What is the correct stance on storing SCI on personal equipment during telework?

• A. SCI storage on personal equipment is acceptable with approval.
• B. SCI should not be stored on personal equipment.
• C. SCI storage on personal equipment is optional.
• D. SCI storage on personal equipment is allowed if encrypted.

Answer: (B)

Storing SCI on personal equipment during telework is not allowed. SCI must be kept on approved, controlled systems that are part of the official secure environment. Personal devices fall outside that controlled environment, can be lost or stolen, and are more easily exposed to malware or non-clearance users, which creates a real risk of unauthorized disclosure. Encryption alone does not make it acceptable because the broader safeguards—such as device management, access controls, auditing, and secure storage practices—are not guaranteed on personal hardware. The standard practice is to access SCI only through authorized equipment and networks, with no local storage on personal devices.