sources ICS 705-2 · ICS 705-1 · IC Tech Spec v1.5.1 · DoDM 5105.21 Vol. 2 · 12 FAM 710

04.11

IDS and alarm response by mode

Tech Spec 3.H: "Response times for Intrusion Detection Systems (IDS) shall meet 32 CFR Parts 2001 and 2004." The table shows what the reviewed public text specifies for facilities inside the U.S.

Mode IDS Initial response force Source Collateral TS comparison (32 CFR 2001.43)
Closed storage Required when unoccupied 15 minutes Tech Spec 3.H.a; 7.A.1.a Container: 2-hour checks, or IDS with 15-minute response, or SID plus FF-L-2740 lock
Open storage with SID Required when unoccupied 15 minutes Tech Spec 3.H.b IDS with 15-minute response
Open storage without SID Required when unoccupied 5 minutes Tech Spec 3.H.b Responders within 5 minutes
Continuous operation Not separately stated Not separately stated in 3.H
SWA Alarmed per Chapter 7 "Initial alarm response time of 15 minutes" Tech Spec 3.I
TSWA "The AO may require an alarm system" Per AO Tech Spec 3.J
T-SCIF Per AO At least one SCI-cleared person present at all times; SECRET-cleared perimeter guards CDSE SCI101

Requirements common to every alarmed mode:

Requirement Source
Installation to UL 2050 Extent 3 Tech Spec 7.A.2.b; ICS 705-1
"Alarm activations shall be considered an unauthorized entry until resolved" Tech Spec 7.C.1
Response force protects the SCIF under a written support agreement until SCI-indoctrinated personnel arrive Tech Spec 7.C.1
An SCI-indoctrinated individual arrives "in accordance with UL 2050 requirements (60 minutes) or the response time approved by the AO" Tech Spec 7.C.1.c
24 hours of uninterruptible backup power Tech Spec 7.B.5
Emergency exit doors alarmed and monitored 24 hours per day Tech Spec 7.A.3.a

See: Intrusion Detection & UL 2050 / Extent 3.

Sources IC Tech Spec v1.5.1 · 32 CFR 2001.43 · ICS 705-1 · CDSE SCI101 Student Guide · UL Form CS-ASD-NISS · SCIF Fixed Facility Checklist v1.5

04.12

Security-in-Depth: definition and primary means

Definitions.

Source Definition
IC Tech Spec 2.B.1 "SID describes the factors that enhance the probability of detection before actual penetration to the SCIF occurs." Layers "already exist at the facility" and may change construction requirements with AO approval.
IC Tech Spec 2.B.2 "SID is mandatory for SCIFs located outside the U.S. due to increased threat."
UFC 4-010-05 1-12 "Security in Depth (SID) is desired for all SCIF or SAPF and required for locations outside the United States, its possessions or territories."
32 CFR 117.3 (NISPOM) "A determination made by the CSA that a contractor's security program consists of layered and complementary security controls sufficient to deter and detect unauthorized entry and movement within the facility."

Primary means of achieving SID (Tech Spec 2.B.3; at least one):

# Primary means What typically has to exist
1 Location on a military installation, embassy compound, U.S. Government compound, or contractor compound with a dedicated U.S. response force Perimeter control and an on-site response capability
2 A controlled building with separate building access controls, alarms and elevator controls Building-level access control and alarm monitoring
3 Controlled office areas adjacent to or surrounding the SCIF, protected by alarm equipment Alarmed, access-controlled space around the SCIF
4 A fenced compound with access-controlled vehicle and/or pedestrian gates Fence line and controlled gates

How SID is documented. SID is recorded, not assumed:

  • FFC Section B, Security-in-Depth, including "Is there external CCTV coverage?" with monitor and coverage locations shown on a map;
  • the CSP's "Security in Depth Documentation" block;
  • the Pre-Construction Checklist's "Security in-depth starting point location."

Sources IC Tech Spec v1.5.1 · UFC 4-010-05 (2023) · 32 CFR 117.3 · SCIF Fixed Facility Checklist v1.5 · Construction Security Plan v1.5 · SCIF Pre-Construction Checklist v1.5

04.13

What Security-in-Depth changes

SID is an AO determination with concrete engineering and cost consequences. Tech Spec 2.B: SID may alter construction requirements and "extend security alarm response time to the maximum of 15 minutes."

Effect Without SID With AO-accepted SID Source
Open storage alarm response (U.S.) 5 minutes 15 minutes Tech Spec 3.H.b
Closed storage alarm response (U.S.) 15 minutes 15 minutes Tech Spec 3.H.a
Open storage perimeter wall Wall B or Wall C (enhanced) Wall A (standard) Tech Spec 3.C.2–3.C.3
Other construction "May alter construction requirements with AO approval" Tech Spec 2.B
Collateral TS open storage 5-minute response IDS with 15-minute response 32 CFR 2001.43(b)(1)
Collateral TS in a GSA container 2-hour checks or IDS with 15-minute response SID plus an FF-L-2740 lock is an acceptable supplemental control 32 CFR 2001.43(b)(1)
Collateral open storage approval (DCSA) "DCSA will not approve the space if acceptable SID is not established unless there are onsite employees or guard services to meet the 5-minute response time required" Approval possible DCSA Form 147 guide
Location outside the U.S. Not permitted Required Tech Spec 2.B.2

SID is not permanent. The 15-minute open storage response depends on the AO continuing to accept the SID layer. Changes that can undermine it include removal of lobby access control, a new tenant mix on shared floors, loss of alarm coverage in adjacent offices, a fence line moved during site work, or a change in the response force.

