Which statement correctly reflects SCI handling in terms of access controls?

• A. SCI information must be handled within formal access control systems
• B. SCI information can be handled without access controls
• C. Access controls are optional for SCI materials
• D. SCI information must be stored in any available cabinet

Answer: (A)

Access to SCI information must be governed by formal access control systems that enforce clearance and need-to-know. In the SCI environment, access isn’t at the discretion of any individual; only people with the appropriate clearance and a specific need to know may access the material. Formal access controls combine physical and logical measures, such as verified entry, controlled permissions, and documented processes for granting or revoking access, plus audit logs to show who accessed what and when. This structured approach prevents unauthorized exposure and ensures accountability.

Saying access controls aren’t required would allow inappropriate access, which is incompatible with SCI protection. Saying access controls are optional or that SCI can be stored without proper controls contradicts the requirement for secure containers and approved handling procedures, which are essential parts of safeguarding SCI.