SAPPC - Physical Security Flashcards
Purpose of Storage Containers and Facilities
Protect valuables, records, and sensitive and classified information and material, as well as conventional and nuclear weapons by delaying unauthorized entry.
Storage Containers
Security containers include: Cabinets Field Safes Secure Rooms Vaults
Define Storage Facility
Restricted areas are generally on military installations and are designed to protect certain types of classified material or items that require larger spaces such as nuclear weapons
Examples of Storage Facilities
SCIFs
AA&E Storage Facilities
Nuclear Storage Facilities
What are the 3 types of unauthorized entry?
Forced Entry
Covert Entry
Surreptitious Entry
Forced Entry
Occurs when someone breaks into the container or facility by using a tool, torch, or explosives, for example.
Can cause obvious visible damage to the container.
Can cause less obvious damage, such as holes drilled behind cabinet labels.
Covert Entry
Occurs when someone breaks into a container by manipulating a lock using an auto dialer machine to learn the combination of a combination lock or by picking a keyed lock, for example.
Entry is not easily detected, but trained persons can detect entry.
Surreptitious Entry
Occurs when someone breaks into a container by using radiological means such as an x-ray machine to view the dial rings on the older mechanical locks.
Entry is not easily detected, even trained persons have a difficult time detecting entry.
Examples of Supplemental Protection for storage containers
Intrusion Detection Systems (IDS)
Alarms
Guards
Factors in Choosing a Container/Facility
- Level of Material
- Confidential document would require stricter storage requirements than an unclassified document - Type of Material
- Paper material would have different storage requirements than weapons - Geographic Location of Material
- Different requirements for materials being stored overseas, in war zones, for example, than for materials being stored in the United States.
What is GSA?
The General Services Administration (GSA) establishes and publishes minimum standards, specifications, and supply schedules for containers, vault doors, modular vaults, and other associated security devices suitable for the storage and protection of classified information against forced, covert, and surreptitious entry.
What is required for COMSEC storage?
GSA-approved container
National Security Agency (NSA) requirements met
Stringent protection and strict accountability
-Ex: two person concept where two people are required to inventory, package, and destroy the material
Compare Class V and VI containers
Both protect against covert and surreptitious entry
Class V protects against forced entry
Neither protects against fire
Which container class protects against fire?
Class I and Class II
Types of GSA-Approved Locks
Built-in Combination Locks (most widely used)
Combination Padlocks
Key-Operated Padlocks
Most Common Models of Combination Locks
Kaba Mas X07, X08, X09, and X-10
Sargent and Greenleaf (S&G) 2740 and S&G 2740B
*Locks must meet Federal Specification FF-L-2740 series
What type of label must be on a container storing classified information
GSA-approved security containers must clearly display the GSA-approved label on the face of the container in order to be used to store classified information.
Types of GSA-Approved storage container labels
GSA-Approved Label Test Certification Label Cabinet Identification Label Number Label Warning Label
What should you do if a GSA-approved label is missing or if the structural integrity of the container has been compromised?
*Repair and recertification of the container is required
The container may not be used until:
- Repaired and restored to its original condition by a certified technician
- Recertified by an authorized certifying official
- A new GSA-approved label has been applied to the container by the certifying official
Secure Room
- Areas designated and authorized for the open storage of classified information
- Used when larger storage capability is needed than can be obtained from the use of GSA-approved security containers alone
- Built to enhanced commercial construction standards, but do not afford the extra security inherent with vaults.
- May have additional requirements prohibiting the open storage of classified information
What is the policy is used for construction standards for secure rooms?
DoDM 5200.01, Information Security Program for DoD
NISPOM for cleared contractor facilities
Secure Room vs Vault
Both are areas designated and authorized for the open storage of classified information
Vaults are constructed to meet strict forcible entry standards established by the GSA and outlined in DoDM 5200.01
Vaults are more secure than secure rooms
Characteristics of Vaults
- Reinforced concrete on all walls, ceilings, and floors
- Hardened steel door
- Doors must meet GSA standards for surreptitious, covert, and forced entry
Factors to Maintain Certification of Vault
- Doors and frames must remain in their original color, which is gray
- Placement of GSA-approved labels on the outside face of vault doors
- Locks installed on vault doors have the same requirements as locks installed on security containers.
Top Secret Storage Requirements
Stored in a GSA-approved container and, at least one of the following supplemental protections is required:
- Continuous protection by cleared guard or duty personnel, or cleared guard/duty personnel inspects container every 2 hours
- An intrusion detection system (IDS) used with 15 minute response time with security-in-depth or within 5 minutes if not security-in-depth
Secret Storage Requirements
Secret information must be stored in one of the areas approved for Top Secret information.
Supplemental protection is not required for Secret information stored in a GSA-approved security container or vault.
