What are the rules for copying SCI information?

• A. Copies may be made freely for convenience.
• B. Copies require authorization, must be tracked, marked, and disposed of when no longer needed.
• C. There are no requirements for marking or disposal.
• D. Copies must be stored indefinitely.

Answer: (B)

Handling SCI information involves controlling copies through a formal lifecycle: only individuals with proper authorization and need-to-know may have a copy; each copy must be tracked to keep visibility of its location and custodians; it must be clearly marked to denote SCI status so handlers apply the proper safeguards; and once the copy is no longer needed, it must be disposed of using approved destruction methods to prevent recovery or leakage. These practices reduce risk of unauthorized access and help meet compliance with handling policies. Statements that copying is free, that marking or disposal isn't required, or that copies can be stored indefinitely conflict with the need for accountability, proper handling, and secure removal of sensitive material.