Which two document types issued by the DNI provide security policy and personnel security requirements for SCI, as well as physical and technical security requirements for SCIFs?

• A. Intelligence Community Directives and Intelligence Community Policy Guidance documents
• B. National Security Directives and Security Guidelines
• C. DoD Instructions and CIA Policies
• D. Privacy Act Rules and Security Procedures

Answer: (A)

Two document types issued by the DNI govern how SCI is protected: Intelligence Community Directives set the overarching security policy and personnel security requirements for handling SCI. Intelligence Community Policy Guidance documents provide the detailed physical and technical security standards for SCIFs, including their construction, access controls, and protective measures for the facility and its equipment. The combination covers both the policy framework (who must do what, how personnel are vetted and cleared) and the concrete security requirements for facilities and technology used to protect SCI. This pairing is why these two types are the appropriate sources for SCI and SCIF security requirements.