If the ISSO permits it, you may share your password in a SCIF.

• A. False
• B. True
• C. Only with written approval from a supervisor
• D. Only if password is changed afterwards

Answer: (A)

In SCI environments, authentication is tied to an individual’s credentials and must be auditable. Sharing a password breaks that accountability and makes it impossible to know who did what, when, or why. It also violates established access controls that rely on unique, non-transferable credentials and proper need-to-know procedures. Even with permission from the ISSO, password sharing undermines the security model of a SCIF and can lead to unauthorized access or unintended disclosures. If someone else needs access, the correct approach is to provide them their own account or a sanctioned, auditable method to gain temporary access through official channels, not to share a password. Changing the password afterward does not fix the fundamental risk of shared credentials. Therefore, sharing your password in a SCIF is not allowed.