Supplemental protection is required for Secret information that is stored by defense contractors in a closed area. It must have at least one of the following supplemental protections
- Continuous protection by cleared guard or duty personnel
- Cleared guard or duty personnel inspects container every 4 hours
- IDS used with a 30 minute response time
Confidential Storage Requirements
Confidential information must be stored in one of the areas approved for Top Secret or Secret information.
Supplemental protection is not normally required for the storage of Confidential information.
Container Access Control
- Granted only to those who are authorized to access the classified information stored inside or to those who are authorized to change combinations or make repairs on the security containers and locks
- Entrances to storage containers must be kept under visual observation or equipped with electric, mechanical, or electromechanical access control devices at all times during work hours
- Keep records of security containers, vaults, and secure rooms used for the storage of classified material
What forms are utilized for access control?
SF-700
SF-701
SF-702
SF-700
Security Container Information
- Tracks the location of the storage container as well as the contact information for each individual who knows the combination and should be contacted in the event the container is found open and unattended.
- Must be stored in a sealed, opaque envelope inside the control drawer.
SF-701
Activity Security Checklist
-Records end-of-day security checks which are conducted to ensure all vaults, secure rooms, and containers used for the storage of classified information are secured at the end of each working day
SF-702
Security Container Check Sheet
-Tracks opening and closing of storage containers.
*If there is an open container violation, this form helps to narrow the scope of inquiry.
Storage Container Procedures
- Procure new security storage equipment from the GSA Federal Supply Schedule.
- Do not mark the outside of a storage container in any way that could divulge the classification level of the material being stored.
- It is recommended that you keep the sides and tops of containers clear.
- When removing security containers, you must completely inspect the inside of the container, including complete drawer removal, to ensure there is no classified material left inside
- Turn in the containers in accordance with local property control procedures.
Container Content Requirements
Do not store classified information with sensitive items or weapons. Doing so could make the classified storage container more of a target for thieves looking for valuables.
Destroy classified information when no longer needed. This reduces the need for additional storage containers.
Neutralization
The drilling or cutting open of a lock by properly trained and equipped personnel. Ex: lock freezes, forget combo or lose key
- Neutralization must be done by a GSA Authorized Safe & Vault Technician using methods outlined in Federal Standard 809B
- Neutralization may affect the container’s certification, so the container must be repaired to its original condition so it may be recertified
Key-Operated Lock Requirements
Keys and locks must be protected at all times.
Protect keys and spare locks in a secure container at the same level of protection afforded the material or information being secured.
Combination Lock Requirements
- Combinations must be protected at all times.
- Treat combinations at the same level of classified material they protect.
- It is recommended you always secure mechanical combination locks with four rotations of the dial.
- Change combinations at specific times such as when they are first placed in use, when an individual who knows the combination no longer requires access, when the combination has been subject to possible compromise, and when the container is taken out of service.
- When a container is taken out of service, the combination must be reset to the factory default setting.
What is a restricted area?
Storage facilities in buildings or on military installations that require additional protection
Common types of restricted areas
SCIFs
AA&E storage facilities
Nuclear storage facilities
Demarcation
Warning signs displaying RESTRICTED AREA must be posted no more than 100 feet apart at each boundary of or logical approach to the restricted area
Must be easily read by anyone approaching on foot or in a vehicle
Signs must be posted on every gate and on both sides of every fence corner
SCIF
Used by the intelligence community for the storage of their sensitive compartmented information (SCI)
Strict construction standards must be adhered to (ICD 705)
Who has governance over SCIFs?
Security requirements for SCIFs are established by the Director of National Intelligence (DNI).
Accreditation is the responsibility of the Defense Intelligence Agency (DIA).
What is the policy that governs Physical Security of AA&E?
DoDM 5100.76, Physical Security of Sensitive Conventional Arms, Ammunition, and Explosives
What are the categories of AA&E?
SRC I - SRC IV
Demilitarize/Dispose
AA&E must be demilitarized or disposed of once they have become obsolete or unserviceable. By doing this, costs for protecting, storing, and accounting for AA&E no longer needed will be reduced
What is authorized to be stored in all four security risk categories of AA&E?
Fixed-location, free-standing magazines
Nuclear Weapon Storage and Security Policy?
DoD S 5210.41-M
Fence Requirements for Nuclear Weapons
- 7 ft high, 9-guage, 2 inch diamond mesh, equipped with Y outrigger with 15 inch arms.
- Anchored to the ground, two fences minimum, separation zone of 30 ft between the fences.
- Nuclear storage facility fencing also requires a 30 foot clear zone on both the inside and outside of the fence. -Nothing can be in this clear zone, including trees and buildings.
What is special about Nuclear Access?
Restricted Area procedures and…
- Lettering on signs displayed in black or blue, except the words USE OF DEADLY FORCE AUTHORIZED which must be displayed in red
- Continual barrier concept (similar to mantrap)
- Privately owned vehicles (POVs) never permitted
