Which statement best describes SCI control systems?

• A. They are additional measures beyond non-SCI protections
• B. They replace non-SCI protections
• C. They only apply to physical security
• D. They are optional

Answer: (A)

SCI control systems add protective layers that specifically govern how sensitive information is handled, on top of the general, non-SCI protections. They’re designed to complement existing security measures, not replace them. Even with an appropriate clearance, access to SCI depends on need-to-know and the use of compartmentalized spaces and procedures, such as marked handling, secure storage, and controlled dissemination. These controls extend beyond just physical security and encompass administrative and procedural requirements that ensure only authorized individuals can access and handle SCI. Because of that, they are mandatory and designed to work in tandem with standard protections.

So the statement that best describes SCI control systems is that they are additional measures beyond non-SCI protections.