Where should SCI be stored when not in use?

• A. In locked, approved containers within a SCIF or other secure area; access restricted to those with need-to-know.
• B. Left on a desk in a secure-looking room.
• C. In an unlocked cabinet in a secure area.
• D. In a personal safe at home.

Answer: (A)

The main idea is that SCI must be protected by both physical and access controls whenever it is not in use. The only acceptable method is to place SCI into a locked, approved container that stays inside a SCIF or another secure area, with access limited to people who have a need-to-know. This layered protection—a secure container plus a secure environment—helps prevent unauthorized access, loss, or disclosure. The container is designed to meet specific security standards, so even if someone enters the area, they can’t open it without proper authorization.

Why the other scenarios don’t fit: leaving SCI on a desk in a room, even if the room looks secure, exposes it to casual access and potential exposure. An unlocked cabinet in a secure area fails because it isn’t locked and protected. Keeping SCI in a personal safe at home takes it outside the controlled facility environment, breaking custody and accountability requirements.