Which statement about password sharing in a SCIF is correct?

• A. Password sharing is not permitted.
• B. Password sharing is allowed if approved by the ISSO.
• C. Password sharing is allowed with any supervisor's approval.
• D. Password sharing is allowed if the password is changed immediately.

Answer: (A)

Passwords are personal credentials that authenticate a specific individual. In a SCIF, allowing others to use your password would break the chain of identity and accountability, making it impossible to tell who actually accessed or changed information. This undermines authentication, auditing, and the need-to-know protections that keep SCI secure.

Even if supervision approves, or if the password is changed immediately, the act of sharing cannot be sanctioned because it defeats unique user identification and the ability to trace actions to a single, responsible person. If someone else needs access, the proper route is to grant that person their own authorized access through the official procedures, or arrange for escorted access as required, rather than sharing credentials.

Thus, the correct stance is that password sharing is not permitted, because it preserves individual accountability and the integrity of access control within the SCIF.