Sources IC Tech Spec v1.5.1 · 32 CFR 2001.43 · DCSA Form 147 Guide · CDSE SA501 Student Guide · Holland & Knight, Leasing SCIF Space (industry)

04.14

Inside vs outside the U.S.: three construction regimes

The Tech Spec has three separate construction chapters. Which one applies depends on where the facility sits and whose authority governs the site.

Regime Tech Spec chapter Governing authority Distinguishing features
Inside the U.S. (and its territories and possessions) Ch. 3, Fixed Facility SCIF Construction IC element AO SID optional but affects response and construction; CSTs only "when required by the AO"; alarm response per 3.H
Outside the U.S., not under Chief of Mission authority (for example, overseas military installations) Ch. 4 IC element AO "Requirements outlined here apply only to SCIFs located outside of the U.S., its territories and possessions that are not under COM authority." SID mandatory; construction criteria set by threat Category; CSTs with U.S. TOP SECRET clearances; Cleared American Guards; secure procurement, transport and storage of materials; interim accreditation provisions
Outside the U.S., under Chief of Mission authority (embassies, consulates and other COM facilities) Ch. 5 IC element AO and Department of State "The creation of new SCIF space at facilities that fall under COM authority is governed by both ICDs and Overseas Security Policy Board (OSPB) standards," published in 12 FAH-6. The more stringent standard applies

Chief of Mission specifics.

  • ICD 705: "For SCIFs that fall under Chief of Mission authority, IC elements shall comply with Overseas Security Policy Board (OSPB) standards." Waivers to OSPB standards go to the State Department's Bureau of Diplomatic Security.
  • 12 FAM 715.4-2: COM SCIFs "must comply with 12 FAH-6 H-626, other OSPB standards and ICD 705."
  • Under COM, CSTs are not required when contractors are U.S. citizens with U.S. TOP SECRET clearances (Tech Spec Ch. 5).

Overseas personnel and materials (Tech Spec Ch. 4).

  • Finish work: SECRET-cleared U.S. personnel in Category III; TOP SECRET-cleared U.S. personnel in Categories I and II.
  • Non-cleared workers may perform limited tasks, monitored by CSTs or cleared escorts.
  • Materials from critical-threat countries are prohibited; non-inspectable materials move by secure transportation; secure storage areas use "true floor to true ceiling, slab-to-slab construction" with an AO-approved lock.
  • IDS installation outside the U.S.: TOP SECRET-cleared personnel, or SECRET-cleared personnel escorted by SCIF staff (Tech Spec 7.D.1).

Sources IC Tech Spec v1.5.1 (NAVFAC mirror) · IC Tech Spec v1.5.1 (NCSC) · ICD 705 · 12 FAM 710 · UFC 4-010-05 (2023)

04.15

Overseas threat Categories I–III

How Category is set. Tech Spec 4.B: "The Department of State's (DoS) Security Environment Threat List (SETL) shall be used in the selection of appropriate construction criteria based on technical threat rating." Category combines the SETL technical threat rating with building vulnerability. Chapter 5 (Chief of Mission) uses the same three Categories.

Category Tech Spec v1.5.1 wording (Ch. 4.B; Ch. 5.C)
Category I "Critical or High Technical Threat, High Vulnerability Buildings"
Category II "High Technical Threat, Low Vulnerability Buildings"
Category III "Low and Medium Technical Threat"

What the Category changes:

Topic Category I Category II Category III Source
CST surveillance start Earlier: at construction of adjacent public-access or administrative areas, SCIF construction, or utility installation, whichever comes first Same as Category I "At the start of SCIF construction or the installation of major utilities, whichever comes first" Tech Spec 4.C
Finish work personnel TOP SECRET-cleared U.S. TOP SECRET-cleared U.S. SECRET-cleared U.S. Tech Spec Ch. 4; UFC 4-010-05 1-18
TSCM Required for new construction or significant renovation (50% or more of SCIF replacement cost) AO discretion AO discretion Tech Spec 4.H
Open storage (not COM) "To be avoided" Tech Spec Ch. 4
Open storage (COM) "To be avoided" "To be avoided" Tech Spec Ch. 5
Motion detection above false ceilings or below false floors May be required May be required Tech Spec 7.A.3.a
Construction materials Stricter controls on local purchase, secure transport and secure storage Same as Category I Fewer restrictions Tech Spec 4.E–4.G

Terms to get right.

  • There is no Category IV in Tech Spec v1.5.1.
  • Crime ratings do not drive SCIF construction Category; the Tech Spec keys construction to the technical threat rating.

Sources IC Tech Spec v1.5.1 (NAVFAC mirror) · IC Tech Spec v1.5.1 (NCSC) · UFC 4-010-05 (2023) · 12 FAM 710