Which of the following is a true statement about SCI handling?

• A. SCI information must be handled within formal access control systems
• B. SCI information can be shared freely with all staff
• C. SCI information does not require control measures
• D. SCI information can be stored outside a SCIF without logging

Answer: (A)

Handling SCI hinges on strict formal access controls that limit access to individuals with the appropriate clearance and a demonstrated need to know. This means SCI information should be managed within approved systems and facilities, with documented access, compartmented restrictions, and logging to ensure accountability. Sharing SCI freely with all staff violates the need-to-know principle and undermines safety. There must be control measures for all SCI; absence of controls is not acceptable. Storing SCI outside a SCIF without logging is not permitted because secure storage and traceable handling are required. So the statement that SCI information must be handled within formal access control systems is the true requirement.