If a SCIF has a high security lock, then an access control system is not required.

• A. True
• B. False
• C. Only for Low-Security Facilities
• D. It Depends on the Building Layout

Answer: (B)

Having a high security lock provides a strong physical barrier, but it doesn’t verify who is allowed to enter or keep a record of who accessed the SCIF. An access control system adds authentication (badges, PINs, biometrics) and enforces entry rules, while logging entries and exits. In SCI/SCIF contexts, accountability and the ability to revoke access quickly are essential. Locks can be bypassed by insiders, lost keys, or tailgating; an access control system mitigates these risks by ensuring only authorized individuals can enter and by triggering alarms or notifications if something unusual happens. Therefore, even with high security locks, an access control system is required to meet security and audit requirements. The other options imply conditional needs based on security level or layout, but in practice the system is needed regardless.